Privacy Policy
Effective: 2026-10-19 · The Korean version of this policy is authoritative; other languages are provided for convenience.
1. Information we collect
- Entered at sign-up: username, nickname, password (stored only as a hash, never in plain text), country, language, odds format, member type.
- Shown publicly: your nickname, your account country's flag (can be hidden in MY), and the analyses and comments you write with their settlement records and statistics appear on public pages. Your login username is not shown publicly; your analyst page address uses your member number.
- Verified at sign-up: either an email address or Telegram (required). Advertisers and analysts also enter a USDT withdrawal address (BSC, TRON) at sign-up. Optional input: the other method you did not choose at sign-up, a withdrawal address (needed for deposits, withdrawals and the advertising features).
- At verification: Telegram chat ID (needed for Telegram verification and to send verification codes), time of email verification.
- Recorded automatically: IP address, browser and device information, access time, session token (hashed), detected country. Page view records keep, instead of the IP, a visitor value (hashed) that changes every day and an on-screen check signal (a random value created for each page and a flag showing whether the browser actually displayed that page — used only to tell people from automated programs).
- Access judged to be from automated programs (bots): the IP address, browser information, country, requested address and reason for that access. IP addresses of access that looks human are not kept in this record.
- Telegram login approval requests: when you log in with Telegram, the requesting browser's IP address, country and browser information are recorded and shown in the Telegram approval message so you can check them.
- Payments and balance: your deposit address, amount, time and transaction hash of deposits and withdrawals, balance ledger, orders and purchases.
- Advertisers: uploaded creatives, bids and winning bids.
- Entered or generated while using the Site: alert settings (selected matches, bookmakers, thresholds) and site alert history, support messages.
- Operator notes: notes the operator keeps for member administration. They are not shown on public pages or to the member.
- We do not collect real names, postal addresses or phone numbers.
2. Purposes
- Account management and identity verification (verification codes and password reset links sent to your verified Telegram or email); login security (failed-attempt limits, session management). Email is used only for verification codes and password reset links; we do not send advertising or promotional email.
- Detecting and crediting USDT deposits, sending withdrawals, maintaining the balance ledger.
- Providing site alerts to registered members and running ad auctions and ad delivery.
- Country detection: ad targeting, time zone for dates and times, and blocking access from restricted countries.
- Responding to enquiries, preventing abuse, and meeting legal obligations.
3. Cookies and browser storage
- Essential cookies: login session (48 hours from your last visit, extended while you use the Site) and short-lived cookies used only during sign-up and login (10 minutes to 2 hours).
- Preference cookies: language, odds format, display mode (dark/light), browser time zone (for showing dates and times) and the bookmakers you turned off (excluded from calculations). Used only to remember your settings, also without an account; as cookies, they are sent to the Site with each page request (kept for up to 1 year).
- Browser storage: folded state of the sidebar and of advertiser-page cards, and the last opportunity tab you chose (combos, middles, spreads). Kept in your browser only and never sent to the Site.
- No advertising-tracking or third-party analytics cookies are used. Ads are served by the Site itself and are not personalised.
4. Third parties and processors
- Telegram (linked members only): verification codes and support replies are sent through the Telegram Bot API. Telegram's own policies apply to its processing.
- Email delivery service (members who registered an email only): to send email verification codes, verification codes and password reset links, the recipient address and message content are passed to an external email delivery service.
- Cloudflare: used for connection routing, security and country detection. Your IP address passes through Cloudflare.
- Blockchain networks (BSC, TRON): deposit and withdrawal transactions are recorded permanently on public ledgers and cannot be deleted by the Site. Wallet addresses are treated as public information.
- Hosting provider: servers and databases may be located on a hosting provider's infrastructure, possibly abroad.
- No personal data is sent to the odds data provider.
- Otherwise data is disclosed only when required by law. We do not sell personal data.
5. Retention
- Account data: until you delete your account. On deletion we immediately delete your email, Telegram link (chat ID and username), withdrawal addresses, password hash, country, language and odds-format settings, alert settings and site alerts, login sessions and verification tokens, and unlink your page view records from your account. Support requests are kept in case of disputes.
- Username and nickname: kept after deletion so that nobody can sign up again or impersonate you with the same name; they cannot be reused and are not shown on public pages.
- Re-registration limit: the email and Telegram identifiers verified at the time of deletion are kept for 30 days only in a non-reversible form (hash), then deleted. They are not linked to the account.
- Analyses and comments: not deleted when you leave; they remain public with the author shown as "Former member".
- Deposit, withdrawal, purchase and advertising records and the balance ledger: kept for 5 years after account deletion for dispute handling and legal compliance, then deleted.
- Sessions: 48 hours from your last visit (extended while you use the Site) or until logout. Verification codes and reset tokens: 10 minutes to 1 hour.
- Access and error logs: rotated, so older entries are deleted automatically once a size limit is reached.
- Page view records: kept for 90 days and then deleted; after that only daily totals remain.
- Records of automated (bot) access, including IP addresses: kept for 90 days and then deleted.
- Telegram login approval request records: requests expire after 10 minutes; records are deleted automatically after 90 days (records linked to a member account are deleted right away when the account is deleted).
- Operator notes: deleted when the account is deleted.
- Site alert history: kept for 24 hours and then deleted automatically.
6. Your rights
- Everything except your username (Telegram, email, withdrawal address, password, country, language, odds format) can be viewed and changed on the MY page after logging in. Sensitive changes require confirmation through the [Approve] button on your verified Telegram or a verification code sent to your verified email, and at least one verified method always remains.
- You can delete your account yourself from "Delete account" at the bottom of the MY page after logging in (confirmed once more with your verified Telegram or email). Any balance, withdrawal in progress or running ad must be settled first. What is deleted and what is kept on deletion is described in section 5; transaction records remain for the statutory period.
- If you lose every verified method, we cannot verify you, so change or recovery requests cannot be processed.
7. Security
Passwords and session tokens are stored only as hashes. Withdrawals are confirmed with the [Approve] button in a message to your verified Telegram or a verification code sent to your verified email, and sensitive changes with that confirmation or your current password. Traffic is encrypted with HTTPS and database access is limited to the accounts needed for operation. No security is perfect, so please also keep your password and your Telegram and email accounts safe.
8. Minors
Persons under the legal age in their country (19 in South Korea) may not use the Site, and we do not knowingly collect data from minors. Accounts found to belong to minors are deleted.
9. Changes to this policy
Changes are posted on the Site with an effective date. Material changes that expand the data collected or its purposes are announced by site notice at least 7 days before they take effect.
10. Contact
For privacy questions or requests, log in and use the support desk, or email support@oddsbunch.com (include your username). For anything else, email contact@oddsbunch.com. If a Telegram channel exists, it is linked at the bottom of the Site.