The fine print
Privacy Policy
This Privacy Policy explains how Havoc Win ("havocwin.com", "we", "us" or "our") collects, uses, stores and shares personal information when you use havocwin.com, create an Account, play games, make transactions, contact support or connect an external account such as Google or Kick. It also explains your choices and rights. By using the Platform, you acknowledge the practices described here.
1. Who controls your information
Havoc Win, St Lucia, is responsible for the personal information described in this policy. Privacy questions and requests can be sent to [email protected].
2. Information we collect
Depending on how you use the Platform, we collect:
- account information, including your username, optional public profile picture, email address, password verifier, account preferences and verification status;
- Google or Kick account information, as described in Section 3;
- game and account activity, including wagers, results, balances, bonuses, loyalty activity, affiliate attribution, chat messages and support communications;
- transaction information, including deposits, withdrawals, supported blockchain addresses, transaction references and related compliance records;
- identity, age, location, source-of-funds and wallet-ownership information when required for KYC, AML, sanctions or responsible-gambling checks; and
- technical and security information, including IP address, approximate country, a pseudonymous first-party browser installation identifier, a hash of coarse browser and device characteristics, session records, timestamps, security events and referral data.
We receive information directly from you, from your use of the Platform, from public blockchains, and from service providers used for identity, fraud, payment, game and compliance operations.
3. External account sign in and connections
If you choose Continue with Google, Google authenticates you and provides us with your verified email address and a stable identifier for your Google Account. We use these only to create or identify your Havoc Win Account, prevent account duplication and fraud, and let you sign in securely.
We request only the OpenID Connect openid and email permissions. We do not receive your Google password and do not request access to your contacts, Google Drive, Gmail, calendar, photos or other Google product data. We do not use Google user data for advertising, credit or lending decisions, sale to data brokers, or training general-purpose artificial-intelligence models.
Google processes information under its own privacy policy when it authenticates you. You can remove Havoc Win access from your Google Account settings, but doing so does not automatically delete the Havoc Win Account or records we are required to retain. Contact us to request deletion as described in Section 9.
If you choose Continue with Kick or connect Kick in Settings, Kick authenticates you and provides a stable Kick user identifier plus available profile information such as your username, email address and profile picture. We use this information to create or identify your Havoc Win Account, secure the connection and, where Kick makes relevant interaction data available, join your consenting Kick activity to campaign and account outcomes. We do not receive your Kick password, identify passive viewers, or store the short-lived Kick access token used for this identity lookup.
4. How we use information
We use personal information to:
- create, authenticate, secure and support your Account;
- operate games, settle wagers, maintain balances and process deposits and withdrawals;
- provide promotions, loyalty and affiliate features and communicate service messages;
- verify eligibility, age and location and apply responsible-gambling controls;
- measure estimated unique reach and detect and investigate fraud, affiliate abuse, account clusters, money laundering, sanctions exposure, security incidents and breaches of our Terms;
- comply with legal, regulatory, licensing, tax, accounting and dispute-resolution obligations; and
- measure reliability, diagnose faults and improve the safety and operation of the Platform.
5. When we share information
We do not sell personal information. We share only what is reasonably necessary with service providers that help us operate the Platform, such as Google and Kick for authentication and providers of hosting, game aggregation, email, analytics, customer support, identity verification, fraud prevention, blockchain infrastructure and transaction processing. These providers process information under their own terms or our instructions, depending on their role.
We may also disclose information to regulators, licensing bodies, law-enforcement agencies, courts, professional advisers, financial or blockchain counterparties, or another operator in a merger, financing, reorganisation or sale, where necessary to comply with law, protect users or the Platform, investigate wrongdoing, establish legal claims or complete the transaction.
6. Cookies and session storage
We use strictly necessary first-party cookies and browser storage to keep you signed in, protect OAuth and other security flows, maintain balances and gameplay, remember language and accessibility choices, prevent abuse, and provide features you request. These technologies are required for the Platform to work and do not depend on optional consent. Authentication and OAuth cookies are marked HttpOnly where appropriate and are not available to page scripts.
We also use first-party analytics storage to understand visits, reliability and product use, and a 30-day referral cookie to credit the creator or partner whose link brought you to Havoc Win. Acceptance of these technologies is required to continue into the Platform. We do not use these cookies for cross-site advertising and we do not sell the resulting information.
For account security and abuse prevention, we may create a random browser-installation identifier and a hash of coarse browser and device characteristics when you register or sign in. The same pseudonymous signals may be used to estimate unique reach and understand returning use. We further pseudonymise device observations before database storage and retain them only for a limited period.
Your acceptance is stored for up to six months so we do not ask on every visit. Clearing the consent cookie will cause the acceptance gate to appear again on your next visit.
7. Security
We use technical and organisational safeguards appropriate to the nature of the information, including encrypted transport, access controls, password hashing, short-lived and single-use OAuth attempts, browser-bound OAuth state, and restricted administrative access. No internet service is completely secure, so we cannot guarantee absolute security. Contact us immediately if you believe your Account has been compromised.
8. Retention
We retain personal information only for as long as needed for the purposes in this policy. Account, transaction, wagering, compliance, self-exclusion, security and dispute records may be retained after account closure where required by gaming, AML, tax, accounting or other law, or to prevent fraud and enforce legal rights. OAuth attempts expire after a short period; authentication and security records are retained only as needed to protect the Platform. When information is no longer required, we delete or de-identify it where reasonably practicable.
9. Your choices and rights
You may ask to access, correct or delete your personal information, object to or restrict certain processing, or receive a portable copy where applicable. You may also withdraw consent where processing is based on consent. Send requests to [email protected]. We may need to verify your identity and may retain information where law, licensing, fraud prevention, responsible-gambling obligations or legal claims require it.
The Platform requires acceptance of the cookies and browser storage described in Section 6. If you do not accept them, do not continue into or use the Platform.
A profile picture is optional and public anywhere your username appears. You can replace or remove it from Settings at any time; removing it immediately detaches it from your public profile and schedules the stored image for deletion.
You can stop using Google login by removing Havoc Win from your Google Account permissions. If your Havoc Win Account was created with Google and you want to keep access, set a password through the password-reset flow before removing access. You can ask support to remove a connected Kick identity from your Havoc Win Account.
10. International processing and children
The Platform and its service providers may process information in countries other than your own. Where required, we use appropriate safeguards for international transfers. The Platform is for adults aged 18 or older, or the higher legal gambling age in their location. We do not knowingly permit children to create Accounts and will close an underage Account when identified.
11. Changes and contact
We may update this policy as the Platform, law or our providers change. The date at the top shows the latest revision. Material changes will be communicated where required. Questions, complaints and privacy requests can be sent to [email protected].