Legal

Privacy Policy

Last updated: May 2026

This Privacy Policy explains how Tycoon ("we", "us", or "our") collects, uses, and protects your information when you use our website, game, or services (the "Services"). We follow international best practices including Nigeria's NDPA 2023, GDPR, and CCPA/CPRA. By using our Services you agree to the practices described here.

1. Information We Collect

a. Blockchain & Wallet Data

  • Your public wallet address
  • On-chain transactions, token balances, NFT holdings, and interactions
Important: Blockchain data is public, permanent, and immutable. We cannot delete or hide any information recorded on the ledger.

b. Account & Sign-in Data

  • Email address or other login identifier (if you sign in via Privy)
  • Authentication tokens and session data

c. Game & Usage Data

  • Gameplay activity, progress, and interactions
  • Device information (type, OS, browser version)
  • IP address (for security, fraud prevention, and region detection)
  • Error logs, crash reports, and performance metrics
  • Cookies and similar technologies — see our Cookies Policy

d. Other Information

Any data you voluntarily provide when contacting support or giving feedback.

2. How We Use Your Information

  • Operate and improve the Tycoon game
  • Enable wallet connectivity and blockchain features
  • Provide account security and session management
  • Analyse gameplay trends and fix bugs
  • Prevent fraud and abuse
  • Respond to your support requests
  • Comply with legal obligations

3. Legal Basis & Consent

We process your data based on:

  • Your consent — by connecting a wallet, signing in, or continuing to play
  • Performance of contract — to deliver the game and its features to you
  • Legitimate interests — security, service improvement, and fraud prevention
  • Legal obligation — to comply with applicable laws

You can withdraw consent at any time by stopping use of the Services. This does not affect already-public blockchain data, which is immutable.

4. Sharing Your Information

We share data only when necessary:

  • Trusted service providers — authentication (Privy), analytics, hosting, crash reporting (Sentry), and payments (Flutterwave) — all bound by data protection agreements
  • Legal requirement — when required by law or government request
  • Business transfer — in the event of a merger or acquisition, with notice where required by law
We never sell your personal data for marketing. On-chain activity remains publicly visible to anyone on the blockchain.

5. International Data Transfers

Tycoon is a global service. Your data may be transferred and processed outside your country — including to servers in the United States, Europe, Nigeria, or other locations. We use appropriate safeguards (such as Standard Contractual Clauses where required) to protect your data during these transfers in compliance with GDPR, NDPA 2023, and other applicable frameworks.

6. Data Retention

  • Account data — while active and up to 2 years after deletion
  • Transaction records — up to 7 years for legal/tax compliance
  • Error logs — up to 90 days
  • Marketing data — until you withdraw consent

You may request deletion of personal data we control by contacting support. Blockchain data cannot be deleted.

7. Your Rights

Depending on where you live (EU/EEA, UK, Nigeria, California, or elsewhere):

AccessRectificationErasureRestrictionPortabilityObjectWithdraw ConsentDo Not Sell

To exercise any right, contact us at support@playtycoon.xyz. We will respond within 30 days.

8. Cookies & Tracking

We use cookies and similar technologies for authentication, preferences, and analytics. For full details including a cookie table and your opt-out options, see our Cookies Policy.

Do Not Sell / Do Not Share: We do not sell or share personal data with third parties for cross-context behavioural advertising.

9. Security

We use reasonable technical and organisational measures (TLS encryption, access controls, regular security reviews) to protect your data. However, no system is 100% secure. Public blockchain data is outside our control. You are responsible for securing your wallet keys and login credentials.

In the event of a data breach posing risk to your rights, we will notify affected users and relevant authorities as required by applicable law.

10. Children's Privacy

Our Services are strictly for users aged 18 and over (see our Terms of Service). We do not knowingly collect personal data from anyone under 18. If you believe a minor has registered, contact us immediately at support@playtycoon.xyz and we will delete the data promptly.

11. Changes to This Policy

We may update this Privacy Policy. Material changes will be posted with a new "Last updated" date. Continued use of the Services after changes constitutes acceptance of the updated policy.

12. Contact & Supervisory Authorities

For questions, data requests, or complaints: support@playtycoon.xyz or our Telegram community.

EU / EEA

Your national Data Protection Authority

Nigeria

Nigeria Data Protection Commission (NDPC)

California

CCPA/CPRA rights via contact above