Privacy Policy — Pinecrest

1) Scope

This Policy explains how we collect, use, disclose, and protect personal data when you use Pinecrest websites, apps, leaderboards, rewards, advertiser campaigns, referral programs, and support channels (collectively, the "Services").

2) Who this applies to

• Users/Players earning points and prizes.
• Advertisers/Partners running campaigns.
• Visitors to pinecrest247.com.

Minimum age: 13+ (or higher where local law requires; e.g., 16 in the EEA). If you are under the minimum age, do not use the Services.

3) Personal data we collect

4) Sources of data

• You (forms, uploads, actions).
• Auth providers (Google).
• Social networks/APIs (when you connect/authorize verification).
• Analytics/Anti-fraud vendors (device risk, bot detection).
• Payment/KYC providers (identity and payout validation).

5) Why we process data (purposes + legal bases)

• Provide the Services (create accounts, leaderboards, rewards) — Contract necessity.
• Verify shares/engagement via permitted signals, APIs, or proof uploads — Legitimate interests + Contract.
• Prevent fraud, bots, duplicate accounts, and abuse — Legitimate interests; where needed, Legal obligation.
• Run promotions and deliver prizes — Contract; Consent where required.
• Payments/KYC (when thresholds trigger) — Legal obligation; Contract.
• Personalize content & rankings — Legitimate interests; Consent where required.
• Marketing communications (email/SMS/push) — Consent or Legitimate interests with opt-out.
• Analytics & product improvement — Legitimate interests; Consent for cookies where required.
• Compliance (tax, AML/CFT) — Legal obligation.

6) Sharing your data

We share with:

• Service providers (hosting, email/SMS, analytics, fraud/KYC, payment, content moderation).
• Advertisers (aggregate, de-identified performance; no personal contact data unless you opt-in for direct brand rewards).
• Legal authorities when required by law or to protect rights/safety.
• Corporate transactions (merger, acquisition) with safeguards.

We do not sell personal data. We may share limited pseudonymous IDs with ad/analytics providers for measurement (subject to opt-out/consent rules).

7) International transfers

Data may be processed outside your country (e.g., EU/UK/US/Nigeria). Where required, we use Standard Contractual Clauses or equivalent safeguards.

8) Retention

• Account data: for the life of the account + up to 24 months after closure (for fraud/chargeback/legal).
• KYC/Payments: per legal/financial retention obligations (typically 5–7 years).
• Logs/analytics: 12–24 months, aggregated thereafter.
• Marketing preferences: until you opt-out or delete account.

We may retain minimal suppression records to honor opt-outs.

9) Your rights

Depending on your location (NDPR/GDPR/CCPA and others): access, rectification, deletion, portability, restrict/object, withdraw consent, and lodge a complaint with your authority.

Requests: privacy@pinecrest247.com. We may require ID verification.

10) Security

We use encryption in transit, access controls, 2FA options, rate limiting, anomaly detection, and regular audits. No system is 100% secure; report issues to security@pinecrest247.com (PGP available on request).

11) Children

We do not knowingly collect data from under-age users. Accounts discovered below minimum age will be deleted.

12) Cookies & similar tech

We use essential, performance, analytics, and marketing cookies. Manage preferences in Cookie Settings and via your browser/OS. Where required, we obtain consent.

13) Automated decision-making

We may use automated rules to detect fraud/bots and to allocate randomized rewards. You can request human review where legally required.

14) Third-party links

Links to social platforms and advertiser sites have their own privacy policies. Review them before sharing data.

15) Changes

We'll post updates here and change the Effective Date. Material changes may be notified via email/in-app.