Privacy Policy
Last updated: June 5, 2026
PokeRoll ("we", "us", "our") operates the PokeRoll.gg website. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our site or make a purchase.
Information We Collect
Information You Provide
- Account information: email address, username, and date of birth when you create an account
- Shipping information: name and mailing address when you request card shipments
- Payment information:processed securely by Coinflow — we never store your full credit card number on our servers
- Identity verification (KYC) data: if we ask you to verify your identity, our verification provider (didit.me) collects information such as your legal name, date of birth, government-issued ID document, and a selfie or biometric facial scan used to confirm the ID belongs to you. These documents and biometric data are processed by the provider; PokeRoll generally receives only the verification result (approved, pending, or declined) and limited associated details
- Support correspondence: messages you send through our support channels
Information Collected Automatically
- Device and browser information (user agent, screen resolution)
- IP address and approximate geographic location
- Usage data (pages visited, pack openings, session duration)
- Cookies and similar technologies for authentication and preferences
How We Use Your Information
- Process pack purchases and ship physical cards to you
- Manage your account, binder, and store credit balance
- Verify your age to ensure compliance with our Responsible Gaming policies
- Operate the provably fair system (server seeds, client seeds, nonces)
- Verify your identity (KYC) where required to prevent fraud and money laundering, comply with applicable legal obligations, and authorise higher-risk actions such as larger deposits or shipments
- Prevent fraud, abuse, and enforce rate limits
- Respond to support requests
- Improve our services through aggregated, anonymised analytics
Third-Party Services
We share information with the following third-party services only as necessary to operate PokeRoll:
| Service | Purpose | Data Shared |
|---|---|---|
| Coinflow | Payment processing | Email, payment details, billing address |
| Supabase | Authentication | Email, auth tokens |
| didit.me | Identity verification (KYC) | Legal name, date of birth, ID document, selfie / biometric facial scan |
| Shipping carriers | Card delivery | Name, shipping address |
Identity Verification (KYC)
From time to time we may ask you to verify your identity before you can continue using certain features. We use a third-party identity verification provider, didit.me, to perform this check. When you start verification you are taken to the provider's hosted flow, where you submit your government-issued ID and a selfie or biometric facial scan. The provider analyses these to confirm your identity.
- Your ID documents and biometric data are collected and processed by didit.me under their privacy policy. PokeRoll does not store copies of your ID documents or biometric data on its own servers.
- PokeRoll receives the verification outcome (approved, pending, or declined), a verification session reference, and limited associated details, which we store against your account.
- We use this information to confirm your eligibility, prevent fraud and money laundering, and meet our legal and compliance obligations.
Whether and when we ask you to verify your identity is at our discretion. See our Terms of Service for how identity verification can affect access to funds and shipments.
Data Retention
We retain your account information for as long as your account is active. Pack opening records and provably fair seed data are retained indefinitely to allow ongoing verification. If you delete your account, we will remove your personal information within 30 days, except where retention is required by law or for legitimate business purposes (e.g., financial records).
Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict processing of your data
- Request a portable copy of your data
To exercise these rights, contact us at privacy@pokeroll.gg.
Children's Privacy
PokeRoll is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date. Your continued use of PokeRoll after changes constitutes acceptance of the updated policy.
Contact Us
If you have questions about this Privacy Policy, contact us at privacy@pokeroll.gg or visit our Support page.
