Privacy Policy — CoinReward

1. Information We Collect

When you use CoinReward, we collect the following information:

Account information: Username, email address, phone number, and password (stored as a secure hash).
Verification documents: Government-issued ID images (Smart NID, Driving License, or Passport) and selfie photos, submitted voluntarily for account verification.
Activity data: Tasks completed, games played, transactions, referral activity, and login history.
Technical data: IP address, browser type, device information, and session data.
Payment information: Payment method details (e.g., bKash number, bank account details) provided for withdrawals.

2. How We Use Your Information

To provide and operate the Platform services
To process withdrawals and payments
To verify your identity and prevent fraud
To send notifications about your account activity
To improve our services and user experience
To enforce our Terms of Service
To comply with legal obligations

3. Data Storage & Security

We implement industry-standard security measures to protect your data:

Passwords are encrypted using bcrypt hashing
All data transmitted over HTTPS/TLS encryption
Session cookies are secured with HttpOnly, Secure, and SameSite flags
Database access is restricted and uses prepared statements to prevent injection
Verification documents are stored securely with restricted access

4. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share data only:

With payment processors to facilitate withdrawals
When required by law or legal process
To protect the rights and safety of our users and the Platform

5. Cookies

We use session cookies to maintain your login state and provide core functionality. We do not use third-party tracking cookies for advertising purposes.

6. Data Retention

Account data is retained as long as your account is active
Transaction records are kept for legal and auditing purposes
Verification documents may be retained for up to 5 years after account closure as required by regulations
You may request deletion of your account by contacting support

7. Your Rights

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your account and associated data
Export your transaction history

8. Children's Privacy

The Platform is not intended for users under 18. We do not knowingly collect data from minors.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of significant changes via email or platform notification.

10. Contact

For privacy-related questions, please visit our Contact page.