Acceptable Use Policy

This Acceptable Use Policy (“AUP”) applies to anyone who accesses or uses the Phylax iG website, console, widgets or APIs. It is incorporated into, and forms part of, the Terms of Service. Capitalised terms have the meaning given in the Terms.

You must not use the Service to:

• violate any applicable law or regulation, including gambling, anti-money-laundering, sanctions or data-protection law;
• access, tamper with or use non-public areas of the Service, other tenants’ data, or our systems without authorisation;
• probe, scan or test the vulnerability of the Service, or breach or circumvent any security or authentication measure, except under an agreed responsible-disclosure arrangement;
• interfere with or disrupt the Service, for example by sending malware, overloading endpoints, or forging signatures or event IDs;
• reverse engineer, scrape or copy the Service or its content other than as permitted by law;
• misrepresent your identity or affiliation, or share credentials, API keys or signing secrets with unauthorised parties.

When integrating with Phylax iG you must verify the HMAC signature on every event before acting on it, enforce idempotency using the event ID to prevent duplicate processing, and keep your signing secrets and credentials secure. Your PAM remains the system of record for all wallet and monetary actions.

If you discover a security vulnerability, please report it promptly and confidentially to ivan.novak@vivalmi.com and give us a reasonable opportunity to remediate before any public disclosure. Do not access or modify data that is not yours.

We may investigate suspected violations and may suspend or terminate access, remove content, and take legal action where appropriate. We may cooperate with law-enforcement authorities as required.