1. Controller
TethBet is the data controller for personal data processed through the Service. Contact our Data Protection Officer at dpo@tethbet.com. For EU/UK residents, our EEA/UK representative can be reached at eu-rep@tethbet.com.
2. Categories of Personal Data We Collect
- Account data: email, hashed password, display name, avatar, timezone, language.
- Identity and KYC data: full name, date of birth, nationality, government-issued ID, selfie, address, tax ID (where legally required), sanctions and PEP screening results.
- Financial data: USDT wallet addresses, deposit and withdrawal transactions, balance and ledger entries, source-of-funds evidence.
- Gameplay data: wagers, hands, seeds, outcomes, session duration, table history, chat messages, responsible-gaming settings.
- Device and technical data: IP address, user-agent, device fingerprint, cookies and local storage identifiers, crash and diagnostic logs.
- Location data: coarse geolocation derived from IP for compliance and geofencing.
- Support and correspondence: emails, chat tickets, dispute submissions.
We do not knowingly collect data from anyone under 18. If we discover such data we will delete it.
3. Purposes and Legal Bases
- Provide the Service (contract): account creation, gameplay, wallet, payments, support.
- Comply with law (legal obligation): AML/CFT, KYC, sanctions screening, tax reporting, court and regulator requests.
- Prevent fraud and abuse (legitimate interests): bot detection, collusion analysis, device fingerprinting, ledger integrity.
- Improve and secure the Service (legitimate interests): telemetry, analytics, security monitoring, capacity planning.
- Marketing (consent): opt-in newsletters, promotional emails; you may withdraw consent at any time.
4. Cookies and Similar Technologies
See our Cookie Policy. Strictly necessary cookies are used without consent; analytics or advertising cookies are used only with your consent where required by law.
5. Sharing and Disclosures
We share personal data with:
- Sub-processors: cloud hosting, database and object storage, email delivery, KYC/identity vendors, sanctions screening, blockchain-analytics, fraud-detection, and customer-support providers, each bound by data-processing agreements.
- Regulators, law enforcement, and courts where legally required.
- Successors in the event of a merger, acquisition, or reorganization, subject to equivalent protections.
We do not sell personal data. For CCPA/CPRA purposes we do not "share" data for cross-context behavioural advertising.
6. International Transfers
Personal data may be transferred to countries outside your jurisdiction, including the EU/EEA, UK, US, and elsewhere. Where required, we rely on Standard Contractual Clauses, the UK Addendum, adequacy decisions, or your explicit consent, and we implement supplementary technical and organisational measures.
7. Retention
See Data Retention & Security. In summary: KYC records are retained for at least 5 years after account closure (as required by AML law); financial ledger entries and blockchain records are retained indefinitely for regulatory and reconciliation purposes; gameplay logs are retained for 24 months; marketing preferences until you unsubscribe; support tickets for 24 months.
8. Security
We apply layered controls: TLS 1.2+ in transit, AES-256 at rest, hardware-backed key custody for treasury operations, hashed passwords (Argon2/bcrypt), row-level security in the database, role-based access controls, principle of least privilege, MFA on privileged accounts, immutable audit logging, dependency scanning, and continuous monitoring. No system is perfectly secure; report vulnerabilities to security@tethbet.com.
9. Your Rights
Depending on your jurisdiction you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Delete data (subject to legal retention obligations).
- Restrict or object to processing based on legitimate interests.
- Data portability in a structured, machine-readable format.
- Withdraw consent at any time (without affecting prior lawful processing).
- Opt out of automated decisions that produce legal or similarly significant effects; we do not use fully automated decision-making that produces such effects without human review.
- Lodge a complaint with your supervisory authority.
To exercise your rights, email privacy@tethbet.com. We will respond within the timeframes required by applicable law (30 days GDPR, 45 days CCPA).
10. California Residents (CCPA/CPRA)
In the last 12 months we have collected the categories listed in Section 2 for the purposes in Section 3. We have not sold personal information and have not shared personal information for cross-context behavioural advertising. You have the right to know, delete, correct, and limit the use of sensitive personal information, and to be free from retaliation for exercising these rights.
11. Brazil (LGPD), Canada (PIPEDA), Australia, and Others
You have substantially equivalent rights, including access, correction, deletion, and complaint to the ANPD, Privacy Commissioner, OAIC, or your local authority. Contact privacy@tethbet.com.
12. Children
The Service is not directed to minors. We do not knowingly process data of anyone under 18. Suspected minor accounts are frozen and deleted after evidence gathering.
13. Changes
We will notify you of material changes by email and in-app. The date at the top of this policy indicates when it was last updated.
14. Contact
DPO: dpo@tethbet.com. Privacy requests: privacy@tethbet.com.
