Privacy Policy

If you opened this while creating an account, return to the form. Your answers stay filled in except the password.

This policy describes payment, account, and social-data processing in OneGaming, including UK/EU/US compliance paths, rights handling, and retention.

Payment and compliance data

OneGaming stores tokenized payment references and metadata; raw PAN/CVV is not stored by app services.
Fraud and sanctions controls process transaction context, risk signals, and compliance case outcomes.
Withdrawal and dispute records are retained for legal, fraud, and audit obligations.

Automated scoring supports fraud controls and payment-risk triage; high-risk actions can be moved to manual review.
Users can export or delete their account from Data and contact rights. Export is a JSON file. Deletion anonymises the login immediately; some payment ledger rows may be retained without your name where AML law requires it.
Child accounts remain guardian-governed with narrower social and financial capabilities.

Cross-border data transfers use legal safeguards appropriate to the transfer path and jurisdiction.
Retention windows differ by data type, with financial compliance records typically retained longer than UX telemetry.
Data is deleted or de-identified when no longer required by legal, security, or service obligations.

We never ask for a Steam, Battle.net, Xbox, PlayStation, Nintendo, Discord, or Riot password.
A link is stored only after you sign in on that company's own page (Steam OpenID or Discord OAuth).
We store the stable account id they give us, the handle you show, when you linked, and who may see it.
Steam profile data is retrieved only after you ask, and is shown as-is from Valve. Private Steam profiles stay hidden here.
That data is stored on the OneGaming API host in the United Kingdom (DigitalOcean London, api.onegaming.co.uk).
Friends see a store on The Inn only if that company would show it and you said yes here. Steam can show Online or In game when the Steam profile is public. Discord proves the account only — no live Discord light yet.
Unlink or delete your account and we drop the vendor id and tokens. Discord API data is deleted when you unlink.
Xbox, PlayStation, Nintendo, and store apps are listed only. They have no public presence API we may use yet.

The iOS app does not track you across other companies' apps or websites. There is no advertising identifier request.
Face ID is used only as a step-up check before a wallet or booking action on this device. The biometric template stays on the device.
Account email, display name, and session tokens are processed to sign you in. Tokens are stored in the OS secure store on the phone.
You can delete the account from the app (Data and contact rights) or from this website after sign-in. See Support.
This preview does not sell data and does not run third-party analytics SDKs in the app binary.

Training recording consent is captured with timestamped pre-session and post-session windows per participant.
Publication audit logs include decision window, actor role, acceptance state, and legal notice version.
Under-18 publication records require child and guardian dual-window attestations issued at least one week apart.
Where publication is declined, private-session surcharge processing follows disclosed contractual terms.
Data subject rights for recording metadata and consent logs are available through account-request channels.