1. Who we are
The data controller is [OPERATOR LEGAL NAME], [REGISTERED ADDRESS] ("we", "us"). This policy covers the Peek Duel Telegram Mini App, the bot @Peek_Duel_bot and this website. Contact for privacy questions: support through @Peek_Duel_bot or [PRIVACY EMAIL].
2. Data we collect
- Telegram data passed to the Mini App when you open it: Telegram user ID, username, first and last name, language and, if available, profile photo.
- Game data: matches, inputs and replays, results, statistics, rating (ELO), tournament entries, coin balance.
- Financial data: deposit and withdrawal records, wallet addresses, transaction IDs, balance history and limits.
- Technical and security data: IP address, device and browser information, and device and network signals used for anti-fraud and anti-cheat.
- Verification data (only where required): identity documents and related information collected through a verification provider.
- Support data: your messages to support and our replies.
We do not receive your Telegram phone number or private chats.
3. Why we use it
| Purpose | Legal basis |
|---|---|
| Running your account, matches and tournaments | Contract |
| Processing deposits and withdrawals | Contract, legal obligation |
| Anti-cheat, anti-collusion and fraud prevention | Legitimate interest, legal obligation |
| Age and identity checks, AML | Legal obligation |
| Responsible-gaming tools and self-exclusion | Legal obligation, legitimate interest |
| Support and dispute resolution | Contract, legitimate interest |
| Improving the game with aggregated statistics | Legitimate interest |
| Bot notifications about tournaments and promotions | Consent (you can opt out at any time) |
4. Who we share it with
- Telegram — as the platform the Mini App, bot and Telegram Stars (XTR) payments run on;
- identity verification provider — only when verification is required;
- hosting and infrastructure providers — under data processing agreements;
- authorities — only when we are legally required to.
We never sell your personal data. Other players only see your public game profile (name, avatar, rating and match results).
5. How long we keep it
- Account and game data — while your account is active, then deleted or anonymised, except where we must keep it;
- financial and verification records — for [5] years or longer if required by law;
- match replays — [X] months, longer if a dispute or investigation is open;
- security logs — [X] months.
6. Security
We use encryption in transit, strict access control with two-factor authentication for staff, audit logs of administrative actions, an isolated wallet service and the principle of least privilege. No system is 100% secure, but we work continuously to protect your data.
7. Your rights
Depending on your jurisdiction, you have the right to access, correct, delete, restrict or port your data, to object to processing and to withdraw consent. You can also complain to your data protection authority. To exercise your rights, contact support through @Peek_Duel_bot. Some data may have to be kept to meet legal obligations (for example, financial records).
8. International transfers
Our providers may process data outside your country. Where required, we use appropriate safeguards such as standard contractual clauses.
9. Minors
The Service is not intended for anyone under 18. If we learn that we hold data of a minor, we close the account and delete the data, except where we must keep it by law.
10. This website
This website does not use advertising or tracking cookies. It stores only your language choice in your browser's local storage (key pd_lang). The live tournament list is loaded from our public API without any personal data. Our servers may log IP addresses for security purposes.
11. Changes to this policy
We may update this policy. Material changes will be announced through the bot or on this website.