Who controls your dataThe Service operator controls the data and answers privacy requests through Support.
The operator of Betacoil is the controller of personal data processed through betacoil.com, play.betacoil.com, related account and support systems, and COIL Extraction Royale. Betacoil is the name of the website and service, and COIL is the shortened name of the game. “We,” “us,” and “our” mean the operator and controller of the Service.
Privacy and data-rights contact: [email protected]. Any additional controller identity, geographic address, representative, data-protection officer, or local contact required for Cash Arena in a location must be displayed before that regional offer is made. Cash Arena is not offered where required disclosures are absent.
Scope and current availabilityThis Notice follows your use of the site, account, game, Support, and enabled features.
This Notice applies when you visit the public site, create or use an account, play Training or Ranked, appear on the leaderboard, contact Support, or use any enabled verification or wallet feature.
Cash Arena is in a controlled rollout and is currently available only to some eligible accounts. The staged rollout is expected to reach 100% of otherwise eligible accounts in supported locations by 1 September 2026. This does not guarantee access to every registered account. Sections describing identity verification, deposits, withdrawals, escrow, or paid-match settlement apply when we check Cash eligibility or make a related feature available to you.
Data we collectAccount, device, gameplay, integrity, support, eligibility, and wallet records may apply.
- Account and profile: username, email, password hash, display name, account status, verification times, preferences, rating, season statistics, and legal-acceptance records.
- Session and device: session and device identifiers, IP address, user agent, approximate network region, sign-in activity, timestamps, and security events.
- Gameplay: mode, lobby and match identifiers, player inputs, state snapshots, placements, extraction and settlement values, eliminations, reconnect activity, replay/report artifacts, ratings, and network telemetry.
- Integrity and risk: protocol violations, anti-cheat and integrity signals, evidence hashes/signatures, review cases, fraud flags, sanctions, holds, appeal notes, and audit history.
- Support: ticket messages, category, status, attachments, account and match references, correspondence, and resolution notes.
- Cash eligibility and wallet: country, date of birth or age result, identity/KYC status and provider reference, sanctions/risk results, wallet addresses, Base transaction hashes, amounts, confirmations, internal balances, escrow, buy-ins, fees, payouts, refunds, voids, and withdrawals.
Where data comes fromData comes from you, your device, game systems, providers, and public blockchains.
- Directly from you when you register, configure a profile, play, submit verification information, connect a wallet, or contact Support.
- Automatically from your browser, device, network connection, and interaction with the game and account systems.
- From authoritative COIL servers, replay and integrity workers, support reviewers, and internal ledger records.
- When Cash eligibility or wallet features apply to you, from identity, sanctions, wallet-infrastructure, blockchain, fraud-prevention, and transaction-monitoring providers.
- From public blockchains, where wallet and transaction information is publicly accessible.
Why we use data and the legal basisEach operational purpose is tied to a contract, legal duty, interest, or consent.
| Purpose | Typical data | Legal basis where GDPR/UK GDPR applies |
|---|---|---|
| Create and secure an account; provide Training, Ranked, results, support, and requested features | Account, session, profile, gameplay, support | Performance of the Terms or steps you request before entering them |
| Operate authoritative matches, reconnect, ratings, reports, and leaderboards | Inputs, match state, results, display name, rating | Contract; legitimate interests in operating a consistent multiplayer service |
| Prevent abuse, cheating, account takeover, fraud, and service attacks | Device, network, security, gameplay, integrity, audit | Legitimate interests in security, fairness, fraud prevention, and legal claims; legal obligation where one actually applies |
| Handle Cash eligibility, KYC, sanctions, transactions, accounting, disputes, and withdrawals | Age/country, identity status, wallet, ledger, risk, support | Steps requested before a contract; contract; legal obligation where applicable; legitimate interests in financial security and claims |
| Diagnose incidents, measure reliability, balance the game, and improve the beta | Aggregated gameplay, device, error, and performance data | Legitimate interests in improving and protecting the Service |
| Optional marketing or non-essential tracking, if introduced | Only the data described at opt-in | Consent, withdrawable at any time |
What happens if you do not provide dataRequired data enables accounts and matches; optional features need their related data.
Username, email, password, age confirmation, and acceptance records are required to create a beta account. Session and gameplay data are required to authenticate you, run an authoritative multiplayer match, and return a result.
You may refuse optional data, but the related optional feature will not work. Where Cash Arena is available, refusing identity, age, physical-location, sanctions, security, or transaction checks means Cash entry or withdrawal will be unavailable. Completing a check does not guarantee eligibility.
