Privacy Policy

1. Introduction and scope

Last updated: September 26, 2026

This Privacy Policy explains what personal information STREAK S.A. ("Coinop", "we", "us") collects when you use coinop.site, how we use it, who we share it with, and the choices you have.

This policy covers the website at coinop.site, the Coinop web app, our smart contracts on Robinhood Chain, and any other service that links to this policy (together, the "Services"). It applies to everyone who uses the Services, including players of Crash, Coin Flip, Gains Race, Showdown, Moonshot, and participants in the weekly lottery. By using the Services, you confirm you have read this policy. If you do not agree with it, do not use the Services. This policy forms part of our Terms of Service.

Key terms

Account means your Coinop login. You create it through Privy, our login and wallet provider, using your email, phone number, a social account (such as Google, X, Discord or Apple) or an existing crypto wallet.
Embedded wallet means the crypto wallet Privy creates for your account. It is self-custodial: neither Coinop nor Privy can access its private key. You can export the key and use the wallet in other apps.
Onchain data means information recorded on a public blockchain, such as your wallet address, wagers, payouts and lottery tickets.
Personal information means information that identifies you or can reasonably be linked to you, including your login details and your wallet address.

2. Information we collect

You sign in to Coinop through Privy. We collect the minimum needed to run your account, the games, the leaderboard and the lottery.

Account and login information. When you sign in, we and Privy collect the login method you choose. This may be your email address, your phone number, or your social account ID, username and profile picture. If you sign in with an existing wallet, we collect its address. We also keep a record of when you sign in and which login methods are linked to your account.

Wallet and blockchain information. Privy creates an embedded wallet for your account, and we see its public address. We read onchain activity tied to your wallets, including wagers, game outcomes, payouts, lottery tickets, prize claims, deposits, withdrawals, token balances relevant to eligibility (for example, whether you hold a partner NFT during a campaign) and any messages you sign.

Information we derive from play. We calculate and store leaderboard points, wager volume, profit and loss, lottery ticket counts and campaign eligibility for each wallet address. These records are held off-chain on our servers.

Information you give us. If you contact support, join a campaign, enter a giveaway or sign up for updates, we collect what you provide. This may include an email address, a social media handle (such as X, Telegram or Discord) and the content of your messages.

Information collected automatically. When you visit the website, we and our service providers collect technical data such as IP address, approximate location (country or region), browser and device type, operating system, language settings, pages viewed, time spent and referring links.

Information from third parties. We receive account and wallet data from Privy, and basic profile data from the social account you sign in with. We may also receive data from blockchain analytics providers, payment and onramp providers you choose to use, price oracle and randomness providers, and marketing or community partners. We may also receive information you choose to share when you interact with our social media pages.

We do not ask for government ID, bank details or card numbers. If a law or a licence ever requires identity checks, we will update this policy and tell you before collecting that data.

3. How we use information

We use personal information to:

Create your account and embedded wallet, verify your login and protect your account from unauthorised access.
Run the Services, including displaying games, settling results, tracking points and wager volume, issuing lottery tickets and showing prize claims.
Submit transactions you approve. If you turn on one-tap play, submit wagers from your wallet without a confirmation prompt each time.
Operate the leaderboard, which displays shortened wallet addresses or chosen handles alongside volume and profit and loss. We never display your email or phone number.
Run campaigns, including checking eligibility and applying multipliers.
Enforce our Terms of Service and apply limits, such as one account per person and at most one lottery prize per wallet per week.
Detect and stop fraud, abuse, multi-accounting, market manipulation, exploits and attacks on our contracts or website.
Block access from restricted jurisdictions, including by screening IP addresses, phone country codes and wallet addresses against sanctions lists.
Support responsible gaming, including applying wager limits, cool-off periods and self-exclusion to your account.
Reply to support requests and send service notices, such as security alerts and login codes.
Send updates and promotions, only if you opted in. You can unsubscribe at any time.
Analyze usage in aggregated or de-identified form to improve the product.
Comply with law, respond to lawful requests and defend legal claims.

Legal bases. Where data protection law requires a legal basis, we rely on performing our contract with you, our legitimate interests in running a secure and fair service, compliance with legal obligations, and your consent for optional marketing. You can withdraw consent at any time without affecting past processing.

We do not sell personal information. We do not use automated decisions that produce legal or similarly significant effects on you, apart from automated fraud and sanctions screening that may block an account or wallet. You can contact us to ask for a review of any such block.

