Privacy Policy

Bitsworld INC (“we,” “our,” and/or “us”) value the privacy of individuals who use our website, mobile applications (“Apps”), and related services (collectively, our “Services”). This privacy policy (the “Privacy Policy”) explains how we collect, use, and share information from users of our Services (“Users”) to improve the gaming experience. Our Services include skill-based social gaming features like chess, poker, and our history-themed trading card game (TCG) using virtual in-game currency (e.g., Cyber Cash), which may be redeemable for prizes via direct skill rewards. This is not real-money gambling where prohibited.

If you reside in California, Colorado, Connecticut, Oregon, Texas, Utah, or Virginia, please refer to our U.S. State Privacy Notice Addendum below for supplemental information about the types of personal information we collect and disclose, as well as how to exercise your rights under state law.

For users of our Apps that are part of Apple Arcade, please refer to the “Apple Arcade” section below.

By using our Services, you agree to the collection, use, disclosure, and procedures this Privacy Policy describes. Beyond this Privacy Policy, your use of our Services is subject to our Terms of Service, including the mandatory arbitration provisions in Section 16, which govern disputes related to your privacy and data. Users must be 21+ to access redeemable features; see Terms §2 for eligibility.

Information We Collect

We may collect a variety of information from or about you or your devices from various sources, as described below. If you do not provide your information as requested, you may not be able to use our Services if that information is necessary to provide our Services or we are legally required to collect it.

Information You Provide Us

Registration and Profile Information

If you link our Services to a third party account, such as a Game Center, Google Play, or Facebook account, we may receive information about you from these third party services such as your email address, profile information, and friends list. If you wish to limit the information these third parties make available to us, we encourage you to visit the privacy settings for those third party accounts to learn about your options.

Payment Information

All purchases, including all in-app purchases, are handled by App store platforms such as Apple and Google. Outside of a payment receipt, which we receive for refund purposes and includes the date of purchase, the item purchased, and an anonymous identification number, we do not collect any payment information.

Communications

If you contact us directly, we may receive additional information about you. For example, if you contact our customer support team, we will receive your name, email address, device identifiers, phone manufacturer, operating system version (e.g., iOS or Android), the contents of the message and any attachments you may send to us, and any other information you choose to provide. If you subscribe to our newsletter, we will collect certain information from you such as your email address. When we send you emails, we may track whether you open them to learn how to deliver a better customer experience and improve our Services.

Careers

If you decide that you wish to apply for a job with us, you may submit your contact information and your resume online. We will collect the information you choose to provide on your resume, such as your education and employment experience.

KYC/AML Information for Redemptions

For prize redemptions (e.g., converting Cyber Cash to cryptocurrency like Shiba or Dogecoin via self-custodial wallets), we collect limited Know Your Customer (KYC) data such as full name, date of birth, address, government ID (e.g., driver's license scan), and last 4 digits of SSN for users 21+ only. This ensures compliance with anti-money laundering (AML) laws and tax reporting (e.g., IRS Form 1099 for winnings less than $600). We do not store full financial details.

Information We Collect When You Use Our Services

Location Information

When you use our Services, we infer your general location information based on technical information such as your internet protocol (IP) address, which may indicate your more general geographic region. We use this for geo-fencing restricted areas (e.g., states with restrictions on skill-based rewards like NY/MT).

Device Information

We automatically collect certain technical information about the device and software you use to access our Services, including your IP address, operating system version (e.g., iOS, Android), web browser type, phone manufacturer, device identifiers, media access control (MAC) address, and push notification tokens.

Your Contacts

If you give us permission to import your contacts from a third party account you link to our Services, such as your Game Center, Google Play, or Facebook account, we may access and store names and contact information from your address book to facilitate invitations and social interactions that you initiate through our Services and for other purposes described in this Privacy Policy or at the time of consent or collection. We also collect your contacts if you invite them to use our Services or share information or content with them from our Services.

Messages Between Users

When you communicate with other Users on our Services through text chat, such as via the Messaging feature described in our Terms of Service, we and our third-party partners may receive the content of the messages you send and receive and information about those messages, such as when they were sent or received.

Game and Anti-Cheat Data

For fair play in skill games (e.g., chess/poker, history TCG), we log session data like moves, timestamps, card claims/unlocks, and device fingerprints to detect cheating (e.g., engine use) and verify reward eligibility (e.g., globe card positions).

