Starlume — Catch a Star

1. What we collect

KIND	WHAT
Account	Email address, username, and your password. Your password is stored only as a one-way hash, so nobody at Starlume can read it.
Balances and play	Your Cash Wallet, Bonus Play Credit, game loads, game withdrawals, rewards, payout requests, and the status of each transaction.
Devices and security	IP address, browser and device type, and sign-in times, used to keep your account secure and to confirm you are in a permitted location. We find the state from the IP address on our own server, with the free database of IP Geolocation by DB-IP; your address is not sent anywhere to be located. We keep a record of these checks (time, IP address, state, and whether it was allowed), as sweepstakes rules require.
Identity check	Before your first redemption: your legal name, date of birth, state, and photos of your identity document and of you holding it. Our compliance team checks them. The photos are stored encrypted, only authorised staff can open them (each viewing is recorded), and they are deleted after the check is finished (at the latest 180 days after the decision). We keep your name, date of birth, state, document type, the last 4 characters of the document number and a one-way code made from the number (so one ID can't open two accounts). If we use an identity verification provider instead (Didit, didit.me), the photos stay with that provider.
Payments	Deposit and payout records, including the amount, payment method, sender or recipient identifier, reference, and verification status. We never ask for a payment password, private key, or recovery phrase.
Messages	What you send our support team.

2. How we use it

to create and run your account, confirm your email and keep you signed in;
to maintain your Cash Wallet and Bonus Play Credit, connect game accounts, and process requested transfers;
to check eligibility, age, identity and location, as sweepstakes rules and the law require;
to prevent fraud, cheating and account takeover, and to keep an audit trail of account changes;
to send account emails (confirmation, password reset, security notices) and to answer support requests;
to support responsible play, such as limits and self-exclusion.

We only send promotional emails if you agree to receive them, and you can stop them at any time.

3. Cookies

Starlume uses one essential cookie, starlume_sid, to keep you signed in. It is marked secure and cannot be read by scripts. We also use Google Analytics, which sets its own cookies (_ga and similar) to count visits and see which pages are used; it does not receive your name, email or account details. We use no advertising cookies. You can block analytics cookies in your browser settings, or with Google’s opt-out add-on, without affecting how Starlume works.

4. Who we share it with

We share information only with the service providers who help us run Starlume, and only as much as they need:

our hosting provider, which runs our servers;
our email delivery provider, which sends account emails;
our private support inbox, which stores the messages you send with your Starlume account so administrators can identify your conversation and reply;
our identity verification provider and payment provider, when you redeem or buy;
Google Analytics, which receives information about your visits (pages viewed, device and browser type, approximate location) to help us improve the site;
game studios, which receive an anonymous player ID and the plays made in their games.

We may also disclose information when the law requires it, to protect players or Starlume against fraud, or as part of a sale or reorganisation of the business. We do not sell personal information.

5. How long we keep it

Account, wallet, bonus, game-transfer and payout records are kept while your account is open and afterwards for as long as tax, payment and anti-fraud rules require.
The text of account emails, including any links in them, is deleted from our servers once the email is sent, or after 3 days if it could not be sent.
Backups are kept for 14 days.

6. Security

Production traffic to Starlume uses HTTPS. Passwords are stored as one-way hashes, sign-in attempts are limited, and sensitive changes are recorded for security review.

7. Your choices and rights

See and update your email, username and password in your account.
Ask for a copy of your information, for corrections, or for deletion. We delete what we are not required to keep.
Close your account at any time by contacting support.
Depending on where you live, you may have further rights under local law. We will respond to requests within the time the law requires.

8. Children

Starlume is only for adults 18 and older (21 where required). We do not knowingly collect information from anyone younger, and we close accounts we find belong to minors.

9. Where information is processed

Our servers and service providers may be located outside your state or country. Wherever information is processed, we protect it as described in this policy.

10. Changes

We will post any changes here with a new date, and tell you about important changes by email or on the site.

11. Contact

Privacy questions and requests: support@starlume.win.

Privacy Policy