1. Summary
- We only collect what is needed to run sports communities.
- We do not sell data and show no third-party ads.
- You can view, change and delete your data at any time.
This policy follows Indonesia's Personal Data Protection Law No. 27 of 2022 (PDP Law).
2. Data we collect
- Account: name, email, WhatsApp number (optional), password (encrypted).
- Sports profile: city, sports, favourite positions, level, shirt number, profile photo, bio, birth date & gender (optional).
- Activity: attendance, groups & positions, goals, assists, peer ratings, polls, comments, match chat, gallery photos.
- Payments: match fee amounts and the transfer receipt photos you upload. We do not store card numbers or bank credentials.
- Technical: IP address, device/browser type and sign-in history for account security.
We do not collect GPS location, phone contacts or health data.
3. How we use data
- Running schedules, attendance, waiting lists, group splits, scores & standings.
- Sending notifications (new schedules, reminders, results) according to your settings.
- Helping admins verify payments and keep the community cash book.
- Keeping the Service secure, preventing fraud and handling abuse reports.
4. Who can see your data
- Members of your communities: name, photo, position, attendance and stats.
- Community admins: the above plus WhatsApp number and transfer receipts for verification.
- The public: only a short player profile (name, photo, stats), open matches and community info.
- Service providers: hosting, email and notification providers bound by confidentiality.
- Authorities: when required by law.
5. Storage & security
Data is stored on secured servers over encrypted connections (HTTPS). Passwords are hashed. Account data is kept while the account is active. After deletion, personal data is erased or anonymised within 30 days, except records we must keep (see Account deletion).
6. Your rights
You may access, correct and delete your data, withdraw consent and manage notifications. Most of this can be done directly in Profile. For other requests email [email protected]; we reply within 3 business days.
7. Children
The Service is not meant for children under 13. If we learn that we hold data of a child under 13 without parental consent, we will delete it.
8. Cookies & notifications
We only use essential cookies (sign-in session and security), with no advertising or third-party tracking cookies. Notifications can be managed in Profile → Notifications.
9. Changes & contact
Changes to this policy will be shown on this page with a new effective date.
Privacy contact: [email protected]