Account, Security & Privacy

This page covers how to keep your account safe, set limits on your play, change your language and avatar, and close your account. For registration and login basics, see the Player Guide.

Open your profile by clicking your username in the top navigation bar.

Table of Contents

  1. Reset a Forgotten Password
  2. Two-Factor Authentication
  3. Play Limits and Breaks
  4. Language
  5. Avatar and Profile Details
  6. Download Your Data
  7. Delete Your Account

Reset a Forgotten Password

  1. On the login page, click Forgot Password
  2. Enter your email address and click Send Reset Link
  3. Open the link in the email. It works once and expires after 1 hour
  4. Enter your New Password and Confirm New Password, then click Reset Password

For privacy, the site gives the same response whether or not the email address has an account.

Your new password needs at least 12 characters, with an upper case letter, a lower case letter, a number and a special character. After a reset, you are signed out everywhere, so you’ll need to log in again on each device.

If you still know your password, change it on your profile’s Change Password tab.

Two-Factor Authentication

Two-factor authentication (2FA) adds a second step to logging in, using a 6-digit code from an authenticator app.

Logging In With 2FA

If 2FA is on for your account:

  1. Log in with your email and password
  2. On the Two-Factor Authentication screen, enter the 6-digit code from your app
  3. Click Verify

Backup Codes

If you lose your authenticator app, click Use backup code on the same screen and enter one of your backup codes.

  • You get 10 codes of 8 characters when 2FA is turned on
  • Each code works once
  • They are only shown at that moment, so store them somewhere safe
  • Turning 2FA on again replaces any old codes

Too Many Wrong Codes

After 5 wrong attempts within 15 minutes, you have to wait before trying again. After 10 failed attempts, 2FA verification is locked. The lock lifts after 24 hours.

Turning 2FA On or Off

The standard player site has no screen for this. The profile page has no 2FA setting. Your account’s 2FA can be turned on and off through the account API, or through your operator’s own app if it offers this. Ask your operator what’s available.

StepRequestWhat you need
Start setup and get a QR codePOST /api/v1/user/2fa/setupA logged-in session
Confirm and turn onPOST /api/v1/user/2fa/enableThe secret and a code from your app. Returns your backup codes
Turn offPOST /api/v1/user/2fa/disableA code from your authenticator app. A backup code doesn’t work here

Operators also have a Two-Factor Auth feature setting, which is off by default. It controls the requirement for administrators to use 2FA and doesn’t block these player requests.

Play Limits and Breaks

Open your profile and choose Play limits and breaks. These tools are always on your profile; there is no operator setting that hides them.

Setting Limits

LimitWhat it does
Daily deposit limitCaps your deposits per day. It can’t be set above the maximum that applies to your account
Daily net loss limit (GOLD)Stops play once your net loss reaches this amount in the last 24 hours
Weekly net loss limit (GOLD)Stops play once your net loss reaches this amount in the last 7 days
Session limit in minutesLimits how long a session can run. Allowed range: 15 to 1440 minutes

Enter your amounts and click Save. Leave a field empty for no personal limit.

  • Lowering a limit, or setting a first one, applies immediately
  • Raising or removing a limit takes effect after 24 hours. The panel shows it as pending until then
  • Loss limits count completed GOLD cash hands, net of winnings

When you reach a loss or session limit: you’re sat out, your cash game play is closed once the current hand ends, and you’re signed out. Reaching your session limit also starts an automatic 15-minute cool-off.

Reminders: while you play, you may get a message with your time played, net result in GOLD and hands played. If you have a session limit, the first one arrives 5 minutes before it, or after at most 60 minutes.

Taking a Break

There are two kinds of break:

BreakLengths
Cool-off1, 7 or 30 days
Self-exclusion1, 7, 30, 180, 365 or 1825 days, or Permanent

To start one:

  1. Tick I understand that I cannot cancel or shorten the selected break.
  2. Choose a length
  3. Click Start cool-off or Start self-exclusion

A break cannot be cancelled or shortened. You can only extend it. A permanent self-exclusion can’t be changed, and you can’t start a cool-off during a self-exclusion.

What happens when a break starts:

  • You are signed out of all your sessions
  • Deposits and play are blocked for the length of the break
  • Your current cash hand finishes, then your stack is returned
  • In a running tournament you are sat out, and your chips stay in play under the normal blinds and prize rules

Self-exclusion also unregisters you from tournaments that haven’t started and refunds them as a normal unregistration. A cool-off leaves those registrations in place.

During a break you can still sign in to view your account, manage your account, and withdraw funds.

Language

Click the language button in the top navigation bar and pick your language. If you’re logged in, your choice is saved to your profile.

The button only appears if your operator offers more than one language.

Avatar and Profile Details

Changing Your Avatar

  1. Open your profile and choose Edit Profile
  2. Click Change Avatar
  3. Choose an image

By default you can upload PNG, JPG, JPEG, GIF or WEBP images up to 500 KB. Your operator can change these limits, or turn off uploads altogether. Your image is resized, and its embedded metadata is removed.

Your Details

On Edit Profile you can change your First Name and Last Name. Your Username and Email are shown but can’t be edited there.

Download Your Data

You can download a copy of your data as a JSON file using GET /api/v1/account/export while logged in. The standard site has no button for this, so ask your operator if you need help.

It includes:

  • Your profile details
  • Your transaction history
  • Your hand history, with your own cards and position. Other players are shown only as a count
  • Your table and player sessions
  • A list of your verification documents, with their type, status and upload date

Delete Your Account

The standard player site has no delete button. Deletion runs through the account requests below. If you can’t use them, contact your operator using the support details on their site.

ActionRequest
Request deletion. Your password is requiredPOST /api/v1/account/delete-request
Check its statusGET /api/v1/account/delete-request
Cancel itDELETE /api/v1/account/delete-request

Before You Request

You can’t request deletion while you have any of these:

  • A real-money balance. Withdraw it first
  • An agent wallet balance. Settle or withdraw it first
  • Pending transactions
  • A seat at a table
  • A registration in a tournament that is registering, running or paused

Virtual chips don’t prevent deletion, and they aren’t refunded.

The 30-Day Wait

Your account is scheduled for deletion 30 days after your request, and you get a confirmation email with the date. You can cancel at any time during those 30 days.

When the date arrives, the same checks run again. If one of them fails, for example because you’ve since joined a table, your account isn’t deleted at that time.

What Is Removed

Removed or clearedDetails
Personal detailsFirst and last name, phone, address, city, country, zip code, date of birth, gender and avatar
IdentityYour username becomes deleted_user_ plus a short code, and your email is replaced with a placeholder
Network dataLast login IP and bound IP address
Security data2FA secret and backup codes, sessions, refresh tokens, and password reset and email verification tokens
ChatYour chat messages

Your account is also blocked, so it can’t be used again.

What Is Kept

The account record stays in anonymized form, and records not listed above aren’t removed. That includes your transaction records, which are kept for compliance, along with your hand history, session records and verification documents. Your operator can tell you how long it keeps these and what its legal obligations are.

Try the live demo Pricing

Have questions about Poker Engine? We reply fast.