4. Public blockchain data

Every wager, payout and lottery action on Coinop happens onchain through your wallet. Robinhood Chain is a public ledger. Anyone can view transactions linked to your wallet address, and nobody, including us, can edit or delete them.

This has three consequences you should understand:

Your betting history is public and permanent once recorded.
Deletion or correction rights under data protection law cannot apply to onchain records. They still apply to the off-chain data we hold.
Anyone who links your wallet to your identity, for example through a social post, can see your full onchain activity.

Coinop and Privy know which login is linked to your embedded wallet. We do not publish that link. Anyone who connects your wallet address to you by other means, for example through a social post, can see your full onchain activity.

The weekly lottery draw uses a public randomness source so that anyone can verify results. Winning wallet addresses and prize amounts are published onchain and may appear on our website and social channels.

5. Cookies and analytics

We use cookies and similar browser storage to keep you signed in through Privy, remember settings such as sound and theme, and understand how people use the site.

Our analytics providers receive device and usage data as described in Section 2 and handle it under their own privacy policies. You can block or delete cookies in your browser settings, or use a privacy-focused browser or extension. Some features, such as staying signed in, may stop working. We do not currently respond to browser "Do Not Track" signals.

6. Who we share information with

We share personal information only as follows:

Privy, which runs our login and embedded wallet infrastructure. Privy processes your login details and wallet data under its own privacy policy.
Service providers who help us run Coinop, such as hosting, node and RPC providers, analytics, email and SMS delivery, customer support, blockchain analytics and sanctions screening. They may use the data only to provide services to us.
Payment and onramp providers you choose to use to fund your wallet. They apply their own terms and may run their own identity checks.
Campaign partners. During Partner Boost or similar campaigns, we may confirm to a partner which wallets took part. We do not share email addresses or phone numbers with partners without your consent.
Professional advisers such as lawyers, auditors and insurers, where needed for their work.
Authorities, where we believe in good faith that disclosure is required by law, or needed to protect users, the public or Coinop from fraud, security threats or illegal activity.
Buyers or successors in a merger, acquisition, restructuring or sale of assets, under confidentiality terms.
Anyone else you direct us to, with your permission.

7. International transfers, retention and security

International transfers. We and our providers operate in several countries. Your information may be processed outside your home country. Where the law requires it, we put contractual or other safeguards in place so your information keeps a comparable level of protection.

Retention. We keep off-chain data only as long as we need it to run the Services, meet legal obligations, resolve disputes and enforce our terms. As a guide:

Account and login data: while your account is open, plus 3 months after you close it.
Leaderboard and points records: for the life of the program plus 24 months.
Support messages: 6 months after the issue closes.
Self-exclusion records, including the login details and wallets linked to them: for the full exclusion period plus 24 months, so we can keep honouring your request.
Analytics data: in line with each provider's retention settings, typically 12 months.

Onchain data stays on the blockchain permanently and is outside our control. Security. We use reasonable technical and organisational measures to protect the data we hold, including access controls and encrypted connections. No system is fully secure. Privy secures your embedded wallet so that neither Coinop nor Privy can see its private key. You are responsible for keeping your login methods secure, including your email and social accounts, and for any private key you export. We will never ask for your private key, seed phrase or login codes.

If a data breach creates a real risk of harm to you, we will notify you and the relevant authorities where the law requires it.

8. Your rights, age limits, changes and contact

Your rights. Depending on where you live, you may ask us to:

Give you a copy of the off-chain personal information we hold about you.
Correct information that is wrong.
Delete off-chain information we no longer need.
Restrict or object to certain processing, or withdraw consent.

Email us to make a request. We may ask you to sign in to confirm the request comes from you. We will reply within the time the law allows. Some requests may be limited where we must keep data for legal reasons, to honour a self-exclusion, or because the data is onchain.

Closing your account. You can close your account at any time. Before you do, withdraw your funds or export your embedded wallet's private key. After closure you may lose access to the wallet through Coinop, but any funds and onchain records remain on the blockchain.

Opting out of marketing. Use the unsubscribe link in any marketing email, or contact us.

Age limits. Coinop is only for adults aged 18 or over, or the legal gambling age where you live if that is higher. We do not knowingly collect information from anyone under that age. If we learn that we have, we will close the account and delete off-chain data where we can.

Third-party sites. Links to other websites, protocols and social platforms are governed by their own policies. We are not responsible for them.

Changes. We may update this policy. We will change the "Last updated" date and post a notice on the site for material changes. Continuing to use the Services after an update means you accept it.

Contact. support@coinop.site