Privacy Policy
Last updated: July 4, 2026
Your privacy is important to us. This policy explains how we collect, use, and protect your personal information when you use Baccarat Smart Academy.
Secure by Default
HTTPS, encrypted storage
Privacy-First Analytics
Anonymous usage data only
Never Sold
Your data stays yours
Introduction
Baccarat Smart Academy ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our educational platform at baccaratsmart.com.
We comply with applicable privacy laws including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and support the Global Privacy Control (GPC) signal.
Information We Collect
2.1 Information You Provide
Account Information
Display name, email address, and password
Payment Information
Billing details processed by Stripe (we do not store card numbers)
Communications
Messages you send to our support team
Age Verification
Confirmation that you are 18 years or older
2.2 Information Collected Automatically
Progress Data
Lesson completion, quiz scores, and XP earned
Usage Data
Pages visited and time spent on the platform
Device Information
Browser type and operating system
Log Data
IP address and country of origin (for geo-compliance)
How We Use Your Information
- •Provide and maintain the educational platform
- •Track your learning progress and personalize your experience
- •Process payments and manage subscriptions via Stripe
- •Send account-related communications
- •Enforce geographic access restrictions
- •Improve our content based on usage patterns
- •Detect and prevent fraud or abuse
Legal Basis for Processing (GDPR)
Contract
To provide the services you signed up for
Legitimate Interests
Anonymous analytics, platform improvement, fraud prevention
Consent
For ad-related tracking and personalization (opt-in only)
Legal Obligation
To comply with applicable laws
Third-Party Services
We share data only with trusted providers:
Stripe
Payment processing
AWS
Database & email
CloudFront
Content delivery
We do not sell your personal information to third parties.
Data Security
HTTPS/TLS
All data transmitted securely
Bcrypt Hashing
Passwords are never stored in plain text
ES256 JWT
Secure tokens with httpOnly cookies
Rate Limiting
Protection against abuse
CSRF Protection
For admin operations
Data Retention and Deletion
We retain data while your account is active or as required by law.
Account Deletion:
- •Self-serve deletion is available at any time — on the web at baccaratsmart.com/profile (Account tab → Danger Zone → Delete account) and in the mobile app (Profile → Delete Account)
- •Deletion is immediate and permanent — your account, profile, course progress, quiz and practice history, and personal identifiers are hard-deleted, not anonymized or deactivated
- •Active web (Stripe) subscriptions are cancelled automatically as part of account deletion
- •App Store and Google Play subscriptions must be cancelled directly through the respective store — we cannot cancel these on your behalf
- •Payment and transaction records may be retained up to 7 years for tax and accounting compliance
- •You can also request deletion by emailing privacy@baccaratsmart.com
Your Privacy Rights
GDPR Rights (EEA Users)
Access, rectification, erasure, restriction, portability, objection, and consent withdrawal.
CCPA Rights (California Users)
Know, delete, opt-out (we do not sell data), and non-discrimination.
Contact privacy@baccaratsmart.com to exercise your rights. We respond within 30 days.
International Data Transfers
Your data is stored in the United States (AWS US-East-1 region). For EEA users, we use Standard Contractual Clauses (SCCs) for international transfers.
Geographic Restrictions
Our policy is to restrict access from certain jurisdictions where online gambling education is restricted or illegal (China, UAE, Saudi Arabia, and others). By using the Service, you represent that you are accessing it from a permitted jurisdiction. We reserve the right to use IP-based geolocation to restrict access from prohibited jurisdictions.
Children's Privacy
Our service is for users 18 years or older. We do not knowingly collect information from anyone under 18. Contact us immediately if you believe a minor has provided personal information.
Changes to This Policy
We may update this policy and will notify you of significant changes via email or website notice. The "Last updated" date will be revised. Continued use constitutes acceptance.
Contact Us
Privacy Inquiries
privacy@baccaratsmart.comGeneral Support
support@baccaratsmart.com