BitKong

Privacy Policy

Last updated: April 19, 2026

This Privacy Policy explains what personal data BitKong handles in connection with bitkong.com — a marketing and demo site, not a service. BitKong's data-handling duties under this notice extend only to that site.

1. Who we are and what this policy covers

BitKong is the brand behind the original Tower — the provably-fair Bitcoin climbing game, launched in 2015. We license the game and its provably-fair technology to third-party gaming operators. We are not a casino. We are not a payment processor. We are not an operator of gambling services.

This Privacy Policy covers only the limited data BitKong handles in connection with:

  • The bitkong.com website, including informational pages (story, learn, verify, integrate, terms, privacy).
  • The Tower demo on bitkong.com, which runs with no real money and no player accounts.
  • The waitlist form on bitkong.com.
  • Inbound email correspondence to hello@bitkong.com and related addresses.

BitKong is a data controller only for this limited set of bitkong.com site-contact data. BitKong is not a data controller for any operator platform, wallet system, KYC pipeline, payments system, dispute process, or regulatory record.

If you play Tower for real money or real-money-equivalent value on a third-party operator platform, this Privacy Policy does not apply to that play. The operator is the data controller for your account, wallet, KYC documents, play history, and any other personal data it collects about you. You should read the operator's privacy policy. BitKong does not intentionally access, and does not typically receive, operator-account data from any operator platform.

References to "BitKong", "we", "us", or "our" refer to the project and brand behind the Tower game and the provably-fair technology published on bitkong.com. References to "you" or "your" mean the individual visiting the site. BitKong does not operate a gambling service and is not a counterparty to any player on any operator platform. See our Terms of Service for the full scope of what BitKong is and is not.

2. Data BitKong handles on bitkong.com

BitKong tries to handle as little personal data as possible. The categories below are the complete list BitKong intends to process on bitkong.com.

2.1 Demo interaction data

When you play the Tower demo on bitkong.com, demo state is handled primarily client-side in your browser. Transient server-side processing may occur where required to render the page or produce per-round cryptographic commitments, but BitKong does not intentionally link demo play to your real-world identity and does not build a profile from demo data alone:

  • Client seed, server seed hash, and nonce per round (for provably-fair verification).
  • Game state (current row, multiplier, selected cells).
  • Session-scoped UI preferences (difficulty, sound).

No account, no email, no wallet address is required to play the demo.

2.2 Waitlist data

If you submit the waitlist form, BitKong stores:

  • Your email address (normalized to lowercase; stored keyed by a cryptographic hash so the same address cannot be registered twice).
  • Optional list of casinos where you would play.
  • The timestamp of submission.
  • The User-Agent, Referer, and originating IP of the request (for abuse prevention and audit).

BitKong intends to use this data primarily to:

  • Send one notification when Tower launches at an operator BitKong believes is relevant to you, or reply to a direct question from you.
  • Maintain waitlist integrity (for example, preventing duplicate signups).

BitKong does not intentionally sell, rent, or disclose waitlist data to advertisers, operators, or unrelated third parties, except as needed to host, secure, or transmit the data (see Sub-processors and third parties below), to comply with valid legal process, to protect rights and safety, or where non-excludable law otherwise requires.

2.3 Email correspondence

When you email BitKong (for example at hello@bitkong.com), BitKong receives the email content, your email address, and routing metadata that the mail transport provides. BitKong handles this for ordinary business, administrative, security, and legal purposes, including replying and keeping a record of the conversation.

2.4 Server logs

BitKong's hosting and edge providers log request metadata — IP address, request path, response code, user agent, timestamp — for standard security, abuse-prevention, and operational purposes. These logs are subject to the providers' retention settings and BitKong's security needs, and are not used to build user profiles.

2.5 Cookies and similar storage

As of the Last updated date above, bitkong.com uses only essential cookies and local storage required to render the site and remember session-scoped preferences. BitKong does not intend to add advertising cookies, cross-site tracking cookies, or third-party behavioral analytics to bitkong.com. If that posture changes, this section will be updated.

2.6 What BitKong does not collect on bitkong.com

To be explicit: on bitkong.com BitKong does not collect your real name, physical address, government-issued ID, date of birth, Bitcoin wallet address, payment information, financial account data, biometric data, or precise geolocation. BitKong does not run KYC on anyone. KYC is an operator function on operator platforms, not BitKong's.

3. Why BitKong handles this data

Depending on your jurisdiction, the legal bases BitKong relies on for handling bitkong.com data are:

  • Legitimate interest — running and securing the site, preventing abuse, and maintaining a waitlist that a user voluntarily joined.
  • Consent — when you voluntarily submit your email to the waitlist or send BitKong a message.
  • Legal obligation — where BitKong must retain specific data to comply with law.

