Privacy Policy

1. Information we collect

• Account & waitlist data — your email address, chosen username, and authentication credentials (passwords are hashed by our authentication provider; we never store them in plain text).
• Usage data— basic technical information such as device, browser and approximate location derived from your IP, and pages you visit.
• Transaction data— once the Service launches, records of your predictions, balances and payments (held in our internal ledger).

2. How we use your information

• To create and secure your account and reserve your place on the waitlist.
• To notify you about launch, verification, and material changes to the Service.
• To operate, maintain, and improve the Service, and to keep it secure and prevent abuse.
• To comply with legal, regulatory, and anti-fraud obligations.

3. Legal basis

We process your data on the basis of your consent (which you may withdraw at any time), the performance of our agreement with you, and our legitimate interests in operating a secure service.

4. Service providers

We use trusted third parties to run the Service and share only the data needed for them to perform their functions, including: our database, authentication and hosting providers, and a sports data provider for match results. Deposits and cash-outs are settled directly in USDC on the Polygon network — we do not use a third-party payment processor — though your public wallet address and on-chain transactions are inherently visible on the public blockchain. These providers process data under their own privacy terms.

5. Cookies & local storage

We use strictly necessary cookies and browser local storage to keep you signed in and to operate core features. We do not use third-party advertising cookies.

6. Data retention

We keep your data for as long as your account or waitlist entry is active, and thereafter only as long as needed to meet legal, accounting or reporting requirements. You can ask us to delete your account at any time.

7. Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, and you may object to or restrict certain processing. To exercise these rights, contact us using the details below.

8. Age requirement

The Service is intended only for individuals aged 18 or older. We do not knowingly collect data from anyone under 18.

9. Security

We apply technical and organisational measures designed to protect your data, including encryption in transit, hashed credentials, and row-level access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. International transfers

Your data may be processed on servers located outside your country of residence. Where it is, we take steps to ensure an appropriate level of protection.

11. Changes to this Policy

We may update this Policy from time to time. We will post the updated version here and, where appropriate, notify you by email. The “Last updated” date reflects the latest revision.

12. Contact

Questions about this Policy or your data? Email us at hello@polybola.com.