PRIVACY POLICY

Last updated: March 28, 2026

1. Introduction

addicted.gg ("we", "us", "our", "the Platform") respects your privacy. This Privacy Policy explains what data we collect, how we use it, on what legal basis, and your rights regarding your information.

2. Data Controller

The data controller responsible for the processing of your personal data is:

3. Data We Collect

Account Data (provided by you)

  • Discord ID, username, email, and profile picture (via Discord OAuth)
  • Kick username and Kick user ID (via Kick OAuth verification)
  • YouTube subscription status (via Google OAuth verification)
  • Platform account IDs for partner platforms (CSGORoll, Rain.gg, HypeDrop, CSGOGem, DatDrop)
  • Cryptocurrency wallet addresses (provided voluntarily for payouts)
  • Steam trade link (provided voluntarily for skin deliveries)

Automatically Collected Data

  • Wager amounts from linked partner platforms (via partner APIs)
  • Coin transaction history (earnings, spending, adjustments)
  • Challenge submission data (screenshots, messages)
  • Wheel spin history
  • Store purchase history

Technical Data

  • Browser type and version
  • IP address (for rate limiting, security, and fraud prevention)
  • Cookies and session tokens (for authentication)

4. How We Use Your Data

  • Account management — to create, maintain, and secure your account
  • Coin tracking — to calculate and distribute coin earnings based on wager activity
  • Leaderboards — to display rankings (you can opt to appear as "Anonymous")
  • Store fulfillment — to process and deliver purchases
  • Verification — to verify account ownership and prevent fraud
  • Notifications — to send you relevant updates about your account
  • Platform improvement — to improve and develop the Platform
  • Security — to detect and prevent abuse, fraud, and unauthorized access

5. Data Sharing

We do not sell your personal data. We may share data in the following limited cases:

  • Partner platforms — we send your platform ID to partner APIs to retrieve wager data. We do not share any other personal information with partners.
  • Service providers — third-party providers necessary to operate the Platform (see Section 7).
  • Legal requirements — if required by law, regulation, legal process, or to protect our rights, property, or safety.

6. Service Providers (Sub-Processors)

ProviderPurposeLocation
Hetzner Online GmbHServer hosting (VPS)Germany (EU)
Supabase Inc.Database (PostgreSQL)United States
Discord Inc.Authentication (OAuth)United States
Kick (Easygo)Authentication (OAuth)Australia
Google LLCYouTube OAuth verificationUnited States

7. International Data Transfers

Some of our service providers are located outside the European Economic Area (EEA). Where personal data is transferred to countries outside the EEA that do not have an adequate level of data protection, we rely on EU Standard Contractual Clauses (SCCs) as adopted by the European Commission, adequacy decisions where applicable, and provider-specific data protection agreements.

8. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law or for legitimate fraud prevention purposes. Anonymized or aggregated data that cannot identify you may be retained indefinitely for analytical purposes.

9. Data Security

Your data is stored on secure servers. We implement appropriate technical and organizational measures including encryption of sensitive data, secure authentication tokens, access controls, and regular security reviews. However, no system is 100% secure, and we cannot guarantee absolute security.

10. Your Rights

Under GDPR and similar data protection regulations, you have the following rights:

  • Access — request a copy of the personal data we hold about you
  • Rectification — request correction of inaccurate or incomplete data
  • Erasure — request deletion of your personal data ("right to be forgotten")
  • Restriction — request restriction of processing in certain circumstances
  • Portability — receive your data in a structured, commonly used, machine-readable format
  • Objection — object to processing based on legitimate interests
  • Withdraw consent — revoke consent at any time for consent-based processing
  • Complaint — lodge a complaint with a data protection supervisory authority in your country of residence

To exercise any of these rights, contact us at admin@elix414.xyz or via our Discord server. We will respond within 30 days.

11. Automated Decision-Making

The Platform uses automated systems for the following purposes:

  • Coin calculation — coins are automatically calculated based on wager data received from partner platform APIs
  • Fraud detection — automated checks may flag accounts for suspicious activity (e.g., multi-accounting, unusual wager patterns)
  • Account suspension — accounts may be automatically suspended pending manual review if automated systems detect potential abuse

You have the right to request human review of any automated decision that significantly affects you by contacting us.

12. Cookies

We use essential cookies for authentication and session management. These are strictly necessary for the Platform to function and do not require consent. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

CookiePurposeDuration
Session tokenAuthenticationSession / 30 days
CSRF tokenSecuritySession

13. Children

The Platform is not intended for anyone under 18 years of age. We do not knowingly collect data from minors. If we learn that we have collected data from a person under 18, we will delete that data immediately. If you believe a minor is using the Platform, please contact us.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the Platform or our Discord server. Continued use after changes constitutes acceptance. The "Last updated" date at the top indicates the most recent revision.

15. Contact

For privacy-related questions, data requests, or to exercise your rights: