Privacy Policy

1. Our commitment

Your trust is the foundation of Storm.us. This policy explains what information we collect, why we collect it, and the choices you have.

We collect what we need to run a secure, compliant sweepstakes platform - and nothing more. We never sell your personal information. We protect it with bank-grade security and share it only with the partners and regulators necessary to operate Storm.us and meet our legal obligations.

2. Information we collect

Account and contact information: your name, email address, date of birth, and state of residence when you register.

Identity-verification data (KYC): a government-issued photo ID and any additional information required to verify you are 21 or over and in an eligible US state. This is collected before your first Sweeps Coin redemption and is required by law.

Payment information: billing address and payment method details entered when you purchase Gold Coin packs. Full card numbers are processed directly by our PCI-compliant payment providers - Storm.us does not store them.

Device and play activity: IP address, browser/device identifiers, gameplay events, coin balances, transaction history, and session metadata. This data is used to operate the platform securely, detect fraud, enforce eligibility restrictions, and maintain the audit log required by the sweepstakes promotion.

Communications: messages you send to Support, feedback, and any other direct communications with Storm.us.

3. How we use your information

To operate Storm.us: process your account, credit coins, run games, process purchases, and handle redemptions.

To comply with law: identity verification (KYC), anti-money-laundering (AML) screening, and maintenance of the audit log required for sweepstakes operations in eligible US states.

To keep Storm.us safe: fraud detection, abuse prevention, and account security. We may use automated systems to flag unusual activity, subject to human review.

To communicate with you: transactional emails (account confirmation, redemption updates, password reset), promotional communications (with your consent, which you may withdraw at any time), and service announcements.

To improve Storm.us: aggregate, de-identified analytics to understand how the product is used and where it can be better. We do not share individual-level behavioral data with third parties for advertising.

4. Who we share your data with

We share your information only as necessary:

Payment processors: to handle Gold Coin purchase transactions securely.

Identity-verification providers: to confirm age, identity, and state eligibility before redemptions, as required by law.

Fraud and compliance vendors: to detect and prevent fraud, money laundering, and abuse.

Infrastructure providers: cloud hosting, database, and content-delivery services that operate Storm.us's technical infrastructure.

Legal and regulatory bodies: where required by law, court order, or to protect the rights and safety of Storm.us, its players, or the public.

We do not sell your personal information. We do not share it with advertisers or data brokers.

5. Data retention

We retain your account information for as long as your account is active. Transaction and audit records are retained for a minimum of five years as required by applicable law. Identity-verification data is retained for the legally mandated period.

If you close your account, we will delete or anonymize personal information that is no longer legally required to be retained, within a reasonable period.

6. Your rights and choices

Depending on your state of residence, you may have the right to:

Access your personal information - request a copy of the data we hold about you. Correct inaccurate data - update your account details at any time in Account, Settings. Delete your account - request deletion of your account and associated personal data (subject to legal retention obligations). Opt out of promotional communications - unsubscribe at any time via the link in any marketing email, or in Account, Settings.

To exercise any of these rights, contact us at privacy@storm.us or through the Support page. We will respond within the timeframe required by applicable law (typically 30 to 45 days).

7. Security

Storm.us uses industry-standard security practices: encrypted data in transit (TLS), encrypted data at rest, strict access controls, multi-factor authentication for staff, and regular security audits. Our money path runs on a double-entry ledger with an immutable audit trail - every transaction is logged and cannot be altered.

No system is perfectly secure. If you believe your account has been compromised, contact Support immediately. Storm.us will never ask for your password. We will never ask you to pay a fee to receive a prize.

8. Cookies and tracking

Storm.us uses cookies and similar technologies to keep you signed in, remember your preferences, and detect fraud. We do not use third-party advertising cookies.

You can control cookies through your browser settings. Disabling session cookies will prevent you from signing in. Analytics cookies can be disabled without affecting core functionality.

9. Children's privacy

Storm.us is strictly for adults aged 21 and over. We do not knowingly collect personal information from anyone under 21. If we learn that a minor has created an account, we will close it and delete associated data immediately. If you believe a minor is using Storm.us, contact us at privacy@storm.us.

10. Changes to this policy

We may update this Privacy Policy. Material changes will be communicated with at least 14 days' notice via email or in-app notification. The effective date at the top of this page reflects the most recent version.

11. Contact

Privacy questions or requests: privacy@storm.us. Postal inquiries: [Storm.us Legal, address to be published before launch]. For general support: the Support page. For responsible gaming support: the Responsible Gaming page or 1-800-GAMBLER.