Short version: we collect what is needed to run the arena, keep money records straight, and settle disputes. Nothing is sold, and private uploads stay private.
Account: your RAG username, password (stored only as a salted hash), and a recovery code hash. We never see or store your password in readable form.
Membership: your Discord username and the membership proof photo you upload for manual approval.
Profile: anything you choose to add — display name, alias, bio, avatar, and equipped cosmetics.
Play and money: every stake, result, coin balance change, purchase, redemption, gift card code, and payout request.
Communication: global chat messages, direct messages, and support tickets, including any images attached.
Product Flip: the tracking number, shipping label photo, delivery proof, and the shipping address you enter for a trade.
To run your account and keep the arena fair, to verify you are a real RAG member, to settle stakes and payouts correctly, to resolve Product Flip and payout disputes, and to detect duplicate accounts, collusion, and fraud.
We do not sell your data and we do not use it for advertising.
Card payments are processed by Stripe. RAG never receives or stores your card number. We keep only the payment record: amount, currency, what it granted, and the checkout reference.
Other players can see your public profile: username, alias, avatar, cosmetics, and leaderboard standing.
Membership photos, direct messages, support tickets, payout details, and Product Flip shipping information are private and readable only by you and the RAG owner account.
Uploaded images are stored in private buckets and served through short-lived expiring links.
Money and play records are kept as long as the account exists so balances and disputes stay auditable.
Membership proof photos are kept only while needed for verification and can be removed on request once your account is approved.
You can ask for a copy of your data, a correction, removal of your membership photo, or deletion of your account. Open a Support ticket and choose Account & verification.
Account deletion removes your profile, messages, and uploads. Financial records tied to completed payments are retained where we are required to keep them.
Access to data is enforced at the database level per account, not just in the app. Privileged actions run server-side and are restricted to the owner account.
No system is perfect. If you believe your account has been accessed by someone else, change your password and open a Support ticket immediately.