General

This Privacy Policy applies to all use of the DerbyUp platform ("the Operator", "we" or "us"), including the DerbyUp app, the website and the domain derbyup.bet, and/or any other digital platform operated by the Operator from time to time (collectively: "the Platform"), whether by a registered user or a member of the public.

By using the Platform, registering for it, participating in the activities offered on it, or consuming its content and services, the User expresses consent to the collection and use of information as described in this Privacy Policy. This Privacy Policy forms an integral part of the Platform's Terms of Use, published at derbyup.bet/terms.

In this policy, "personal information" means information as defined in the Protection of Privacy Law, 5741-1981 ("the Protection of Privacy Law") - data about a person that identifies them or may identify them, including name, email address, username, device identifiers and IP address.

1. What Information Do We Collect?

Information provided by the User

As part of registering for and using the Platform, the User may provide personal information, including: email address, username, password (managed via the Firebase Authentication identity service), profile picture, and information provided when contacting support.

Information about the User's activity on the Platform

We collect information about the User's activity on the Platform, including: predictions and forecasts made, participation in leagues and competitions, results and ranking, participation in quiz games, accumulation and use of virtual points, referral of friends (referral codes), conversations and inquiries to the AI Advisor, notifications sent and opened, and usage preferences.

User Content

The Platform allows users to create and share content, including league names, league descriptions, usernames, and messages for sharing ("User Content"). User Content may be visible to other users in accordance with the nature of the service.

Technical and session information

When using the Platform we collect technical information automatically, including: IP address, device type and operating system, device identifiers, push tokens for sending notifications, usage data and logs, pages and screens viewed, date and time of access, and information collected via Cookies and similar technologies (as detailed in Section 6).

Information from third parties

If you choose to log in or register via an external identity provider (including Google / Firebase), we will receive certain details from your profile in accordance with the permissions you approved. We also receive match data, odds and statistics from sports-data providers (third parties).

2. Source of the Information

The information is collected from several sources: (a) from the User themselves, upon registration, completing details, or making contact; (b) automatically, as a result of the User's activity on and use of the Platform; (c) from third parties, including identity providers and sports-data providers. The information collected is stored in the Operator's databases and processed in accordance with this Privacy Policy and any law.

3. Use of the Information

We use the information, among other things, for the following purposes:

• Operating the Platform and the services, registering users and managing the user account;
• Identity verification, account security, and prevention of unauthorized access;
• Providing content, services, leagues, games, competitions, notifications, and the virtual points mechanism;
• Personalizing the service, analyzing preferences, and improving the user experience;
• Responding to support inquiries and communicating with the User;
• Detecting, preventing and investigating breaches, fraud, manipulation, misuse, and unlawful activity - including attempts to conduct gambling for money contrary to the Terms of Use and the Penal Law;
• Enforcing the Terms of Use, maintaining the integrity of the Platform, and protecting the rights of the Operator and the users;
• Complying with legal requirements and competent authorities;
• Aggregate statistical analysis and research to improve the service;
• Sending direct mail and notifications, subject to Section 4 and to the User's consent.

4. Direct Marketing and Notifications

We may send the User operational notifications related to their activity on the Platform (such as match updates, leagues, and system alerts), and, subject to the User's consent, marketing messages, promotions and updates, via email, push notifications, or another means of communication.

The User may request to be removed from the marketing mailing list at any time, via the unsubscribe mechanism in the messages or by contacting the Operator. Push notification permissions can also be managed through the device settings.

Subject to Section 30A of the Communications Law (Telecommunications and Broadcasting), 5742-1982, and the Protection of Privacy Law, 5741-1981.

5. Disclosure of Information to Third Parties

We do not sell and we do not rent users' personal information. However, we may disclose information to third parties in the following cases:

• Service providers - including hosting and infrastructure providers (such as Vercel and Railway), identity and authentication services (Firebase / Google), the provider of the AI Advisor's artificial-intelligence service, and sports-data providers - to the extent necessary for providing the service, and subject to their undertaking to safeguard the information.
• Legal obligation or order - if required to do so by law, a judicial order, or the demand of a competent authority.
• Protection of rights - to prevent harm, fraud, or breach of the Terms of Use, or to protect the rights of the Operator, the users, or a third party.
• Transfer of activity - if the Operator transfers its activity or part of it to a third party, subject to the third party assuming the provisions of this Privacy Policy.
• With the User's consent - in any other case, with the User's express consent.

6. Cookies and Similar Technologies

For the proper functioning of the Platform, its security, analysis of its use, and personalization of the user experience, we use "Cookies" and similar technologies (such as local identifiers, Tags, and Web Beacons).

Cookies are small text files stored on the device or browser when using the Platform. They enable us to identify the User, save preferences, analyze activity, and improve the service. The User may, through the browser or device settings, block or delete cookies; however, blocking them may impair some of the Platform's functions.

For analysis and security purposes we may use third-party tools, including Google / Firebase services. These services may collect information in accordance with their own privacy policies.

7. Third-Party Services and External Links

The Platform may use third-party services, interfaces and content, including: identity and authentication services (Firebase / Google), hosting and infrastructure services, sports-data providers, the AI Advisor's artificial-intelligence service, push notification services, and flag-image providers. These services may collect information in accordance with their own privacy policies.

The Platform may include links to external sites or services that are not under the Operator's control. The Operator is not responsible for the privacy policy or content of such third parties, and it is recommended to review their privacy policies separately.

8. Information Security

The Operator implements reasonable organizational and technological measures to secure the information and protect against unauthorized access, use, or disclosure. However, no system is completely immune, and the Operator cannot guarantee absolute security. The User is responsible for maintaining the confidentiality of their login details and for notifying the Operator of any suspected unauthorized use.

9. Right to Access, Update and Delete

Under Section 13 of the Protection of Privacy Law, 5741-1981, every person is entitled to access information held about them in a database. A person who has accessed information about themselves and found that it is incorrect, incomplete, unclear or out of date may apply to the Operator to correct or delete the information.

• Access and update - account details can be accessed and updated through the profile settings in the app.
• Account deletion - the account can be deleted at any time, via the button in the settings screen of the app or by contacting the email address below; deleting the account deletes or anonymizes the personal information, subject to any law.
• Contact - requests for access, correction, or deletion may be sent to kickoffsportsapp@gmail.com.

Notwithstanding the foregoing, the Operator may retain information to the extent required by law, or for the purpose of protecting its rights, conducting legal proceedings, preventing fraud and misuse, or maintaining the integrity of the Platform.

10. Changes to the Privacy Policy

The Operator may update and/or change the Privacy Policy from time to time, at its sole discretion. The updated version will be published on the Platform and will bind the User from the moment of its publication. In the event of a material change concerning the collection or use of personal information, we will act to notify users in a reasonable manner. It is the User's responsibility to keep up to date with the Privacy Policy from time to time.

Contact Us

For any question, request, or inquiry regarding this Privacy Policy or the manner of handling personal information, you may contact us:

• kickoffsportsapp@gmail.com
• Via the inquiry form on the Help page in the app