> ## Documentation Index
> Fetch the complete documentation index at: https://aceup.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Security and privacy

> What Ace Up holds, what it shows other people, and what it never asks for.

## What Ace Up never asks for

* **Your seed phrase or private key.** There is no situation in which Ace Up
  needs either. Anyone asking is not Ace Up.
* Any funds sent to "verify", "unlock" or "release" a balance.
* Your bot token, except inside the [venue setup
  flow](https://aceup.mintlify.site/owners/create-your-bot.md) in @Aceupgamebot — where it is read, encrypted
  and the message is deleted.

## Your money

Your deposit addresses belong to your account alone, one per chain. They never
change, and they are never shared with another player.

The keys that control them are held **encrypted at rest**, with authenticated
encryption, under a key used for nothing else. Ace Up keeps most of the platform
float in cold storage and only a working balance online.

Every entry in Ace Up's ledger carries a unique reference, which is what makes a
deposit seen three times get credited exactly once — and a withdrawal
interrupted mid-send get reconciled rather than sent twice.

## Your session

Withdrawals are **confirmed in the bot DM**, not in the app. A stolen session
token therefore cannot cash out your balance, because whoever holds it cannot
also answer your Telegram messages.

Sessions are per venue and they expire. A session minted at one venue does not
work at another.

## What other players can see

Tapping your name at a table shows:

* Your display name and Telegram photo
* Your rounds, wagered, net, win rate and biggest win **at that venue**

It never shows your balance, your deposits or withdrawals, or anything you did at
another venue.

You can also set an alias instead of your Telegram first name, and turn off win
announcements in group chats, from **More → Account**.

## What venue owners can see

Aggregate numbers for their own venue — handle, house net, hands, how many unique
players. Never an individual player's balance, and never their deposits or
withdrawals.

## What Ace Up stores

| | |
| - | - |
| Your Telegram user ID | To identify your account |
| Your terms acceptance | Time, version and the country your connection appeared from |
| Your rounds, bets and results | Your history, and the fairness record |
| Your ledger entries | Deposits, settlements, withdrawals |
| Your saved withdrawal addresses | Only ones you saved, with the name you gave |

There is no voice chat, so no audio exists to store.

## Reporting a security issue

Through [`/support`](https://aceup.mintlify.site/help/support). A round that does not verify, or anything
that looks like it touches other people's money, is the thing we most want to
hear about and it is treated that way.

Ace Up is a real-money game. Only play with money you can afford to lose.
[Playing responsibly](https://aceup.mintlify.site/safe/limits.md) covers the tools, all of which are real and
all of which are yours.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.