Privacy Policy

What we collect

We keep the data we need to run your account and nothing more:

Account details — your name, username, email address and hashed password.
Usage data — pages you view, picks you open, and your last login time and IP address.
Payment records — the plan, amount, currency and gateway reference for each subscription.
Payout details — bank, PayPal or crypto details you add yourself in order to withdraw referral earnings.
Support messages — anything you send us through the contact form.

What we never collect

We do not receive or store your full card number, CVV or bank login. Card payments are handled entirely by Paystack and Stripe on their own systems; we only ever see a transaction reference and the outcome.

We do not buy personal data from third parties, and we do not build advertising profiles.

How we use it

To create and secure your account and authenticate you.
To deliver the predictions and VIP content you are entitled to.
To process subscription payments and calculate referral commissions.
To send transactional email — receipts, VIP activation, password resets, withdrawal updates.
To detect fraud, referral abuse and terms violations.
To understand aggregate usage so we can improve the product.

We do not sell your personal data. Ever.

Notifications and marketing

You control your alerts from Profile Settings. VIP slip notifications and billing alerts can each be switched off independently. Transactional emails that are essential to your account — password resets and security notices — cannot be disabled while your account is open.

Cookies

We use a small number of first-party cookies:

Session cookie — keeps you signed in while you browse. Essential.
Remember-me cookie — only set if you tick "keep me signed in". Expires after 30 days and is rotated on each use.
Interface preferences — stored in your browser (for example whether the dashboard sidebar is collapsed). Never sent to us.

We do not run third-party advertising or cross-site tracking cookies.

Who we share with

We share the minimum necessary with:

Payment processors (Paystack, Stripe) — to take payment and confirm it.
Our hosting provider — to store the database that runs the platform.
Email delivery — to send the transactional messages listed above.
Authorities — only where we are legally required to.

How long we keep it

Account data is kept while your account is open. If you deactivate your account we retain it for 30 days so you can change your mind, then anonymise it.

Payment and commission records are kept for as long as tax and accounting rules require, typically six years, even after an account closes.

Your rights

Depending on where you live, you may have the right to:

Access a copy of the personal data we hold about you.
Correct anything inaccurate — most of it you can edit yourself in Profile Settings.
Delete your account and associated personal data.
Object to or restrict certain processing.
Receive your data in a portable format.

Email rebel@betrebel.eu and we will respond within 30 days.

Security

Passwords are stored using bcrypt hashing and are never recoverable in plain text. Traffic is served over HTTPS. Session and remember-me cookies are HTTP-only, and all database access uses prepared statements.

No system is perfectly secure. If we ever discover a breach affecting your data, we will tell you and the relevant regulator promptly.

Children

This platform is strictly for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has registered, contact us and we will remove the account.

Changes

We will post any changes to this policy here with an updated date. Significant changes affecting how we use your data will also be sent to your registered email.