Privacy Policy

Time Towins ("Company", "we", or "our") takes our commitment to protecting user privacy seriously. This Privacy Policy explains what data we collect when you use our platform, how we use that data, and what rights you have.

We may collect the following personal data:

• Account Information: Full name, email address, password (stored encrypted).
• Authentication: When signing in via Google OAuth, your name, email, and profile photo from your Google profile.
• Financial Information: Bank IBAN or crypto wallet address for withdrawal requests.
• Usage Data: Point history, game progress, task completion records, login dates.
• Technical Data: IP address hash, device fingerprint (anonymized value derived from browser, screen resolution, language, and timezone), referral code.

We use the data we collect for the following purposes:

• Creating and managing your account.
• Processing the point system and profit share calculations.
• Processing withdrawal requests.
• Operating the referral system.
• Preventing fraudulent activity and multiple account creation.
• Maintaining platform security.
• Sending notifications and announcements (based on your preferences).
• Fulfilling legal obligations.

We do not sell your personal data to third parties. Limited sharing may occur in the following cases:

• Infrastructure providers: Firebase/Google Cloud for data storage and authentication services.
• Legal requirements: Upon written request from a competent court or public authority.
• Business transfer: In the event of a merger or acquisition, provided the new owner continues this policy.

The platform may use cookies and browser local storage for:

• Session continuity (Firebase Authentication tokens).
• Remembering your language preference.
• Tracking notification permission state.
• Offline data caching (Firestore persistence).

No advertising tracking or third-party analytics cookies are used.

We apply industry-standard measures to protect your data:

• All communications are protected by HTTPS/TLS encryption.
• Passwords are hashed and stored by Firebase Authentication.
• Unauthorized access is prevented through Firestore security rules.
• IP addresses are not stored in full; only anonymized hash values are retained.

Under GDPR and applicable data protection laws, you have the following rights:

• Right of access: You may request access to the data we hold about you.
• Right to rectification: You may request correction of inaccurate data.
• Right to erasure: You may request deletion of your account and all associated data. → Submit a Data Deletion Request
• Right to object: You may object to the processing of your data for certain purposes.
• Right to portability: You may request your data in a machine-readable format.

To exercise these rights, please create a support ticket on the platform.

You can submit a formal data deletion request through our dedicated page. Once submitted, your account will be flagged and all personal data will be permanently deleted within 30 days.

Note: Withdrawal records may be retained for up to 7 years in anonymized form to meet legal and financial compliance requirements.

The platform is not intended for individuals under the age of 18. If we become aware that we have collected data from a child, we will delete it immediately. If you identify an account belonging to a minor, please contact our support team.

We may update this policy from time to time. Significant changes will be communicated via a platform notification. You can always find the current policy on this page. Continuing to use the platform after changes are published means you accept the new policy.

For privacy-related questions: