PRIVACY POLICY
Privacy Policy
Effective: TBD at launch · v1 draft May 12, 2026
Quick read: We collect what we need to verify you're a real adult in an eligible state, process your payments, and run tournaments. We don't sell your data. We use cookies and analytics to make the site work. KYC info goes to our verification vendor only. You can request deletion anytime.
1. Information we collect
When you sign up: username, email, date of birth, password (hashed), state of residence.
When you verify (KYC, before first withdrawal): full legal name, residential address, Social Security Number (last 4 by default, full on request from regulators), government-issued photo ID.
When you play: tournament entries, picks, results, wallet balance, deposit/withdrawal records.
When you use the site: IP address, browser type, device info, pages visited, referral source, cookies.
2. How we use it
- To verify eligibility (age, residency, identity)
- To run tournaments and pay prizes
- To detect and prevent fraud and multi-accounting
- To comply with tax reporting law (1099 issuance)
- To send service emails (tournament results, payouts, account changes)
- To send marketing emails (with opt-out at any time)
- To improve the product
3. Who sees your data
- KYC vendor (Persona, Jumio, or similar) — only the data needed to verify identity
- Payment processors (Stripe and ACH partner) — payment details
- Cloud hosting (AWS or similar) — all platform data, encrypted at rest
- Analytics (Plausible or self-hosted analytics) — anonymized usage data
- Regulators and tax authorities — only when legally required
We do not sell your data to advertisers or third parties.
4. Cookies
We use first-party cookies for: authentication (keeping you logged in), preferences (filters, theme), and basic analytics. We do not use third-party advertising trackers. You can disable cookies in your browser; some functionality (login, tournaments) will not work without them.
5. Security
Passwords are hashed with bcrypt. Sensitive data is encrypted at rest and in transit (TLS 1.2+). KYC documents are stored only by our verification vendor, never on Trend Champs servers in the long term. We undergo annual security review.
6. Your rights
- Access: request a copy of the data we hold on you
- Correction: ask us to fix incorrect data
- Deletion: request account deletion (after settling any pending balance)
- Marketing opt-out: unsubscribe link in every marketing email
- California residents (CCPA): additional rights under California law — see below
7. Data retention
Account data: retained while your account is active and for 7 years after closure (tax/AML requirements). Marketing data: deleted within 30 days of opt-out. KYC documents: retained per vendor and AML regulation, typically 5–7 years after closure.
8. Children
Trend Champs is not for anyone under 18 (or 21 in some states). We do not knowingly collect data from minors. If you believe a minor has signed up, email privacy@trendchamps.com immediately.
9. California (CCPA) and other state-specific rights
If you reside in California, you have the right to know what personal information we collect, request deletion, opt out of any future "sales" of personal information (we don't sell), and not be discriminated against for exercising these rights. To exercise: email privacy@trendchamps.com. Residents of other states with similar laws (Virginia, Colorado, Connecticut, Utah, etc.) have similar rights.
10. Changes
Material changes communicated via email and posted notice 14 days before they take effect.
11. Contact
Privacy questions: privacy@trendchamps.com · EIYH LLC, St. Petersburg, Florida