Privacy Notice

1.Who We Are

This Privacy Notice describes how the Golden Poysha (BGPC) project handles personal information collected through goldenpoysha.com and its associated airdrop registration form.

BGPC is a BEP-20 utility token deployed on the BNB Smart Chain. The project is operated by its founder and is not a registered company. References to "we," "us," and "our" mean the BGPC project operators.

2.What We Collect

2.1 Information you provide directly

• Wallet address — your public BNB Smart Chain wallet address (begins with 0x, 42 characters).
• Math captcha answer — used once to verify you are human, then discarded.
• Consent confirmation — your acknowledgment that the wallet is correct, that digital currencies are legally permitted in your country, and that we never ask for private keys.

2.2 Information collected automatically

• IP address — used to derive your approximate country for compliance enforcement, then stored.
• Country and region — derived from your IP via a third-party geolocation service (ip-api.com).
• Source tracking parameters — if you arrive via a tagged link (e.g. ?src=fb-page), we record which platform referred you.
• Browser metadata — user agent string, accepted languages, and HTTP referrer header.
• Submission timestamp — recorded in both UTC and Malaysia time (Asia/Kuala_Lumpur).

2.3 What we do NOT collect

• Your name, email address, phone number, or any other identifying detail.
• Your wallet's private key or seed phrase. We will never ask for these. Anyone claiming to represent BGPC and asking for these is a scammer.
• Tracking cookies for advertising. We use only a first-party PHP session cookie that exists solely to validate the math captcha. It expires when you close your browser.

3.Why We Collect It

• Compliance enforcement. BGPC actively does not promote, distribute, or accept submissions from sanctioned jurisdictions. Your IP-derived country is checked against a 26-jurisdiction blocklist before your submission is accepted.
• Airdrop distribution. Your wallet address is the destination for the 500 BGPC token transfer, executed via MultiSender on BNB Smart Chain.
• Fraud and abuse prevention. Source tracking and IP-rate-limits prevent the same network from registering many wallets and exhausting the airdrop allocation.
• Aggregate analytics. Counts of submissions per source, country, and day inform marketing decisions. No individual record is published.

4.How Long We Keep It

• Submission record — retained until 90 days after the airdrop concludes, then either deleted or anonymized (wallet preserved without IP/UA/referrer).
• Server logs (airdrop_log.txt) — retained 180 days, then rotated.
• Blockchain transactions — once 500 BGPC is sent to your wallet, that transfer is recorded permanently on BNB Smart Chain. This is public and outside our control. Anyone with your wallet address can see the transfer on BscScan.

5.Who We Share It With

We do not sell, rent, or share your submission data with advertisers, marketers, or data brokers. Limited sharing occurs only in these cases:

• ip-api.com — your IP address is sent to this third-party geolocation service to derive your country. They have their own privacy policy at ip-api.com/docs/legal.
• BscScan and the BNB Smart Chain — when 500 BGPC is sent to your wallet, the transaction is publicly visible on the blockchain.
• Legal compliance — if a competent authority issues a lawful order, we will comply to the extent required by law.
• Hosting infrastructure — the website is hosted on Namecheap; data at rest sits on Namecheap servers, governed by their security and privacy practices.

6.Restricted Jurisdictions

BGPC submissions are automatically blocked from the following jurisdictions due to comprehensive sanctions, OFAC restrictions, or local cryptocurrency prohibitions:

Submissions from India are accepted with a noted reminder that India applies a 30% tax on virtual digital asset gains. Submissions from Saudi Arabia are accepted with a noted regulatory gray-area reminder. In both cases, you remain solely responsible for compliance with local tax and regulatory requirements.

7.Your Rights

You can exercise the following rights at any time by emailing info@goldenpoysha.com from any address, citing the wallet address you submitted:

• Right to access — request a copy of the data we hold on your submission.
• Right to deletion — request that your submission record be deleted. This will also disqualify the wallet from future BGPC airdrop batches.
• Right to correction — request correction if any captured field is wrong (e.g. country misclassified).
• Right to withdraw consent — same effect as deletion.

We aim to respond to all rights requests within 14 days. We may need to verify the request is genuinely from the wallet owner; the simplest verification is a small signed message from the wallet address itself.

8.Security

The submissions file is stored in a server directory protected against direct public access via Apache configuration. Only the project operator has access via authenticated cPanel and the password-protected admin dashboard.

That said, no online system is 100% breach-proof. The most important defense is what is not stored: we never collect or store your name, email, phone, or private key, so the data exposure risk in any breach is limited to wallet addresses (already public on-chain) and IP addresses.

9.Changes to This Notice

We may update this notice as the project evolves (e.g. adding new compliance jurisdictions, new third-party services, or new retention timelines). Material changes will be announced on the project's social channels at least 7 days before they take effect. The "last updated" date at the top of this page reflects the most recent change.

10.Contact