1.1 Information You Provide

Profile Registration:

• Full name, email address, phone number, mailing address
• Government-issued photo identification and a live facial capture, collected when you verify your identity
• Login credentials and security preferences

Identity Verification:

• Government-issued identification documents
• Date of birth and identification numbers
• Proof of address documentation
• Selfie or biometric data for identity matching

Payment Information:

• Credit/debit card information (tokenized by payment processors)
• Payout details you give us so a prize can reach you
• PayPal or other payment service identifiers

1.2 Activity Data

• Promotional credit purchases, distributions, and redemptions
• Coin totals and activity history
• Campaign participation and redemption activity
• Cash-out requests and disbursement records

1.3 Automatically Collected Information

• Device Information: IP address, device identifiers, browser type, operating system
• Usage Data: Pages visited, features used, session duration, interaction patterns
• Security Logs: Login attempts, authentication events, security alerts
• Location Data: General geographic location based on IP address

2.1 Platform Operations

• Running the platform: selling Gold Coins, granting and tracking Sweeps Coins, settling game rounds, and paying prizes
• Sweepstakes administration: issuing free entries, determining and recording results, and awarding prizes under the Official Sweepstakes Rules
• Customer Support: Responding to inquiries, resolving issues, and providing profile assistance
• Platform Improvement: Analyzing usage patterns to improve features and user experience

2.2 Security and Compliance

• Identity Verification: Conducting KYC checks to verify user identities and prevent fraud
• Fraud Prevention: Detecting and preventing fraudulent activity and profile abuse
• Sanctions Screening: Checking users against prohibited person and entity lists
• Regulatory Reporting: Submitting required reports to financial regulators and law enforcement

2.3 Communications

• Activity confirmations and profile notifications
• Security alerts and important service updates
• Marketing communications (with consent, where required)

3.1 Service Providers

We share information with trusted third parties who assist in operating our Platform:

• Payment processor: our card processor handles Gold Coin purchases and prize payments. Card details go to them directly and are never stored by us
• Identity Verification (Didit): For KYC verification and document validation
• Gift Card Networks: For processing gift card redemptions
• Cloud Infrastructure: For secure data storage and processing

3.2 Identity Verification

• Your identity document and facial capture are processed by Didit, our verification provider. We receive the result and the verified attributes, not the raw images.
• We do not sell your personal information, and we do not share it with advertisers.

3.3 Legal and Regulatory Disclosure

We may disclose information when required by law, including:

• Response to valid legal process (subpoenas, court orders)
• Compliance with regulatory examinations and audits
• Reporting suspicious activity as required by anti-money laundering laws
• Protection of our rights, property, or safety

6.1 General Rights

• Access: Request a copy of personal information we maintain about you
• Correction: Update inaccurate or incomplete information through your profile dashboard
• Deletion: Request deletion of personal information, subject to legal retention requirements
• Portability: Request your data in a machine-readable format

6.2 State-Specific Rights

Residents of certain states have additional rights:

• California (CCPA/CPRA): Right to know, delete, correct, and opt-out of sale/sharing of personal information. Right to limit use of sensitive personal information.
• Virginia (VCDPA): Right to access, correct, delete, obtain a copy, and opt-out of targeted advertising and sale of personal data.
• Colorado (CPA): Right to access, correct, delete, and opt-out of targeted advertising, sale, and profiling.
• Connecticut, Utah, and other states: Similar rights as provided under applicable state privacy laws.

6.3 Exercising Your Rights

To exercise your privacy rights, contact us at privacy@getgoldvault.com. We will respond within the timeframe required by applicable law (typically 30-45 days). We may need to verify your identity before processing requests.