Privacy Policy

Last updated: March 23, 2026 • Effective date: March 23, 2026

1. Introduction

RoyalBet is a peer-to-peer skill-based gaming platform on the Solana blockchain. We are committed to protecting the privacy of our users and to processing personal information in accordance with applicable data protection laws, including the European Union General Data Protection Regulation (GDPR), the UK Data Protection Act 2018, and the California Consumer Privacy Act (CCPA), where applicable.

2. Data We Collect

We collect and process the following categories of data when you use the Service:

a) Account Identifiers (provided by you via Telegram)

• Telegram numeric user ID
• Telegram username (if set)
• Telegram first name
• Telegram profile photo URL (if publicly available)

b) Game Identifiers (provided by you)

• Clash Royale player tag (e.g. #ABC123)
• Clash Royale in-game nickname and trophy count (fetched publicly from Supercell’s API)
• Clash Royale invite link (temporary, used to create private matches)

c) Wallet and Transaction Data

• Solana wallet address (generated by the Service)
• Encrypted private key (stored encrypted at rest on our infrastructure; exportable by you at any time)
• On-chain transaction history (publicly visible on the Solana blockchain by design)
• In-app balance, match history, stakes, winnings, and platform fees paid

d) Match Data

• Match identifiers, opponents, stake amounts, and outcomes (crowns destroyed, winner)
• Spectator bets and crown score predictions
• Referral code and referral activity

e) Technical Data (collected automatically)

• IP address (for security, fraud prevention, and rate limiting)
• Browser type, device type, and operating system (web users only)
• Session identifiers and timestamps of interactions with the Service
• Error logs and diagnostic information

We do NOT collect: real name, home address, phone number, government-issued identification, or payment card details. When you use our MoonPay fiat on-ramp, MoonPay collects such information directly under its own Privacy Policy; we do not receive or store it.

3. Legal Bases for Processing (GDPR)

Where GDPR applies, we process your personal data on the following legal bases:

• Performance of a contract (Art. 6(1)(b) GDPR) — to provide the Service you have requested, including account creation, wallet management, match execution, and payout processing;
• Legitimate interests (Art. 6(1)(f) GDPR) — to secure the Service, prevent fraud and abuse, enforce our Terms, improve the product, and maintain platform integrity;
• Legal obligation (Art. 6(1)(c) GDPR) — to comply with applicable anti-money laundering, counter-terrorist financing, and tax obligations where required;
• Consent (Art. 6(1)(a) GDPR) — where you have explicitly consented to the processing, such as for marketing communications (which we currently do not send).

4. How We Use Your Data

We use your data for the following purposes:

• To create and maintain your account and wallet;
• To verify Clash Royale match outcomes via Supercell’s official API;
• To execute on-chain stakes, payouts, and refunds automatically;
• To display your profile, stats, ranks, and match history on the Service;
• To operate the referral program and compute rank-based platform fees;
• To detect and prevent fraud, abuse, collusion, and match-fixing;
• To enforce our Terms of Service;
• To comply with legal obligations;
• To provide customer support and respond to your inquiries.

We do not sell your personal data, and we do not use your data for targeted advertising or profiling for commercial purposes.

5. Sharing of Data

We share your data only with the following categories of recipients, and only to the extent necessary:

a) Third-Party Service Providers

• Telegram Messenger — as the primary interface for the bot; governed by Telegram’s Privacy Policy.
• Supercell Oy (Clash Royale API) — we query public player and battle data using the player tags you provide; governed by Supercell’s Privacy Policy.
• MoonPay Limited — when you use the fiat on-ramp to buy SOL. We share only your wallet address and the amount to be received. MoonPay independently collects and processes your personal and payment data under its own Privacy Policy.
• Solana RPC Providers — we submit transactions and query balances via public Solana RPC endpoints. Wallet addresses and amounts are publicly visible on the Solana blockchain by design.
• Infrastructure Providers — hosting and storage providers used to operate the Service under strict data processing agreements.

b) Legal and Regulatory Disclosure

We may disclose your data to law enforcement, regulators, or other authorities if required by applicable law, a valid court order, or a legitimate legal process, or if we believe in good faith that such disclosure is necessary to protect our rights, prevent fraud, or ensure the safety of users.

6. International Data Transfers

Your data may be transferred to, and processed in, jurisdictions outside your country of residence, including countries that may not provide the same level of data protection as your home country. Where we transfer personal data from the European Economic Area, the United Kingdom, or Switzerland to a third country, we rely on the European Commission’s Standard Contractual Clauses or an adequacy decision, as applicable.

7. Data Retention

We retain your data only as long as necessary to provide the Service and comply with our legal obligations:

• Account data — retained while your account is active and for up to 5 years after account deletion, to comply with anti-money laundering record-keeping requirements;
• Match and transaction data — retained indefinitely on the Solana blockchain (beyond our control) and for up to 5 years in our database for auditing and dispute resolution;
• Technical logs — retained for up to 90 days for security and debugging purposes.

After the retention period, data is either deleted or anonymized so that it can no longer be associated with an identifiable user.

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access — request a copy of the personal data we hold about you;
• Rectification — request correction of inaccurate or incomplete data;
• Erasure — request deletion of your data, subject to legal retention obligations;
• Restriction of processing — request that we stop processing your data under certain conditions;
• Data portability — receive your data in a structured, machine-readable format;
• Objection — object to processing based on legitimate interests;
• Withdraw consent — where processing is based on consent, withdraw that consent at any time;
• Lodge a complaint — with your local data protection authority.

To exercise any of these rights, contact us at privacy@royalbet-project.com. We will respond within 30 days.

Important: Due to the immutable nature of the Solana blockchain, on-chain transaction data cannot be deleted or modified. Wallet addresses and transaction amounts are public by design and beyond our control.

9. Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption of wallet private keys at rest;
• Strict access controls and network-level whitelisting for internal APIs;
• HTTPS/TLS encryption for all web traffic;
• Rate limiting, input validation, and atomic database transactions to prevent double-spend and race conditions;
• Regular security audits and dependency updates;
• Least-privilege access to production systems.

However, no system is 100% secure. You are responsible for keeping your Telegram account, device, and exported private keys secure. You should never share your private key with anyone.

10. Cookies and Tracking

The RoyalBet website uses only strictly necessary cookies and localStorage entries to maintain your session, remember your preferences, and operate core features. We do not use analytics trackers, advertising cookies, or any third-party tracking that profiles you across websites.

11. Children’s Privacy

The Service is not directed at individuals under the age of 18, and we do not knowingly collect personal data from minors. If you believe that a minor has provided us with personal data, please contact us immediately at privacy@royalbet-project.com and we will delete the data.

12. Third-Party Links

The Service may contain links to third-party websites, including MoonPay, Telegram, Supercell, and Solana block explorers. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal data.

13. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The “Last updated” date at the top of this page indicates the date of the most recent revision. Material changes will be notified via the Service or by Telegram message. Your continued use of the Service after such changes constitutes your acceptance of the updated Privacy Policy.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Privacy inquiries: privacy@royalbet-project.com
• General support: support@royalbet-project.com
• Telegram: @RoyalBet_OfficialBot
• Website: royalbet-project.com

← Back to homepage