PRIVACY POLICY

Last updated: May 2025

1. What we collect

Identity — username, phone number, and/or email address provided at signup.
Payout details — bank name, account number, and account name, collected only when you choose to save them.
Gameplay data — predictions, trivia answers, scores, and submission timestamps.
Usage data — pages visited and actions taken, collected via standard server logs.

2. How we use your data

To create and manage your account.
To send one-time verification codes (OTP) by SMS or email when you sign up, reset your password, or update payout details.
To display your username on leaderboards.
To process prize payments to your saved bank account.
To detect and prevent fraud, cheating, or abuse.

3. SMS and email communications

By providing your phone number or email address, you consent to receive one-time verification codes (OTP) for authentication purposes. These messages are transactional — not marketing. You will not receive promotional SMS or emails unless you explicitly opt in to a separate mailing list.

To stop receiving SMS messages, reply STOP to any message. For email, contact us at admin@whogowin.com.

4. Who we share data with

We do not sell your personal data. We share data only with:

Twilio — to send SMS verification codes to your phone number.
Resend — to send email verification codes to your email address.
Your bank — your account details are used solely to process prize payments.

5. Data retention

We retain your account data for as long as your account is active. Gameplay history (predictions, trivia scores) is kept to maintain leaderboard integrity. If you request account deletion, we will remove your personal data within 30 days, retaining only anonymised aggregate records required for auditing.

6. Security

Passwords are stored as bcrypt hashes — never in plain text. Sensitive account actions (payout detail changes, email linking) require OTP verification. Data is transmitted over HTTPS at all times.

7. Your rights

You have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your account and associated data.
Opt out of any future marketing communications.

To exercise any of these rights, email admin@whogowin.com.

8. Contact

For any privacy-related questions or concerns, contact us at admin@whogowin.com. We aim to respond within 48 hours.