Privacy Policy

Last updated

6 November 2026

1. Who we are

Truehouse Gaming LLC, of Arthur L. Evelyn Building, Suite 6, Main Street, Charlestown, Nevis, West Indies, is the controller of the personal data processed through Truehouse (“we”, “us”). Contact for privacy questions and requests: support@truehouse.gg. We handle personal data in line with the data protection laws that apply to us, including the Data Protection Act 2018 of Saint Kitts and Nevis and, where it applies to you, the EU General Data Protection Regulation. We have not appointed a data protection officer; privacy questions are handled by our team at the address above.

2. What we collect

Account details: email address, date of birth, country, your chosen chat username, and any phone number you add for sign-in codes.

Security data: a hash of your password (never the password itself), two-factor settings, recovery codes (stored hashed), sign-in sessions with your device name, browser details and a shortened IP address, and security events.

Play and money data: deposits, withdrawals, the Bitcoin addresses and transaction IDs involved, balances, bets, game results, rewards, rakeback and bonus records, and safer-gambling settings (limits, breaks, self-exclusion).

Checks and reviews: the results of any age or identity check, documents you provide for one, and records of reviews by our compliance team, including anti-money-laundering alerts.

Communications: support tickets and complaints, chat messages and reports, and emails we send you.

Technical data: IP address, browser and device information, and server logs. We look up which country an IP address belongs to, on our own servers, using a database from DB-IP (db-ip.com); the address is not sent to DB-IP or anyone else.

Bitcoin transactions are public by design. Anyone can see transactions on the Bitcoin network, and we cannot remove them from it.

3. Why we use it

To provide the Service: open and secure your account, run games and settle bets, credit deposits, process withdrawals, pay rakeback and rewards, and provide support. (Performing our contract with you.)

To meet legal and licence obligations: keep the Service closed to countries our licence does not cover (from the country of your IP address and your registration), confirm age, prevent underage gambling, carry out identity and anti-money-laundering checks, apply self-exclusion and limits, keep records, and respond to authorities. (Legal obligation.)

To protect players and the Service: detect fraud, account takeover, promotion abuse and cheating, and keep our systems secure. (Our legitimate interests.)

To tell you about offers, only if you have agreed, and never while you are self-excluded or on a break. (Consent, which you can withdraw at any time.)

4. Automated decisions

Some decisions are made automatically by our systems: for example, a bet is refused if it would pass a limit you set or while a break or self-exclusion is active, and our anti-money-laundering monitoring flags certain activity. Flags are always reviewed by a person before any decision about your account is made. You can ask for any decision to be reviewed by a person.

5. Who we share it with

We share personal data only where needed, with: our hosting provider (Fly.io, servers in the Netherlands) and database provider; Microsoft 365, which sends our emails; professional advisers; and our licensing authority, law enforcement or other authorities where the law or our licence requires it.

Our provably fair records are timestamped using public OpenTimestamps servers; only cryptographic fingerprints are sent, never personal data.

We do not sell personal data. Where data is processed outside your country, we use appropriate safeguards: our hosting and email providers process it under contracts with data protection terms, including the European Commission’s standard contractual clauses where those apply.

6. How long we keep it

We keep personal data only as long as needed. Account, transaction, bet and compliance records are kept for 5 years after your account closes, as anti-money-laundering rules and our licence require. Support emails and tickets: 2 years after the conversation ends, or longer where they form part of a complaint or anti-money-laundering record. Server logs: up to 30 days. Self-exclusion records are kept for as long as needed to honour the exclusion.

7. Security

Passwords are stored as strong one-way hashes. Sensitive data such as two-factor secrets is encrypted. Staff access is limited to what each role needs, needs two-factor authentication, and is logged. Payouts need two members of staff. No system is perfectly secure, but we work hard to protect your data and will tell you, and the authorities where required, about a breach that affects you.

8. Your rights

Depending on the law that applies to you, you may have the right to: access your data; correct it; have it deleted; restrict or object to its use; receive it in a portable form; and withdraw consent. Some data must be kept for legal reasons even if you ask us to delete it, for example transaction and anti-money-laundering records. To make a request, email support@truehouse.gg. We may need to confirm your identity first. You may also complain to the data protection authority in the country where you live or work.

9. Children

Truehouse is only for adults aged 18 or over. We do not knowingly collect data from children. If you believe a child has opened an account, contact us and we will close it.

10. Changes

We may update this policy. We will publish the new version with its date and tell you about important changes.