🔒 Bucksroll Privacy Policy Statement

Effective Date: October 15, 2025

This Privacy Policy (the "Policy") describes how Bucksroll ("we," "us," or "our"), as the Data Controller, collects, uses, shares, and protects the personal information of users ("you") who access our website and services (the "Service"). We are committed to transparency and adherence to global data protection standards, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) as amended by the CPRA.

1. Information We Collect

We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device ("Personal Information" or "PI"). We collect the following categories of PI:

Category of Information	Source and Example Data Points
A. Identifiers & Profile Data	Collected directly from you during account registration and profile update. Data Points: Name, Email Address, and User ID.
B. Financial and Transaction Data	Generated through your use of the Service (completing tasks, requesting withdrawals). Data Points: Earnings history, Point balances, Redemption records, and Payment Service Identifier (e.g., PayPal email address).
C. Internet & Network Activity	Collected automatically via server logs, cookies, pixels, and ad network trackers. Data Points: IP address, Device identifiers, Browser type, Operating system, and information concerning your interaction with the website (e.g., clicks, time spent on pages, views of advertisements).
D. Sensitive Personal Information (SPI)	We do not intentionally collect SPI. However, certain third-party payment processors or highly specialized surveys may request data governed by their own policies.

2. How We Use Your Information and Lawful Basis

We use your PI for the following business purposes, anchored to specific lawful bases required by data protection laws (e.g., GDPR Article 6).

Purpose of Processing	Categories of PI Used	Lawful Basis (GDPR)
Service Provision & Account Management Rationale: Processing Name, Email, and Transaction Data is necessary to create your account, verify your identity, allow you to update your profile (Email/Name), assign tasks, and fulfill payment obligations under the Terms and Conditions.	A, B	Performance of a Contract
Payment Fulfillment & Financial Records Rationale: Required for regulatory compliance, tax reporting, and processing withdrawals via third-party providers.	B	Legal Obligation / Performance of a Contract
Platform Security & Fraud Prevention Rationale: Essential to protect Bucksroll, its partners, and its users from fraudulent activity and misuse of the Service.	A, B, C	Legitimate Interest (Platform Integrity)
Targeted Advertising and Marketing Rationale: For cross-context behavioral advertising and sending optional promotional communications.	A (Email/Name), C	Consent (Opt-in for EU/UK)

3. Sharing and Disclosure of Personal Information

We share your PI with the following categories of third parties:

3.1. Service Fulfillment Partners

Survey and Task Providers: We share necessary profile information (e.g., your User ID and certain demographic data, if provided) with third-party companies that host the surveys and tasks. This is required to determine your eligibility and validate completion of the activity.
Payment Processors: We share Financial Data and Identifiers (Name, Payment Identifier) with authorized third-party money transmitters (e.g., PayPal) to facilitate payments and withdrawals requested by you.

3.2. Advertising and Marketing (CCPA/CPRA Disclosure)

We use various tracking technologies (cookies, pixels) to analyze website usage and deliver targeted advertisements.

Sale or Sharing for Targeted Advertising: Under the California Consumer Privacy Act (CCPA) as amended by the CPRA, the disclosure of Internet/Network Activity and certain Identifiers (Category C) to third-party advertising partners for the purpose of cross-context behavioral advertising may be considered a "Sale" or "Sharing" of Personal Information. California residents have the right to opt-out of this activity.

3.3. Legal and Regulatory Compliance

We may disclose your PI if required by law, subpoena, or if we believe that such action is necessary to comply with a legal obligation, protect and defend the rights or property of Bucksroll, or protect the personal safety of users or the public.

3.4. International Data Transfers

If you are located in the European Economic Area (EEA) or the UK, your data may be transferred to and processed in countries outside the EEA/UK (e.g., the United States). To ensure your data remains protected, Bucksroll relies on legal safeguards such as the European Commission's Standard Contractual Clauses (SCCs) or, where applicable, the EU-U.S. Data Privacy Framework (DPF).

4. Global Privacy Rights

A. Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights concerning your Personal Information:

Right to Know: You have the right to request that we disclose the categories and specific pieces of PI we have collected, the sources of the PI, and the purposes for collecting and sharing it.
Right to Delete: You have the right to request the deletion of your PI, subject to certain exceptions.
Right to Correct: You have the right to request the correction of inaccurate PI maintained about you.
Right to Opt-Out of Sale or Sharing: You have the right to direct us to stop selling or sharing your PI (defined above in Section 3.2).

How to Exercise the Right to Opt-Out:

We provide two mechanisms for exercising your Right to Opt-Out:

"Do Not Sell or Share My Personal Information" Link: A prominent link to a dedicated opt-out form will be provided in the footer of our website.
Global Privacy Control (GPC): We recognize and automatically honor the Global Privacy Control signal sent by your browser as a valid request to opt-out of the sale or sharing of your PI.

B. Rights for EEA and UK Residents (GDPR)

If you are located in the EEA or the UK, you have the following rights:

Right of Access (Article 15): The right to obtain confirmation as to whether or not PI concerning you is being processed, and access to that data.
Right to Rectification (Article 16): The right to have inaccurate PI corrected.
Right to Erasure (Article 17): The "right to be forgotten," allowing you to request the deletion of your PI under certain circumstances.
Right to Object (Article 21): The right to object to the processing of your PI, including for direct marketing purposes.

GDPR Article 27 Representative:

Since Bucksroll operates globally, if we do not have an establishment in the EU or UK, we have designated a representative to act as the contact point for supervisory authorities and data subjects on all issues related to processing and compliance.

5. Security and Retention

5.1. Data Security: We implement appropriate technical and organizational measures (such as encryption and access controls) to protect your PI from accidental loss, unauthorized access, use, alteration, and disclosure.

5.2. Data Retention: We retain Personal Information only for as long as necessary to fulfill the purposes for which it was collected, including for the purpose of satisfying any legal, accounting, or reporting requirements (e.g., maintaining financial transaction history for tax purposes).

6. Changes to This Privacy Policy

We reserve the right to update or change our Privacy Policy at any time. If we make material changes to the categories of data collected or the purposes for which data is shared, we will notify you via email and/or a prominent notice on our website prior to the change becoming effective.

7. Contact Us

For questions or to exercise any of your data rights, please contact us:

Email for Privacy & Data Rights Requests: support@bucksroll.com