Privacy Policy

1. Who We Are & Scope

This Privacy Policy explains how [Legal entity name, e.g. Monster Tech International] ("MonsterSweeps", "we", "us", "our") collects, uses, discloses and protects personal information when you visit [www.yourdomain.com] or use our games, apps and related services (the "Services"). We are the "business" and "data controller" for the personal information described here.

MonsterSweeps is a sweepstakes-style social casino. Virtual currency is used to play, and eligible players may redeem prizes under our Terms and the Official Sweepstakes Rules. No purchase necessary. Void where prohibited by law.

This Policy is part of, and governed by, our Terms of Use. By using the Services you acknowledge this Policy. If you do not agree, please do not use the Services.

2. Information We Collect

2.1 Information you give us

• Account data: full name, username, email address, phone number, date of birth, state of residence, password (stored hashed), and security answers.
• Verification data: government-issued ID, selfie or liveness image, proof of address, and, where required for prize redemption or tax reporting, a Social Security number or taxpayer ID.
• Payment and redemption data: see Section 4.
• Communications: support tickets, live-chat transcripts, complaints, survey answers, and referral or promotion entries.
• User content: anything you post in chat, comments or public areas, which other users may see.

2.2 Information collected automatically

• Device and log data: IP address, device type and identifiers, operating system, browser type, language, time zone, crash and diagnostic logs.
• Usage and gameplay data: pages and games viewed, spins, wagers of virtual currency, wins, balances, session length, frequency, how you heard about us, and your interactions with promotions and ads.
• Location data: approximate or precise location derived from your IP address or device, used to confirm you are in an eligible state and to prevent fraud.
• Cookies, pixels, tags and SDKs: see Section 8.

2.3 Inferences

We may draw inferences from the data above (for example, preferences, risk signals, or likelihood of fraud) to personalize the Services and protect the platform.

3. Where We Get Your Information

• Directly from you when you register, verify, play, buy virtual currency, redeem, or contact us.
• Automatically from your browser or device when you use the Services.
• Digital wallet providers (such as Chime, Cash App, Venmo, PayPal, Google Pay and Apple Pay), who confirm that a payment or payout succeeded and return limited details.
• Identity, fraud and sanctions-screening vendors, who return verification and risk results.
• Social sign-in and referral partners, if you register through a third-party account or a referral link.
• Advertising and analytics partners, who tell us which campaigns brought you to us.

4. Payments, Wallets & Redemptions

Purchases of optional virtual currency and prize redemptions are processed through MonsterPay, our own payment system, together with the digital wallet services you choose, which may include Chime, Cash App, Venmo, PayPal, Google Pay and Apple Pay.

• What MonsterPay processes: your wallet handle or tag (for example a Cash App $Cashtag or Venmo username), the name and email or phone tied to the wallet, transaction ID, amount, status and time, and the payment method type. This information is treated as personal information under this Policy.
• What wallet providers handle: your wallet or bank credentials, authentication and the movement of funds. Those providers process this data under their own privacy policies, and we encourage you to read them. We never receive your wallet password, PIN or one-time passcode.
• Name matching: to protect against fraud and money laundering, we may require that the name on a wallet or bank account matches the verified name on your MonsterSweeps account before we send a prize.
• Tax reporting: where IRS rules require it, we collect the taxpayer information needed to report prize redemptions and may share it with the IRS and state tax authorities.
• Fraud and chargeback prevention: we and the wallet providers may share transaction and device signals to detect stolen payment methods, chargeback abuse and multi-accounting.

5. Identity Verification & Biometric Data

To confirm you are 21 or older, one person per account, and eligible to redeem prizes, we use third-party identity verification providers. You may be asked to submit a photo ID and a selfie or short liveness video. The provider compares your selfie to your ID photo using facial recognition, which creates a face template (biometric data) and returns a pass/fail result to us.

• We collect biometric data only for identity verification and fraud prevention, and only with your consent where state law requires it.
• The verification provider stores biometric data under its own policy and a contract with us. We keep the verification result and, where applicable, related biometric data only until the purpose is met or [3] years after your last interaction with us, whichever comes first, unless a longer period is legally required.
• We do not sell, lease or trade biometric data.
• You may decline biometric verification, but we may then be unable to verify your account or process redemptions.

