Privacy Policy

1. Who We Are

This Privacy Policy explains how Arcanex collects and uses personal information when you visit the arcanex.io website (the "Site") or redeem an Arcanex gift card through the redemption portal at claim.arcanex.io (the "Portal"). We are committed to protecting your privacy. Questions or requests can be sent to help@arcanex.io.

2. Information We Collect

• Wallet address and network you choose to receive your payout.
• The public barcode identifier of the Card you are redeeming.
• The transaction hash of your completed payout.
• Your IP address, which we use for fraud prevention and security monitoring.
• Limited technical logs (for example, timestamps and device/browser metadata) needed to operate the Site and the Portal.
• For business partners and administrators, account, organisation and store information used to manage Cards.

3. How We Use Your Information

• To process your redemption and deliver your payout.
• To prevent fraud, abuse and double-spending, and to investigate suspicious activity.
• To maintain a financial ledger and audit records as required for the integrity of the service.
• To comply with legal and regulatory obligations.
• We do not use your information for marketing, and we never sell your personal data.

4. PIN Security

Your PIN is hashed with an industry-standard key-derivation function combined with a secret pepper. Plaintext PINs are never stored on our servers and are never transmitted over the network. A Card locks automatically after three failed PIN attempts.

5. On-Chain Public Information

Redemptions are settled on public blockchain networks such as TRON, Solana and BSC. The wallet address receiving the payout and the transaction itself are publicly visible on the respective block explorer. This is an inherent property of public blockchains and is not under our control.

6. Sharing of Information

• With service providers that help us operate the Site and the Portal, such as hosting and blockchain infrastructure providers.
• With regulators, law enforcement or other authorities where required by law or in good faith to protect rights and safety.
• Your information is never sold to third parties for marketing purposes.

7. Retention

We retain financial records, card-state audit history and fraud-event records for as long as necessary to fulfil the purposes described in this policy and to comply with applicable legal, accounting and anti-fraud requirements.

8. Security

• All traffic to the Site and the Portal is encrypted in transit (TLS).
• Access to our systems is restricted and protected by strong authentication.
• Rate limiting and account lockouts are used to protect against brute-force and abuse.
• Secrets and credentials are stored using strong hashing and encryption.

9. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete or restrict the processing of your personal data, and to object to processing. To exercise these rights, contact us at help@arcanex.io. We will respond within the timeframe required by applicable law.

10. Cookies & Local Storage

The Site uses only the minimal local storage required for the redemption flow to function. We do not use advertising trackers.

11. Children

The Site and the Portal are not directed at individuals under the age of 16, and we do not knowingly collect personal information from children.

12. Changes to this Policy

We may update this Privacy Policy from time to time. Updated versions will be posted on this page with a new "Last updated" date.

13. Contact

For any privacy-related questions or requests, contact us at help@arcanex.io.