₿itPoker — Privacy Policy
Effective Date: March 28, 2026
Last Updated: March 28, 2026
1. Introduction
₿itPoker ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use the ₿itPoker platform ("Platform"), including our website, mobile experience, and any associated services.
We do not sell your personal data. We never have and we never will. Your personal information is not a product. It will never be sold, rented, traded, or otherwise transferred to any third party for their own commercial purposes.
By creating an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the practices described herein. This Policy is incorporated into and forms part of our Terms of Service.
If you do not agree with this Privacy Policy, you must not use the Platform.
2. Information We Collect
2.1 Information You Provide Directly
When you register for an account or interact with the Platform, we collect:
• Identity information: first name, last name, date of birth
• Contact information: email address, phone number
• Account credentials: email and hashed password (we never store plaintext passwords)
• Location information: country of residence
• Communication preferences: email and SMS consent status
• Agreement records: date and time of Terms of Service acceptance
2.2 Information We Collect Automatically
When you use the Platform, we automatically collect:
• Transaction data: membership purchases, event buyins, cashouts, timebank transactions, invoice IDs, amounts in Bitcoin and USD equivalent, Bitcoin price at time of transaction
• Session data: login timestamps, session duration, device type, browser type
• Bitcoin block height: the current Bitcoin block height recorded at key events (registration, transactions) as an immutable timestamp reference
• Usage data: pages visited, features used, interactions with the Platform
2.3 Information from Third Parties
We may receive limited information from third-party services we use to operate the Platform:
• BTCPay Server: payment processing data including invoice status and Lightning Network payment details
• Brevo: email and SMS delivery status
• Supabase: database and authentication infrastructure
• Mempool.space: Bitcoin network data (block height, used for timestamping only)
• Coinbase: live Bitcoin price data used for USD equivalent calculations
We do not purchase or receive personal data from data brokers or advertising platforms.
3. How We Use Your Information
We use the information we collect for the following purposes:
3.1 To Operate the Platform
• Create and manage your account
• Process membership purchases and renewals
• Process event buyins and cashouts via the Bitcoin Lightning Network
• Manage your timebank balance and membership hours
• Facilitate seat reservations and event participation
3.2 To Verify Eligibility
• Confirm you meet the minimum age requirement (18+)
• Verify compliance with jurisdictional eligibility requirements
• Prevent the creation of multiple accounts by the same individual
3.3 To Communicate With You
• Send transactional emails (payment confirmations, membership activations, receipts) — these are required for Platform operation and cannot be opted out of
• Send event-related notifications if you have opted in
• Send marketing emails and SMS messages about offers, news, and updates, only if you have given explicit consent at registration or subsequently
3.4 To Improve the Platform
• Analyze usage patterns to improve features and user experience
• Diagnose technical issues
• Monitor for fraudulent activity and security threats
3.5 To Comply with Legal Obligations
• Maintain records as required by applicable law
• Respond to lawful requests from authorities where required
• Enforce our Terms of Service
4. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area or another jurisdiction with similar data protection laws, we process your personal data on the following legal bases:
• Performance of a contract: processing necessary to provide the services you have requested (account creation, membership, payments)
• Legitimate interests: fraud prevention, security monitoring, and Platform improvement, where these interests are not overridden by your rights
• Consent: marketing communications, SMS notifications — you may withdraw consent at any time
• Legal obligation: compliance with applicable laws and regulations
5. Bitcoin and Blockchain Considerations
You acknowledge that Bitcoin and Lightning Network transactions are recorded on a public, immutable blockchain. While we do not publish your personal identity alongside transaction data, on-chain Bitcoin transactions are inherently public and traceable. We are not responsible for the public nature of blockchain data.
We record Bitcoin block heights at key events as immutable timestamp references. These are numerical records and do not contain personally identifiable information.
6. Data Sharing and Disclosure
We do not sell your personal information. Full stop. We do not share your personal information with third parties for their own marketing, advertising, or commercial purposes under any circumstances.
