# Privacy Policy
Last updated: 15 September 2026 · Controller: Earn Reward Cash (Earn Reward Cash platform operator), our registered office (available on request), the country of our registered office · Privacy contact: privacy@nexus.gg
This policy explains what we do with personal data when you use the Platform. It is written to meet the GDPR (EU/UK), the CCPA/CPRA (California), and the disclosure requirements of our advertising partners.
1. Data we collect
| Category | Examples | Source | | --- | --- | --- | | Account data | email, username, display name, password hash, country, language, avatar | you | | Earning data | offer clicks, completions, reversals, points, level, streaks, referrals | you and partner networks | | Payout data | PayPal address, gift-card email, crypto wallet, withdrawal history | you | | Verification data | ID document, selfie, proof of address (only when KYC is triggered) | you | | Technical data | IP address, device and browser fingerprint, user agent, timezone, session cookies | automatic | | Support data | tickets, messages, attachments, chat messages | you | | Marketing data | newsletter subscription state, email opens where enabled | you |
We do not knowingly collect data from children under 16. See the Age Policy.
2. Why we use it (legal bases)
- Contract — to run your account, credit points, and pay withdrawals.
- Legitimate interests — fraud prevention, device and IP analysis, duplicate-account detection, service security, product analytics, and defending legal claims.
- Legal obligation — anti-money-laundering checks, sanctions screening, tax and accounting records.
- Consent — non-essential cookies, marketing email, and optional push notifications. Consent can be withdrawn at any time.
3. Who we share it with
- Offerwall and survey networks (for example the networks listed on the offerwall page): we pass a pseudonymous user ID, and where the network requires it a hashed IP, country and device type, so completions can be attributed and paid.
- Payment and gift-card providers to execute the payout you request.
- Infrastructure providers: hosting, database, object storage, email delivery, error monitoring.
- KYC/AML and sanctions-screening providers when a review is triggered.
- Authorities, when we are legally required to disclose.
We never sell personal data for money. Where sharing with advertising partners qualifies as "sharing" or a "sale" under California law, you may opt out — see Data Rights.
4. International transfers
Partners may process data outside your country, including in the United States. Such transfers rely on Standard Contractual Clauses, the EU-US Data Privacy Framework, or your explicit consent, depending on the partner.
5. Retention
- Account and earning data: for the life of the account and 24 months after closure (fraud defence).
- Financial and AML records: 5-7 years, as required by law.
- Technical and anti-fraud logs: 12 months.
- Support tickets: 24 months.
- Marketing consent records: until withdrawal plus 12 months.
6. Security
Passwords are hashed, all traffic is TLS-encrypted, database access is protected by row-level security so users can only read their own rows, admin actions are logged, and payout endpoints are rate-limited and signature-verified. No system is perfect: report any weakness to security@nexus.gg.
7. Your rights
Depending on where you live you may access, correct, export, delete or restrict your data, object to processing, withdraw consent, and lodge a complaint with your supervisory authority. Full instructions are in the Data Rights (GDPR & CCPA) page. We answer within 30 days.
8. Cookies
See the Cookie Policy. The consent banner controls all non-essential cookies.
9. Automated decisions
Anti-fraud scoring may automatically hold a withdrawal or restrict an account. You can always request a human review by contacting support.
10. Changes and contact
We will announce material changes on the site. Questions or requests: privacy@nexus.gg, Earn Reward Cash (Earn Reward Cash platform operator), our registered office (available on request), the country of our registered office. EU/UK representative (if appointed): our privacy team at privacy@nexus.gg.
