Privacy Policy

Revinity is an affiliate and rewards platform for online casino offers — we help you find and access third-party casino operators, and we run a wallet, reward and referral programme of our own on top of that. This policy explains what personal data we collect when you use Revinity, why we collect it, who we share it with, and the choices and rights you have over it. It applies to this website and does not cover the separate privacy practices of the third-party operators you may visit through our links — see Affiliate Disclosure for how that relationship works.

1. Overview

We collect the smallest set of information we reasonably need to run your account, your wallet, our reward and referral programmes, and our affiliate business, and to keep the platform secure. Where we've built something specifically to avoid collecting or storing more than necessary — for example, deriving your country from your IP address instead of storing the address itself — we say so below, because it's a real design choice, not a general promise.

2. Information We Collect

2.1 Account and authentication information. When you create an account, we collect your email address. Your password is handled entirely by our authentication provider, Supabase Auth — we never see or store it in plain text. Signing in creates a session, maintained through a cookie set by our authentication provider; see Cookie Policy.

2.2 Profile and referral information. We assign your account a unique referral code, and if you signed up using someone else's referral link, we record that relationship. At signup, we also record an approximate country associated with your account, supplied to us by our infrastructure provider based on your connection at that moment — we never receive or store the underlying IP address for this purpose, only the resulting country.

2.3 Rewards, wallet and transaction information. If you claim a reward or earn referral credit, we keep a record of your wallet balance and every transaction that has moved money into or out of it — the amount, its type (for example a reward credit, a referral commission, or a withdrawal), its status, when it happened, and, where a member of our staff reviewed it, which staff member and when.

2.4 Withdrawal information. If you request a withdrawal, we collect the payout method and payout address you provide (currently Bitcoin, Litecoin, USDT or USDC), and keep a record of the request and how it was resolved.

2.5 Affiliate, click and conversion information. When you follow a link to a casino operator through Revinity, we record the click server-side — which affiliate link and casino it was, an approximate country and device/browser category (the country supplied to us the same way as above, and the device/browser category derived from your browser's user-agent string — not your IP address or full browser identifier), the referring page, any campaign parameters in the URL, and your account if you were signed in. If an operator later reports that the click resulted in a signup or another qualifying event, we record that report (a "conversion") and link it back to the original click using an internal click identifier — never your email or profile details, which we don't send to operators.

2.6 Security and fraud-prevention information. To protect accounts and the platform against abuse — for example, automated login attempts or scripted signups — we apply rate limits to sensitive actions. Where that protection needs to persist across requests, we don't store your IP address or email address directly: we derive a one-way, cryptographically keyed token from them instead, so the stored value can't practically be turned back into your IP address or email address. A separate, short-lived, in-memory counter (never written to our database) is used for high-volume, low-stakes traffic shaping, such as page-view and redirect throttling.

2.7 Support communications. If you email us, we keep whatever you send — your address and message — for as long as needed to handle your request and keep a record of it.

2.8 Technical information. Like any web service, our infrastructure providers process technical request data (such as your IP address and browser information) to deliver pages to you and to protect the service — see Third-Party Services and Data Sharing below.

3. How We Collect Information

Most of what we collect, you give us directly — signing up, claiming a reward, requesting a withdrawal, contacting support. The rest — click, conversion, and technical/security information — is generated automatically by using the site: clicking a casino link, loading a page, or an operator reporting a conversion back to us.

4. How We Use Information

• To create and maintain your account, wallet, and session.
• To operate the reward and referral programmes, including calculating and paying out credit.
• To process withdrawal requests and keep accurate financial records.
• To attribute clicks to the correct affiliate link and casino, and to reconcile operator conversion reports against them.
• To detect and prevent fraud, abuse, and unauthorized access.
• To respond to support requests.
• To show you offers and jurisdictional notices relevant to your approximate location.
• To meet legal and accounting obligations.

5. Legal Bases for Processing

Where GDPR or a similar law applies to our processing of your data, we rely on the following legal bases, depending on the activity:

• Performance of a contract — running your account, wallet, rewards, referrals, and withdrawals under our Terms of Service.
• Legitimate interests — operating our affiliate business (click and conversion tracking), keeping the platform secure (rate limiting and fraud prevention), and improving the service, balanced against your rights and interests.
• Legal obligation — keeping financial records and responding to lawful requests from regulators or authorities.
• Consent — for anything not covered above, such as non-essential cookies where applicable, or any optional communications feature we may introduce in future — see Cookie Policy.

6. Rewards, Wallets and Withdrawals

A reward claim starts out pending. Depending on the offer, it either confirms automatically once its waiting period has passed, or requires a decision from our staff. Either way, our staff can approve a pending claim early or reject it at any time before it is confirmed. A rejected claim never produces wallet credit or a referral commission; a confirmed claim, once confirmed, is treated as final under our current system. We keep the full history of these transitions — including which outcome occurred and, for a staff-driven decision, who made it — as part of your wallet's transaction record.

Withdrawal requests are reviewed before they're paid out, partly to confirm the request is genuine and partly as a routine fraud/security check. We keep the payout details you provide and the outcome of that review as part of the same transaction record.

