Privacy Policy

Status: ACTIVE - PUBLISH | Effective date: 09.10.2026

This Privacy Policy explains how EPINUSD Digital Product processes personal data in connection with www.epinusd.com. It is written to describe the current service without claiming that EPINUSD operates a general KYC program or collects identity documents as a routine practice.

1. Who this policy applies to

This policy applies to visitors, registered users, guest customers, business customers and other persons who interact with EPINUSD. EPINUSD is responsible for the personal data it determines to process for its own purposes. Independent third-party providers may separately act under their own privacy terms.

2. Data we may process

2.1 Account and authentication data

• Email address and account identifier.
• Password in protected/hashed form rather than readable plaintext.
• Information received from a supported sign-in provider such as Google when you choose that method.
• Account settings, login history and security records.

2.2 Order and product data

• Products ordered, order identifiers, amounts, status and timestamps.
• Delivery records, including whether a code or entitlement was made available.
• For future direct top-ups, the game/service identifier or other delivery information supplied by the customer.
• Refund, replacement, complaint and support history.

2.3 Payment and balance data

We may process payment status, transaction identifiers, payment method category, amounts, timestamps, balance funding records, refunds and information needed to reconcile a transaction. Full payment credentials may be handled directly by the relevant payment provider rather than stored by EPINUSD.

For cryptocurrency payments, the payment provider and public blockchain may process wallet addresses, transaction hashes, network information and related blockchain data. Blockchain records may be public and cannot generally be altered by EPINUSD.

2.4 Technical and usage data

• IP address, browser, device and operating-system information.
• Language, approximate region derived from technical settings, session and security logs.
• Pages and features used, timestamps, errors and performance information.
• Cookie and similar-technology identifiers as described in the Cookie Policy.

2.5 Communications

If you contact us, including through email or a supported channel such as Telegram, we may process the account/contact information and content necessary to handle the conversation.

2.6 Marketing data

Where marketing is offered and legally permitted, we may process email marketing preferences, consent or opt-out records, and campaign interaction information. We do not currently describe SMS marketing as a standard EPINUSD channel.

2.7 Verification data

EPINUSD does not currently operate a routine KYC program and does not routinely request passports, identity cards, selfies or proof of address. A payment provider may conduct its own verification. If EPINUSD later introduces a feature for which identity verification is legally or operationally required, the relevant notice will be updated before such data is routinely collected.

3. Why we process data

• To create and secure accounts and authenticate users.
• To process orders, payments, balance funding and digital delivery.
• To provide customer support and investigate delivery or refund claims.
• To detect fraud, account abuse, security incidents and unauthorized transactions.
• To operate, troubleshoot and improve the Platform.
• To maintain transaction, accounting and legal records.
• To comply with applicable legal obligations and lawful authority requests.
• To establish, exercise or defend legal claims.
• To send optional marketing where a valid legal basis exists.

4. Legal bases

Depending on the law that applies, processing may rely on performance of a contract or steps requested before a contract, compliance with legal obligations, legitimate interests such as security and fraud prevention, establishment or defense of legal claims, or consent where consent is required. Where processing is based on consent, consent may be withdrawn for future processing.

5. Service providers and recipients

We may share the minimum necessary data with providers that help operate the Platform, including payment processors, digital-product distributors, hosting and infrastructure providers, authentication providers, analytics providers, security and anti-abuse services, communications providers, professional advisers and public authorities where legally required.

Current or anticipated integrations may include a cryptocurrency payment provider such as Cryptomus, Google services for supported sign-in and analytics, Telegram where used for support, and Cloudflare if deployed for site security, content delivery or IP protection. The exact providers used may change as the Platform evolves.

We do not sell personal data merely for the purpose of trading personal information.

6. Google Analytics and similar analytics

EPINUSD uses Google Analytics to understand aggregate and individual-level website usage as configured. Analytics technologies may collect device, browser, interaction and approximate-location information. Where applicable law requires consent before non-essential analytics technologies are used, EPINUSD should activate them only after the required preference has been obtained.

7. International processing

Our service providers may process data in countries other than the user's country. Where applicable law requires safeguards for international transfers, we will use the mechanisms reasonably available and required for the relevant transfer, such as contractual safeguards or recognized adequacy mechanisms.

8. Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and for applicable accounting, fraud-prevention, security, dispute and legal-retention requirements. Retention periods may therefore differ between account, transaction, support and technical records.

Where data is no longer required and no legal basis requires retention, it may be deleted, anonymized or otherwise de-identified. Public blockchain data is outside EPINUSD's ability to erase.

9. Security

We use reasonable technical and organizational measures appropriate to the nature of the service. No internet system can be guaranteed completely secure. Users must also protect their credentials and promptly report suspected account compromise.

10. Your privacy rights

Depending on the law applicable to you, you may have rights to request access, correction, deletion, restriction, objection, portability, withdrawal of consent, or information about certain automated processing, and may have the right to complain to a competent data-protection authority. These rights are not absolute and may be subject to legal exceptions.

Requests may be sent to [email protected]. We may take proportionate steps to verify that a request comes from the relevant person without collecting more data than reasonably necessary.

11. Automated security decisions

Transactions or accounts may be assessed using automated or semi-automated signals such as IP address, device data, account history, transaction amount or frequency and unusual behavior. High-risk activity may be held for review or restricted. Where applicable law grants specific rights regarding solely automated decisions producing legal or similarly significant effects, those rights remain available.

12. Children

EPINUSD is intended only for persons aged 18 or older. We do not knowingly offer accounts or paid services to children.

13. Marketing

Where required, marketing emails will be sent only after the necessary opt-in. Users can unsubscribe using the method provided in the message or by contacting us. Unsubscribing from marketing does not stop order confirmations, security alerts, service notices or other necessary operational communications.

14. Third-party websites and issuers

The Platform may link to or depend on third-party services. Their privacy practices are governed by their own notices, and EPINUSD is not responsible for independent processing performed solely by those third parties.

15. Changes and contact

We may update this Privacy Policy when our services, providers, technology or legal obligations change. The current version will be published on www.epinusd.com. Privacy questions and requests may be sent to [email protected].