6. How We Use Your Information

7. How We Share Your Information

We do not sell your personal information for money, and we do not share it with third parties for cross-context behavioral advertising. We disclose it only in these situations:

• Service providers and processors: cloud hosting, customer support tools, email/SMS delivery, analytics, identity verification, fraud and security vendors, and digital wallet partners. They may use data only to perform services for us.
• Game and platform partners: the limited data needed to deliver and operate games.
• Affiliates: companies in our corporate group that support the Services.
• Authorities and legal process: regulators, tax authorities, law enforcement and courts when required by law, or to protect safety, prevent fraud or enforce our terms.
• Business transfers: in a merger, acquisition, financing or sale of assets, subject to protections consistent with this Policy.
• With your direction or consent, including when you sign in through a third-party account.
• Aggregated or de-identified data that cannot reasonably identify you.

If advertising partners ever receive data in a way that counts as "sharing" or "sale" under a state law, we will update this Policy and provide the opt-out links required by that law.

8. Cookies & Tracking Technologies

We and our partners use cookies, local storage, web beacons/pixels, tags and SDKs to keep you signed in, secure the Services, remember preferences, measure performance, and measure marketing.

Global Privacy Control. When your browser sends a Global Privacy Control (GPC) signal, we treat it as a valid request to opt out of targeted advertising and of any sale or sharing of personal information, for that browser and, where we can link it, your account.

Do Not Track. Because there is no common standard for "Do Not Track" browser signals, we do not respond to them, but we do honor GPC.

You can manage cookies through our cookie banner or your browser settings. Blocking strictly necessary cookies may stop the Services from working. Third parties that set their own cookies are governed by their own policies.

9. Data Retention

We keep personal information only as long as needed for the purposes in this Policy, including legal, tax, accounting and anti-fraud needs. As a general rule, account and transaction records are kept for [5] years after account closure, and other personal information for up to [12] months after closure, unless a longer period is required or permitted by law (for example, tax records, active disputes, or self-exclusion records). Biometric data follows Section 5. We then delete or de-identify the data.

10. Security

We use physical, technical and administrative safeguards, including encryption in transit, hashed passwords, access controls, logging and vendor due diligence. No system is perfectly secure, so we cannot guarantee absolute security. Keep your password confidential, use a unique password, and tell us right away if you suspect unauthorized access. If a breach affects your information, we will notify you and regulators as required by law.

11. Your US Privacy Rights

Depending on your state (for example California, Colorado, Connecticut, Virginia, Texas, Oregon, Utah, Montana and others with comprehensive privacy laws), you may have the right to:

• Know / access the personal information we hold about you and receive a portable copy.
• Correct inaccurate information.
• Delete your information, subject to legal exceptions such as tax, fraud and compliance records.
• Opt out of targeted advertising, and of the sale or sharing of personal information.
• Limit the use and disclosure of sensitive personal information.
• Withdraw consent you gave, including for biometric processing and marketing.
• Appeal a decision on your request (see below).
• Non-discrimination: we will not deny you the Services, charge different prices, or provide a different quality of service for exercising your rights.

How to submit a request

Use the links in Section 19 or email privacy@monstersweeps.net. We will verify your identity by matching details you provide (for example full name, date of birth, address, email) to our records, and may ask for additional proof for sensitive requests. You may use an authorized agent with written permission. We respond within 45 days, and may extend once by a further 45 days where permitted, telling you why.

Appeals

If we deny your request, you may appeal by replying to our decision or emailing privacy@monstersweeps.net with the subject "Privacy Appeal" within [60] days. We will reply in writing within 45 days with our decision and reasons. If you are still not satisfied, you may contact your state attorney general.

12. Notice to California Residents

This section supplements the rest of this Policy and applies to California residents under the CCPA/CPRA.

Categories of personal information (past 12 months)

Tip: swipe the table sideways to see all columns on a small screen.

Sensitive personal information

We collect government identifiers (ID and taxpayer number), account log-in credentials, precise geolocation, and unique biometric identifiers. We use these only to provide the Services, verify identity, prevent fraud, and comply with law, and not to infer characteristics about you. Because of that, we do not offer a separate "Limit the Use of My Sensitive Personal Information" link, but you may still contact us with questions.

