Privacy Policy

Donutwin.com ("Donutwin", "we", "us") operates an arcade-style website for the DonutSMP Minecraft community. This policy explains what personal data we collect when you use the Service, why we collect it, who it is shared with, and what you can ask us to do with it.

If you have questions about this policy or want to exercise any of the rights described below, open a ticket in our Discord server.

Account details: an email address and a username. If you sign in with Discord, we receive your Discord user ID, username, avatar and email address from Discord under the permissions you approve at sign-in.

Minecraft identity: your in-game username, and the account link established when you verify it. We need this because in-game payments are addressed to a Minecraft username — without it we cannot credit a deposit or send a withdrawal to the right player.

Support content: anything you write in a support or media ticket, including screenshots and links you choose to attach.

IP address. We record the IP a request came from and use it for security, fraud prevention, and to enforce limits that would otherwise be trivially defeated — for example, allowing one rain entry per IP per round, and enforcing bans.

Device and browser information, including a device fingerprint, used to detect account sharing and automated abuse.

Activity data: your bets, game outcomes, balance changes, deposits, withdrawals, tips and rewards. This is the record of your account and we keep it as long as the account exists.

Cookies and similar storage strictly necessary to keep you signed in and to protect against cross-site request forgery. We do not use advertising cookies, and we do not sell data to advertisers.

We do not ask for or store real-world payment card numbers, bank details, or government identification. All balances on Donutwin are in-game currency.

We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, contact us and we will remove it.

To run your account, credit deposits, process withdrawals, and show your game history.

To prevent fraud and abuse, including multi-accounting, bonus farming, and automated play. Some limits — such as per-IP rain entry and daily tipping caps — exist only for this reason.

To respond when you contact support.

To meet legal obligations and to enforce our Terms of Service.

Service providers who run the platform on our behalf: our hosting and database providers, and our transactional email provider. They process data only to deliver the service to us.

Discord, when you choose to sign in with Discord or link your account, under Discord's own privacy policy.

We do not sell your personal data, and we do not share it with advertisers.

We may disclose information where we are legally required to, or where it is necessary to investigate fraud or protect the rights and safety of our users.

Some activity is visible to other players by design. Your username can appear in public feeds such as Live Plays, recent drops, chat and leaderboards, along with the game played and the amounts involved.

You can turn this off. In Settings, enabling “Hide my username” replaces your name with “Hidden” in those feeds. Your level is hidden along with it, because a level is derived from wagering and would otherwise reveal the volume the setting exists to protect.

Chat messages you send are public to everyone in the chat and are retained in the message history.

Account and transaction records are kept for as long as your account exists, and afterwards where we need them for fraud prevention, dispute resolution, or legal obligations.

Support tickets and their transcripts are retained so that decisions — particularly about payments — remain auditable after the ticket is closed.

Access to the production database is restricted, and sensitive operations run through controlled server-side functions rather than being exposed to the browser. Staff access to administrative tools requires two-factor authentication.

No system is perfectly secure. Use a unique password, keep your Discord account secure, and tell us immediately if you believe your account has been accessed by someone else.

You can ask us for a copy of the personal data we hold about you, ask us to correct it if it is wrong, or ask us to delete your account and associated data.

Deletion has limits: we may retain records we are required to keep, and we may keep a minimal record of a banned account so the ban cannot be evaded by re-registering.

Depending on where you live, you may have additional rights under local data protection law, including the right to object to certain processing or to complain to your local supervisory authority.

Our infrastructure is hosted in the United States. If you use the Service from elsewhere, your data will be transferred to and processed there.

We may update this policy. When we do, the Last Updated date above changes. Continuing to use the Service after a change means you accept the updated policy.