SporTech (“SporTech”, “we”, “us”, or “our”) respects your privacy and is committed to protecting personal data processed through our websites, applications, services, club experiences, membership features, wallet services, commerce features, community features, media services, and other SporTech-powered products (collectively, the “Services”).
This Privacy Policy explains what personal data we may collect, how we use it, the legal bases we may rely on, when information may be shared or transferred, and the privacy rights that may be available to you.
1. Scope
This Privacy Policy applies to personal data processed by SporTech in connection with the Services.
Depending on the specific service and contractual arrangement, SporTech may act:
- as a data controller, where SporTech determines why and how personal data is processed; or
- as a data processor, where SporTech processes personal data on behalf of a club, league, federation, or commercial partner.
Where a club, league, federation, or other partner independently determines how your personal data is used, its own privacy notice may also apply.
2. Our Privacy Principles
We aim to process personal data in accordance with the following principles:
- Lawfulness: personal data is processed only where an appropriate legal basis exists.
- Transparency: users should understand what data is collected, why it is used, who may receive it, and how it is handled.
- Purpose limitation: personal data is collected for specific and legitimate purposes.
- Data minimisation: we seek to collect only the personal data reasonably necessary for the relevant service.
- Accuracy: we take reasonable measures to keep personal data accurate and current.
- Security: we use appropriate technical, administrative, and organisational safeguards.
- Accountability: we remain responsible for personal data under our control.
We also apply privacy-by-design principles when developing products, features, integrations, and services.
3. Personal Data We May Collect
The personal data we process depends on the SporTech service you use and the features made available by SporTech or a participating club, league, federation, or partner.
3.1 Identity Data
This may include:
- full name;
- username;
- user ID;
- mobile number;
- membership number;
- club membership identifiers; and
- other identifiers used to create, manage, or secure your account.
We may use this information for account creation, authentication, membership administration, support, fraud prevention, and security monitoring.
3.2 Contact Data
This may include:
- mobile number;
- email address;
- preferred language; and
- communication preferences.
We may use this information for account communications, OTP delivery, notifications, customer support, membership communications, and marketing communications where permitted.
3.3 Identity Verification and KYC Data
Where identity verification or compliance checks are required, we may process information such as:
- national identification information;
- passport information;
- date of birth;
- nationality;
- verification status; and
- supporting identity-verification records.
This information may be used for identity verification, compliance, fraud prevention, account protection, and applicable club or regulatory requirements.
3.4 Membership Data
This may include:
- membership tier;
- membership status;
- membership history;
- membership benefits;
- club affiliation; and
- related membership information.
We may use this information to administer memberships, manage loyalty or benefits, and support club engagement.
3.5 Wallet and Token Data
Where wallet or token-based features are available, we may process information such as:
- wallet ID;
- wallet balance;
- token balance;
- token purchase history;
- token usage history;
- reward history; and
- wallet activity records.
We may use this information to operate wallet services, administer rewards, support commerce functionality, and enable participation in platform features.
3.6 Payment and Commerce Data
This may include:
- purchase records;
- transaction references;
- billing records;
- refund records;
- membership purchases;
- merchandise purchases;
- ticket purchases; and
- payment-related information provided through payment systems.
We may use this information for payment processing, financial reconciliation, customer support, tax or regulatory compliance, and fraud prevention.
3.7 Location Data
Depending on the service and your device settings, we may process:
- country;
- city;
- login country;
- regional information; and
- device location where enabled.
We may use location data for localisation, compliance controls, security monitoring, user experience, and market analytics.
3.8 Device and Technical Data
This may include:
- device type;
- device model;
- operating system;
- application version;
- IP address;
- browser information; and
- device identifiers.
We may use this information for security, fraud prevention, technical support, analytics, and platform performance.
3.9 Behavioural and Engagement Data
We may process information generated when you interact with the Services, including:
- content views;
- fan activities;
- poll participation;
- voting activity;
- prediction participation;
- membership usage;
- event participation; and
- community activity.
We may use this information for personalisation, analytics, product improvement, engagement optimisation, and club insights.
3.10 Media and User-Generated Content
Where applicable, we may process:
- profile pictures;
- uploaded images;
- uploaded video;
- audio content;
- user-generated content;
- community content;
- live-streaming content; and
- other media submitted or generated through the Services.
We may use this information to provide media services, community participation, content delivery, and club engagement features.
