Privacy Policy

1. Data Controller

Amir Tarik El Ghalbi
Calle Navarro Ledesma 166, Bloque 9, Portal 4, 3C, 29010 Málaga, España
skillbetco@gmail.com

2. Data We Collect

We collect the following personal data:

• Account information: email address, username, date of birth, password (stored encrypted).
• Profile data: avatar image, favorite team, profile visibility preference.
• Activity data: betting history, SkillPoints balance and transactions, league and community participation, achievements and engagement metrics.
• Social data: friends list, league memberships, community contributions.
• Technical data: push notification token, device type, app version.
• Authentication data: when you sign in with Google or Apple, we receive your name and email from these providers.

3. How We Use Your Data

We use your data for the following purposes:

• Providing and operating the SkillBet service.
• Managing your account and authenticating your identity.
• Processing virtual bets and managing your SkillPoints balance.
• Sending push notifications (match updates, bet results, social activity).
• Enabling social features (friends, leagues, communities).
• Verifying age eligibility (minimum 18 years).
• Improving app performance and user experience.
• Preventing fraud and enforcing fair play rules.
• Responding to support requests and feedback.

Legal basis: Contractual necessity (Art. 6.1.b GDPR), Legitimate interest (Art. 6.1.f GDPR), and Consent (Art. 6.1.a GDPR) for push notifications.

4. Third-Party Services

We use the following third-party services to operate SkillBet:

• Supabase (Supabase Inc.): Authentication and database hosting.
• Firebase Cloud Messaging (Google LLC): Push notification delivery for Android devices.
• Apple Push Notification Service (Apple Inc.): Push notification delivery for iOS devices.
• Google Sign-In (Google LLC): Optional authentication method.
• Apple Sign-In (Apple Inc.): Optional authentication method.
• Expo (Expo Inc.): App updates and push notification routing.

We do NOT use any analytics, advertising, or tracking services. We do NOT share your personal data with third parties for marketing or advertising purposes.

5. Data Retention

We retain your personal data for as long as your account is active. When you delete your account, your profile data (username, email, avatar, preferences) is anonymized and removed.

The following data is retained for platform integrity and legal compliance:

• Transaction history (SkillPoints movements).
• Referral codes and tracking records.
• Engagement metrics (daily activities, login history).
• Achievement progress.
• Betting history (individual and combo bets).
• Community contributions and events.
• League join requests.

This retained data is kept to maintain the integrity of leagues, communities, and transaction records that may involve other users. It is not used to identify you after account deletion.

6. Your Rights

Under the GDPR and LOPDGDD, you have the following rights:

• Right of access: Request a copy of your personal data.
• Right of rectification: Correct inaccurate personal data.
• Right of erasure: Request deletion of your account and personal data.
• Right of portability: Receive your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interest.
• Right to restriction: Request limitation of data processing.
• Right to withdraw consent: Withdraw consent for push notifications at any time.

To exercise these rights, contact us at skillbetco@gmail.com. We will respond within 30 days. You also have the right to file a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

7. Account Deletion

You can delete your account at any time from Settings > Account > Delete Account within the app. Upon deletion, your profile is anonymized and you will be logged out. See Section 5 for details on retained data.

8. Age Requirements

SkillBet is intended for users aged 18 and over. We collect your date of birth during registration to verify age eligibility. If we discover that a user is under 18, their account will be terminated immediately.

9. Data Security

We implement appropriate technical and organizational measures to protect your data, including encrypted data transmission (HTTPS/TLS), secure credential storage on device, server-side authentication with JWT tokens, and role-based access control.

10. International Data Transfers

Your data may be processed on servers located outside the European Economic Area (EEA) through our third-party service providers. These transfers are protected by appropriate safeguards including Standard Contractual Clauses (SCCs) as approved by the European Commission.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app. Your continued use of SkillBet after changes are posted constitutes acceptance of the updated policy.

12. Contact

For questions about this Privacy Policy or to exercise your data rights, contact:

Amir Tarik El Ghalbi
skillbetco@gmail.com
Calle Navarro Ledesma 166, Bloque 9, Portal 4, 3C, 29010 Málaga, España