Privacy Policy
This Privacy Policy explains how Vasiliy (“we”, “us”) collects, uses, and shares information when you use Open Casino (“the Service”) at https://open-casino-tma.vercel.app/ as a Discord Activity.
1. Information We Collect
1.1 From Discord (OAuth)
When you sign in through Discord, we receive:
- Discord user ID
- Username and display name (
global_name) - Avatar URL
- Short-lived OAuth access token (used to authenticate with Discord SDK; not stored long-term)
We request the identify scope only. We do not receive your Discord email or password
unless Discord changes available scopes and we update this policy.
1.2 Game and Account Data
We store data needed to run the Service, such as:
- Virtual balances (chips, premium chips)
- Gameplay history (e.g. blackjack hands, roulette bets, tournament results)
- Rank, daily reward status, notifications, and in-app settings
- Referral code assigned to your profile (if shown in the app)
1.3 Session Data
After login, the app stores a session token in your browser’s localStorage to keep
you signed in. This token identifies your game account on our servers.
1.4 Feedback You Submit
If you send feedback through the in-app form, we collect your message, topic/category, and optional contact information (such as email or Discord username) that you choose to provide.
1.5 Technical Data
Our hosting and infrastructure providers may process standard server logs (IP address, request time, user agent, error logs) for security, debugging, and performance.
2. How We Use Information
- Authenticate you and maintain your game profile
- Operate games, tournaments, rewards, and leaderboards
- Prevent abuse, enforce our Terms, and protect the Service
- Respond to feedback and support requests
- Improve reliability and fix bugs
We do not sell your personal information.
3. Legal Bases (EEA/UK users)
Where GDPR applies, we rely on:
- Contract — to provide the Service you request
- Legitimate interests — security, fraud prevention, and improvement
- Consent — where required (e.g. optional contact details in feedback)
- Legal obligation — when we must comply with law
4. How We Share Information
We share data only as needed to operate the Service:
- Discord — authentication and Activity hosting; subject to Discord’s Privacy Policy
- Supabase — database and backend infrastructure (Supabase Privacy Policy)
- Vercel — application hosting and serverless API (Vercel Privacy Policy)
- Law enforcement — if required by valid legal process or to protect rights and safety
5. Data Retention
We keep your profile and gameplay data while your account is active. Server logs are retained for a limited period appropriate for security and operations. You may request deletion (see Section 8).
6. Security
We use industry-standard measures such as HTTPS, server-side authentication, and access controls. No method of transmission or storage is 100% secure.
7. Children’s Privacy
The Service is intended for users who meet Discord’s minimum age requirements. We do not knowingly collect personal information from children below applicable age limits. Contact us if you believe we have done so.
8. Your Rights and Choices
Depending on your location, you may have the right to:
- Access, correct, or delete your data
- Object to or restrict certain processing
- Withdraw consent where processing is consent-based
- Lodge a complaint with a supervisory authority
To exercise these rights, contact mr.destroyko@gmail.com. We may need to verify your identity via your Discord account or other reasonable means.
9. International Transfers
Our service providers may process data in countries other than yours. Where required, we use appropriate safeguards for cross-border transfers.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will revise the effective date above. Material changes may be communicated in the app or on this page.
11. Contact
Privacy questions and requests:
mr.destroyko@gmail.com
Postal address: available upon request at the contact email above.