Acceptable Use Policy

Use only with authority

• Use only your own approved venue accounts, access codes, funds, devices, and agents.
• Do not share a workspace or act for another person without a separately approved legal and product arrangement.
• Keep venue credentials out of prompts, tickets, support messages, and Jockey fields that do not explicitly accept them.

Respect law, location, and venue rules

• Do not falsify age, identity, residency, beneficial ownership, tax status, source of funds, or location.
• Do not use VPNs, remote control, GPS spoofing, proxies, or another person to evade a geographic or account restriction.
• Do not use Jockey where the venue, contract, automation method, or transaction is unavailable or prohibited.

Protect market integrity

• No manipulation, spoofing, wash trading, collusion, matched orders, deceptive liquidity, insider trading, misuse of confidential information, fraud, sanctions evasion, or money laundering.
• No attempt to influence an event or settlement source unlawfully, interfere with a venue, or create a misleading market signal.
• No unlicensed sportsbook or offshore-book integration, credential brokering, account resale, pooling, or custody of another person’s funds.

Protect Jockey and others

• No malware, destructive testing without written permission, denial of service, automated credential attacks, secret extraction, privacy invasion, or access beyond your authorization.
• Report suspected security issues privately. Jockey may immediately stop activity, revoke access, preserve evidence, and notify an affected venue or authority when legally appropriate.

Security research and vulnerability reports

• Do not test production accounts, access another person's data, degrade service, retain unnecessary data, demand payment through a threat, or publicly disclose an unresolved issue without written authorization.
• A future vulnerability-disclosure policy must identify authorized systems, excluded tests, a reporting channel, safe-harbor terms, response expectations, and how researchers should delete data. Until that policy and security mailbox are operational, no testing permission is granted.

No high-risk delegation or deceptive promotion

• Do not let an agent change its own permissions, limits, approval rules, recovery contacts, or connected accounts, or delegate authority to another person or agent without an authenticated human review.
• Do not use Jockey to send spam, impersonate another person, manufacture testimonials, hide compensation, promise returns, pressure a vulnerable person, or market an unavailable or unlawful product.
• Do not present simulated, backtested, selectively reported, or agent-generated results as actual customer performance.

Enforcement and reporting

Jockey may investigate suspected violations, restrict or terminate access, preserve evidence, cancel pending Jockey instructions where possible, and notify a venue or authority when legally required or reasonably necessary to protect the service or another person. Report security concerns to security@jockey.to and legal or rights concerns to legal@jockey.to after those mailboxes are operational. Emergency or venue-order issues must also be reported directly to the relevant venue.