Privacy Policy

We collect account information such as your Privy user identifier, username, email address if provided by Privy, linked wallet addresses, authentication method, account status, and support messages.

We collect wallet, payment, and game information such as balances, deposits, withdrawals, transaction hashes, match stakes, match results, fees, leaderboard statistics, responsible-gaming settings, age-attestation status, and account-limit history.

We collect technical information such as IP address, country signals, device and browser data, logs, error reports, security events, approximate location derived from IP, and interactions with the site.

The full identity-verification integration is not currently implemented. If a future verification service is introduced, its flow may request identity documents, selfie/liveness data, date of birth, address or screening information. Its collection and sharing will need to be explained before you use it; the present age attestation and IP country check do not collect or verify those documents.

DUELO does not currently ask for phone contacts, precise GPS location, raw card numbers, passport or driver-license images, profile photos, or in-game chat content directly in the web app unless a future feature or verification flow clearly requests it.

We collect information directly from you when you sign in, choose a username, attest eligibility, enter matches, fund or withdraw, update responsible-gaming settings, contact support, or submit a privacy request.

We collect information automatically from your browser, device, wallet connection, blockchain activity, API requests, sockets, logs, and security events while you use DUELO.

We may receive information from service providers and partners such as Privy, onramp providers, Solana infrastructure, Helius, identity-verification providers, sanctions or blockchain-risk tools, analytics providers, hosting providers, support tools, and payment or dispute partners.

We use information to provide the service, authenticate users, create accounts, maintain balances, verify deposits, process withdrawals, run matches, settle results, show leaderboards, send service notices, support users, and maintain security.

We use information for the current eligibility attestation, withdrawal and match-entry limits, authentication, ownership checks, transaction validation, abuse prevention and platform integrity. These controls are not full identity, age, residence, sanctions or AML screening.

We use information to investigate complaints, payment errors, chargebacks, wallet-risk signals, suspicious gameplay, technical failures, account takeovers, terms violations, and requests from payment, compliance, legal, or infrastructure partners.

We may use aggregated or de-identified information to understand product health, improve games, monitor liquidity and risk, debug errors, and plan features.

Current automated controls check authentication, wallet ownership, request rates, balances and withdrawal limits, match eligibility and state, repeated transaction signatures, and blockchain confirmation. A failed check can reject a request or prevent a match or withdrawal.

DUELO does not currently implement a general fraud risk score, automated sanctions/PEP screening or document-based identity verification. Providers may apply their own checks under their notices. Any future materially different profiling or automated decision process needs an updated notice describing its actual operation.

We share information with service providers that help operate DUELO, including authentication, wallet custody, blockchain infrastructure, hosting, logging, email, support, analytics, onramp, identity-verification, sanctions-screening, and fraud-prevention providers.

We may share information with regulators, law enforcement, payment partners, blockchain analytics providers, legal advisors, or counterparties when needed to comply with law, investigate fraud, respond to disputes, enforce these Terms, or protect users and the platform.

Blockchain transaction data, wallet addresses, token transfers, and transaction hashes are public on Solana and may be visible to anyone through block explorers and analytics tools.

If DUELO is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar corporate transaction, user information may be disclosed or transferred as part of that transaction, subject to appropriate confidentiality and legal controls.

Privy handles authentication and embedded-wallet infrastructure. Onramp providers such as MoonPay or Coinbase Onramp may handle card or payment flows. Helius and Solana RPC providers process blockchain requests. The Sumsub identity-verification integration is unfinished; it is not a working self-service verification flow.

Vercel hosts the website and provides optional performance measurement; Railway hosts the API and game services and their data stores. Sentry error monitoring may receive error details, request URLs and request identifiers when configured. This operational reporting is separate from the filtered optional website analytics and is not disabled by the analytics preference.

When configured, Resend receives the email address and turn-notification content, including opponent name, game, deadline and match link. Discord community publication may include winner username and game, or leaderboard username, rank and win count. Optional Discord launch-reward verification requests your Discord identity and membership in the DUELO server, including whether server screening is complete. We store the linked Discord ID, username, guild ID, verification/reservation dates and reward receipt to prevent repeat claims. OAuth state expires after ten minutes; OAuth access tokens are used transiently on the server, are not stored, and are revoked after the check where possible. These integrations are conditional; their availability is not a promise that every notification is sent.

DUELO does not currently receive or store raw card numbers from card or onramp checkout. Payment information entered into third-party checkout or onramp screens is handled by that provider under its own privacy notice and security practices.

If document verification is introduced, the provider notice must explain the documents, liveness data, screening results, decisions and reference information it collects or shares. Current account tiers and attestation records do not establish that such a review has happened.

Those third parties may process information under their own terms and privacy notices. DUELO does not control every data practice of third-party wallets, exchanges, onramps, identity providers, or public blockchains.

DUELO is a competitive platform, so some information is publicly accessible by design. Usernames, account creation dates, profile summaries, ranks, leaderboard position, match outcomes, achievements and earned dates, availability, status messages and game statistics may be shown to other users or visitors.

Public recent-match history includes match identifiers, timestamps, stakes and financial result summaries such as contribution, payout, fee and net result. These are not private wallet statements. When community feeds are configured, winner usernames/game names and leaderboard usernames/ranks/win counts may also be posted to Discord.