Sale and sharing

In the past 12 months we have not sold or shared personal information as defined by the CCPA, and we have no actual knowledge of selling or sharing the personal information of anyone under 16. Our policy is that anyone under 21 may not use the Services.

Shine the Light and Nevada

California Civil Code section 1798.83 lets California residents request details of third-party disclosures for direct marketing; as noted above, we make none. Nevada residents may submit an opt-out of sale request using the contact details in Section 19.

Financial incentives

Bonuses, loyalty tiers and referral rewards are offered to all players on equal terms. If any program requires data in exchange for a benefit, its value is based on the value of the service to you, and you may withdraw at any time by emailing us.

13. Text & Email Marketing

With your consent where required, we may send reward notifications, balance reminders, promotion start and end times, security codes (2FA) and updates by SMS, and offers by email or push notification.

• SMS: message frequency varies, and message and data rates may apply. Reply STOP to cancel at any time or HELP for help. Carriers are not liable for delayed or undelivered messages. Consent to SMS is not a condition of purchase, and we do not share your SMS opt-in data with third parties for their marketing.
• Email: use the unsubscribe link in any message.
• We will still send essential service, security and account notices.

14. Age Restriction

The Services are for people who are at least 21 years old and are located in an eligible US jurisdiction. We do not knowingly collect information from anyone under 21, and we do not direct the Services to children. If we learn that a person under 21 has registered, we will close the account and delete the information, subject to legal retention. If you believe a minor has used the Services, contact us at privacy@monstersweeps.net.

15. Responsible Play

To support responsible play, we may analyze your activity to spot patterns that suggest risk and may contact you or apply limits. We keep self-exclusion records so that we can honor your request. If you need support, contact our team or a national helpline such as the National Problem Gambling Helpline (call or text 1-800-MY-RESET, 1-800-697-3738).

16. Data Transfers

The Services are hosted and operated mainly in the United States, and are intended for users in the United States. Our team, affiliates and vendors may be located in, or access data from, other countries, where laws may differ from those of your state. We use contracts and reasonable safeguards to protect data that is transferred. If you access the Services from outside the US, you understand that your information will be processed in the US.

17. Changes to This Policy

We may update this Policy to reflect changes in our practices, technology or the law. We will post the new version with an updated "Last updated" date and, for material changes, notify you by email or a prominent notice. Where the law requires, we will ask for your consent. Continued use after changes take effect means you accept the updated Policy.

18. Rule Violations, Account Actions & Disputes

You must follow our Terms of Use and Official Sweepstakes Rules. If we find a violation, such as multiple accounts, false identity information, payment fraud or chargeback abuse, bonus abuse, collusion, bots or location spoofing, we may warn you, restrict features, suspend or permanently close your account, and remove you from the Services.

• One account per person: each player may have only one account. To enforce this we compare account details, verified ID, device information and IP address. If we find multiple accounts, or an account used by or shared with someone else, we may close all the accounts involved and remove the player from the Services. See our Responsible Gaming page for how we handle shared homes and networks.
• One dispute per action: if you disagree with an account action, you may submit one dispute for that action, with any evidence you have, to [support email]. We will review it and reply in writing.
• Repeat disputes: further disputes about the same action may be declined. Repeated or abusive use of the dispute process may lead to permanent removal from the Services.
• Our right to remove players: we may remove any player who breaks our rules, and may refuse to re-register a player who was removed.
• Ban-evasion and fraud records: after an account is closed, we may keep identifiers such as your name, ID verification result, device and IP data and wallet handles, so that removed players cannot return and to prevent fraud (see Section 9).
• Your privacy rights are separate: the one-dispute rule applies to account decisions only. It does not limit the privacy rights and appeal process described in Section 11.

19. Contact & Privacy Requests

Submit a Privacy Request Do Not Sell or Share My Info Appeal a Decision

Please put your request type (access, delete, correct, opt-out or appeal), your full name, account email and state of residence in your email.

• Company: [Legal entity name]
• Email: privacy@monstersweeps.net
• Mail: [Registered business address]
• Phone (optional): [Toll-free number]