Privacy Policy

This policy explains how CS2RICH ("we") handles personal data when you use cs2rich.com and our services. CS2RICH is responsible for your personal data and can be reached at the contact email at the end of this policy.

This policy covers the information we collect about you, how we use it, who we share it with, and the choices and rights you have. It applies to everyone who visits or uses the site, whether or not they sign in.

From Steam. When you sign in with Steam, we receive your Steam ID, your Steam display name and avatar, and your Steam profile URL. We do not receive or store any password. To send withdrawals, we also store your Steam Trade URL.

From you. For bank deposits, we store the bank account holder name and account number used. If we open an account review, we collect any identity or ownership documents you provide. We also keep the content of support emails you send us.

From your use of the site. We collect your balance ledger and transaction history, your game history (cases, battles, upgrades), your account level, your chat messages, and affiliate attribution. We also collect your IP address, device and browser information, and access logs.

From deposits and withdrawals. For cryptocurrency deposits we store cryptocurrency addresses and transaction IDs. For skin deposits we store skin-deposit records.

We use your information to:

• provide the service and run your account;
• process deposits and withdrawals;
• operate the games you play and record their results;
• prevent fraud and abuse;
• keep records of transactions;
• moderate chat;
• respond to your support requests;
• comply with legal requests.

We share personal data only with the parties needed to run the service:

• Steam/Valve, for sign-in and for sending trade offers;
• our payment partner, for bank deposits;
• our crypto payment processor, for cryptocurrency deposits;
• our skin-deposit partner, for skin deposits;
• our hosting and infrastructure providers;
• authorities, when we are legally required to do so.

We never sell personal data.

We use exactly one essential session cookie (access_token) and nothing else. It keeps you signed in. We do not use analytics, advertising, or tracking cookies.

We also keep a few interface preferences (for example fast mode, auto-sell, and a local copy of your favourites) in your browser's own storage. That storage stays on your device.

We keep personal data while your account is open and for 12 months after it is closed. Data not tied to your account (such as access logs) is kept for 12 months after it is created. After that, we delete or anonymise it. The exception is where a dispute or review is still open, in which case we keep the relevant data until that is resolved.

We protect your data with encryption in transit, restricted database access, and separated admin systems. Server credentials and API keys are kept on our servers and are never sent to your browser.

You can ask us to:

• access the personal data we hold about you;
• correct it;
• delete it;
• object to how we use it;
• restrict how we use it;
• withdraw any consent you have given us.

To make any of these requests, email the contact address. We respond within 30 days after we confirm your identity. Some data may be kept while a review or dispute is still open.

Some information is visible to other users: your display name, avatar, level, and game results (wins, battle outcomes, and the live drop feed).

Chat messages are stored, shown to other users in real time, and moderated. Do not share personal data in chat.

We do not send marketing emails. We only send service messages related to your account and activity.

The service is for people aged 18 or older. If we discover data belonging to anyone younger, we delete it.

If a data breach affects you, we notify affected users promptly.

We may update this policy. Changes are posted on the site with an effective date.

For any privacy question or request, email us at [email protected].