In Kanveay the opponent facing you is not an AI but a real player spending time and effort just as you do. That is why cheating, multi-accounting and transferring resources between accounts are not, in our eyes, "cleverness" but a direct attack on other players' effort. With this announcement we set out transparently the fair play system we have run for years: what we count as a violation, how we detect one, how penalties work and by what mechanisms we protect the honest player. The aim is not to frighten anyone; it is that everyone knows the rules with the same clarity.

🚫 What do we count as a violation?

• Multi-accounting — one person opening several accounts and using them to feed one another.
• Transferring resources between your own accounts — for example selling one account's item to another at a token price through the market.
• Conquest abuse — trying to use the mechanic for conquering abandoned accounts to "conquer" your own old account and collect the reward.
• Automation and tampering — tools that play the game without a human hand, or attempts to alter results on the client side. In Kanveay all battles and rewards are calculated on the server; nothing shown as "won" on the client happens unless the server confirms it.

🔍 How detection works: one signal is never enough

The first condition of a fair enforcement system is not punishing an innocent player by mistake. That is why multi-account detection weighs three separate signals together: IP address, device identity and behavioural pattern (suspicious market transfers, conquest attempts and the like). Two principles are the foundation of the system:

• An IP match alone never produces a penalty. Two real players sharing a home, a dormitory or a workplace can appear on the same IP; we know that and account for it. A device match is a strong signal, an IP only a supporting one.
• A single suspicious event never produces a penalty. A penalty comes into play only when suspicious events pass a certain threshold. One transaction made by mistake burns nobody's account.

Siblings or flatmates living under the same roof can play with an easy mind — as long as the accounts are not used to feed one another. The line is clear: if two accounts play like two separate people, there is no problem; if two accounts work for the benefit of one person, there is a violation.

⚖️ The penalty ladder: escalating and predictable

Once a violation is established, the penalty is applied automatically and in steps. The ladder was deliberately designed this way: a first violation is a warning, while repeating it means there is no place for you in the game.

Every penalty is logged and reported to the administration. If you believe a penalty is unjust you can appeal through support; because records are kept per incident, appeals are examined against concrete data.

💰 The silent guardians of the economy

The enforcement system is the visible tip of the iceberg; the real work is in the rules that make abuse difficult in the first place:

• Market floor prices. In player-to-player trading no item can be sold far below its value — there is a floor tied to the shop value for ordinary items and to the diamond value for premium ones. That closes off wealth transfer between accounts through "handing over an item for 1 gold" from the start. For the details see the Economy guide.
• Conquest checks. Being able to conquer long-abandoned accounts is one of the game's well-liked mechanics; but an attempt to conquer your own old account is blocked by IP and device checks, and persistent attempts fill the penalty threshold. The proper use of the conquest mechanic is explained in the Arena & PvP guide.
• Server authority. Battle results, rewards and the entire economy are calculated on the server. What is displayed in the browser does not matter; what is written in the server's ledger is what counts.

🛡️ The other side of the coin: protections for honest players

Fair play is not only about punishing cheats but about making sure honest players are not crushed. These are the protections built into the PvP system:

• Newcomer protection. Newly opened accounts are closed to attack throughout the settling-in period, and during it they earn double experience and double gold. The protection falls if the player attacks someone themselves — if you attack, you can be attacked; that is the rule.
• Attacking the weak is blocked. Matching looks at weighted combat value, not level: you cannot attack opponents clearly weaker than you, while attacking someone stronger is free. The strong are not allowed to farm the weak.
• Harassment prevention. You can attack the same target at most 3 times in 4 hours, and a cooldown runs for each opponent. Nobody can camp on a single player.
• Losing-streak protection. The system suggests winnable targets to a player on a run of defeats; a player who hits bottom is not pushed further down.
• Your items are never plundered. In a PvP defeat you may lose part of the gold in your wallet, but the items in your inventory are yours under all circumstances. That is why it is wise to put your gold into gear and training rather than into the bank — the details of that tactic are in the Combat System guide.

🔐 Account security: our side and yours

The protections running on our side: "Remember me" sessions are limited per device and kept on at most 5 devices per account; if an unrecognised persistent session attempt is detected, all persistent sessions are closed automatically and a security warning lands on your account. Administrator and moderator accounts never receive a persistent session at all. When a username is changed, the released name is held in reserve for 30 days — nobody can take the name you dropped yesterday today and impersonate you.

On your side, three simple rules are enough:

1. Share your password with nobody. Our team — administrator, moderator or support staff — will never ask through any channel for your password, your verification code or your payment details. Anyone who asks, whoever they claim to be, is a fraud. The list of our genuine channels: Official Channels.
2. Use a strong, unique password. Do not use here a password you use on other sites; a leak there opens your account here.
3. Do not tick "remember me" on shared devices. And log out when you are done.

💬 Frequently asked situations

• My sibling and I play from the same house — will we be penalised? No — as long as the two accounts play like two separate people, there is no problem. Appearing on the same IP is never on its own a reason for a penalty. The only thing you need to avoid is "feeding" transactions between the accounts, such as handing over cheap items through the market.
• I log in from shared internet at a café or a dormitory — is that risky? It is not. A shared IP is the most normal thing in the world; the system knows that and treats the IP only as a supporting signal.
• Can I leave my account with a friend while I am on holiday? We advise against it. Account sharing blurs your account's security history and makes it impossible to tell who did what if a problem arises. The account is yours; the password should stay with you alone.
• I opened a second account by accident — what should I do? Leave the unused account alone and play on your main one. As long as you never let the two accounts touch each other, an old record alone produces no penalty.
• I was penalised but I think it was unjust. Appeal through support. Every penalty is kept together with its incident record; your appeal is examined against concrete data.

👁️ An automated system plus a human eye

Our enforcement system is automated but not unsupervised. Every penalty issued is reported to the administration at the same moment; which account was penalised, for which violation in the sequence and on what grounds all passes under a human eye too. Automation's job is speed and impartiality — the rule works the same for everyone and nobody gets special treatment. The job of human review is nuance: the cases that sit in the grey zone, appeals, and improving the system itself. The two working together minimise both the suspicion of "there is favouritism" and the grievance of "the machine got it wrong". The same balance applies across moderation as a whole: player reports go into a queue, are assessed by a person, and a complaint that comes to nothing leaves no stain on the person reported.

📣 Seen something suspicious?

When you see a player you suspect of cheating, an account impersonating you or a message asking for your password, report it through in-game support. Reports are examined one by one; the "one signal is not enough" principle described above applies here too — nobody is punished merely for being reported, and nobody can be lynched by a pile-on of complaints. For frequently asked security questions see the FAQ.

🎯 Why escalating penalties? Our philosophy

Some games apply a permanent ban on a first violation; we deliberately do not. Part of a first violation genuinely comes from not knowing — the player has not read the rules and assumed "everyone does it". A first penalty of 30 days is both a deterrent and leaves the door back open: there is no shortage of examples of players who served their penalty and carried on playing clean. A second violation can no longer be explained by ignorance; a year is the clearest form of the message "this is not how this game is played". At the third, the conversation ends. That the ladder works the same for everyone is the system's justice itself: no acquaintance is favoured and no newcomer is thrown away.

This policy is a living document: as new avenues of abuse appear, the protections develop too, and every important change is announced on this page.

← All news · The in-game detail of PvP rules and protections: the Arena & PvP guide.