Privacy policy · v2026-05-22

Bet Ond It privacy policy

Effective 2026-05-22. This policy describes how Bet Ond It Labs ("we", "us", "our") handles information in connection with the Bet Ond It interface at betondit.com (the "Interface").

1. Scope

Bet Ond It is a non-custodial interface to event-prediction markets deployed on the Hyperliquid protocol. By design, the personal information we process is limited to what is necessary to operate the Interface, meet our regulatory obligations, secure the service, deliver notifications you have opted into, and maintain compliance evidence. We do not collect or process information about you beyond what is described here.

2. Information we collect

(a) Wallet attestation records

When you connect a wallet and confirm the eligibility and age statements in our Terms of Service, we record a timestamped attestation that contains:

  • Your wallet address (stored lower-cased; an Ethereum address is a public identifier);
  • The version of the Terms of Service you accepted;
  • Your age affirmation (a boolean flag);
  • The IP-derived country of the request at the time of attestation (we do not store the IP address itself);
  • The user-agent string of your browser;
  • The UTC timestamp of the attestation.

(b) Push notification subscriptions

If you opt in to push notifications, your browser generates a push subscription that we store so we can deliver notifications (for example, when a bet you have placed reaches settlement or a market you are following opens). The stored subscription contains:

  • The push service endpoint URL provided by your browser (for example, a URL hosted by Apple, Google, or Mozilla);
  • The two cryptographic keys (p256dh and auth) that the push service requires to authenticate and decrypt our notifications;
  • Optionally, your master wallet address if you were connected at the time of subscription, so we can target per-user notifications;
  • The Hyperliquid network the subscription is bound to.

You can revoke notification permission at any time from your browser or device settings. When you do, the subscription becomes invalid and we will remove it on the next attempted delivery.

(c) Server logs

Our hosting and edge providers automatically log requests to the Interface, which typically includes IP address, request timestamp, request path, response status, and user-agent string. These logs are kept by the provider for a limited period for security and operational purposes. We do not correlate these logs to wallet addresses or push subscriptions.

(d) Local interface state

The Interface stores certain information locally in your browser using localStorage, IndexedDB, and the Cache Storage API (for the PWA service worker). This information stays on your device and is not transmitted to us. It includes:

  • Agent-wallet keypair — a per-master signing keypair used to sign Hyperliquid L1 actions without an additional wallet popup. The private key is generated in your browser and never sent to us.
  • Attestation cache — a flag indicating that the address has accepted the current Terms version, used to suppress re-prompting.
  • UI preferences and cached metadata — including selected markets, dialog dismissals, and cached Hyperliquid market metadata.
  • Service-worker cache — static assets and a small set of recent responses cached to make the Interface installable as a PWA and to support offline shell rendering.

(e) On-chain activity

Transactions you submit through the Interface are recorded on the Hyperliquid protocol. These are public and we have no control over their retention. The Interface reads on-chain data from public RPC endpoints to render your positions, balances, and order history.

3. What we do not collect

  • We do not collect, hold, custody, or have access to your private keys, seed phrases, or agent-wallet keys.
  • We do not collect, hold, custody, or transmit your funds. All trading and transfer actions go directly from your wallet (or agent wallet) to the Hyperliquid protocol.
  • We do not collect government identifiers, financial account numbers, or KYC documents.
  • We do not collect device-fingerprint, advertising, or cross-site tracking identifiers, and we do not sell any information about you.

4. How we use information

We use the information described above to:

  • Operate, secure, and improve the Interface and our infrastructure;
  • Enforce the geographic, age, and sanctions restrictions in our Terms of Service;
  • Maintain auditable evidence of user attestations as compliance evidence;
  • Deliver push notifications you have opted into;
  • Investigate and respond to abuse, fraud, security incidents, market manipulation, and unlawful activity;
  • Respond to lawful requests from regulators, law enforcement, or courts of competent jurisdiction;
  • Comply with our legal obligations.

5. Legal bases

Where the General Data Protection Regulation (GDPR), UK GDPR, Swiss FADP, or an equivalent regime applies, we rely on the following legal bases:

  • Performance of a contract — operating the Interface and providing the service you request when you connect a wallet;
  • Legal obligation — keeping records that support our compliance with sanctions, age, and geographic restrictions;
  • Consent — for push notifications, where you have opted in via your browser or device;
  • Legitimate interests — security, abuse prevention, infrastructure operation, audit, and limited analytics.

6. Third parties and service providers

We rely on third-party providers to operate the Interface, including hosting and edge networks; RPC and indexing providers; the push notification services operated by your browser or device vendor (for example, Apple Push Notification service, Firebase Cloud Messaging, or Mozilla autopush); infrastructure-monitoring vendors; and wallet and signing SDKs. Each provider receives only the information necessary to perform its function and is contractually bound to handle that information consistently with this policy. We do not share attestation records or push subscriptions with marketing providers or data brokers.

7. International transfers

Because the Interface is operated from Sweden and our providers operate globally, information processed in connection with the Interface may be transferred to and stored in jurisdictions outside your country of residence. Where required, we use appropriate transfer mechanisms (such as Standard Contractual Clauses or equivalent safeguards) for transfers of personal data out of the European Economic Area, the United Kingdom, or Switzerland.

8. Retention

Attestation records are retained indefinitely as compliance evidence. Push subscriptions are kept until you unsubscribe, your browser invalidates the endpoint, or we detect repeated delivery failure. Server logs are retained for the shorter of (a) the retention period of the relevant provider, or (b) the period required to satisfy our legitimate operational and legal purposes. Local interface state stays in your browser until you clear it or your browser does so automatically.

9. Your rights

Depending on the laws that apply to you, you may have some or all of the following rights with respect to the personal data we hold about you: access, rectification, erasure (where consistent with our compliance obligations), restriction, portability, objection, and withdrawal of consent. To exercise these rights, contact us at legal@betondit.com and include the wallet address whose attestation record is the subject of your request, so that we can locate it.

You also have the right to lodge a complaint with a supervisory authority in your country of residence.

10. Children

The Interface is not intended for and may not be used by anyone under 18 — or the higher minimum age applicable in your jurisdiction. We do not knowingly collect information from anyone below that age. If we become aware that we have done so, we will delete the information.

11. Security

We apply industry-standard technical and organisational measures to protect the information we process, but no system is perfectly secure. You are responsible for the security of your devices, browser, and wallet keys.

12. Changes

We may update this policy from time to time. When we do, we will update the version identifier at the top of this page and, where the changes are material to the attestation contract, prompt for re-attestation when you next connect a wallet.

13. Contact

Privacy enquiries may be sent to legal@betondit.com.