Privacy Policy

1. Information We Collect

To provide authenticated access and ensure system security, Roulette.tools collects minimal necessary account identifiers:

• Contact Method: Your email address or international E.164 phone number.
• Security Credentials: One-way cryptographic password hashes (Bcrypt, minimum 10 rounds). Plaintext passwords are never stored or logged.
• Verification Codes: Cryptographic SHA-256 hashes of one-time codes (OTPs), which expire automatically after 10 minutes via MongoDB TTL indexes.
• Payment Order Records: Order IDs, cryptocurrency payment hashes, and subscription tier snapshots via NOWPayments.

2. How We Use Your Data

Collected data is utilized strictly to:

• Authenticate your access to the prediction platform.
• Dispatch one-time verification and password reset codes.
• Verify on-chain cryptocurrency transactions through signed NOWPayments IPN webhooks.
• Prevent abusive automated account creation, brute-force attacks, and API tampering.

3. Zero Sale or Third-Party Monetization

We do not sell, rent, monetize, or broker your personal information to advertising networks, third-party casino operators, or data brokers. Data is processed exclusively by our server infrastructure and essential verified delivery providers (e.g. Resend for email, Twilio for SMS, and NOWPayments for cryptocurrency billing).

4. Cookies and Session Storage

We use secure, HTTP-only session tokens and localStorage keys (sloot_token) strictly to maintain your authenticated state across page refreshes. We do not use third-party tracking pixels or cross-site tracking cookies.

5. Data Security & Storage Architecture

All network transmissions are encrypted with TLS 1.3 / HTTPS. Database schemas feature restricted index constraints and encrypted connection pooling. Rate limiting and IP monitoring are applied at the network edge to prevent denial-of-service and brute-force enumeration.

6. Your Rights

Regardless of your location, you have the right to request review, correction, or permanent erasure of your account and associated contact identifiers. You can submit requests via our Contact Desk.