Privacy Policy

FilGoal Fantasy ("we," "us," or "our") is committed to protecting your personal information in accordance with the Protection of Personal Information Act (POPIA) of South Africa. This policy explains how we collect, use, and safeguard your data when you participate in our fantasy football competitions.

We collect the following categories of personal information:

• Full Names, Dates of Birth, and Usernames
• Contact Information (Email and IP Addresses)
• Technical Data (Browser types and Operating systems)
• Usage Data (Game statistics and Team selections)

We process your data for the following specific purposes:

1. Identity Verification: To verify user eligibility for the competition.
2. Administering prize competitions and contracts.
3. Complying with legal obligations under POPIA.
4. Improving Service Quality and Security.

We use industry-standard security measures. Our data storage and messaging services are handled by Amazon Web Services (AWS). Personal data is encrypted in compliance with POPIA Section 19 standards:

• Encryption at Rest: All databases and backups are encrypted using AES-256 standards.
• Encryption in Transit: Secure SSL/TLS encryption is used for all data transfers.
• Access Control: Access is limited only to authorized personnel with a legitimate business need.

Location: User data is hosted in Amazon Web Services (AWS) Data Centres located primarily within South Africa to ensure POPIA-compliant infrastructure.

Cross-Border: In the event that data must be transferred outside South Africa, we ensure that the recipient is contractually bound to provide an adequate level of protection.

Operators: We may share data with third-party "Operators" (such as payment processors or prize delivery partners) who are strictly bound by POPIA data processing agreements.

Legal Authorities: We must disclose information when required by South African law or to protect the safety of our users.

Under POPIA, you have the right to:

1. Access: Request a copy of your data.
2. Correction: Fix inaccurate or incomplete data.
3. Objection: Object to the processing of your data for marketing.
4. Deletion: Request erasure under the "Right to be Forgotten," subject to legal retention requirements.

To exercise these rights, contact our Data Protection Officer Farril Rosen at [email protected].

If you believe your data has been mishandled, you may lodge a complaint with the Information Regulator (South Africa):

Website: https://www.justice.gov.za/inforeg/contact.html

Email: [email protected]