Privacy Policy

1. Introduction

RUSHFLY ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application, website, and related services (collectively, the "Platform"). By using the Platform, you consent to the practices described in this policy.

2. Information We Collect

We may collect the following types of information:

2.1 Information You Provide

• Account Information: Email address, username, and password when you register.
• Identity Verification (KYC): Government-issued ID, selfie photos, and address proof if required for withdrawal processing.
• Financial Information: Cryptocurrency wallet addresses used for deposits and withdrawals.
• Communications: Messages, feedback, and support requests you send us.
• Referral Information: Your referral code usage and referral relationships.

2.2 Information Collected Automatically

• Device Information: Device type, operating system, unique device identifiers, and app version.
• Usage Data: Gameplay history, bet amounts, cashout events, session duration, and feature interactions.
• Log Data: IP address, access times, pages viewed, and referring URLs.
• Push Notification Tokens: Firebase Cloud Messaging tokens for delivering notifications.

3. How We Use Your Information

We use the collected information to:

• Provide, maintain, and improve the Platform and its features.
• Process transactions, deposits, and withdrawals.
• Verify your identity for regulatory compliance and fraud prevention.
• Send you transactional notifications (bet results, deposits, withdrawals).
• Send promotional communications (you can opt out at any time).
• Detect and prevent fraud, abuse, and security threats.
• Enforce our Terms & Conditions and comply with legal obligations.
• Generate anonymized, aggregated analytics to improve our services.

4. How We Share Your Information

We do not sell your personal information. We may share your data with:

• Service Providers: Third-party services that help us operate the Platform (e.g., Firebase for authentication, Ably for real-time communications, blockchain infrastructure providers for transaction processing).
• Legal Compliance: When required by law, regulation, legal process, or governmental request.
• Safety & Security: To protect against fraud, enforce our policies, or protect the rights and safety of our users.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Data Security

• We implement industry-standard security measures including encryption in transit (TLS/SSL) and at rest.
• Access to personal data is restricted to authorized personnel on a need-to-know basis.
• JWT-based authentication with automatic token refresh protects your sessions.
• The mobile app includes runtime security features to detect tampering, rooting, and debugging attempts.
• Despite our efforts, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

• Account data is retained for as long as your account is active or as needed to provide our services.
• Gameplay history and transaction records are retained for regulatory compliance and provably fair verification purposes.
• KYC documents are retained as required by applicable regulations and securely deleted when no longer needed.
• If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law.

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete personal data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Portability: Request transfer of your data in a machine-readable format.
• Opt-Out: Unsubscribe from promotional communications at any time.
• Restriction: Request that we limit the processing of your data in certain circumstances.

To exercise any of these rights, contact us at support@rushfly.app.

8. Cookies & Tracking

• The web platform uses essential cookies for session management and authentication.
• We use Firebase Analytics to understand app usage patterns and improve user experience.
• We do not use third-party advertising trackers.

9. Third-Party Services

The Platform integrates with the following third-party services, each governed by their own privacy policies:

• Firebase (Google) — Authentication, analytics, crash reporting, push notifications.
• Ably — Real-time game event delivery.
• Cloudflare — Content delivery and R2 object storage for KYC documents.
• Blockchain Networks — Cryptocurrency transaction processing on public blockchains.

10. Children's Privacy

The Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If we discover that we have collected data from a minor, we will delete it promptly. If you believe a minor has provided us with personal information, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using the Platform, you consent to the transfer of your data to these countries. We take steps to ensure that your data is treated securely and in accordance with this policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised "Last updated" date. We encourage you to review this page periodically. Continued use of the Platform after changes are posted constitutes your acceptance of the updated policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at: support@rushfly.app