3.11 Analytics Data
We may process usage and performance information such as:
- user activity metrics;
- membership metrics;
- commerce metrics;
- engagement analytics;
- retention analytics; and
- campaign analytics.
We may use this information for reporting, business intelligence, product optimisation, and commercial insights.
3.12 AI Processing Data
Where AI-enabled features are used, we may process information associated with:
- recommendation inputs and outputs;
- moderation inputs and outputs;
- AI decision logs; and
- personalisation signals.
We may use this information for recommendations, moderation, personalisation, and product enhancement.
4. Sensitive and Higher-Risk Information
Certain categories of information may require enhanced protection, including:
- government-issued identifiers;
- identity-verification records;
- biometric-related information;
- information relating to minors; and
- information connected to high-risk or regulatory investigations.
Where such information is processed, SporTech applies additional safeguards appropriate to the sensitivity of the data and applicable legal requirements.
5. How We Obtain Personal Data
Depending on the service, personal data may come from:
- information you provide during registration or profile updates;
- membership onboarding;
- club onboarding;
- user submissions;
- your interactions with SporTech services;
- device or application activity;
- payment and commerce systems;
- club systems;
- analytics systems;
- identity-verification providers;
- reward, wallet, or prediction systems; and
- participating clubs, leagues, federations, or service providers where permitted.
6. Why We Use Personal Data
We may process personal data for purposes including:
- creating and managing user accounts;
- authentication and account security;
- providing membership services and benefits;
- operating wallet and reward features;
- processing purchases, payments, refunds, merchandise, tickets, or memberships;
- enabling polls, voting, predictions, fan engagement, and community features;
- providing customer support;
- preventing fraud, abuse, and misuse;
- maintaining platform security;
- improving products and services;
- analysing platform usage and performance;
- providing recommendations and personalisation;
- moderating content and community interactions;
- sending service communications and notifications;
- sending marketing communications where permitted;
- complying with legal, regulatory, tax, AML, KYC, or governmental obligations; and
- supporting lawful business operations and international services.
We do not process personal data merely because it is technically possible to do so. Processing should be connected to a legitimate business purpose and an appropriate legal basis.
7. Legal Bases for Processing
Depending on the service, jurisdiction, and type of processing, we may rely on one or more of the following legal bases.
7.1 Contractual Necessity
We may process personal data where necessary to provide a service you requested or to perform obligations arising from a contractual relationship.
Examples may include:
- account registration and login;
- membership administration;
- wallet services;
- reward management;
- purchases;
- ticketing;
- merchandise;
- customer support; and
- other core service functions.
7.2 Consent
We may rely on consent for certain processing activities, including where applicable:
- marketing communications;
- optional personalisation;
- optional profile information;
- surveys;
- optional participation features; and
- optional location services.
Where applicable, you may withdraw consent. Withdrawal does not affect processing that took place before consent was withdrawn.
7.3 Legitimate Interests
Where permitted by law, we may process personal data where reasonably necessary for legitimate business interests, while considering your rights and interests.
Examples may include:
- fraud detection;
- abuse prevention;
- account protection;
- security monitoring;
- platform operations;
- product improvement;
- analytics;
- performance analysis;
- service optimisation;
- business intelligence; and
- strategic planning.
7.4 Legal and Regulatory Obligations
We may process personal data where necessary to comply with applicable legal, regulatory, tax, financial, AML, KYC, court, governmental, or law-enforcement obligations.
7.5 Protection of Vital Interests
In limited circumstances, we may process personal data where necessary to protect the life, health, or safety of an individual, including in connection with serious security incidents, threat investigations, or emergency situations.
7.6 Public Interest
Where applicable law permits or requires it, we may process personal data for public-interest purposes, including regulatory cooperation, sporting-integrity matters, public-safety obligations, and lawful governmental requests.
8. Sharing Personal Data
We may share personal data where reasonably necessary with approved third parties that support the operation of the Services.
These may include providers supporting:
- payment processing;
- identity verification and KYC;
- cloud hosting;
- security;
- customer support;
- analytics;
- communications; and
- AI-enabled services.
We may also make relevant information available to participating clubs, leagues, federations, or commercial partners where necessary for membership administration, communications, fan engagement, club operations, or other agreed services.
We seek to limit access to information reasonably necessary for the relevant activity.
