Privacy Policy

0. Controller identity and contact details

The data controller for the current PredictDuel service is [PredictDuel Legal Entity Name / Data Controller]. The registered address placeholder is [Registered Business Address, City, State/Region, Postal Code, Country].

Privacy requests, data rights submissions, and complaints may be sent through the platform support flow or to [privacy@predictduel.com]. General user support may be directed to [support@predictduel.com].

If required by the laws that apply to your operations, insert the details of any local representative or privacy contact here: [Insert EU/UK representative if applicable, or remove if not applicable].

1. Scope

This Privacy Policy explains how PredictDuel collects, uses, stores, shares, protects, and otherwise processes personal data in connection with the website, accounts, market participation features, community tools, support channels, and related services.

This policy applies to current platform operations, including the non-monetary PDT product environment. If we launch a separate product with different regulatory, payment, or identity requirements, that product may be covered by additional disclosures.

2. Categories of data we collect

Account and profile data, including username, email address, authentication metadata, profile settings, avatar information, and account preferences.

Platform activity data, including market views, watchlists, order attempts, contract positions, duel activity, bundle activity, leaderboard progress, XP events, notifications, messages, and support interactions.

Technical and device data, including IP-derived region information, browser and device characteristics, log data, approximate geolocation, session identifiers, crash data, latency metrics, and anti-abuse signals.

Compliance and integrity data, including moderation records, fraud indicators, sanctions or regional screening outcomes, verification materials if requested, and evidence submitted during dispute or settlement review.

3. Sources of data

We collect data directly from you when you register, use product features, edit your profile, contact support, submit market ideas, or interact with account settings.

We collect data automatically when you use the service through logs, cookies, local storage, telemetry, security systems, and other operational tools.

We may receive data from service providers, authentication systems, analytics providers, infrastructure vendors, moderation tools, or lawfully available public and regulatory sources where relevant to security or compliance.

4. How we use personal data

To operate the service, including authentication, account management, market participation, settlement processing, rankings, social features, support, and service communications.

To protect users and the platform, including security monitoring, abuse detection, fraud prevention, dispute handling, enforcement of platform rules, and incident response.

To improve the service, including debugging, analytics, feature evaluation, reliability monitoring, product planning, and quality assurance.

To comply with law, protect rights, respond to lawful requests, maintain records, and apply regional or policy restrictions where necessary.

5. Legal bases

Depending on the jurisdiction and the specific processing activity, legal bases may include contract performance, legitimate interests, legal obligation, protection against fraud and abuse, and consent where consent is required.

Where consent is the basis, you may withdraw consent for future processing through the available controls, subject to our ability to continue processing where another lawful basis applies.

6. Automated checks and profiling

We may use automated systems to detect suspicious behavior, assess abuse risk, monitor market integrity, apply regional restrictions, prioritize support, or flag activity for review.

These systems may influence whether certain actions are allowed, delayed, rate-limited, queued for review, or blocked. Where required by law, users may request further information or human review.

7. Cookies, local storage, and similar technologies

We use cookies, local storage, session identifiers, and similar technologies to maintain sign-in state, protect requests, remember settings, measure product performance, and detect abuse.

Some technologies are essential for secure operation and cannot be disabled without impairing key functions. Optional technologies are governed by your consent choices where applicable. See the Cookie Policy for additional detail.

8. Sharing and disclosure

We may share personal data with processors and vendors that support hosting, authentication, analytics, communications, customer support, monitoring, moderation, wallet infrastructure, or other operational functions, subject to appropriate contractual controls.

We may disclose information where required by law, court order, regulation, legal process, or where reasonably necessary to investigate misuse, enforce terms, protect users, or protect the service.

We may transfer information as part of a merger, financing, acquisition, restructuring, asset sale, or similar transaction, subject to lawful safeguards.

We do not state that current PDT profile or participation data is sold for money. Where applicable law treats some advertising or analytics disclosures as sharing, users may exercise available opt-out rights.

9. Retention

We retain personal data for as long as reasonably necessary for the purposes described in this policy, including operation of accounts, settlement history, fraud prevention, dispute handling, legal compliance, and defense of claims.

Retention may vary by category. Transactional, settlement, security, moderation, and support records may be retained longer than user-facing profile content where needed for integrity, audit, or legal reasons.

When data is no longer required, we delete it, aggregate it, or irreversibly de-identify it where feasible. Deletion may occur in stages across backups and distributed systems.

10. Security

We apply administrative, technical, and organizational safeguards designed to protect personal data, including role-based access controls, logging, encrypted transport, secret management, monitoring, and incident response processes.

No system is perfectly secure. You are responsible for maintaining the security of your credentials, devices, email account, and any connected wallet.

11. International transfers

Your data may be processed in countries where we or our providers operate. Where required, we use recognized transfer safeguards and contractual protections appropriate to the transfer context.

12. Your rights

Depending on your location, you may have rights to request access, correction, deletion, restriction, portability, objection, consent withdrawal, and review of certain automated decisions.

We may verify your identity before responding, and we may deny or limit requests where exemptions apply, including where data must be retained for fraud prevention, dispute handling, legal obligations, or defense of claims.

Authorized agents may submit requests where applicable law permits and where sufficient authorization and verification are provided.

13. Children

PredictDuel is not intended for children below the minimum legal age to use the service. If we learn that personal data was collected from an underage user in violation of applicable rules, we will take reasonable steps to delete or restrict that data.

14. Data incidents

If we become aware of a security incident affecting personal data, we may investigate, contain, remediate, reset sessions or credentials, preserve evidence, and make notifications required by applicable law.

15. Policy changes and contact

We may update this Privacy Policy to reflect legal, technical, operational, or product changes. The latest version will be posted on the site with a revised effective date.

For privacy questions, data rights requests, or complaints, contact PredictDuel through the platform support channel or at [privacy@predictduel.com].