Privacy Policy

1. Information we collect

We collect information you provide when you apply for or use an account — including business and contact details, identity and verification information, and configuration data for your network. We also collect transactional data such as loads, balances and ledger entries, and technical data such as device and log information.

2. How we use information

We use information to operate the Platform, process and record transactions, verify identity and licensing, prevent fraud and abuse, provide support, meet legal and regulatory obligations, and improve the service.

3. Audit logs & retention

Balance-changing actions and security-relevant events are recorded to immutable audit logs. We retain transactional and audit data for as long as needed to operate the Platform, support reconciliation and meet legal, regulatory and recordkeeping obligations.

4. Sharing of information

We may share information with third-party game providers as needed to process loads, with service providers who support our operations under appropriate confidentiality obligations, and with authorities where required by law or to protect the rights, safety and integrity of the Platform.

5. Security

We employ technical and organizational measures including role-based access control, transaction PINs, support for two-factor authentication, rate limiting and encryption in transit. No method of transmission or storage is completely secure, and you are responsible for safeguarding your own credentials.

6. Your responsibilities

As an operator, you may handle information about players and end users. You are responsible for collecting and processing that information lawfully, including providing appropriate notices and honoring data-subject rights under the laws that apply to you.

7. Your rights — access, export & deletion

Depending on your jurisdiction, you may have rights to access, correct or delete certain personal information, subject to our legal and regulatory recordkeeping obligations. To exercise these rights, email [email protected] or use the contact form, stating the request type (copy of my data / account closure) from the email on your account — we verify identity before acting.

What deletion means here: account closure disables sign-in and removes personal profile details where lawful. Financial transaction records (deposits, loads, withdrawals, the wallet ledger) are retained as required for financial recordkeeping, dispute resolution and fraud prevention — they are deliberately protected against deletion at the database level.

7a. Cookies

PointsStation uses essential cookies only: two session cookies (vp_access, vp_refresh) that keep you signed in. They are httpOnly, secure, and required for the Platform to function — we set no advertising, cross-site or tracking cookies. Our network provider (Cloudflare) serves a cookieless analytics beacon that collects aggregate performance data without identifying you. Because only strictly necessary cookies are used, no cookie-consent banner is required; clearing your browser cookies simply signs you out.

8. Changes to this policy

We may update this policy from time to time. Material changes will be communicated through the Platform, and continued use after changes take effect constitutes acceptance of the revised policy.

9. Contact

Privacy questions may be sent to [email protected]. See also our Terms of Service.