Privacy Policy
Operator: [your name or organisation] · Contact: [your contact e-mail]. Fill these in before publishing; they must be real for Google sign-in verification.
This casino is a game site for players of the DonutSMP Minecraft server. You fund it by paying in-game money to our bots, play our original games with that balance, and withdraw by having our bots pay you back in-game. This policy says what we collect, why, how long we keep it, and what you can ask us to do with it.
What we collect
- Your Minecraft identity: your Minecraft username and account UUID (from Mojang's public API). They tie your balance to you; deposits and withdrawals go to and from this account in-game.
- If you sign in with Discord: your Discord user id, username, avatar, and the access tokens Discord gives
us. We ask for the
identifyandguilds.joinpermissions:guilds.joinlets us add your Discord account to our community servers. We keep these tokens encrypted (AES-256-GCM) and only use them for that. You can disconnect Discord in your account menu at any time, and you can also revoke our access in Discord under Settings → Authorized Apps. - If you sign in with Google: your Google account id, name, profile picture and e-mail address. We use them only to sign you in.
- Your activity here: deposits, withdrawals, tips, vault transfers, bets and their results (including the provably-fair seeds), VIP progress, referral links, and chat messages you post.
- Technical data: your IP address and browser user agent, kept in short-lived security logs and used for rate limits and to stop abuse. We use Cloudflare in front of the site, which also processes this data.
- Cookies: one sign-in cookie (
sid, http-only) that keeps you signed in, and a short-lived cookie used only during a Discord or Google sign-in (oauth_state). Your browser's local storage remembers display preferences (theme, sound, the last game settings). We use no advertising or tracking cookies.
Why we use it
- To run your account: credit deposits, settle bets, pay withdrawals, keep your balance correct.
- To keep the site fair and safe: prevent fraud, multiple accounts, chargebacks of in-game payments and abuse of promotions; enforce bet and withdrawal limits; moderate chat.
- To add you to our Discord community servers, only if you signed in with Discord.
- To show public leaderboards and the live bet feed (your username, game, stake and result; you can see these on the site).
Who we share it with
We do not sell your data and we do not use it for advertising. It is processed by the services that run the site: our server host (OVH, in the EU), our backup storage (OVH Object Storage) and Cloudflare (network and security). Discord or Google receive what their sign-in requires. We may disclose data if the law requires it.
How long we keep it
- Your balance history, bets, deposits and withdrawals: as long as your account exists and, after it is closed, as long as we need them to settle disputes and prevent fraud (up to 5 years).
- Chat messages: until deleted by a moderator or until your account is closed.
- Discord and Google tokens: until you disconnect that sign-in or close your account.
- Server and security logs: rotated automatically, kept no longer than 90 days.
Your choices and rights
- Disconnect Discord or Google from your account menu (your Minecraft-linked account remains).
- Ask us for a copy of your data, to correct it, or to delete your account, by contacting us at the address above. Before deleting an account with a balance, withdraw it first.
- If you are in the EU/UK you can also complain to your data protection authority.
Age
This site is for players aged 18 or over. We do not knowingly collect data from anyone younger; if you believe a minor has an account, contact us and we will close it.
Security
Connections are encrypted (HTTPS). Sign-in tokens and staff two-factor secrets are stored encrypted, sessions are stored as hashes, and staff need a second factor for any action that moves money. No system is perfectly secure; if a breach affects you, we will tell you.
Changes
If we change this policy we will update the date at the top; significant changes will be announced on the site.