Privacy Policy

1. Data we collect

We only collect what the service needs to operate:

• Account data: username, email address, display name, and a securely hashed password.
• Transaction records: wallet top-ups, card purchases and recharges, withdrawals, and referral activity.
• Card data: card numbers and security codes issued to you, stored encrypted and shown only to you after sign-in.
• Support conversations: messages you send us, including your Telegram chat ID and message history if you use Telegram support.
• Technical data: IP address, browser details, session cookies, and server logs used for security and troubleshooting.

2. How we use your data

We use your data to operate the service: creating and servicing your cards, verifying USDT deposits on-chain, processing withdrawals, and crediting referral commissions. We also use it to keep accounts secure, prevent fraud and abuse, answer support requests, send transactional emails (such as email verification, password resets, and payment notices), and meet legal obligations. We do not use your data for third-party advertising.

3. Who we share data with

We share the minimum necessary with the providers that make the service work: our card-issuing provider receives the data needed to issue and service your cards; our email provider (Resend) delivers transactional email; and Telegram carries support messages if you choose to contact us there. We may disclose data when required by law or to protect the service and its users. We never sell your personal data.

4. Blockchain transparency

Top-ups and withdrawals move over the public Tron blockchain. Deposit and withdrawal addresses, amounts, and transaction hashes are permanently visible on-chain to anyone; this is a property of the blockchain and is outside our control. Please keep it in mind before transacting.

5. Cookies

We use only essential cookies: a session cookie that keeps you signed in and a language cookie that remembers your English/Vietnamese preference. We do not use advertising or cross-site tracking cookies.

6. How we protect your data

Passwords are stored as one-way hashes and card details are encrypted at rest with AES-256. You can protect your account further with two-factor authentication (2FA) from your profile page. No system is perfectly secure, so please use a unique password and keep your 2FA backup codes safe.

7. Data retention

We keep your data while your account is active and afterwards only as long as needed for accounting, fraud prevention, dispute handling, and legal compliance. Blockchain records are permanent and cannot be deleted by anyone.

8. Your rights

You can view and update your name, email, and password at any time on your profile page, and you can unlink Telegram support from the Help page. To request a copy or deletion of your personal data, contact us through the Help page — some transaction records must be retained for accounting and legal reasons even after an account is closed.

9. Changes and contact

If we change this policy we will post the updated version on this page and update the date above. Questions about privacy can be sent through the Help page or Telegram support after you sign in.