Security & trust

How we protect your account, your Flashy Gold, and your data. Built on Telegram identity, defended in depth.

Encryption
Data encrypted in transit (TLS 1.3) and at rest. [specifics pending infra owner]
Account safety
Telegram-native auth — no passwords to leak. Session tokens are short-lived & HttpOnly.
Balance integrity
Every claim is an atomic, audited transaction with compensating rollback on failure.
Compliance posture
SOC 2 / ISO 27001
[status pending compliance owner]
GDPR / data residency
[pending counsel]
Infrastructure
Isolated environments, least-privilege access, continuous monitoring, and idempotent, rate-limited APIs. [architecture detail pending infra owner]
Report a vulnerability
Found something? Responsible disclosure is rewarded. We respond within 48 hours.
Contact security