We share your information only in the following limited circumstances:
6.1 Service Providers
We share data with trusted third-party service providers who assist us in operating the Platform, including:
• BTCPay Server — payment processing (self-hosted; we operate our own node)
• Brevo — email and SMS communications
• Supabase — database hosting and authentication
• Vercel — application hosting and infrastructure
These providers are contractually obligated to protect your data and may only use it to provide services to us. They are prohibited from using your data for their own purposes.
6.2 Legal Requirements
We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe in good faith that such disclosure is necessary to protect the rights, property, or safety of ₿itPoker, our users, or the public.
6.3 Business Transfers
In the event of a merger, acquisition, or sale of all or substantially all of our assets, your information may be transferred to the acquiring entity. We will notify you of any such change and your continued use of the Platform will constitute acceptance. Any acquiring entity will be bound by the terms of this Privacy Policy with respect to your personal data.
7. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you with our services. Specifically:
• Account data: retained for the duration of your account and for up to 5 years following account closure, for legal and compliance purposes
• Transaction records: retained for a minimum of 5 years in accordance with financial record-keeping requirements
• Communication consent records: retained indefinitely as evidence of your consent or withdrawal thereof
• Session and usage data: retained for up to 12 months
You may request deletion of your account and personal data at any time, subject to our legal obligations to retain certain records. See Section 10 for your rights.
8. Data Security
We implement industry-standard security measures to protect your personal information, including:
• Encrypted connections (HTTPS/TLS) for all data in transit
• Hashed and salted password storage — we never store plaintext passwords
• Role-based access controls limiting who can access your data internally
• Row-level security on our database ensuring users can only access their own data
• Regular security monitoring and review
No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security. In the event of a data breach that affects your rights and freedoms, we will notify you as required by applicable law.
9. Cookies and Tracking
The Platform uses minimal tracking technologies. We do not use advertising cookies, third-party tracking pixels, or behavioral analytics platforms. We do not and will not display advertisements on the Platform.
We may use:
• Session tokens: to maintain your authenticated session (required for Platform operation)
• Local storage: to remember your language preference and display settings
10. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
• Access: request a copy of the personal data we hold about you
• Correction: request correction of inaccurate or incomplete data
• Deletion: request deletion of your personal data, subject to legal retention obligations
• Portability: request your data in a structured, machine-readable format
• Restriction: request that we restrict processing of your data in certain circumstances
• Objection: object to processing based on legitimate interests
• Withdrawal of consent: withdraw consent for marketing communications at any time without affecting the lawfulness of prior processing
To exercise any of these rights, contact us at the address in Section 14. We will respond within 30 days. We may need to verify your identity before processing your request.
If you are located in the EEA and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection authority.
11. Marketing Communications
We will only send you marketing emails or SMS messages if you have explicitly opted in at registration or subsequently. You may withdraw your consent at any time by:
• Clicking the unsubscribe link in any marketing email
• Contacting us directly at the address in Section 14
Withdrawal of marketing consent does not affect transactional communications necessary for the operation of your account.
12. Children's Privacy
The Platform is not directed to individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected personal information from a person under 18 without verified parental consent, we will take steps to delete that information as soon as reasonably practicable.
If you believe we have inadvertently collected information from a minor, please contact us immediately.
13. International Data Transfers
₿itPoker operates from El Salvador. If you access the Platform from outside El Salvador, your information may be transferred to, stored, and processed in El Salvador or in other countries where our service providers operate.
By using the Platform, you consent to this transfer. We take steps to ensure that any international transfers are subject to appropriate safeguards consistent with applicable data protection laws.
14. Contact Us
For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:
Email: privacy@bitpokersv.com
Website: bitpokersv.com
We are committed to working with you to resolve any concerns about your privacy in a fair and timely manner.
15. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by email or by posting a prominent notice on the Platform prior to the change becoming effective.
The "Last Updated" date at the top of this Policy indicates when it was most recently revised. We encourage you to review this Policy periodically.
This Privacy Policy applies solely to information collected by ₿itPoker through the Platform. It does not apply to information collected by third-party websites or services that may be linked from the Platform.