Privacy Policy

By accepting Battle21blackjack.com's Terms of Service, you acknowledge this Privacy Policy. Battle21blackjack.com respects the privacy of visitors and players and is committed to protecting personal data under applicable law, including the European Union General Data Protection Regulation (GDPR) where it applies. This policy explains how we handle information when you create an account, play games, use a wallet, make deposits or withdrawals, or contact us.

1. Controller and contact

Privacy questions and data-rights requests may be sent to [email protected] or through the Battle21 support form.

This policy is a notice about data processing, not a blanket consent. Where consent is required, we ask for it separately.

2. Information we process

Account and profile information, including your email address, username and account preferences.

Eligibility and verification information may be collected if verification is introduced or legally required before real-money access. This may include age, identity, residence, source-of-funds information and records of checks carried out by us or an approved verification provider.

Wallet and transaction information, including public blockchain addresses, deposit and withdrawal instructions, asset and amount, network transaction identifiers, balances, fees and payment history. We do not ask you to disclose a wallet recovery phrase.

Gaming information, including games joined, stakes, actions, outcomes, balance movements, fairness records and disputes.

Security and technical information, such as login history, session and trusted-device records, IP addresses used for security and rate limiting, device and browser details, country information supplied by network infrastructure, and fraud or abuse alerts.

Messages and preferences, including support correspondence, complaints, survey responses if you choose to provide them, terms acknowledgements and optional marketing choices.

3. Where information comes from

Most information comes directly from you or is generated when you use Battle21. We may also receive information from blockchain networks and payment infrastructure. If identity-verification or fraud-prevention providers are introduced, we may receive information from them or from lawful public sources where needed to verify a transaction, establish eligibility or protect the service. We do not purchase third-party marketing lists as part of this policy.

Information needed to create an account and meet applicable eligibility requirements is necessary to provide real-money services. If required information is not supplied or a check cannot be completed, we may be unable to open or continue an account or process a transaction.

4. Purposes and legal bases

We process account, game and transaction information to provide the services you request, keep accurate balances, settle games and transactions, provide support and administer your account. The legal basis is normally performance of our contract with you.

If identity, age, location, source-of-funds or sanctions checks are introduced or legally required, we will process the resulting records to meet applicable licensing, gambling, anti-money-laundering, tax, sanctions or other legal obligations. The exact checks depend on the jurisdiction and applicable law.

We use security and technical information to protect accounts, detect cheating, fraud or misuse, investigate incidents and establish, exercise or defend our legal rights and claims. The legal basis is our legitimate interest in operating a secure and fair service, or a legal obligation where one applies. We assess these interests against your rights.

We send optional marketing only where we have a valid legal basis, including consent when required. You can withdraw marketing consent at any time. Account verification, transaction notices and security alerts are not marketing.

5. Blockchain and wallet privacy

Public wallet addresses and on-chain transactions may be visible to anyone through the relevant blockchain and block explorers. We cannot erase public blockchain records. Even a pseudonymous address may become linked to you when it is associated with your Battle21 account or other information.

We use separate systems and access controls for website operations and wallet signing. Access to private key material is restricted; encrypted recovery backups are stored separately. Never send us a seed phrase or private key through support.

6. Cookies, analytics and communications

Essential cookies and browser storage support sign-in, account security, game continuity, fairness verification and interface preferences. The Cookie preferences control in the Legal menu identifies the storage currently in use and lets you review your choices at any time. Optional analytics or advertising technologies will be identified there and, where required, will not run before you make a valid choice.

If you consent after sign-in, Battle21 records limited pseudonymous first-party product events such as page category, device and viewport class, funnel steps, selected lobby actions and client-error counts. A randomly generated browser identifier is used to recognise return visits but is not linked to your Battle21 account. The analytics event record does not contain an IP address, account identity, wallet address, financial value or game content. Network infrastructure may still process an IP address to deliver and secure the request. Raw analytics events expire after 90 days; daily aggregate reports are kept for up to 24 months and are then deleted or permanently anonymised. We do not treat acceptance of our Terms or continued browsing as consent to optional tracking.

You may opt out of optional marketing using the instructions in the message or by contacting support. This does not stop essential account, security or transaction messages.

7. Recipients

Authorised staff and service providers may access only the information needed for their roles. Relevant categories include hosting and storage, email delivery, payment and blockchain infrastructure, identity and eligibility verification, security, customer support and professional advisers.

We may disclose information to regulators, competent authorities, courts or law enforcement where required by law, and to establish, exercise or defend our legal rights and claims. In a business transfer, relevant information may be shared under appropriate confidentiality and data-protection safeguards. We do not sell personal data.

8. International transfers

Some providers may process information outside the European Economic Area. Where a transfer requires safeguards, we use an applicable adequacy decision or appropriate contractual and technical protections. We do not rely on the former EU–US Privacy Shield. You may contact Battle21 Support for information about safeguards applicable to your personal data.

9. Retention

We keep personal data only for as long as needed for account operation, security, disputes and applicable legal record-keeping. The periods below are maximum standard periods. A record may be kept longer where required by law, a regulator, an unresolved dispute, fraud prevention or the establishment, exercise or defence of legal claims. When the applicable period ends, the data is deleted or anonymised.

Account and profile information: five years after account closure.

Game records, ledger entries, deposits and withdrawals: five years after the transaction or account closure, whichever is later.

Identity, anti-money-laundering and source-of-funds records, if collected: five years after the customer relationship ends.

Support correspondence and complaints: three years after the matter is closed.

Security, device and IP logs: up to 12 months. New-device login alert records expire after 90 days.

Self-exclusion records: five years after the exclusion ends or the account is closed, whichever is later.

Raw product-analytics events: 90 days. Daily aggregate analytics: up to 24 months, followed by deletion or permanent anonymisation.

Evidence of marketing consent or withdrawal: three years after withdrawal of consent or account closure, whichever is later.

An ordinary login session expires after 30 days; a trusted-device approval after 300 days unless revoked sooner. Email-verification codes expire after 15 minutes and password-reset links after one hour. Expiry makes a credential unusable but does not itself mean its database record is immediately deleted.

10. Your rights

Subject to applicable law, you may request access to, correction or deletion of your information, restrict or object to certain processing, and receive portable data where that right applies. You may withdraw consent at any time without affecting processing that was lawful before withdrawal. Some information may need to be retained despite an account closure or deletion request because of legal, fraud-prevention or dispute obligations.

To make a request, contact Battle21 support. We may ask for information needed to verify that the request concerns your account. You may also complain to the data protection authority in your country or the authority responsible for the operator.