Privacy Policy

01 Information we collect

We collect information you provide directly, information generated by your use of the Service, and information from third parties who help us operate Zilo.

Account information

• Contact details — email address, username, and password (stored using bcrypt hashing, never in plaintext).
• Google Sign-In — if you register via Google, we receive your name, email, and profile identifier from Google.

Gameplay & transaction data

• Bet history, wagers, payouts, and balances across all games (Mines, Blackjack, Hilo, Tower, Plinko, Roulette, Dice, Keno, Limbo, Wheel, Ball).
• Your custodial Solana deposit address and on-chain deposit/withdrawal transaction records.
• Challenge, achievement, VIP, referral, and daily-reward progress tied to your account.

Technical information

• IP address, device and browser type, and general session metadata used for security, rate limiting, and fraud prevention.
• Support conversations submitted through our support chat.

02 How we use information

• To create and maintain your account, process deposits, wagers, and withdrawals.
• To operate game logic fairly and securely, including provably-fair and server-authoritative outcome generation.
• To detect, prevent, and investigate fraud, abuse, or violations of our Terms.
• To send transactional emails (e.g. account verification, password resets, deposit confirmations) via our email provider.
• To provide customer support and respond to your inquiries.
• To operate rewards programs such as daily rewards, challenges, VIP tiers, and referrals.
• To comply with applicable law and enforce our Terms of Service.

03 Wallets & funds

Zilo generates a custodial Solana wallet for your account to facilitate deposits and withdrawals. Private key material associated with custodial wallets is encrypted at rest using AES-256-CBC before storage.

04 Cookies & tracking

We use session cookies and local storage to keep you signed in, remember interface preferences, and track which challenge or reward notifications you have already seen. We do not use third-party advertising trackers.

05 Third-party services

We share limited information with service providers who help us run Zilo. These providers are contractually restricted from using your information for any purpose other than providing services to us.

We do not sell your personal information to third parties.

06 Data security

• Passwords are hashed with bcrypt and never stored in plaintext.
• Custodial wallet keys are encrypted using AES-256-CBC.
• All bet and payout operations are processed atomically to prevent race conditions and balance manipulation.
• Security headers, rate limiting, and input sanitization are applied across the platform.
• Admin functionality is access-controlled and separated from client-exposed code.

No method of transmission or storage is 100% secure. While we work to protect your information, we cannot guarantee absolute security.

07 Data retention

We retain account and transaction information for as long as your account is active and as needed to comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account as described below, though certain records may be retained where required by law or legitimate business need (e.g. fraud prevention records, on-chain transaction history).

08 Your rights & choices

Depending on your location, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your account and associated personal data, subject to legal and operational limitations described above.
• Object to or restrict certain processing of your information.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, contact us using the details below.

09 Age restriction

Zilo is intended solely for users who are 18 years of age or older (or the legal age of majority in your jurisdiction, if higher). We do not knowingly collect information from minors. If we become aware that we have collected information from someone under the required age, we will take steps to delete it and close the associated account.

10 International transfers

Our infrastructure and service providers may process and store information in countries other than your own. By using Zilo, you consent to the transfer of your information to these locations, which may have data protection laws different from those in your jurisdiction.

11 Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top of this page. Continued use of Zilo after changes take effect constitutes acceptance of the revised policy.

12 Contact us