Privacy Policy

PluxBet (“we”, “us”, “our”) is a sports-betting prop-firm challenge platform. This Privacy Policy explains what personal data we collect when you use pluxbet.io (the “Site”), how we use it, and your rights under applicable data-protection law, including the General Data Protection Regulation (GDPR) where relevant.

• Account data — email address, chosen nickname, and hashed password when you register.
• Challenge & betting activity — your bets, challenge phases, P&L history, and leaderboard position.
• Payment data — entry-fee transactions processed via OxaPay (cryptocurrency). We store transaction references and amounts; full payment credentials are never stored by us.
• Usage data — IP address, browser type, pages visited, and timestamps, collected automatically via server logs and Supabase analytics.
• Cookie data — session tokens and preference cookies. See Section 6.

• To provide and operate the platform, including challenge tracking and leaderboard display.
• To process entry-fee payments and issue funded-account balances.
• To send essential service emails (email verification, challenge status updates).
• To detect and prevent fraud and abuse.
• To comply with legal obligations.
• To display third-party advertising through the TrafficStars ad network, which may use cookies and similar technologies (see Section 7).

Our legal bases under GDPR are: contract performance (operating your account), legitimate interests (security, analytics), and consent (advertising cookies, where required).

We do not sell your personal data. We share data only with:

• Supabase — our database and authentication provider. Data is stored in EU-based infrastructure.
• OxaPay — our cryptocurrency payment processor. Only necessary transaction data is shared.
• TrafficStars — our advertising partner. May receive hashed or pseudonymous identifiers for ad delivery and frequency capping. See TrafficStars' Privacy Policy.
• Vercel — our hosting provider, which processes request metadata.
• Law enforcement or regulators when legally required.

We retain your account data for as long as your account is active. If you request deletion, we remove personal data within 30 days, except where retention is required by law (e.g., financial records). Anonymised aggregate data (e.g., platform-wide pass rates) is retained indefinitely.

We use the following categories of cookies:

• Essential — session authentication tokens required for the platform to function. Cannot be disabled.
• Analytics — anonymous usage metrics to improve the platform.
• Advertising — set by TrafficStars to deliver and measure ads. You may opt out via your browser settings or an ad-blocker.

We display ads served by TrafficStars. TrafficStars and its partners may use cookies, web beacons, and similar technologies to show you ads based on your browsing behaviour. We do not control TrafficStars' data practices. Please review their privacy policy at trafficstars.com/privacy.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data (“right to be forgotten”).
• Object to or restrict certain processing.
• Port your data to another provider.
• Withdraw consent at any time (where processing is based on consent).

To exercise these rights, contact us at privacy@pluxbet.io.

PluxBet is strictly for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently done so, please contact us immediately and we will delete it.

We may update this policy from time to time. Material changes will be notified via email or a prominent notice on the Site at least 14 days before they take effect. Continued use after that date constitutes acceptance.

Data controller: PluxBet
Email: privacy@pluxbet.io