Privacy policy
This policy says what dubsix ("we", "us") keeps about you, why, for how long, who sees it and what you can ask for. It covers the dubsix game in Telegram, app.dubsix.com and the website dubsix.com.
1. Who is responsible
dubsix is responsible for your data. You reach us through Support inside the app (Profile › Support).
2. What we keep
- Account: the id Telegram gives your account and your Telegram name, if you sign in with Telegram; the public address of the TON wallet you sign in with, if you use one; your referral code, the invite link you arrived through and, if one of our campaign links brought you, which one; whether Telegram marks you as Premium, and an estimate of your Telegram account's age worked out from its id; your account's status and the days you were active; sign-in keys, stored only as hashes.
- Profile: the name, country and picture you save; when you accepted these terms and this policy, and which version; and the address of your Telegram profile photo as Telegram gives it at each sign-in, if your Telegram settings share it (it is cleared when Telegram stops giving it).
- Money: your personal deposit address, your withdrawal wallet, and an append-only record of every deposit, stake, fee, prize, referral payment and withdrawal, with its network transaction.
- Games: every match — moves, dice, timings and result — kept for good so that any match can be verified and replayed; your rating; and a backgammon engine's analysis of your moves, which gives your accuracy score and our fair-play checks.
- Match chat: the quick phrases and messages you send during a match, kept so that a dispute can be checked. Only our support sees them, from a support ticket. The text of a message is deleted after 30 days; a quick phrase stays with the match.
- Support: the tickets you open and our replies.
- Safety: a salted hash of your network (IP) address and a device fingerprint — a hash of coarse traits of your device such as its screen size, time zone and browser — taken at sign-in and when you look for a match. They are used only to spot shared devices, multiple accounts and collusion. Your address itself is never stored and cannot be recovered from the hash. Sign-in records carrying these hashes are deleted after 90 days.
- Product usage: a short list of events, such as "opened the invite sheet" or "made a first deposit", without your network address or device details, deleted after 90 days. The website dubsix.com counts page views and button taps the same way, with no account and nothing about the visitor.
- Notifications: whether you allowed our Telegram bot to message you, and whether it could reach you.
3. What we do not keep
No e-mail address, no phone number, no password, no payment card, no precise location, no contacts and no messages from your Telegram chats. The bot reads only messages sent to it directly and never reads groups. We use no advertising, no third-party analytics and no cookies. The app keeps your sign-in and your settings in your device's own browser storage until you sign out or clear it.
4. Why we use it
To run the games and the payments you ask for; to keep the games fair and accounts safe; to answer your support requests; and to meet legal obligations. We do not sell or rent data, and we show no advertising.
5. Who sees what
- Other players see your display name, your country's flag and your picture — the avatar you chose, or else your Telegram profile photo — in matches, tournaments and leaderboards and on the cards you share, together with your rating, your accuracy score, your place on the leaderboards (including the weekly-profit board) and the results of your matches with them. To show your Telegram photo, our servers fetch it from Telegram; other players receive it from us, never from Telegram.
- Subscribers of our Telegram channel (@dubsix_channel) see the display name of each day's biggest tournament winners and of the ten players who won the most in the last seven days, with what they won — never a loss, a picture or anything else. Turn on Hide me in the channel in Settings and your name is left out.
- Anyone with a match id can check that match's dice on its fairness page, which shows no names.
- Anyone with a link you share sees the card you shared: your name, your picture and what the card shows.
- The TON network is public: your deposit and withdrawal addresses and their amounts can be seen by anyone on the blockchain.
- Telegram and your wallet: in Telegram, Telegram carries the connection under its own privacy policy; when you connect a wallet, your wallet app and TON Connect carry that connection under theirs.
- Our hosting providers in Europe run the servers the data lives on. They store it for us and do not use it for anything else.
Beyond that, data leaves our servers only when the law requires it.
6. How long we keep it
Account, money and game records are kept for as long as your account exists, and afterwards for as long as they are needed to keep the ledger correct and to settle disputes. Match chat text is kept for 30 days, sign-in hashes and product usage events for 90 days, and server logs for seven days.
7. How we protect it
Connections are encrypted. Withdrawals are signed by a separate service that pays only to each player's own registered wallet, within fixed limits. Our administration is reachable only over a private network. Logs carry no network addresses, sign-in data or wallet addresses.
8. Your choices and rights
- You can change your name, picture and country at any time with the pencil beside your name. Choosing one of our avatars, or hiding your photo in Telegram, stops your Telegram photo being shown.
- You can stop the bot's messages in Telegram, and hide an opponent's chat messages on your screen.
- You may ask what we hold about you, ask for a copy, ask for a correction, and ask us to delete what we are not required to keep. Records the ledger and match verification depend on stay. Open a support ticket inside the app; we answer from the same account, so no further identification is needed.
9. Children
dubsix is for adults only (18+). If we learn that a child has an account, we switch it to withdraw-only and close it once its balance has been withdrawn.
10. Changes
The date at the top tells you when this policy last changed. Material changes are announced inside the app before they take effect.