Privacy Policy

Last updated 12 October 2026

This policy explains what personal data CherryBet (https://cherrybet.us) collects, why, how long we keep it, and the rights you have. CherryBet is run by the CherryBet team (the "data controller"). Contact us any time at cherrybet@cherrybet.us.

1. What we collect

Account details: your username, email address and a hashed password (we never store the password itself). At sign-up we check your date of birth to confirm you're 18 or over; we only keep the fact that you confirmed it, not the date.
Profile: the picture you choose or upload, and your preferences (language, display currency, leaderboard visibility, price ticker).
Game activity: every bet, result, payout and play-money transaction, with the provably-fair seeds used, so results can be checked and your stats, rank and VIP level worked out.
Sign-in sessions: for each device you sign in on, its IP address, browser and device type, how you signed in, and when it was last active. You can see and end these in Settings → Security.
Social sign-in: if you use Google, Discord, Twitch or Facebook, that service's account ID for you, plus the email address and display name it shares. We don't receive your password for those services.
Discord: if you link Discord, your Discord user ID. Our Discord bot uses it to give you server roles for your rank and status, and to answer commands like /balance.
Chat: messages you post in live chat.
Affiliates: if you signed up through someone's referral link, who referred you. We count visits to referral links, and compare internet addresses at sign-up to stop people referring themselves.
Verification (demo): only the country you select. No identity documents are collected.
Moderation: mutes, bans and balance adjustments made by staff on your account, with the reason.

2. Why we use it (and our legal basis)

To run your account and the games — necessary to provide the service you signed up for (contract).
To keep accounts secure and the site fair — sign-in sessions, security emails, rate limits, preventing multiple accounts and self-referrals (legitimate interests).
To send you emails you need — verification, password resets and security alerts. We don't send marketing emails.
To meet legal obligations — for example the 18+ age requirement.

3. What other players can see

Your username, profile picture, rank, badges, chat messages and bets (game, stake, result) are visible to other players — in live chat, the live bets feed, leaderboards, your public profile, and the shareable page each finished bet has. You can hide yourself from leaderboards and bet pages in Settings → Preferences. Your email address, balances and sign-in history are never shown to other players.

4. Who we share it with

Hosting: the site and its database run on a cloud server we rent.
Email: account emails are sent through Google Workspace.
Sign-in providers: if you use Google, Discord, Twitch or Facebook to sign in, you're sent to them to approve it, and their privacy policies apply there.
Discord: if you link your account, the bot shares your public profile in our Discord server when asked.
Prices: crypto prices are fetched by our server from CoinGecko; your browser doesn't contact them and no personal data is sent.

We don't sell your data or use it for advertising. Some of these providers may process data outside the UK, under their own safeguards.

5. Cookies and local storage

token — keeps you signed in (7 days).
oauth_state, oauth_signup — used for a few minutes during social sign-in.
cb_ref — remembers a referral link you opened, for 30 days, so the referrer gets credit if you sign up.
cb_lang and local storage — your language, cookie-banner choice and small display preferences.

We don't use advertising or analytics cookies.

6. How long we keep it

Account and game data: for as long as your account exists.
Sign-in session records: until the session ends, then up to 90 days.
Database backups: up to 14 days.
If you delete your account, your personal details are removed straight away. Your bets stay in the records without your name, because they're part of the provably-fair history other players rely on.

7. Your rights

You can ask to see, correct, export or delete your data, or object to how we use it. You can do most of this yourself:

Download your data: Settings → Security → Your data.
Delete your account: Settings → Security → Delete account.
Disconnect Google, Discord, Twitch or Facebook: Settings → Security → Connected accounts.

For anything else, email cherrybet@cherrybet.us. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ico.org.uk) or your local data protection authority.

8. Deleting data from a social sign-in

To remove the data we received from Google, Discord, Twitch or Facebook, either disconnect that service in Settings → Security → Connected accounts, or delete your CherryBet account in Settings → Security. If you can't sign in, email cherrybet@cherrybet.us from the address on your account and we'll do it for you within 30 days.

9. Children

CherryBet is only for people aged 18 or over. If we learn an account belongs to someone younger, we close it and delete its personal data.

10. Changes

If we change this policy, we'll update the date at the top. If a change matters, we'll also tell you on the site.