1. Information We Collect

We collect only the information necessary to provide and improve our tournament management services:

• Personal details: full name, email address, phone number, date of birth/age, gender, weight, belt level, club/organization name
• Account & registration information: username, hashed password, selected categories, payment status
• Technical information: IP address, browser type, device information, pages visited, session duration, cookies
• Payment-related data: processed securely via third-party gateways (we do not store full credit card or payment details)

2. Purpose of Collection & Use

We use your information solely for the following legitimate purposes:

• Facilitate tournament registration, category assignment, bracket generation, and result publication
• Send essential communications (schedules, updates, results, payment confirmations)
• Process payments and issue refunds through secure third-party providers
• Verify participant eligibility (age, weight, belt level)
• Improve platform security, prevent fraud, and ensure service quality
• Comply with legal, tax, and regulatory obligations

3. Sharing & Disclosure

We do not sell, rent, or trade your personal information. Limited sharing occurs only when necessary:

• Tournament organizers and officials (name, age category, belt level, club – for event operations)
• Payment service providers (e.g., GCash, PayPal) – only transaction-related data
• Cloud/hosting providers under strict confidentiality agreements
• Government authorities or the National Privacy Commission when required by law

4. Your Rights Under RA 10173

As a data subject, you have the following rights:

• Right to be informed about processing of your personal data
• Right to access and obtain copies of your data
• Right to correct inaccurate or incomplete information
• Right to object to processing and withdraw consent
• Right to erasure ("right to be forgotten") – subject to legal retention obligations
• Right to lodge a complaint with the National Privacy Commission (NPC)

To exercise any of these rights, please contact our Data Protection Officer:

We will respond to your request within 30 calendar days (extendable under the law).

5. Data Retention & Security

• Active tournament data retained until event completion + 1 year
• Financial & legal records kept for up to 7 years (tax and audit compliance)
• After retention period, data is securely deleted or anonymized

We implement appropriate technical and organizational measures including HTTPS encryption, access controls, regular security audits, and secure hosting.

6. Cookies & Tracking

We use cookies and similar technologies for essential functions (session management, security) and optional analytics (site usage). You can manage preferences via your browser settings.

7. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted here with a revised "Last updated" date. Continued use of our services after changes constitutes acceptance.