Privacy policy

DRAFT — pending legal review. Sections below are scaffolded with placeholders for content review by Matchday's data protection counsel before any external launch.

This notice explains how Matchday collects, uses, and protects personal data when you use the service.

1. Data controller

[Legal entity name and registered address — Pap to fill in.] Contact for data-protection matters: [DPO email].

2. Personal data we collect

Account identity (email, display name), profile details you provide on /onboard (date of birth, gender, city, country of residence, nationality, optional phone / LINE / WhatsApp / preferred playing hand and side), and tournament activity once that surface ships in v0.4+.

3. Purpose of processing

Authenticating you, matching you with tournaments and players, and sending transactional notifications related to your registrations. We do not sell or share personal data with advertisers.

4. Retention

[Retention period — Pap to confirm with counsel.] Account data retained while the account is active; deletion request triggers a [N]-day soft-delete window before purge from active stores. Audit-log rows are retained per Thai PDPA record-keeping requirements.

5. Your rights

Under Thai PDPA you may request access to your data, correction of inaccurate data, deletion (right to be forgotten), restriction of processing, data portability, objection to processing, and withdrawal of consent. Contact [DPO email] to exercise any of these rights.

6. Contact

Questions about this policy or your data: [DPO email]. Complaints: Office of the Personal Data Protection Committee (PDPC), Thailand.