Privacy Policy

The data controller is the operator of ShotBits. Privacy and data-protection requests can be submitted through the website's Support Center, which is the official contact channel for this service.

We may also receive validation, fraud, chargeback or completion information from offerwall providers, advertisers, payment providers and other service partners.

Depending on the feature and applicable law, processing may be necessary to perform the service contract, comply with legal obligations, protect legitimate interests, prevent fraud, or act on consent.

• Create, authenticate and maintain user accounts.
• Provide profiles, community tools, earning features and customer support.
• Validate activities, calculate rewards and maintain transaction records.
• Process deposits, withdrawals, reversals and payment-related requests.
• Detect duplicate accounts, account sharing, automated activity, abuse and security threats.
• Send essential account, security, financial and support communications.
• Improve reliability, troubleshoot errors and understand how the service is used.
• Comply with lawful requests, accounting duties, dispute handling and enforcement obligations.

ShotBits includes public and community features. Depending on your activity and settings, other users may see your username, avatar, profile information, photos, posts, comments, reactions, follower information, leaderboard positions and public payment proof information.

Do not publish personal information that you do not want to make public. Public content may be copied, indexed or shared by other people outside our control.

The website uses cookies or similar browser storage for essential functions such as sessions, login security, remembered access, CSRF protection, device recognition, preferences and fraud prevention.

Third-party features, advertisements, analytics, CAPTCHA, offerwalls or embedded services may also use cookies or similar technologies under their own policies. Where consent is legally required for non-essential technologies, those technologies should only be used after the appropriate choice has been provided.

You can control cookies through your browser, but blocking strictly necessary cookies may prevent login or other core features from working.

Personal data may be shared only as reasonably necessary with:

• Hosting, infrastructure, email and technical service providers.
• CAPTCHA, anti-fraud, IP intelligence and security providers.
• Offerwalls, advertisers and partners that validate eligible activity.
• FaucetPay, payment processors and blockchain-related services used for deposits or withdrawals.
• Analytics and advertising providers where enabled and legally permitted.
• Professional advisers, auditors, authorities or law-enforcement bodies when required by law or necessary to protect legal rights.
• A successor operator in connection with a legitimate sale, merger, reorganisation or transfer of the service.

We do not sell personal data as a standalone product.

Some service providers or partners may process data outside your country or outside the European Economic Area. Where required, appropriate safeguards should be used, such as an adequacy decision, approved contractual protections or another lawful transfer mechanism.

Data is retained only for as long as reasonably necessary for the purpose for which it was collected, including account operation, fraud prevention, payment reconciliation, dispute resolution, security investigations and legal or accounting obligations.

• Account and profile data may be retained while the account remains active.
• Security logs and anti-abuse records may be retained after account closure where needed to prevent repeat abuse.
• Transaction and payment records may be retained for legal, accounting and dispute purposes.
• Public content may remain visible until deleted, removed or anonymised, subject to moderation and legal requirements.
• Backups may retain deleted information for a limited period before normal rotation completes.

We use reasonable technical and organisational measures intended to protect personal data, including password hashing, secure sessions, CSRF protection, access controls, activity logging, rate limits and account-security checks.

No online service can guarantee absolute security. Users are responsible for choosing a strong password, protecting their credentials and promptly reporting suspected unauthorised access.

Automated checks may compare IP, device, account, activity, payment and provider signals to identify duplicate accounts, prohibited tools, suspicious behaviour or invalid earning activity. These checks may temporarily block registration, login, earning actions or withdrawals.

A user who believes a security restriction is incorrect may contact Support and request a review. We may require additional information to verify ownership and investigate the activity.

Depending on your location and applicable law, you may have the right to:

• Receive information about how your personal data is processed.
• Request access to personal data held about you.
• Correct inaccurate or incomplete information.
• Request deletion of data when the legal requirements are met.
• Request restriction of processing in certain circumstances.
• Object to certain processing based on legitimate interests.
• Receive eligible data in a portable format.
• Withdraw consent where processing relies on consent.
• Submit a complaint to the competent data-protection authority.

These rights are not absolute. A request may be limited where retention or processing is required for security, fraud prevention, legal claims, accounting or another lawful reason. We may need to verify your identity before completing a request.

The service is not intended for anyone under 18 years of age, or under the minimum legal age required in the user's country. Accounts identified as ineligible may be restricted or removed.

This Privacy Policy may be updated when features, service providers, security practices or legal requirements change. The latest version will be published on this page with a revised “Last updated” date.

To ask a privacy question or exercise an eligible data-protection right, submit a ticket through the Support Center and clearly identify the request as a privacy request.