Security Controls
Website accounts use password hashing, cookie-backed sessions, staged recovery flows, and audit-linked security events to protect player identity.
Players are responsible for monitoring the security center and acting quickly if unexpected session, recovery, or verification activity appears.
- Review active sessions regularly.
- Use password reset immediately after compromise concerns.
- Complete email verification to reduce support friction.
Staff Review
Support staff may delay sensitive changes until account ownership is reasonably verified through ticket history, message context, or platform events.