Information from Cookies and Other Tracking Technologies

We and third party partners collect information using cookies, pixel tags, SDKs, or other tracking technologies. Our third party partners, such as analytics and advertising partners, may use these technologies to collect information about your online activities over time and across different services. Cookies are small text files that contain a string of alphanumeric characters. We may use both session cookies and persistent cookies. A session cookie disappears after you close your browser. A persistent cookie remains after you close your browser and may be used by your browser on subsequent visits to our Services. Please review your web browser “Help” file to learn the proper way to modify your cookie settings. Please note that if you delete, or choose not to accept, cookies from our Services, you may not be able to utilize the features of the Service to their fullest potential.

Information We Receive from Third Parties

Other Third Parties

We may receive additional information about you, such as demographic data, from third parties such as data or marketing partners and combine it with other information we have about you.

Blockchain Providers

For crypto redemptions, we receive anonymized transaction confirmations from partners (e.g., wallet providers) without storing private keys.

How We Use the Information We Collect

We use the information we collect:

• To provide, maintain, improve, and enhance our Services;
• To personalize your experience on our Services such as by providing tailored content and recommendations;
• To understand and analyze how you use our Services and develop new products, services, features, and functionality;
• To communicate with you, provide you with updates and other information relating to our Services, provide you with information that you request, respond to comments and questions, and otherwise provide customer support;
• To facilitate the connection of third party services or applications, such as social networks and gaming apps;
• For marketing and advertising purposes, such as developing and providing promotional and advertising materials that may be relevant, valuable, or otherwise of interest to you;
• To send you push notifications;
• To facilitate transactions and payments;
• To process your job application;
• To find and prevent fraud and abuse, and respond to trust and safety issues that may arise, including anti-cheat monitoring in games;
• For compliance purposes, including enforcing our Terms of Service or other legal rights, or as may be required by applicable laws and regulations or requested by any judicial process or governmental agency (e.g., IRS reporting for prizes less than $600 annually);
• To verify eligibility and process KYC/AML for redemptions, ensuring only 21+ users in permitted jurisdictions receive prizes; and
• To process fixed reward claims in our history TCG, such as unlocking predetermined crypto (e.g., SHIB) tied to specific globe cards via earned CyberCash—no randomness involved;
• For other purposes for which we provide specific notice at the time the information is collected.

How We Share the Information We Collect

Affiliates

We may share any information we receive with our affiliates for any of the purposes described in this Privacy Policy.

Vendors and Service Providers

We may share any information we receive with vendors and service providers retained in connection with the provision of our Services, including crypto wallet integrators (e.g., for CyberCash) and anti-cheat tools, plus educational content partners for TCG card verification.

User Content

Our Services are social services in which you can find, enjoy, and share content. If you choose to share content, like the games you’re playing or messages via the Messaging feature, with other Users, your username will be viewable by those Users. We are not responsible for the other users’ use of available information, so you should carefully consider whether and what to post or how you identify yourself on the Service.

Third Party App Integrations

If you connect a third party application to our Services, we may share information such as your device identifier with that third party.

Social Networks and Other Online Services

The Service allows you to, upon your direction, share information with social networking services, such as X, Facebook, and Instagram. You understand and agree that the use of your information by any social networking websites will be governed by the privacy policies of these third party platforms and your settings on that platform. We encourage you to review their privacy policies.

Marketing

We may share information about you with third parties that is in an aggregate or de-identified form that cannot reasonably be used to identify you.

Analytics Partners

We use analytics services such as Google Analytics to collect and process certain analytics data. These services may also collect information regarding your use of other websites, apps, and online resources. You can learn about Google’s practices by going to https://www.google.com/policies/privacy/partners/, and opt-out of them by downloading the Google Analytics opt-out browser add-on, available at https://tools.google.com/dlpage/gaoptout.

Advertising Partners

We work with third party advertising partners to show you ads that we think may interest you. These advertising partners may set and access their own cookies, pixel tags, and similar technologies on our Services and they may otherwise collect or have access to information about you which they may collect over time and across different online services. Some of our advertising partners are members of the Network Advertising Initiative ( http://optout.networkadvertising.org/?c=1#!/ ) or the Digital Advertising Alliance ( http://optout.aboutads.info/?c=2&lang=EN ). If you do not wish to receive personalized ads, please visit their opt-out pages to learn about how you may opt out of receiving web-based personalized ads from member companies. You can access any settings offered by your mobile operating system to limit ad tracking, or you can install the AppChoices mobile app to learn more about how you may opt out of personalized ads in mobile apps.

