Last updated 14 July 2026
What we collect
Account details you give us (such as your email), verification status, gameplay and history tied to your account, and the wallet addresses you use to deposit and withdraw.
To secure accounts and promotions, we also collect a first-party device identifier, shortened or keyed-hash network identifiers, approximate country or region, browser and request information, verification results, and links between accounts that share a security signal. We do not use invasive canvas or audio fingerprinting and do not store raw card numbers, private keys, or government identity-document images.
How we use it
To run your account and balance, process deposits and withdrawals, record provably-fair outcomes, prevent fraud and repeated-promotion abuse, provide support, and improve the platform.
Promotion checks combine several signals and can allow a claim, request verification, or place only promotional value under review. An IP address, device, VPN, or location match by itself is not used to automatically ban an account. Authorized staff can review and override a decision with a recorded reason.
Payments
Cryptocurrency deposits and payouts are handled through our payment provider. We share the minimum needed to take a payment or send a withdrawal — including the destination wallet address you provide. We never see or store your private keys.
Cookies and verification
We use a small number of first-party cookies to keep you logged in, remember a security device identifier, and protect accounts and promotions against fraud. We may use a human-verification service when you register or claim a promotion. We do not sell your data to advertisers.
Who we share with
Only the service providers that make the platform work — for example hosting, database, email, human-verification, identity-verification, and payment partners — and only as needed. We may also disclose information where we are legally required to. We do not sell your personal data.
Retention
Pseudonymous network observations used for promotion security expire after 90 days, and device links after 180 days. Other pseudonymous promotion links, completed-grant receipts, decisions, and appeals may be kept for up to 24 months so repeated abuse and review outcomes remain explainable. Administrative audit, payment, identity, and transaction records may be kept longer where law, security, disputes, or financial record-keeping require it.
Resolved support conversations are available only to authorized staff, retained for 90 days from resolution, and then deleted automatically. You can ask us to close your account.
Security
Passwords are stored only as salted hashes, sessions are protected, and access to data is restricted. No system is perfectly secure, but we work to protect your account and your funds.
Your choices
You can request access to, correction of, or deletion of your personal data, and you can ask a person to review a promotion eligibility decision. Email us at support@pullprize.com and we’ll help.