1. General
1.1. This policy applies to everyone who uses the Service: opens the website or the mini app, starts the bot, tops up a balance, plays or withdraws items.
1.2. By using the Service, you agree to this policy. If you do not agree, you must stop using the Service.
1.3. The Service does not ask for your passport, ID documents, photos, phone number, address or any other information beyond what section 2 lists.
2. Data we receive
2.1. Telegram data. When you sign in, Telegram passes the Service your account ID, name, username, profile photo link and interface language. Telegram does not pass your phone number to the Service. The Service checks that this data is genuine using Telegram's signature.
2.2. Discord data, if you linked Discord yourself as a second sign-in method: account ID and account name.
2.3. Roblox username. You enter it yourself when you top up with items or withdraw items. The Service needs it to find your trade in the game.
2.4. Game data: TOK balance, inventory, history of case openings, games, top-ups, withdrawals, quests and rewards, profile settings.
2.5. Payment data: payment method, amount, status, time, and the payment number at the payment provider. The Service does not receive or store bank card or wallet details: the payment provider processes them.
2.6. Technical data: IP address, device type, browser and operating system, request times. The Service uses them to run the website, prevent fraud and find linked accounts.
2.7. Support requests: messages, screenshots and files you send to the support bot.
3. Why we need the data
3.1. To run sign-in, balance, cases, game modes, top-ups and item withdrawals.
3.2. To credit payments, check them and resolve disputes.
3.3. To answer you in support and send you Telegram notifications about withdrawals, top-ups and rewards.
3.4. To protect the Service and its users: to detect multiple accounts, bonus abuse, fraudulent payments and account hacks.
3.5. To build aggregated statistics and improve the Service. For statistics, the Service uses data without linking it to your name.
4. Who receives the data
4.1. The Administration does not sell user data and does not share it for advertising.
4.2. Data goes only to parties the Service cannot work without, and only as much as they need:
- Telegram: sign-in, the bot, payments in Stars;
- the payment providers you pay through (Telegram Stars, crypto gateways and other methods in the top-up window): amount, payment number, your user ID in the Service;
- Discord, if you linked it for sign-in;
- the provider of the AI support assistant: the text of your request, for the first reply. A staff member handles complex questions;
- the hosting provider that runs the Service's servers.
4.3. The Administration may disclose data when a government authority lawfully requires it.
4.4. Your Roblox username is visible to Service staff and to the Service accounts that carry out the trade.
4.5. Other players see only your public profile: name or username, avatar, frame, titles, game results in the feed and leaderboards. The Service does not show your Telegram ID publicly.
5. Cookies and browser storage
5.1. The Service stores a sign-in cookie and local settings in your browser: language, sound, chosen theme, hints you have already seen.
5.2. The Service does not set advertising or third-party tracking cookies.
5.3. If you delete the cookies, you will have to sign in again, and your settings will reset.
6. Storage and protection
6.1. The Service keeps account data as long as the account exists. It keeps payment and withdrawal data as long as it needs to resolve disputes and keep payment records. It keeps technical logs for a limited time and then deletes them.
6.2. Only staff who need the data for their work can access it. The Service logs every staff action on accounts.
6.3. The Administration protects data with reasonable measures: encrypted connections, access control, backups. No one can guarantee full protection of data sent over the internet, so you are also responsible for your account: do not share your sign-in code or access to your Telegram with other people.
7. Your rights
7.1. Through support, you can:
- find out what data the Service stores about you;
- correct wrong data;
- delete your account and data, unless the law requires the Service to keep them.
7.2. Deleting an account is permanent: your TOK balance and inventory items are lost. Withdraw your items before you delete the account.
7.3. The Service answers requests within a reasonable time, usually within 10 business days.
8. Age
8.1. The Service is for users aged 18 and older. If the Administration learns that an account belongs to a younger user, it may restrict top-ups or close the account.
9. Changes to this policy
9.1. The Administration may change this policy. It publishes each new version on this page with its date.
9.2. If you keep using the Service after the changes, you accept the new version.
10. Contacts
10.1. For questions about your data, contact support:
- support bot: @BrainBattleHelpBot (each request becomes a separate ticket);
- Telegram:
- Email: