Quick Summary
We collect your data to operate the referral platform, calculate earnings, prevent fraud, and process payouts. We never sell your data to third parties.
1) Scope of this Policy
This Privacy Policy governs the collection, use, storage, and disclosure of personal data by MrPlay Referral Platform ("the Platform," "we," "us," or "our"). It applies to all users who interact with the Platform, including registered partners, administrators, and visitors who access any part of the Platform — including partner dashboards, public pages, admin interfaces, and all related API endpoints.
By registering a partner account, accessing the Platform, or sharing referral links for tracking, you acknowledge that your data is processed in accordance with this Privacy Policy and applicable data protection laws in your jurisdiction. If you disagree with any provision of this policy, you should discontinue use of the Platform immediately.
This policy may apply alongside jurisdiction-specific regulations. Where local laws provide additional rights or obligations, we will comply with those requirements to the extent they apply to our operations.
2) Account & Registration Data
When you create a partner account on the Platform, we collect information you voluntarily provide during registration. This includes:
- Username, email address, and hashed password
- Full legal name and phone number (including country code)
- Social media links (YouTube, TikTok, Facebook, and primary channel URL)
- Declared follower count and profile description submitted during registration
- Payout details and bank/wallet information necessary for payment processing
- Optional notes or additional information you choose to include
Part of this information is used to verify your identity, prevent account impersonation, and maintain the trustworthiness of the partner network. Contact information is required to notify you about payouts and account updates.
3) Tracking & Analytics Data
Our tracking system relies on technical data collected automatically when users interact with your referral links. This includes:
- Visitor IP address (processed for geo-location purposes and fraud prevention)
- Device fingerprint identifier derived from browser characteristics (used for click deduplication)
- HMAC signature tied to each referral link for authenticity verification
- Nonce token to prevent replay attacks and duplicate submissions
- Precise timestamp of each click or visit event
- HTTP Referer header and traffic source information
- Partner ID and referral link identifier associated with each event
This data is used exclusively to calculate accurate partner statistics, detect fraudulent activity, and generate reliable reports. We do not build advertising profiles from this data and do not share it for marketing purposes.
4) Security & Technical Logs
To protect the Platform and its integrity, we collect and retain the following security data:
- Login logs (timestamp, IP address, success or failure outcome)
- Failed authentication attempts and temporary account lockout events
- Fraud indicator scores computed by the detection system
- Anomalous request logs and suspicious activity patterns
- Encrypted session tokens used to maintain secure access
These logs are retained for limited periods and reviewed periodically by the admin team. Access is restricted to authorized personnel under strict access controls.
5) How We Use Your Data
We use the data we collect for the following operational purposes:
- Calculating unique clicks, daily earnings, and conversion rates
- Generating analytical reports in the partner dashboard
- Detecting fraud and filtering invalid activity before earnings are approved
- Processing payout requests and verifying withdrawal eligibility
- Sending account notifications and alerts related to earnings and payments
- Improving attribution accuracy and calibrating the tracking system
- Complying with legal, accounting, and regulatory requirements
We do not use your data for marketing or advertising purposes without your explicit consent. All internal data use follows data minimization principles — we only collect what is genuinely necessary to operate the service.
6) Legal Basis for Processing
We process your data on the following legal grounds: (a) Contractual necessity — processing account and tracking data is required to provide the service you signed up for. (b) Legitimate interests — processing security and fraud-detection data is necessary to protect the integrity of the Platform and the interests of all partners.
(c) Legal obligations — we retain certain records to comply with applicable accounting, tax, and regulatory requirements. Where the basis is consent (such as optional marketing communications), you have the right to withdraw your consent at any time without affecting prior processing.
8) Data Retention Periods
We retain your data for the following periods depending on data type:
- Account and profile data: throughout account activity plus up to 24 months after closure
- Transaction and earnings records: 7 years for legal and accounting purposes
- Raw click and visit events: 90 days (then aggregated into daily statistics)
- Daily aggregated statistics: 3 years or the duration of the partnership
- Security and login logs: 12 months
- Fraud detection records: up to 36 months for retrospective auditing
Upon a deletion request, we begin data minimization as soon as the mandatory legal retention period expires. The only data we may retain longer is that connected to active legal obligations or ongoing dispute proceedings.
9) Security Safeguards
We implement a comprehensive set of technical and organizational safeguards to protect your data, including:
- Full encryption of data in transit via HTTPS/TLS across all communications
- Secure password hashing using strong algorithms (bcrypt)
- HMAC signature system to verify the authenticity of tracking requests
- Access monitoring logs and anomaly alerting
- Rate limiting to prevent injection attacks and abuse
- Role-based access separation between partner and admin levels
No system is 100% risk-free, but we conduct regular security reviews and maintain a culture of security awareness across the team. In the event of a security incident affecting your data, we will notify you promptly as required by applicable regulations.
Partners are also encouraged to protect their accounts by choosing strong, unique passwords and not sharing login credentials with anyone.
11) Your Rights & Choices
Under applicable data protection laws, you have the following rights regarding your personal data:
- Right of access: request a copy of the personal data we hold about you
- Right to rectification: request correction of inaccurate or misleading data
- Right to erasure: request deletion of your data, subject to legal obligations
- Right to restrict processing: request suspension of processing in certain circumstances
- Right to data portability: receive your data in a machine-readable format
- Right to object: object to processing based on legitimate interests
To exercise any of these rights, contact the admin team through the support channels available in the Platform. We will respond to your request within 30 days of receipt.
Note: some requests may be partially or fully declined where data is required to meet active legal or contractual obligations.
12) Children's Privacy
The Platform is intended for users aged 18 and over. We do not knowingly collect personal data from children under the age of 18.
If we discover that an account belongs to a minor, we will close the account and delete associated data promptly. If you are a parent or guardian and believe your child has submitted data without authorization, please contact us immediately.
13) International Data Transfers
Your data may be stored or processed on servers located outside your country. When data is transferred internationally, we implement the appropriate contractual safeguards to ensure an adequate level of protection consistent with international standards.
We comply with any additional safeguards required for transfers from the European Union or European Economic Area under applicable frameworks.
14) Contact Us About Privacy
For any questions, concerns, or requests related to this policy or your personal data, you can reach the admin team through the Settings section inside the Platform or via available support channels.
We are committed to responding to privacy inquiries within 30 days of receipt. For urgent requests related to data breaches, we prioritize immediate response.
15) Changes to this Policy
We may update this policy periodically when we add new platform features, change tracking methods, update legal obligations, or improve our data protection practices.
For material changes that significantly affect your rights, we will make reasonable efforts to notify you before the change takes effect. Continued use of the Platform after the updated policy is published means you accept the changes.