We may also disclose information where required by applicable law, court order, regulatory request, governmental requirement, or lawful law-enforcement process.
9. International and Cross-Border Data Transfers
SporTech supports users, clubs, leagues, federations, and service providers across multiple jurisdictions. As a result, personal data may be processed, accessed, stored, or transferred internationally where appropriate.
Cross-border processing may involve:
- user and contact information;
- membership information;
- wallet or transaction information;
- commerce information;
- identity-verification information;
- analytics information; and
- media or user-generated content.
Where required by applicable law, SporTech may use appropriate transfer mechanisms, safeguards, regulatory approvals, consent mechanisms, or other lawful transfer arrangements.
Certain jurisdictions may also require local storage, processing, retention, or additional regulatory controls. SporTech may implement jurisdiction-specific measures where required.
10. Data Security
We use appropriate technical and organisational safeguards designed to protect personal data.
These safeguards may include measures relating to:
- access control and authentication;
- encryption;
- monitoring;
- logging;
- incident response; and
- other security controls appropriate to the sensitivity of the information.
No system can guarantee absolute security, but SporTech seeks to maintain safeguards appropriate to its services, users, and legal obligations.
11. Data Retention
SporTech maintains and reviews data-retention requirements as part of its privacy governance practices.
Retention may depend on factors such as:
- the type of data;
- the purpose for which it is processed;
- legal or regulatory obligations;
- contractual requirements;
- security requirements; and
- operational needs.
Where jurisdiction-specific retention requirements apply, SporTech may implement additional controls.
12. Your Privacy Rights
Depending on your location and applicable law, you may have privacy rights in relation to your personal data.
12.1 Right of Access
You may request access to personal data processed by SporTech, subject to applicable law and relevant limitations.
Where applicable, this may include access to or information about:
- account information;
- membership information;
- wallet information;
- transaction information;
- contact information;
- profile information; and
- activity information.
Access may be restricted where disclosure would violate legal obligations, compromise security, affect the rights of another person, or reveal confidential business information.
12.2 Right of Correction
You may request correction of inaccurate or incomplete personal data.
12.3 Other Applicable Rights
Additional privacy rights may apply depending on your jurisdiction and the service you use.
SporTech may implement jurisdiction-specific rights, notices, disclosures, and consent mechanisms where required by applicable law.
To exercise an applicable privacy right, please use the privacy or support request method made available through the relevant SporTech service or website.
13. Marketing Communications
Where permitted, SporTech may use contact information to send promotional communications, marketing messages, or partner offers.
Where consent is required, marketing communications will be based on appropriate consent.
You may withdraw applicable marketing consent or change your communication preferences through the mechanisms made available in the relevant service or communication.
14. Clubs, Leagues, Federations, and Partners
Some SporTech services are provided in collaboration with clubs, leagues, federations, or commercial partners.
These organisations may have their own privacy responsibilities for activities such as:
- club communications;
- campaigns;
- membership programmes;
- club-specific content; and
- other processing activities they independently control.
Where applicable, you should also review the privacy information provided by the relevant organisation.
15. Children and Minors
Certain services or activities may involve information relating to minors.
Where minor-related information is processed, SporTech treats it as higher-risk information and applies enhanced governance and protection requirements in accordance with applicable law.
Specific age requirements or consent mechanisms may vary depending on the relevant service and jurisdiction.
16. Changes to This Privacy Policy
SporTech may update this Privacy Policy as its services, legal obligations, regulatory requirements, user base, and international operations evolve.
Where appropriate, updated notices, disclosures, or consent mechanisms may be provided through the relevant website, application, or service.
17. Regulatory Framework
SporTech’s privacy framework is designed to support compliance with applicable privacy and data-protection requirements, including, where relevant:
- the Saudi Personal Data Protection Law (PDPL);
- the European Union General Data Protection Regulation (GDPR);
- the United Kingdom GDPR;
- Brazil’s Lei Geral de Proteção de Dados (LGPD);
- the UAE Personal Data Protection Law; and
- other applicable privacy and data-protection laws.
The specific rights, obligations, and legal bases applicable to you may vary depending on your jurisdiction.
18. Contact and Privacy Requests
If you have a question about this Privacy Policy or wish to exercise an applicable privacy right, please use the privacy or support contact method made available through the relevant SporTech website, application, or service, or email contact@sportech.com.sa.
© SporTech. All rights reserved.