Privacy Policy

1. Information We Collect

1.1 Personal Information

When you register for an account, we collect:

• Email address
• Username and display name
• Password (encrypted)
• Date of birth (for age verification)
• Country and state/province of residence
• Phone number (if provided for 2FA)

1.2 Financial Information

For deposits and withdrawals, we collect:

• Cryptocurrency wallet addresses (USDC on Polygon)
• Transaction history and amounts
• Payment processor information (via third-party Uniwire integration)

Important: We do NOT store credit card numbers, bank account details, or private keys. All payment processing is handled by our PCI-DSS compliant third-party payment processor, Uniwire.

1.3 Usage and Activity Data

We automatically collect:

• IP address and geographic location
• Device information (browser type, operating system, device ID)
• Competition entries, trades, and P&L performance
• Login times and session duration
• Pages visited and features used
• Referral sources and marketing campaign data

1.4 Cookies and Tracking Technologies

We use cookies, web beacons, and similar technologies to enhance your experience, analyze usage patterns, and deliver personalized content. You can control cookie preferences through your browser settings, but disabling cookies may limit Platform functionality.

1.5 Communications

If you contact us via email, live chat, or support tickets, we retain those communications and any information you provide.

2. How We Use Your Information

We use your information to:

• Provide Services: Create and manage your account, process competition entries, execute trades, calculate P&L, and distribute payouts
• Security and Fraud Prevention: Verify identity, prevent unauthorized access, detect cheating or collusion, and comply with anti-money laundering (AML) requirements
• Customer Support: Respond to inquiries, resolve disputes, and provide technical assistance
• Platform Improvement: Analyze usage patterns, test new features, and optimize performance
• Marketing: Send promotional emails, competition announcements, and special offers (you may opt out anytime)
• Legal Compliance: Comply with applicable laws, regulations, court orders, and law enforcement requests
• Leaderboards: Display usernames, performance stats, and competition results publicly

3. How We Share Your Information

3.1 Third-Party Service Providers

We share information with trusted partners who help us operate the Platform:

• Uniwire: Payment processing for cryptocurrency deposits and withdrawals
• MailerLite: Email marketing and transactional notifications
• Neon/Supabase: Database hosting and storage
• Vercel: Web hosting and content delivery
• Market Data Providers: Real-time price feeds (Binance, BJF/LMAX)

These providers are contractually obligated to protect your data and may only use it to perform services on our behalf.

3.2 Public Information

Your username, competition performance, P&L results, and leaderboard rankings are publicly visible on the Platform. Do NOT use your real name as your username if you prefer anonymity.

3.3 Legal Obligations

We may disclose your information if required by law, court order, subpoena, or government request, or if we believe disclosure is necessary to protect our rights, prevent fraud, or ensure user safety.

3.4 Business Transfers

If Alpha Kings is acquired, merged, or sold, your information may be transferred to the new owner as part of the transaction. You will be notified via email of any ownership change.

3.5 We Do NOT Sell Your Data

Alpha Kings does NOT sell, rent, or trade your personal information to third parties for their marketing purposes.

4. Data Security

We implement industry-standard security measures to protect your information:

• AES-256 encryption for sensitive data at rest
• TLS/SSL encryption for data in transit
• Two-factor authentication (2FA) support via TOTP (Google Authenticator, Authy)
• Encrypted MFA secrets and backup codes
• Regular security audits and penetration testing
• Access controls and role-based permissions for internal staff
• Secure password hashing using bcrypt

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your password.

5. Your Privacy Rights

5.1 GDPR Rights (EU/UK Users)

If you are located in the European Economic Area (EEA) or United Kingdom, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data (subject to legal retention requirements)
• Restriction: Limit how we use your data
• Data Portability: Receive your data in a structured, machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent for marketing communications anytime

To exercise these rights, email us at privacy@alphakings.io.

5.2 CCPA Rights (California Users)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and share
• Request deletion of your personal information
• Opt out of the "sale" of your information (we do not sell data)
• Non-discrimination for exercising your privacy rights

To submit a CCPA request, email privacy@alphakings.io with "California Privacy Request" in the subject line.

5.3 Email Opt-Out

You may unsubscribe from marketing emails by clicking the "unsubscribe" link at the bottom of any email or by updating your preferences in your account settings. Note: You will still receive transactional emails (e.g., payout confirmations, security alerts).

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. After account closure, we may retain certain data for up to 7 years to comply with legal obligations (e.g., tax records, anti-money laundering requirements, dispute resolution).

Transaction records, trade history, and competition results may be retained indefinitely for audit and regulatory purposes.

7. International Data Transfers

Alpha Kings is based in the United States. Your information may be transferred to and processed in the U.S. or other countries where our service providers operate. These countries may have different data protection laws than your country of residence.

For EU/UK users, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure adequate protection when transferring data outside the EEA.

8. Children's Privacy

Alpha Kings is NOT intended for users under 18 years of age. We do not knowingly collect information from children. If we discover that a user is under 18, we will immediately terminate the account and delete all associated data.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@alphakings.io.

9. Third-Party Links

Our Platform may contain links to third-party websites (e.g., payment processors, social media). We are NOT responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any information.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email and/or a prominent notice on the Platform. The "Last Updated" date at the top reflects the most recent revision. Continued use of the Platform after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: