Privacy Policy

ScalpArena ("we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect, how we use it, how we store and protect it, and your rights regarding your data.

This policy applies to all users of the ScalpArena platform, including our website at scalparena.com, mobile applications, APIs, and related services (collectively, the "Platform"). By using the Platform, you consent to the practices described in this policy.

We collect the following categories of information:

Account Information

• Email address (used for authentication, notifications, and account recovery)
• Display name (chosen by you, shown publicly on leaderboards and in matches)
• Password (stored only as a cryptographic hash, never in plaintext)
• Account creation date and login history

Transaction Data

• Deposit and withdrawal records (amounts, blockchain addresses, network, timestamps)
• Internal account balance and transaction history
• Wallet addresses generated for your account on each supported network

Trading Activity Data

• Match history (predictions submitted, outcomes, stakes, payouts)
• Experience points (XP), rank, and rank progression
• Achievement progress and unlocked achievements
• Referral activity and affiliate attribution
• Responsible trading settings (deposit limits, loss limits, session time limits)

Geolocation Data

• IP-based geolocation (country, region, city derived from your IP address)
• VPN and proxy classification data (used to detect anonymizing services)

Device & Technical Data

• IP address
• Browser type and version
• Device type and operating system
• Screen resolution and viewport dimensions
• Referring URL and pages visited
• WebSocket connection metadata (connection timestamps, reconnection events)

Cookies & Local Storage

• Authentication tokens (JWT)
• User preferences (sound settings, chart configurations, UI state)
• Session data and game state persistence
• Cookie consent preferences

We use the information we collect for the following purposes:

• Account management: Creating and maintaining your account, authenticating your identity, and processing account-related requests.
• Matchmaking and game operation: Facilitating prediction matches, processing match outcomes, calculating payouts, and managing XP and rank progression.
• Fraud prevention and security: Detecting and preventing multi-accounting, collusion, automated play, suspicious financial activity, and other prohibited conduct.
• Compliance: Meeting legal and regulatory obligations, including anti-money laundering (AML) requirements and responding to lawful requests from authorities.
• Platform improvement: Analyzing usage patterns, diagnosing technical issues, and improving the performance, reliability, and features of the Platform.
• Customer support: Responding to your inquiries, resolving disputes, and providing assistance with account or technical issues.
• Notification delivery: Sending you important updates about your account, match results, achievements, and platform changes via email, push notifications, and in-app notifications.
• Responsible trading: Enforcing deposit limits, loss limits, session time limits, and self-exclusion settings to support responsible use of the Platform.
• Geographic compliance verification: Using IP geolocation data to verify that users are accessing the Platform from permitted jurisdictions and to detect the use of VPNs or proxy services that may circumvent geographic restrictions.

Your data is stored on dedicated server infrastructure located in Iceland. We implement the following security measures to protect your information:

• Encryption at rest: All data stored in our databases, including personal information and financial records, is encrypted at rest using AES-256 encryption.
• Encryption in transit: All communications between your browser and our servers are encrypted using TLS 1.2 or higher. WebSocket connections are also encrypted.
• Password hashing: Passwords are hashed using bcrypt with a cost factor of 12 (meeting OWASP 2026 recommendations). We never store or have access to your plaintext password.
• Access controls: Internal access to user data is restricted to authorized personnel on a need-to-know basis, with role-based permissions and audit logging.
• Monitoring: We employ continuous monitoring, intrusion detection, and automated alerting to identify and respond to potential security incidents.
• Security audits: We conduct regular security assessments of our infrastructure and application code.

While we take extensive measures to protect your data, no system is completely secure. You are responsible for maintaining the confidentiality of your login credentials and for notifying us immediately of any suspected unauthorized access.

We use the following third-party services in the operation of the Platform:

• Blockchain networks: When you deposit or withdraw USDT, your transactions are processed on public blockchain networks (Polygon, Arbitrum, Tron, Solana, Ethereum). Blockchain transactions are publicly visible and permanent by nature. We do not control these networks.
• Cloudflare: We use Cloudflare for content delivery (CDN), DDoS protection, and CAPTCHA verification (Turnstile) during registration and password reset. Cloudflare may process your IP address and request metadata.
• FlokiNET (dedicated server hosting — Iceland): We use FlokiNET for dedicated server hosting, including database, caching, and other infrastructure services. Data is processed within Iceland.
• MaxMind (IP geolocation): We use MaxMind GeoIP services to determine your approximate geographic location based on your IP address and to classify VPN/proxy connections. MaxMind receives only your IP address for this purpose.

We do not sell, rent, or trade your personal information to any third party. We do not share your data with third parties for their marketing purposes.

We retain your information for the following periods:

• Account data: Retained for as long as your account remains active. If you close your account, we will delete your personal information within 30 days, subject to legal retention requirements.
• Transaction records: Retained for a minimum of 5 years after the transaction date, or longer if required by applicable financial regulations, anti-money laundering laws, or tax obligations.
• Trading activity data: Match history and dispute-related data are retained for a minimum of 90 days after the match date. Aggregated, anonymized trading statistics may be retained indefinitely.
• Technical logs: Server logs, error reports, and security audit logs are retained for up to 12 months, after which they are automatically purged.
• Communication records: Support correspondence and related records are retained for 2 years after the most recent interaction.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to correction: You may request that we correct any inaccurate or incomplete personal information. You can update your display name directly in your account settings.
• Right to deletion: You may request that we delete your personal data, subject to our legal obligations to retain certain records (such as financial transactions and fraud prevention data).
• Right to data portability: You may request an export of your personal data in a structured, commonly used, machine-readable format.
• Right to opt out: You may opt out of marketing communications at any time. You can manage your push notification preferences in your account settings.
• Right to restrict processing: In certain circumstances, you may request that we limit the processing of your personal data.

To exercise any of these rights, please contact us at info@scalparena.com. We will respond to your request within 30 days. We may ask you to verify your identity before processing your request.

Our primary infrastructure is located in Iceland. However, your data may be processed in other jurisdictions where our service providers operate, including for content delivery, email delivery, and security services.

When your data is transferred to jurisdictions outside your country of residence, we take steps to ensure that adequate protections are in place, including contractual safeguards with our service providers and compliance with applicable data transfer regulations.

The Platform is intended solely for users who are at least 18 years of age or the age of legal majority in their jurisdiction (whichever is higher). We do not knowingly collect, solicit, or maintain personal information from anyone under the age of 18.

If we become aware that we have collected personal information from a minor, we will take prompt steps to delete that information and terminate the associated account. If you believe a minor has provided us with personal information, please contact us immediately at info@scalparena.com.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The "Last updated" date at the top of this page indicates when the policy was last revised.

For material changes that significantly affect how we collect, use, or share your personal information, we will make reasonable efforts to notify you via email or through a prominent notice on the Platform at least 14 days before the changes take effect.

Your continued use of the Platform after changes are posted constitutes your acceptance of the revised policy. We encourage you to review this page periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

info@scalparena.com