Privacy Policy

This page explains what Hala Win collects, what becomes public on-chain, how off-chain data is used, and what choices users have when interacting with the platform.

• Effective Date: March 26, 2026.
• Collection Approach: We aim to collect the minimum information needed to operate the interface, profiles, support, moderation, referrals, and security controls.
• Blockchain Notice: Wallet activity, transaction history, and on-chain records can be public, permanent, and impossible for us to delete or fully anonymize.
• Operator Privacy: Hala Win is maintained by pseudonymous contributors. This notice describes platform data practices without requiring disclosure of personal identities of contributors.

Overview

This Privacy Policy explains how Hala Win collects, uses, stores, shares, and protects information in connection with the platform. In this notice, "we" refers to the current contributors and operators maintaining the interface and supporting infrastructure for the project.

We try to collect only the information reasonably needed to provide the platform, maintain security, respond to support requests, enforce rules, and improve reliability. If you do not agree with these practices, do not use the platform.

What We Collect

The exact data we collect depends on how you use the platform. We may collect or receive the following categories of information:

• Wallet and blockchain data, such as wallet address, signed messages, transaction hashes, participation history, group activity, prize history, and public smart-contract interactions.
• Loyalty program and holding data, such as ticket purchase timestamps, USD token price snapshots at purchase time, hold durations, calculated loyalty point balances, and point-to-token redemption requests.
• Profile and user-submitted data, such as display name, username, avatar URL, country selection, privacy-mode preference, and any email address you voluntarily provide.
• Community and support content, such as posts, referral usage, contact-form messages, abuse reports, moderation context, and any message details or subject lines you choose to send to us.
• Technical and usage data, such as IP-derived security logs, browser type, device data, error logs, timestamps, pages visited, local/session storage values, and similar diagnostics from hosting or analytics tools.
• Fraud-prevention or compliance signals, such as indicators used to identify bots, abuse, duplicate participation, sanctions concerns, or restricted-jurisdiction use.

We do not ask for private keys or seed phrases, and you should never send them to us or to anyone claiming to represent the project.

How We Use Information

We may use collected information to operate the platform, authenticate wallet-driven actions, show profiles, process referrals, operate prize pools, savings groups, and loyalty rewards, detect abuse, enforce restrictions, respond to support, and improve product stability.

Depending on context, we process information because it is necessary to provide the service you requested, because you chose to submit it, because it is in our legitimate interest to secure and maintain the platform, or because we need to comply with legal obligations.

• Provide interface functionality and remember user preferences or referral state.
• Display user-selected profile information and group/community content.
• Review, route, and respond to contact-form submissions and other support requests.
• Investigate suspicious activity, enforce rules, and protect users, the platform, and the infrastructure.
• Generate aggregate metrics, analytics, and performance diagnostics.
• Respond to legal requests, sanctions screening, security incidents, or abuse complaints where appropriate.

Public Blockchain and Public Profile Data

A significant portion of web3 activity is inherently public. If you connect a wallet or submit transactions, your wallet address and related on-chain activity may be visible to anyone using a blockchain explorer or analytics service.

If you choose a public username, post in public spaces, or disable privacy mode, parts of your profile and activity may also be visible through the platform interface or public APIs.

• Blockchain records are typically permanent and cannot be changed or deleted by us.
• Privacy mode can limit certain profile exposure on the interface, but it cannot erase blockchain history, screenshots, cached data, or third-party records.
• Do not put sensitive personal information into usernames, avatars, posts, group names, or wallet labels.

How We Share Information

We do not sell your personal information as a business model. We may share limited data when needed to operate the platform or meet legal, security, or moderation needs.

• With infrastructure or service providers that help host, secure, deliver email, analyze, or support the platform, including contact-form anti-abuse and transactional email providers.
• With blockchain networks, explorers, wallet providers, or other users when your actions are public by design.
• With moderators, contractors, or contributors who need access to investigate abuse, support, or platform incidents.
• When we believe disclosure is necessary to comply with law, sanctions, subpoenas, court orders, or to protect rights, safety, or platform integrity.
• In connection with a project migration, protocol handoff, restructuring, repository transfer, or other operational transition affecting the platform.

Retention

We keep information for as long as reasonably necessary for the purposes described in this notice, including operation, support, analytics, abuse prevention, legal compliance, dispute handling, and recordkeeping.

Different categories of data may be retained for different periods. Public blockchain data may remain permanently available outside our control even if we remove related interface data.

• Profiles, referral records, support messages, contact-form metadata, and moderation logs may be retained while the account or wallet relationship remains relevant to platform operations.
• Security and diagnostic logs may be kept for as long as useful to investigate incidents, maintain service integrity, or comply with legal requirements.
• When we no longer need off-chain data we control, we may delete, anonymize, or aggregate it, subject to backups and legal obligations.

Security

We use reasonable technical and organizational measures to reduce security risk, but no website, wallet integration, blockchain system, database, or message channel is completely secure.

You are also responsible for your own operational security, including wallet hygiene, device security, phishing resistance, and careful review of transactions and approvals.

• Do not reuse sensitive credentials across services or share wallet approvals carelessly.
• Treat social media messages, chat groups, and unofficial support channels as potential phishing vectors.
• A breach or exploit affecting a third-party provider, wallet, device, or blockchain network may impact your data or assets.

Your Choices and Rights

Depending on where you live, you may have legal rights relating to access, correction, deletion, objection, restriction, portability, or withdrawal of consent for certain processing. Those rights are not absolute and may not apply to public blockchain data or information we must retain for legitimate reasons.

You may request help by contacting support@halawin.com. We may need enough information to verify that a request is connected to the relevant wallet, account, or email before taking action.

• You may update or remove certain profile details from the interface when those controls are available.
• You may disconnect your wallet at any time, but prior blockchain activity remains visible on the network.
• You may stop using the platform at any time, subject to the persistence of on-chain and retained records.

Children and Restricted Jurisdictions

The platform is not directed to children and is not intended for anyone who cannot lawfully enter into these terms or participate in the relevant activities.

We may also use country selections, technical signals, wallet behavior, or manual review to identify prohibited participation from restricted jurisdictions including United States, United Kingdom, Australia, Canada.

• If we believe a user is underage, misrepresenting location, or using the platform in violation of law, we may limit or terminate access.
• Restricted-jurisdiction screening may rely on imperfect signals and may produce false positives or false negatives.

Changes and Contact

We may update this Privacy Policy from time to time by posting a revised version on the site. The effective date at the top of the page shows the latest published version.

Privacy questions, requests, or complaints can be sent to support@halawin.com. If you use the contact form, we may process the submitted message together with technical metadata such as IP address, user agent, and wallet context through our anti-abuse and email-delivery providers. Because the project is maintained by pseudonymous contributors, support may be limited to digital contact channels only.

If you continue using the platform after an updated privacy policy is posted, that continued use will be treated as acceptance of the updated notice.