SUPA

BOLA

AI FOOTBALL PREDICTIONS

SUPA

BOLA

AI FOOTBALL PREDICTIONS

Privacy Policy

Effective: 2026-06-08

Version 2026-06-08

Your Privacy Matters

SupaBola (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our football prediction and social platform.

This notice is designed to satisfy the Personal Data Protection Act 2012 (Singapore), Undang-Undang Pelindungan Data Pribadi (Indonesia), and Akta Perlindungan Data Peribadi 2010 (Malaysia). Where local law grants you stronger rights than those stated here, those local rights apply.

Information We Collect

Personal Information

Email address (for account creation and communications)
Username, display name, and profile information
Date of birth (used only to verify the 18+ age gate; never publicly displayed)
Payment information (processed by Stripe — we never store full card numbers)

Usage Information

Predictions you make, challenges you accept, and $BOLA transactions you initiate
Pages visited and features used (via Google Analytics 4, gated by your cookie consent)
Device information and browser type
IP address and approximate location (country-level, for legal-posture routing)

Consent Records

When you sign up, we record the version numbers of the Terms of Service and Privacy Policy you accepted, along with the date. This allows us to demonstrate which text any given account agreed to, which is a regulatory requirement under PDPA-SG and UU PDP.

How We Use Your Information

Provide and maintain our prediction, $BOLA economy, and social-challenge services
Personalize your experience and recommendations
Process Stripe transactions and manage your account
Send you important account, security, and service-update notifications
Improve our platform and develop new features (aggregate, de-identified analytics)
Ensure platform security, age compliance, and fraud prevention
Comply with legal and regulatory obligations in your market

Information Sharing

We do not sell, trade, or rent your personal information to third parties. We share your information only in the following circumstances:

Service providers — Stripe (payments), Resend (transactional email), Google Analytics 4 (anonymized usage analytics — only after you grant cookie consent), Sentry (error monitoring with PII scrubbed), DigitalOcean (hosting).
When required by law, court order, or regulator request
In connection with a business transfer or acquisition
With your explicit consent

Data Security

We use industry-standard security measures to protect your information:

TLS 1.2+ encryption in transit; passwords hashed with bcrypt
Database access restricted via VPC + managed connection pooling
Two-factor authentication available for all accounts
Regular security review and dependency patching
Sentry alerting on anomalous error patterns; least-privilege access for our team

Data Retention

We retain your personal information only as long as necessary to provide the service or to comply with legal obligations. You may request deletion of your account and associated data at any time via Settings → Privacy → Delete account, and we will process the request within 30 days. Certain records (financial transactions, regulatory audit trails) must be retained under local law even after account deletion; those records are tombstoned and detached from your identity.

Your Rights

You have the right to:

Access your personal information held by us
Request correction of inaccurate data
Request deletion of your account and personal data
Export your data in a portable format
Withdraw consent for analytics cookies at any time
Opt out of non-essential email communications
Lodge a complaint with your local data-protection authority

Contact Us

For privacy questions, data-deletion requests, or to exercise any of the rights above:

Email: [email protected]

Mail: SupaBola Data Protection Officer, Singapore (full registered address published before June 8, 2026 — pending counsel review in #826)

Policy Updates

We may update this Privacy Policy from time to time. We will notify you of substantive changes by email at the address on file and post the new policy on this page with an updated effective date and version number. Continued use of SupaBola after a policy update constitutes acceptance of the new policy.

SUPA

BOLA

AI FOOTBALL PREDICTIONS

Privacy Policy

Effective: 2026-06-08

Version 2026-06-08

Your Privacy Matters

Information We Collect

Personal Information

Email address (for account creation and communications)
Username, display name, and profile information
Date of birth (used only to verify the 18+ age gate; never publicly displayed)
Payment information (processed by Stripe — we never store full card numbers)

Usage Information

Predictions you make, challenges you accept, and $BOLA transactions you initiate
Pages visited and features used (via Google Analytics 4, gated by your cookie consent)
Device information and browser type
IP address and approximate location (country-level, for legal-posture routing)

Consent Records

How We Use Your Information

Provide and maintain our prediction, $BOLA economy, and social-challenge services
Personalize your experience and recommendations
Process Stripe transactions and manage your account
Send you important account, security, and service-update notifications
Improve our platform and develop new features (aggregate, de-identified analytics)
Ensure platform security, age compliance, and fraud prevention
Comply with legal and regulatory obligations in your market

Information Sharing

We do not sell, trade, or rent your personal information to third parties. We share your information only in the following circumstances:

Service providers — Stripe (payments), Resend (transactional email), Google Analytics 4 (anonymized usage analytics — only after you grant cookie consent), Sentry (error monitoring with PII scrubbed), DigitalOcean (hosting).
When required by law, court order, or regulator request
In connection with a business transfer or acquisition
With your explicit consent

Data Security

We use industry-standard security measures to protect your information:

TLS 1.2+ encryption in transit; passwords hashed with bcrypt
Database access restricted via VPC + managed connection pooling
Two-factor authentication available for all accounts
Regular security review and dependency patching
Sentry alerting on anomalous error patterns; least-privilege access for our team

Data Retention

Your Rights

You have the right to:

Access your personal information held by us
Request correction of inaccurate data
Request deletion of your account and personal data
Export your data in a portable format
Withdraw consent for analytics cookies at any time
Opt out of non-essential email communications
Lodge a complaint with your local data-protection authority

Contact Us

For privacy questions, data-deletion requests, or to exercise any of the rights above:

Email: [email protected]

Mail: SupaBola Data Protection Officer, Singapore (full registered address published before June 8, 2026 — pending counsel review in #826)