PRIVACY POLICY

1. Data We Collect

When you use ScrapYard, we collect the following information:

Account Data (via Steam):

• Steam ID (your unique Steam identifier)
• Display name / username as set on your Steam profile
• Profile avatar/image URL from Steam

Technical Data:

• IP address — recorded at login and during sessions for fraud prevention and compliance
• Browser type and version
• Session cookies
• Timestamp of account creation and last login

Activity Data:

• Game history — all bets placed, outcomes, and amounts wagered
• Transaction history — deposits, withdrawals, wins, losses, bonuses
• Chat messages sent on the platform
• Affiliate code usage

2. How We Use Your Data

We use the data we collect for the following purposes:

• Game operation: To operate the platform, track balances, process bets, and determine outcomes.
• Fraud prevention: To detect cheating, multi-accounting, abuse, and prohibited jurisdiction access. IP addresses are checked against known VPN/proxy lists.
• Compliance: To verify age and jurisdictional eligibility. Records are retained as required by our gaming license obligations.
• Analytics: Aggregated, anonymized usage data is used to improve the platform and understand how games are played.
• Communications: If you contact us, we retain those communications to assist with your query.
• Responsible gambling: To monitor for patterns consistent with problem gambling and enforce self-exclusion requests.

3. We Do Not Sell Your Data

ScrapYard does not sell, rent, or lease your personal data to third parties. We do not share your personal data with advertisers or data brokers.

We may share limited data in the following circumstances:

• With service providers who operate the technical infrastructure (hosting, database) — bound by data processing agreements
• With law enforcement or regulators when legally required
• In the event of a merger or acquisition — you will be notified

4. Cookie Policy

ScrapYard uses the following cookies:

• Session cookie — required for authentication. Stores your encrypted session token. Expires after 7 days of inactivity.
• Age gate cookie (localStorage) — stores your confirmation that you are 18+. This is local to your browser and not transmitted to our servers.

We do not use tracking cookies, advertising cookies, or third-party analytics cookies. You can clear your cookies at any time through your browser settings. Clearing session cookies will log you out.

5. Data Retention

We retain your account data for as long as your account is active. Transaction and game history records are retained for a minimum of 5 years to comply with our gaming license obligations.

If you request account deletion, we will delete your personal identifiers (username, avatar, IP address) within 30 days. Transaction records may be retained in anonymized form to satisfy legal obligations.

6. Right to Deletion

You have the right to request deletion of your personal data. To submit a deletion request, email us at cporter2us@gmail.com with the subject line "Data Deletion Request" from the email associated with your Steam account. We will process requests within 30 days.

Please note: deletion requests will result in permanent account closure. Transaction records may be retained in anonymized form per our legal obligations.

7. Data Security

We implement industry-standard security measures to protect your data:

• All connections are encrypted via HTTPS/TLS
• Passwords are not stored — authentication is handled entirely by Steam
• Database access is restricted to application servers only
• Session tokens are cryptographically signed and expire automatically

8. GDPR Compliance

For users in jurisdictions covered by the General Data Protection Regulation (GDPR) or similar privacy legislation, you have the following rights:

• Right of access: Request a copy of all data we hold about you
• Right of rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your data (subject to legal retention requirements)
• Right to restriction: Request that we limit processing of your data
• Right to data portability: Request your data in a machine-readable format
• Right to object: Object to certain processing activities

To exercise any of these rights, contact us at cporter2us@gmail.com. We will respond within 30 days.

The legal basis for processing your data is: (a) contract performance — necessary to provide the gambling services you have requested; (b) legitimate interests — fraud prevention and platform security; (c) legal obligation — gaming license compliance.

9. Children's Privacy

ScrapYard is strictly for users aged 18 and over. We do not knowingly collect data from minors. If you believe a minor has registered, contact us immediately at cporter2us@gmail.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via the platform. Continued use after changes constitutes acceptance.

---

Privacy enquiries: cporter2us@gmail.com