Regulatory Bodies

We may share data with relevant authorities (e.g., IRS) for compliance, such as prize reporting, or law enforcement for AML/fraud investigations.

Blockchain and Educational Partners

Anonymized learning data shared with crypto providers for reward txns and history fact-checkers for TCG quizzes.

As Required By Law and Similar Disclosures

We may access, preserve, and disclose your information if we believe doing so is required or appropriate to: (a) comply with law enforcement requests and legal process, such as a court order or subpoena; (b) respond to your requests; or (c) protect your, our, or others’ rights, property, or safety. For the avoidance of doubt, the disclosure of your information may occur if you post any objectionable content on or through our Services.

Merger, Sale, or Other Asset Transfers

We may transfer your information to service providers, advisors, potential transactional partners, or other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which we are acquired by or merged with another company or we sell, liquidate, or transfer all or a portion of our assets. The use of your information following any of these events will be governed by the provisions of this Privacy Policy in effect at the time the applicable information was collected.

Consent

We may also disclose your information with your permission.

Third Parties

Our Services may contain links to other websites, products, or services that we do not own or operate. We are not responsible for the privacy practices of these third parties. Please be aware that this Privacy Policy does not apply to your interaction with these third parties and any information you disclose to these third parties. We encourage you to read their privacy policies before providing any information to them, especially for crypto wallets (e.g., risks of blockchain transactions).

Security

We make reasonable efforts to protect your information by using physical and electronic safeguards designed to improve the security of the information we maintain, including encryption for KYC data and multi-factor authentication for accounts. However, because our Services are hosted electronically, and no electronic transmission or storage of information can be entirely secure, we can make no guarantees as to the security or privacy of your information. You assume the risk of any data breach or unauthorized access, and any disputes arising from such incidents are subject to arbitration as per Section 16 of our Terms of Service. In the event of a breach, we will notify affected users within 72 hours per best practices and applicable law.

Children

No part of our Services is directed to children under 13, and we do not knowingly collect, maintain, or use personal information from children under 13 years of age. For redeemable features (e.g., prizes, including TCG crypto rewards), users must be 21+. If you learn that a child under 13 (or under 21 for redemptions) has provided us with personal information in violation of this Privacy Policy, then you may alert us at support@bitsworld.io.

International Visitors

Our Services are hosted in the United States and intended for visitors located within the United States, with compliance focused on North Carolina laws. If you choose to use our Services from the European Union or other regions of the world with laws governing data collection and use that may differ from U.S. law (e.g., GDPR, MiCA for crypto), please note that you are transferring your personal information outside of those regions to the United States for storage and processing. Also, we may transfer your data from the U.S. to other countries or regions in connection with storage and processing of data, fulfilling your requests, and operating our Services. By providing any information, including personal information, on or to our Services, you consent to such transfer, storage, and processing. Non-US users must comply with local gambling/crypto laws; access may be restricted (e.g., no China).

Accessing/Updating Information

You can update your account and profile information through your profile settings. If you have any questions about your privacy on our Services or as described in this Privacy Policy, please contact us at support@bitsworld.io.

Deleting/Restricting Information

You can request the deletion of your personal information by submitting a request to support@bitsworld.io. You can ask us to restrict the processing of your personal information by submitting a request to support@bitsworld.io. If we have collected and processed your personal information with your consent, then you can withdraw your consent at any time by submitting a request to support@bitsworld.io. Any disputes arising from such requests are subject to arbitration as per Section 16 of our Terms of Service. Note: We retain KYC data for 5 years per AML requirements.

Information Retention

We retain your personal information where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax, or accounting requirements) and for a period of time consistent with the original purpose as described in this Privacy Policy. We determine the appropriate retention period for personal information on the basis of the amount, nature, and sensitivity of your personal information processed, the potential risk of harm from unauthorized use or disclosure of your personal information, and whether we can achieve the purposes of the processing through other means, as well as on the basis of applicable legal requirements (such as applicable statutes of limitation). After expiration of the applicable retention periods, we will either delete or anonymize your personal information or, if this is not possible, then we will securely store your personal information and isolate it from any further processing until deletion is possible. KYC/AML data retained 5 years post-redemption.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or in-app notice. Continued use after changes means acceptance.