FortuneX is currently a play-money social casino. There is no real-money wagering, no account creation, no payment processing, and no server-side identity. Your wallet, history, seeds, and stats live in your browser's localStorage on your device.
A future crypto-money tier will launch under a Curaçao or Anjouan license. When that goes live, additional data collection is mandatory under the licence. We will update this policy and email/notify users before the change.
In the play-money phase, our static-page CDN logs (operated by Cloudflare) record standard web access metadata: IP address, user agent, requested path, timestamp. These are used only for security and abuse prevention and are not joined to your in-browser identity. Cloudflare's privacy policy applies to those records.
When the crypto tier opens, sign-up will require:
All of the above is required by the licensing authority and is not optional for real-money play. KYC verification is performed by our vendor; FortuneX receives a verification result, not the underlying documents.
Across both tiers, where applicable: identifiers (email, account ID, wallet address), KYC data (only at the crypto tier), bet and transaction history, device and network metadata, IP-derived approximate location, and any messages you send through in-app chat. We do not collect sensitive categories such as health data, biometric data outside KYC, or political/religious affiliation.
We share data only with:
We do not sell your personal data, ever. We do not share data with advertisers.
Play-money data lives only on your device and is deleted when you clear browser storage. When the crypto tier launches, KYC and transaction records will be retained for the minimum required by the licensing regime (typically 5–10 years, depending on jurisdiction).
Under GDPR (EU/UK), CCPA (California), and similar regimes you may have rights to: access your data, correct inaccurate data, delete it (subject to legal retention obligations), restrict or object to certain processing, and port your data to another service. To exercise any right, email privacy@fortunex.casino.
All connections to FortuneX use TLS. Static assets are served with strict security headers (HSTS, X-Frame-Options DENY, Content-Security-Policy, Referrer-Policy strict-origin-when-cross-origin). Crypto custody (when live) will split funds between hot and cold wallets; the cold wallet is multi-sig and not connected to operational servers. No security model is unbreakable — please report vulnerabilities at security@fortunex.casino.
FortuneX does not use third-party tracking cookies. We use localStorage for the play-money wallet and settings. At the crypto tier we'll use a first-party session cookie for sign-in. See the Cookie Notice for details.
Material changes will be announced at least 14 days before they take effect, via the landing page and (if your tier requires it) by email. Questions: privacy@fortunex.casino.