7. Affiliate, Click and Conversion Tracking

Tracking a click and, later, reconciling it against an operator's conversion report is how we earn affiliate revenue and — where the offer is reward-eligible — how we know a reward claim qualifies. We do not place a tracking cookie in your browser for this; the click is logged server-side and referenced by an internal identifier appended to the link we send you to. We don't send your email address, profile, or any other account information to the operator as part of this — only the click identifier needed for them to report back accurately.

8. Referral Programme

If someone signs up using your referral link, and their account later earns confirmed reward credit, our system calculates a referral commission for you at the rate currently in effect — shown in-product at the time — and credits it to your wallet as pending until that underlying credit is itself confirmed. Signing up alone, without any qualifying activity, does not create a commission; a rejected or otherwise non-qualifying claim never does either. Our system also prevents the same qualifying event from ever generating more than one commission. The applicable rate is set by us and may change going forward.

9. Fraud Prevention and Security

We apply account- and IP-based rate limiting to login, signup, withdrawal, and reward-claim actions; we can suspend an account we reasonably believe is being used fraudulently, which blocks new reward claims and withdrawal requests from that account; and we enforce eligibility rules (such as which traffic types a given offer accepts) at the point a reward is claimed, not just in the interface. Where this processing involves your IP address or email address for rate-limiting purposes specifically, see 2.6 above for how we avoid storing them directly.

10. Cookies and Similar Technologies

We use a small number of first-party cookies — to keep you signed in, remember your theme preference, and record your cookie-consent choice — plus, if we ever add measurement tools, an optional analytics category you can accept or decline. None of this involves a third-party advertising or tracking cookie today. Full detail, including how to change your choice, is in our Cookie Policy.

11. Third-Party Services and Data Sharing

We share data with the following categories of service provider, each acting on our behalf and under its own terms — we do not sell your personal data to anyone:

• Supabase — our database, authentication, and file-storage provider. Most of what's described in this policy is stored with Supabase on our behalf.
• Cloudflare — our infrastructure and content-delivery provider, which processes technical request data (such as your IP address) as part of routing traffic to our service.
• Casino operators and their affiliate networks — receive the click identifier described in section 7 above when you're redirected to them, and may send conversion reports back to us. They do not receive your account or profile information from us.

We currently do not use a separate email-delivery provider, analytics tool, or payment processor beyond the above. If that changes, we'll update this section before any new provider goes live.

12. International Data Transfers

Our service providers may process data in a country other than the one you're in. Where applicable law requires a specific safeguard for that transfer, we aim to have one in place with the relevant provider; we are not able to confirm every provider's exact processing location in this policy, and will update it as that becomes definite.

13. Data Retention

We keep account, wallet, and transaction records for as long as your account is active and for as long afterward as we reasonably need them for accounting, fraud-prevention, or legal purposes. Click and conversion records are currently kept as part of our affiliate revenue records without a fixed deletion schedule. Security counters used for rate limiting are periodically cleared once they're no longer needed, through routine automated housekeeping rather than a fixed schedule. We are still finalizing more specific retention periods for some of the data described in this policy, and will update this section once they're set.

14. Data Security

We restrict access to your data using role-based permissions in our database, so that financial and account actions run only through server-side, staff-authorized code paths rather than being writable directly by a regular user session. We apply rate limiting to sensitive actions, require email verification before certain reward or referral activity counts, and can suspend an account we believe is compromised or being misused. No system is perfectly secure, and we don't claim ours is — we describe our actual controls here rather than a general assurance.

15. Your Privacy Rights

Depending on where you live, you may have the right to access the personal data we hold about you, correct it, request its deletion, restrict or object to certain processing, and receive a copy of it in a portable format. You may also have the right to lodge a complaint with your local data protection authority.

16. How to Exercise Your Rights

Contact us at support@revinity.net and tell us which right you'd like to exercise. We handle these requests individually rather than through an automated self-service tool today, so please give us enough detail (such as the email address on your account) to verify and act on your request.

17. Children

Revinity is intended for adults only. You must be at least 18 — or the legal age to use gambling-adjacent services in your jurisdiction, if higher — to create an account. We do not knowingly collect personal data from anyone below that age, and we'll delete an account we learn belongs to a minor.

18. Automated Decision-Making and Profiling

Two parts of the service make an automated decision without a person reviewing it first. First, a reward claim that isn't rejected or approved early by our staff will confirm on its own once its waiting period passes, provided the offer allows automatic confirmation — this automatic step only ever grants the reward as originally described; it never denies, reduces, or reverses a claim, and any rejection is always made by a person. Second, we may automatically limit which offers or pages you can see based on your approximate location, so that we don't market particular offers into a jurisdiction where doing so isn't appropriate. Neither process results in a legal or similarly significant decision about you beyond what's described here.

19. Changes to This Privacy Policy

We'll update the date at the top of this page whenever this policy changes, and where a change is material, we'll make that reasonably clear before it takes effect.

20. Contact Us

Questions about this policy or how we handle your data can be sent to support@revinity.net.