Privacy Policy - Earning by Project-BHV

1. INFORMATION WE COLLECT

We may collect the following information:

Account Information:

Username
Email address
Encrypted password credentials

Identity Verification Information (KYC):

Full name
Government-issued identification documents
Selfies or identity verification photographs
Other verification information required for withdrawal approval

Identity Verification — Person Verification:

Government-issued document type
Document number
Selfie photograph with document

Payment Information:

Easypaisa details
JazzCash details
Bank account information
Cryptocurrency wallet addresses (if supported in the future)

Digital Work Information:

Gig listings and descriptions
Order history and communications
Reviews and ratings
Digital Work wallet balance and transactions
Dispute records and resolutions

Staking and Market Information:

Staking deposits and reward history
Market buy/sell order history
Exchange transactions

Gift Card and Promotion Information:

Gift Card entry records
Daily Collector claim history
Referral commission records

Technical Information:

IP address
Browser information
Device information
Operating system information
Network information
Referral information
Access timestamps
Security logs
Cloudflare Turnstile verification tokens (used for bot detection on login and registration)
Device fingerprint data (browser type, screen resolution, installed fonts, timezone, language settings, hardware concurrency)
User session data (user agent, browser name, platform, device type, IP address, last activity timestamp)

Usage Information:

Tasks completed
Reward history ($EPB and Points transactions)
Referral activity
Withdrawal requests
Login history
Platform interactions
Notification preferences and delivery records (including OneSignal push notification data)
Points transaction history with types and amounts
Staking deposits, rewards, and claim history
Market buy/sell order history
Chat messages sent and received via mesh network

2. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar technologies to:

Maintain user sessions
Improve platform performance
Prevent fraud
Detect abuse
Analyze traffic
Protect platform security
Measure advertising performance

Third-party advertising partners may also use cookies, pixels, device identifiers, and similar technologies.

Users may disable cookies through browser settings, however certain platform features may not function properly.

3. HOW WE USE YOUR INFORMATION

We may use collected information to:

Create and manage accounts
Process withdrawals
Verify user identity
Detect fraud and abuse
Monitor platform security
Improve services
Provide customer support
Comply with legal obligations
Investigate violations
Facilitate Digital Work marketplace transactions
Process Staking Pool rewards
Administer Gift Card giveaways
Track Daily Collector claims and streaks
Calculate Points, Rank, and feature unlock progression
Process Person Verification for account reinstatement
Protect our rights and property

4. FRAUD PREVENTION

To maintain fairness and security, we may use automated and manual systems, including device fingerprinting techniques, to detect:

Multiple accounts
VPN usage
Proxy usage
Bot activity
Fake referrals
Device manipulation
Identity fraud
Suspicious withdrawal activity
Advertising fraud
Digital Work marketplace abuse (fake gigs, dispute fraud)
Staking pool manipulation
Market price manipulation
Gift Card giveaway abuse
Person Verification document fraud
Previously banned devices attempting re-registration

Accounts identified as suspicious may be reviewed, restricted, suspended, or permanently terminated.

5. KYC AND IDENTITY VERIFICATION

Identity verification (KYC) is mandatory before withdrawals are approved. A separate Person Verification process may also be required for users whose accounts are placed on "hold" status.

KYC Verification: Users submit their full name, phone number, and optionally a phone account. Documents are used solely for identity confirmation, fraud prevention, legal compliance, and platform security.

Person Verification: Users on "hold" status must submit a government-issued document type, document number, and a selfie photograph holding the document. This data is reviewed by the Platform administrator to determine account reinstatement eligibility.

Submission of forged, altered, stolen, borrowed, manipulated, or misleading documents may result in:

Withdrawal rejection
Account suspension
Permanent account termination
Forfeiture of rewards
Restriction of future platform access

6. INFORMATION SHARING

We do not sell users' personal information.

We may share information with:

Payment processors
Identity verification providers
Hosting providers
Security providers
Advertising partners
Analytics providers
Legal authorities when required by law

Information may also be disclosed when necessary to:

Investigate fraud
Enforce platform policies
Protect users
Protect the Platform
Comply with legal obligations

7. DATA RETENTION

We retain information for as long as necessary to:

Operate the Platform
Maintain security records
Prevent fraud
Resolve disputes
Comply with legal obligations

Even after account closure, certain records may be retained where legally permitted or required.

8. INTERNATIONAL USERS

The Platform is accessible worldwide.

By using the Platform, you acknowledge that your information may be stored, processed, or transferred across different countries where our service providers operate.

9. ACCOUNT SECURITY

Users are responsible for protecting their login credentials.

We are not responsible for losses resulting from:

Weak passwords
Shared accounts
Unauthorized account access caused by user negligence

10. CHILDREN'S PRIVACY

The Platform is intended only for individuals aged 18 years or older.

We do not knowingly collect personal information from individuals under 18 years of age.

Accounts discovered to belong to minors may be suspended or removed.

11. THIRD-PARTY SERVICES

The Platform may contain links, advertisements, or integrations provided by third parties.

We are not responsible for the privacy practices, content, or security of third-party services.

Users should review the privacy policies of those third parties separately.

12. SECURITY MEASURES

We implement reasonable technical, administrative, and security measures to protect information, including:

CSRF (Cross-Site Request Forgery) tokens on all forms
Content Security Policy (CSP) headers with strict default-src restrictions
Rate limiting on login attempts (5 attempts per 60-second window, 15-minute lockout after threshold)
Email-based two-factor authentication (2FA) with 6-digit codes and 5-minute expiry
Session timeout after 1 hour of inactivity
Cloudflare Turnstile bot detection on login and registration forms
Password hashing using PHP's PASSWORD_DEFAULT algorithm
Device fingerprinting for fraud detection and account security

However, no internet-based system can guarantee absolute security, and users acknowledge that information transmission over the internet carries inherent risks.

13. YOUR RIGHTS

Subject to applicable laws, users may request:

Access to personal information
Correction of inaccurate information
Deletion of eligible information
Withdrawal of consent where applicable

Certain requests may be limited when retention is necessary for security, fraud prevention, legal compliance, or business operations.

14. POLICY CHANGES

We reserve the right to modify this Privacy Policy at any time.

Updated versions become effective immediately upon publication on the Platform.

Continued use of the Platform constitutes acceptance of any revised Privacy Policy.

15. CONTACT

For privacy-related questions, requests, or concerns, users may contact us through the official support channels published on the Platform.

By using Earning by Project-BHV, you acknowledge that you have read, understood, and agreed to this Privacy Policy.