POKERTACT / LEGAL CENTER
Security & Responsible Disclosure
Pre-launch draft · Effective date, contracting entity and jurisdictional review pending. This page does not override mandatory consumer or privacy rights.
1. Account security
Use strong unique passwords, phishing-resistant MFA where supported, verified domains and short-lived sessions. Never share wallet seed phrases or private keys with PokerTact support.
2. Payment integrity
Treat blockchain payment instructions as untrusted until independently verified. Validate network, asset, receiving address, invoice, confirmations, idempotency and refunds server-side. No browser-only payment confirmation is sufficient.
3. Post-quantum claims
Modern post-quantum cryptography requires audited implementations and compatible protocols. ML-KEM and ML-DSA can be considered where supported, but existing wallets, browsers and infrastructure are not automatically quantum-resistant. No unconditional quantum-proof claim is made.
4. Vulnerability reports
Submit a minimal reproducible description, affected URL and impact through the contact process. Do not access other users’ data, disrupt availability or conduct destructive testing. A dedicated security contact, disclosure SLA and safe-harbor policy require approval.
5. Incident response
The operator must maintain access revocation, log preservation, breach assessment, notification procedures and recovery testing. Report suspected account compromise promptly.