Privacy Policy

Your account. Your phone number, your email address, your display name, the country your phone number is from, that you confirmed you're 18 or older, and your email preferences. We store your phone number as a keyed hash (used to sign you in), an encrypted copy, and its last two digits.

Your play. Your entries, matches, scores and placings, practice games, duels, Daily Challenge results, ladder points and streaks. For scored games we keep your timestamped inputs (taps, keys and timings), because scores are calculated from them on our servers and they're how results are checked. If a tournament is limited by gender, the gender you declare when entering. If a sponsor asks for entry steps, whether you opened their link, and how many people opened or signed up through your invite link (we don't show you who). If you joined through someone's link, who referred you.

If you win. The result of your identity check: whether you passed, the name and country on your ID, whether you meet the age limit, and a keyed hash of your document number (so one ID can't claim prizes on several accounts). Your ID images, selfie and date of birth stay with our verification partner; we don't receive or store them. We also keep the USDT or USDC address and network you give us for payouts, and a record of every payout.

If you sponsor. Your sponsor profile (brand name, legal name, website, country, contact details, logo and banner), your payments (amount, method, and the payment provider's references) and any crypto refund address. We don't see or store card or bank details; our payment provider handles them.

Your device and connection. Your IP address and the country it comes from, and a device signal made from your browser's settings (such as browser type, language, time zone and screen size), hashed before it's stored. We use these to keep you signed in, enforce country rules and spot multiple accounts.

Usage. Pages viewed, where a visit came from (the referring site), and whether it was a phone or a computer. Visitors are counted with an identifier that is hashed and changes every day.

Messages with us. Disputes, appeals and support requests you send, and our replies.

• To run the service you asked for (our contract with you): your account, sign-in, matches, results, ladders and prize payouts, and sponsor payments and refunds.
• To keep it fair and safe (our legitimate interest, and the interest of other players and sponsors): detecting bots, cheating and multiple accounts, checking scores, handling disputes, and stopping banned people from returning.
• To meet legal duties: identity and age checks before prizes are paid, sanctions screening, country rules, and keeping financial records.
• To email you about your matches, prizes and account. If you opt in, we also send new-tournament alerts, streak reminders and a weekly recap (at most a couple a week). You can turn these off in your account or with the link in any of those emails.
• To improve GameBeast, using counts and trends, and to give sponsors reports about their tournaments. Sponsor reports contain totals only, never your contact details.

So that anyone can check results, some things are public:

• Your display name, country, join date, results, placings, ladder points and badges.
• For finished tournaments: the list of entrants (by account ID and display name), the draw, every match score, and each player's timestamped game inputs.
• Prize records: each winner's place, the amount, and the payment reference.

Your phone number, email, ID details and payout address are never public.

We don't sell your data. We share it only with service providers who help us run GameBeast, and only what each needs:

• Didit (identity verification): your account ID and whatever you submit to them during the check.
• Bachs (payments and payouts): sponsor payments, refunds, and for winners the payout address and amount.
• Our SMS and WhatsApp code provider (Twilio, Termii or Infobip): your phone number, to send sign-in codes.
• Our email provider (Resend or Postmark): your email address and the emails we send you.
• hCaptcha: your IP address and browser signals on the sign-in page, to block bots. hCaptcha has its own privacy policy.
• Our hosting and infrastructure providers, which store and process data on our behalf.

We may also share data when the law requires it, to protect players and the service from fraud, or as part of a sale or merger of our business (in which case this policy keeps applying). Some providers are outside your country; when data leaves it, we rely on contracts and safeguards the law recognizes.

We use only the cookies the service needs to work. No advertising or third-party analytics cookies.

• gb_session: keeps you signed in (30 days).
• gb_device: recognizes your device, for security and fair play (2 years).
• gb_guest: keeps practice games and duels together before you sign up (1 year).
• hCaptcha may set its own cookies on the sign-in page.

• Your account data: for as long as you have an account.
• Game inputs: about 90 days after the match. After that we keep only the score and a summary.
• Sign-in sessions and the IP address with them: until the session ends, at most 30 days.
• Payment, payout and refund records: as long as financial and tax law requires (usually several years).
• Identity check decisions: while you have an account, then without your name, ID country or document hash.
• Fair-play and fraud records, including keyed hashes of the phone numbers and ID documents of deleted accounts: as long as needed to stop banned people from returning and one person from claiming prizes twice.

• Download your data: from your account page, as a file.
• Correct it: change your email and preferences in your account, or ask us to correct anything else.
• Delete your account: from your account page. We remove your phone number, email, sessions, devices, payout address, notifications and ID details, and replace your display name. Results on published tournaments stay, under an anonymous name. We can't delete an account while a payout is in progress or the account is under review.
• Stop marketing emails at any time.
• Object or restrict: ask us to stop or limit a use of your data, and we'll explain what we can do.

To use any right, or if something isn't covered here, email [email protected]. We reply within 30 days. If you're in Nigeria, you can also complain to the Nigeria Data Protection Commission; elsewhere, to your local data protection authority.

We encrypt traffic, hash or encrypt phone numbers and document numbers, keep secrets out of our code, require admin sign-in through a private address, and have every prize payout reviewed by a person. No system is perfectly secure; if a breach affects you, we'll tell you and the authorities as the law requires.

GameBeast is for adults 18 and over. If we learn an account belongs to someone younger, we close it and delete its data.

If we change this policy in a way that matters, we'll tell you by email or in the app before the change takes effect.

GameBeast is responsible for your data on GameBeast. Privacy questions and requests: [email protected].