Where consent is the basis, you can withdraw it by emailing hello@bitkong.com. Requests will be honored in relation to data BitKong actually holds on bitkong.com, subject to technical feasibility, backup rotation, legal retention, and fraud-prevention needs.

4. How long data is kept

  • Waitlist email and submission metadata: retained until the launch notification has been sent and for a reasonable audit period afterwards, then deleted. Earlier deletion is available on request, subject to technical feasibility, backups, and any legal-retention requirement.
  • Email correspondence: retained for as long as reasonably necessary to handle the conversation, plus a modest archival period for business, administrative, security, and legal purposes.
  • Server logs: subject to the hosting provider's default retention, then rotated out.
  • Demo state: not retained beyond your session unless you explicitly opt in.

5. Where data is stored

Data collected from bitkong.com is stored with infrastructure providers BitKong uses to host the site and its supporting services. Those providers may process data in the United States, the European Union, and other jurisdictions, depending on where their infrastructure is located. Where any applicable law requires cross-border transfer safeguards, transfers are addressed under the applicable provider terms and the legal mechanisms available at the time.

6. Sub-processors and third parties

To run bitkong.com BitKong uses a small number of independent service providers, including, by category:

  • Hosting and deployment (e.g., Vercel) for serving the site.
  • Object storage (e.g., Vercel Blob) for the waitlist store.
  • Domain and DNS providers.
  • Email delivery and inbox providers for hello@bitkong.com correspondence.

These providers process bitkong.com data under their own commercial terms, privacy notices, and applicable legal obligations. BitKong does not assume liability for the acts or omissions of any third-party provider beyond what non-excludable law requires, and this notice should not be read as imposing vicarious responsibility on BitKong for any such third party.

7. Your rights (in relation to bitkong.com data)

Depending on your jurisdiction, you may have some or all of the following rights over the limited personal data BitKong holds about you in connection with bitkong.com:

  • Access — ask what BitKong holds.
  • Rectification — ask BitKong to correct inaccurate data.
  • Erasure — ask BitKong to delete your data, subject to narrow exceptions (for example, where BitKong must keep it by law or for fraud prevention).
  • Restriction — ask BitKong to pause processing while a question is resolved.
  • Objection — object to processing that relies on legitimate interest.
  • Portability — receive a copy of data you provided, in a structured format.
  • Withdraw consent at any time for anything you consented to.

These rights apply only to data BitKong actually holds on bitkong.com. They do not apply to data held by any operator on an operator platform — for that, contact the operator directly.

To make a request, email hello@bitkong.com from the address the data is associated with. BitKong will review and respond within a reasonable period, and in any event within any period required by applicable law.

You also have the right to complain to your local data-protection regulator if you believe BitKong has mishandled bitkong.com data.

8. Children

bitkong.com is not directed at children. BitKong does not knowingly collect personal data from anyone under the age of majority in their jurisdiction. If you believe a child has submitted personal data, email hello@bitkong.com and BitKong will review and take appropriate action, including deletion where appropriate.

9. Security

BitKong seeks to use commercially reasonable technical and organisational safeguards for bitkong.com data, including encryption in transit (TLS), restricted storage access, deterministic blob naming so the raw email is not stored as the file name, and minimisation — BitKong simply does not collect most categories of data in the first place.

No system is perfectly secure, and this section is not a warranty of any particular level of security. If BitKong becomes aware of a personal-data breach affecting bitkong.com data and notification to you is required by applicable law, BitKong will do so as required.

10. If you play on an operator platform

When you play Tower or any other BitKong game for real money or real-money-equivalent value, you are doing so on an operator's platform under the operator's own terms and privacy policy. The operator, not BitKong, is the data controller for your account and play data on that platform.

If and to the extent BitKong ever receives pseudonymous gameplay event data from an operator (for example, in support of the provably-fair method), BitKong does so only as a processor / service provider acting on the operator's instructions, under a separate commercial agreement with the operator. Such data is intended to be minimized and not used to profile any identifiable player. BitKong is not intended to receive, and typically does not receive, operator-account identities, KYC documents, wallet data, or transaction history. Where a liquidity provider is used by an operator, BitKong does not intentionally disclose player-identifying data to the liquidity provider.

Questions about data held by an operator about you should be directed to that operator.

11. Updates to this notice

BitKong may update this Policy at any time by posting a revised version at this URL and updating the Last updated date. Please review this page periodically.

12. Contact

Questions, corrections, or data-rights requests? Email hello@bitkong.com.

If your request relates to a specific operator and your account on that platform, contact the operator directly. BitKong cannot access operator-held data on your behalf.