Anti-cheat, risk signals, and automated decisionsLayered safeguards protect match integrity and significant decisions can receive review.
COIL protects fair play through authoritative server state, live validation of permitted inputs and protocol behaviour, deterministic replay comparisons, signed integrity evidence, rate limits, and layered fraud and account-risk signals. These safeguards can reject invalid messages, limit abusive traffic, disconnect clients that threaten match integrity, and preserve evidence for review. They may flag a match or account for review and, where evidence indicates a material risk, apply a proportionate temporary competitive restriction or settlement hold while the case is assessed.
Signals are assessed in context rather than treated as standalone proof. Ordinary latency, jitter, packet loss, reconnects, device type, strong performance, or match outcome alone are not treated as proof of cheating. Where an automated decision has a material legal or similarly significant effect, you may ask Support for human review, provide your position and relevant context, and contest the decision.
Public profiles, leaderboards, and blockchainsLeaderboard details and public blockchain records may be visible beyond the Service.
Display name, rank, visible SR, wins, and rated-match count may be published on the COIL leaderboard. Do not use a display name that reveals information you do not want public.
Base is a public blockchain. If wallet features are enabled, addresses, transaction hashes, token amounts, and timestamps can be visible to anyone and may remain available indefinitely. We cannot erase or alter information already recorded on a public blockchain. Do not put identity documents, contact details, or other sensitive personal data on-chain.
International transfersRequired transfer safeguards apply when providers process data in another country.
The Service and its providers may process data outside your country. Where law requires a transfer mechanism, we will use an adequacy decision, approved contractual clauses, or another lawful safeguard and will assess supplementary protections where appropriate. You may contact Support to ask about the safeguard relevant to your data.
How long data is keptRetention follows purpose, security, dispute, financial, and legal requirements.
We keep data only for as long as reasonably needed for the purpose, using these criteria:
- account and profile data for the account lifetime and a limited closure period needed for recovery, security, disputes, and legal claims;
- sessions and device/security records for their active period and a limited period needed to investigate abuse or account takeover;
- match reports, ratings, replay/integrity artifacts, and audit records for season operation, result review, fraud prevention, incident analysis, and dispute limitation periods;
- support records until the issue and any follow-up or claim period are resolved;
- KYC, sanctions, ledger, deposit, withdrawal, tax, and transaction records for the period required by applicable financial, accounting, anti-money-laundering, sanctions, tax, and limitation laws;
- public blockchain data may remain available independently and indefinitely.
Data may be deleted, anonymized, or retained longer when a legal hold, investigation, safety issue, active dispute, or enforceable legal duty requires it. We will not invent a fixed retention period where the applicable duty and operational schedule have not yet been approved.
SecurityTechnical and organisational safeguards protect accounts, gameplay, and evidence.
Betacoil uses measures designed for the type of data involved, including password hashing, HTTP-only session cookies, encrypted transport, access controls, separate service credentials, authoritative server state, signed integrity evidence, audit records, rate limits, and review workflows.
No online service can guarantee absolute security. Use a unique password, protect your email and device, enable two-factor authentication when available, and report suspected compromise promptly. Never send a private key or recovery phrase to Betacoil Support.
Your privacy rightsYour location may give you access, correction, deletion, objection, and appeal rights.
Depending on your location, you may have rights to access, correct, delete, restrict, or receive a portable copy of personal data; object to legitimate-interest processing; withdraw consent without affecting earlier lawful processing; contest certain automated decisions; and complain to a data-protection or consumer authority.
Send a request to [email protected] with the subject “Privacy request.” We may verify identity and will explain if an exception applies. You will not receive discriminatory treatment for making a valid request. You may use an authorized agent where local law allows, subject to authority and identity verification.
ChildrenThe beta is for adults aged 18 or older and is not directed to children.
Betacoil accounts for the COIL beta are for adults aged 18 or older. The Service is not directed to children, and we do not knowingly create accounts for anyone under 18. If you believe a minor has provided personal data, contact Support so the account and data can be reviewed.
Changes and contactMaterial changes receive notice; privacy questions and requests go to Support.
We may update this Notice when the Service, providers, law, or data practices change. The version and effective date appear at the top. Material changes will receive prominent notice and, where required, a fresh choice or acknowledgement. Material Cash Arena changes or regional expansion require a privacy review and updated just-in-time notices where applicable.
Questions, complaints, security reports, and rights requests: [email protected]. You may also use the signed-in Support ticket system so account, match, and wallet references remain attached to the case.