Do not put private personal information in usernames, status messages, support screenshots intended for public sharing, profile content, or game-related communications.

We use account contact methods to send service, security, legal, support, payment, withdrawal, match, responsible-gaming, and policy messages. We may also send optional product or marketing messages where allowed.

Support messages may include screenshots, wallet addresses, transaction hashes, identity-review context, or other information you choose to provide. We use that information to answer the request, investigate issues, and improve the service.

DUELO will not ask you to send seed phrases, private keys, wallet recovery phrases, or passwords through email, support chat, social media, or direct message. Treat those requests as suspicious and contact support through the site.

DUELO and its providers may use cookies, local storage, SDK storage, bearer tokens, and similar technologies to keep you signed in, secure API requests, remember interface state, detect abuse, and measure service performance.

DUELO does not currently sell personal information or share it for cross-context behavioral advertising. If advertising pixels, retargeting, or sale/share activity are added later, this Privacy Policy must be updated and any required choices must be provided.

Free Vercel Speed Insights performance measurement is enabled for eligible production visits. Paid Vercel Web Analytics traffic and custom-event collection is currently disabled. If separately activated, it will use the same optional measurement controls. The integration limits recorded page URLs, removes query strings and fragments, omits account and match identifiers, and does not send balances, payment amounts, wallet addresses or transaction hashes as analytics properties.

You can disable optional analytics using the preference below. DUELO also respects browser Do Not Track and Global Privacy Control signals for this measurement. The preference is saved locally in this browser; disabling measurement does not disable sign-in, wallet access or gameplay.

The site also loads fonts and interface icons from Google Fonts. Those browser requests reach Google independently of optional analytics. Provider checkout, authentication, error monitoring and blockchain requests likewise follow their own operational purposes and notices.

Optional measurement is separate from necessary authentication, security and error monitoring. Blocking necessary provider storage or SDKs may prevent sign-in, wallet connection, match play, deposits, withdrawals or security checks from working correctly.

We keep information for as long as needed to provide DUELO, maintain financial and game records, resolve disputes, detect fraud, meet legal and accounting duties, support responsible-gaming records, and enforce restrictions.

Some records, including blockchain transactions and required compliance records, may be retained longer than ordinary account information or may be impossible to delete from public blockchain networks.

You may request access, correction, export, restriction, or deletion of personal information by contacting support. We may need to verify your identity before acting on a request.

Where applicable, you may also object to certain processing, opt out of optional marketing, ask DUELO to honor an authorized agent request, appeal a denied privacy request, or ask whether DUELO sells or shares personal information for targeted advertising.

We may refuse or limit a request when keeping information is required for security, fraud prevention, financial records, legal compliance, dispute resolution, sanctions or AML obligations, responsible-gaming restrictions, or blockchain-record integrity.

You may ask to close your account or delete eligible personal information by contacting support@duelo.app. Before closure, DUELO may require you to resolve open matches, pending withdrawals, disputes, investigations, self-exclusion records, or payment issues.

Deletion does not remove public blockchain data, required financial records, compliance records, fraud-prevention evidence, support records, or anonymized and aggregated information that no longer identifies you.

DUELO is not for children or minors. Users must be at least 18 and at least the legal age required in their jurisdiction. We do not knowingly allow underage users to play real-money skill games.

If you believe an underage person has used DUELO, contact support. We may close the account, block withdrawals, void activity, refund eligible remaining balances where lawful and practical, and preserve records needed for safety, compliance, and dispute handling.

DUELO and its providers may process information in countries different from where you live. Do not use DUELO if local law prohibits that processing or prohibits your use of real-money skill games.

The eligibility restrictions in our Terms cover United States, United Kingdom, France, Germany, Netherlands, Italy, Spain, Belgium, Australia, Singapore, Hong Kong, China, Iran, North Korea, Cuba, Syria, Russia, Belarus, and any other jurisdiction where DUELO is unlawful, licensed-only, sanctioned, or otherwise restricted.

Public information, including these legal pages and game guides, remains readable worldwide. Access does not verify residence or determine which privacy laws apply to you.

Depending on where you live, you may have additional rights to know, access, correct, delete, restrict, object to, port, or appeal decisions about personal information. DUELO will honor applicable rights after verifying the request and applying any legal exceptions.

DUELO does not intentionally target users in restricted jurisdictions. If a local privacy law applies to you despite platform restrictions, contact support and DUELO will handle the request under the applicable rule.

Because DUELO does not currently sell personal information or share it for cross-context behavioral advertising, there is no separate sale/share opt-out link in the product today. If that changes, DUELO must add the required notice and choice mechanism.

We use technical and organizational safeguards designed to protect information, including bearer-token authentication, server-side authorization checks, wallet ownership checks, webhook signature checks, transaction idempotency, and logging controls.

No system is perfectly secure. You are responsible for securing your device, email, phone, wallet, recovery phrases, linked accounts, browser sessions, and any external exchange or onramp account you use with DUELO.

We may update this Privacy Policy as DUELO changes, providers change, or legal requirements evolve. The effective date above shows when this version applies. If a material change affects how DUELO handles personal information, DUELO may notify users through the site, account messages, email, or another appropriate channel.

Contact support@duelo.app for privacy questions, rights requests, underage-user reports, or account support.