Privacy Policy

Your data on CivBet.

CivBet is a virtual-currency casino operated by Agora for the CivMC community. It uses no real money. This page explains exactly what information we collect from you, why we hold it, who else touches it, and how you can get a copy of it or have it removed.

Last updated 16 July 2026.

Who we are

CivBet (“we”, “us”) is run by Agora. We are the data controller for the information described here. The service is a game: balances are virtual Diamonds with no cash value, and we never take payment card details or real-world financial information.

The easiest way to reach us about anything on this page — including a request to see or delete your data — is to open a ticket with us on Discord.

What we collect

We only collect what the service actually needs to run. We do not use third-party advertising or analytics trackers, and we do not sell your data to anyone.

Discord identity
When you sign in we request Discord's identify scope only — nothing more. From it we store your Discord user ID, your username, and your avatar image URL. We do not receive or store your email address, your Discord messages, your friends, or the servers you are in.
Account & gameplay
Your virtual Diamonds balance, your lifetime amount wagered and won, your rank/tier, whether you are banned or have self-excluded, your leaderboard visibility preference, and the dates your account was created and last updated.
Game & transaction records
Every bet, payout, refund, and adjustment is written to a permanent ledger: the game played, the amount, your balance before and after, and per-round details (such as the server seed used to decide an outcome). This ledger is what powers our public fairness page. See Retention for why these records are kept even after account deletion.
Banking / transfers
When you deposit or withdraw Diamonds to or from the in-game bank, we store the request amount, a reference code, the bank account you name, and any note the reviewing admin adds. This lets an admin match your request to the corresponding in-game transfer before approving it.
Technical & security
A session cookie keeps you signed in. To protect the service from abuse we keep per-user rate-limit counters and a log of requests that were blocked for exceeding a limit. Our hosting and database providers also process standard server logs (including IP addresses) on our behalf — see Who else handles your data.

How we use it

We use the information above only to:

  • run the games and keep your Diamonds balance accurate;
  • process deposits and withdrawals with Monument Bank;
  • show and audit the public fairness statistics and leaderboard;
  • keep the service secure — rate limiting, preventing abuse, and enforcing bans and self-exclusion;
  • respond to your support and data requests.

Where data-protection law (such as the GDPR) applies, our legal bases are: performing our agreement with you to provide the game; our legitimate interest in keeping the service fair, secure, and working; your consent (for example, appearing on the public leaderboard, which you can switch off); and, occasionally, complying with a legal obligation.

Who else handles your data

We host the service on third-party infrastructure. These providers process data on our behalf under their own privacy terms; we do not sell or share your data with anyone else.

  • Supabase — hosts our Postgres database, where everything above is stored.
  • Vercel — hosts and serves the application; processes request logs.
  • Discord — provides sign-in and is the counterparty for the identity data described above.
  • Monument Bank — receives a deposit/withdrawal reference and amount so a transfer can be matched and settled.

What is public

Two things on CivBet are public by design:

  • The leaderboard shows usernames and standings. You can hide yourself at any time from your account page.
  • The fairness ledger publishes aggregate, per-game betting statistics. It is reported in aggregate and is not tied to your username on the public page.

Retention

We keep your account and profile data for as long as you have an account. When you ask us to delete your account, we remove or anonymise the data that identifies you — your Discord ID, username, avatar, and any bank account name you gave us.

The one exception is the financial ledger. Individual bet and payout rows are immutable: they are what make the game auditable and the fairness statistics trustworthy, and they may be needed to resolve disputes. On deletion we disconnect these rows from your identity so they remain only as anonymous, aggregate history — they can no longer be traced back to you.

Your rights

Depending on where you live you may have the right to access, correct, delete, restrict, or object to our use of your data, and to receive a copy of it in a portable form. You can exercise these rights at any time — we will not penalise you for it.

Some of this is self-service from your account page: you can hide yourself from the leaderboard, and you can self-exclude (which locks play and deposits). For everything else — a copy of your data, correction, or full deletion — open a ticket on Discord and we will action it. If you are in the EU/UK and are unhappy with our response, you also have the right to complain to your local data-protection authority.

Denial of service & bans

The CivBet team retains the right to deny you the services of the site at any time. Upon denial of service, your existing account balance at the time of the ban will be delivered to you via Monument Bank. This ban may be appealed no earlier than one month after its issuance. Any appeals prior to that point will result in a lifetime ban, without appeal.

The CivBet team prides itself on its commitment to fairness, and to an ethical gaming environment. Sometimes, bans are issued when the team feels as though the person banned has seriously jeopardised their finances, or may be developing onerous gambling habits.

Children

CivBet is not intended for anyone under 13, or under the minimum age required by Discord and the CivMC. We do not knowingly collect data from children. If you believe a child has an account, contact us and we will remove it.

Changes to this policy

We may update this policy as the service changes. When we make a material change we will update the “last updated” date at the top of this page. Continuing to use CivBet after a change means you accept the updated policy.