Privacy Policy

InPlay Global, Inc., and its subsidiaries and affiliates (collectively "InPlay", "we", "us"), operates The InPlay Challenge 2026, the inplaytradingchallenge.com website and the InPlay app. This Privacy Policy explains what personal data we collect, how we use and protect it, and the choices you have. It applies to the Challenge onboarding and referral experience.

Account information: your first and last name, email address (required), and account credentials managed by our identity platform.

Identity-verification data: to confirm your identity and age (18+), our verification vendor collects and processes government-ID and biometric information directly. We receive only the verification result and the minimum identifiers needed to link it to your account.

Referral data: your referral code, who referred you, and referral activity.

Usage and device data: such as IP address, device/browser information, and analytics about how you use the site, collected only where you have consented (see Cookies).

To create and operate your account; to verify your identity and eligibility; to run the Challenge and the referral program; to detect, prevent and investigate fraud and abuse; to meet legal, regulatory and AML/KYC obligations; to communicate service and account notices; and to maintain the security and integrity of the Service.

Identity verification, including any biometric processing such as selfie matching, is performed by Persona, our third-party identity-verification provider, acting as a service provider or processor on our behalf. Persona collects and processes verification information directly through its verification flow and handles that information in accordance with its Processor Privacy Policy, our instructions, and applicable law. For additional information, please view applicable Persona policies at https://withpersona.com/legal/terms-of-use.

We share data only with service providers acting on our behalf, under appropriate agreements, including identity verification, cloud hosting and database infrastructure, identity/authentication, transactional email, analytics where consented, fraud prevention, legal, compliance, and operational support providers. By participating in the Challenge, you expressly consent to the sharing of such information as contemplated herein.

We keep personal data only as long as needed for the purposes above and to meet legal requirements. When you close or delete your account, we apply soft deletion: your account is deactivated and archived rather than permanently erased, so that identity-verification, AML/KYC, and audit records survive, at a minimum, for the period required by law.

As a result, the right to erasure does not extend to records we are legally required to retain for AML/KYC purposes. We maintain an audit log of key account and verification events for security and compliance. Further, even after any applicable legal retention period has expired, data may not be deleted unless deletion is requested by you in writing delivered to legal@inplayglobal.com.

Subject to applicable law and the AML/KYC retention exception above, you may request access to, correction of, or deletion of your personal data, object to or restrict certain processing, request portability, and withdraw consent for analytics/marketing at any time. California residents have rights under the CCPA, including the right to know and to delete, and the right not to be discriminated against for exercising them. To exercise any right, contact us using the details below.

We use essential cookies to run the site and, only with your consent, analytics cookies to understand usage. You can accept or decline analytics via the cookie banner and change your choice at any time. See our Cookie Policy for details.

We protect data with encryption in transit and at rest, access controls, secret management, and audit logging. No method of transmission or storage is completely secure, but we work to safeguard your information and to respond appropriately to any incident.

We and our providers may process data in the United States and other countries. Where data is transferred internationally, we rely on appropriate safeguards as required by applicable law. By participating in the Challenge, you explicitly acknowledge and agree that your data may be shared outside the United States where necessary, in the sole discretion of InPlay.

The Service is intended only for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. Attempts to access the Service by anyone under the age of 18 is a violation of the terms and conditions thereof.

We may update this Privacy Policy from time to time. We will post the updated version here with a new effective date and, where appropriate, notify you.

For privacy questions or to exercise your rights, email legal@inplayglobal.com.