Bitflash collects only what the games and your account need. No ads, no analytics, no trackers, no fingerprinting, and we never sell or share your data for marketing.
Last updated 21 October 2026
1. Who is responsible
Bitflash Enterprises runs Bitflash Casino at bitflash.casino and is responsible for your data. Contact us at [email protected] or through Live Support.
2. What we store
Your account
- Your username, and your password as a one-way hash (we can’t read it).
- Your email address, only if you choose to add one, and whether you confirmed it.
- For passkeys: the public key and a name for each one. Your fingerprint, face or PIN never leaves your device.
- For Google or Discord sign-in, if you use it: the provider’s ID for your account, and the email it gives us if it says the email is verified.
Playing
- Your bets, results, balance history, seeds for provably fair checks, VIP progress, achievements, races and challenges.
- Settings you save to your account (notification and privacy switches).
Social and support
- Friends, blocks, chat and direct messages, profile settings.
- Your Live Support conversation and the game requests and votes you make.
- Notifications, and a push address from your browser if you turn push notifications on.
What we don’t keep
- We don’t store your IP address. It is used only for the moment it takes to apply rate limits against abuse, and our server logs record the page or action, not who asked.
- No location, no device fingerprint, no tracking across sites, no recordings of what you do on the page.
3. Why
- To run your account and the games (our agreement with you, the Terms): signing in, balances, bets, fairness checks, rewards, social features and support.
- To keep Bitflash fair and safe (our legitimate interest): stopping abuse, multi-accounting, spam and attacks.
- Because you chose it (your consent): email, push notifications, sharing your weekly stats with friends and being suggested to friends of friends. You can turn each of these off in Settings at any time.
We only email you about your account (confirming an address, resetting a password). No newsletters, no marketing.
4. Who can see it
- Other players see your username, your public profile and statistics, and your bets in the public bet feeds. In Settings → Privacy you can hide your name on race leaderboards and choose what friends see.
- Our staff see what they need to give support and moderate.
- Service providers that process data for us, only for these purposes:
- Cloudflare, which carries all traffic to our server and protects it from attacks;
- our email provider, which delivers account emails if you add an email;
- Google or Discord, if you choose to sign in with them;
- your browser’s push service (from Apple, Google or Mozilla), if you turn on push notifications.
We never sell data, show ads or share data with advertisers. We disclose data only if the law requires it.
5. Where and how long
- Your data is stored on Bitflash’s own server. Cloudflare’s network may carry it through other countries on the way.
- Account and game data stay while your account exists. When you ask us to delete your account, we delete it within 30 days; copies in our backups expire within 8 weeks.
- Email links expire after 30 minutes (password reset) or 24 hours (confirming an address). Sign-in sessions last 30 days unless you sign out.
- Server logs are rotated automatically and hold no IP addresses.
6. Cookies and storage on your device
Bitflash uses only what it needs to work, so there is no cookie banner:
| Name | What it does | How long |
|---|---|---|
| bfc_session | Keeps you signed in | 30 days |
| bfc_ceremony | Links the steps of a passkey or provider sign-in | 10 minutes |
| bfc.play, bfc.csrf | The Basic version’s look and its form security token | 1 year / the visit |
| Local storage (bfc.*) | Your choices on this device: sound volume, game settings, the look you picked, the sidebar | Until you clear it |
No advertising, analytics or third-party cookies.
7. Your rights
Wherever you live, you can ask us to:
- show you the data we hold about you, or give you a copy;
- correct it;
- delete your account and its data;
- stop a use you object to, or withdraw a consent you gave.
Ask through Live Support or [email protected]; we answer within a month. If you are in the EU or UK and think we got something wrong, you can also complain to your data protection authority.
8. Age
Bitflash is for adults only (18+). We don’t knowingly hold data about anyone younger, and we delete it if we learn we do.
9. Changes
If this policy changes, the date at the top changes, and we tell signed-in players about important changes.