Privacy Policy

1. Introduction

SuperNinety League Limited ("SuperNinety", "we", "our", or "us"), a private company limited by shares incorporated in the Federal Republic of Nigeria (RC 9342916), is committed to protecting the privacy of all users of our platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our football league management platform, in compliance with the Nigeria Data Protection Regulation (NDPR) and the Nigeria Data Protection Act 2023 (NDPA).

2. Information We Collect

2.1 Information You Provide

We collect information you provide directly to us, including:

• Account Information: Name, email address, phone number, password, organisation/club name
• Academy Information: Academy name, website, representative contact details
• Scout Information: Club affiliation, role, country of operation
• Player Information: Name, date of birth, position, height, weight, photos, playing statistics
• Payment Information: Billing details (processed securely by our payment provider)

2.2 Information Collected Automatically

When you use our Service, we automatically collect:

• Device Information: IP address, browser type, operating system
• Usage Data: Pages visited, features used, time spent on the platform
• Cookies: Session cookies for authentication and preferences (see our Cookie Policy)

3. Legal Basis for Processing

In accordance with the NDPR and NDPA, we process your personal data on the following legal bases:

• Consent: Where you have given explicit consent for specific processing activities
• Contractual Necessity: Processing necessary to perform our contract with you
• Legitimate Interest: Processing for our legitimate business interests, such as platform improvement and security
• Legal Obligation: Processing required to comply with Nigerian law

4. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Process account registration and verification
• Enable communication between academies and scouts
• Manage league operations, fixtures, and standings
• Send administrative notifications (account verification, match updates)
• Process payments and fees
• Ensure platform security and prevent fraud
• Comply with legal obligations under Nigerian law
• Analyse usage patterns to improve user experience

5. Information Sharing and Disclosure

We may share your information in the following circumstances:

5.1 With Other Users

• Player profiles are visible to verified scouts for scouting purposes
• Academy information is visible to other platform users
• Match and statistics data is shared with relevant parties

5.2 With Service Providers

• Payment processors (Paystack) for transaction processing
• Email service providers (Resend) for notifications
• Cloud hosting providers (Supabase, Vercel) for data storage
• Security services (Cloudflare) for CAPTCHA and protection

5.3 For Legal Reasons

We may disclose information if required by law, legal process, or government request, or to protect the rights, property, or safety of SuperNinety League Limited, our users, or others.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure password hashing
• Rate limiting and CAPTCHA protection
• Regular security audits and monitoring
• Access controls and authentication requirements

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. We may retain certain information for longer periods as required by Nigerian law or for legitimate business purposes (e.g., historical match data, statistical records). You may request deletion of your account data by contacting us.

8. Your Rights

Under the NDPR and NDPA, you have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Data Portability: Request transfer of your data in a structured, machine-readable format
• Objection: Object to certain processing of your data
• Restriction: Request restriction of processing in certain circumstances
• Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, contact us at privacy@superninety.com. We will respond within 30 days of receiving your request, in accordance with the NDPR.

9. Children's Privacy

Our platform may contain data about players under 18 years of age. Academies are responsible for obtaining appropriate parental or guardian consent before submitting data about minors, in compliance with the Nigerian Child Rights Act 2003 and the NDPA. We do not knowingly collect personal information directly from children. If you believe we have collected information from a child without proper consent, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than Nigeria. Our servers and service providers are located in various jurisdictions. In accordance with the NDPR, we ensure appropriate safeguards are in place for international transfers, including adequacy assessments and standard contractual clauses where required.

11. Cookies and Tracking

We use cookies and similar technologies to provide, protect, and improve our platform. For detailed information about the types of cookies we use, how we use them, and your choices regarding cookies, please see our Cookie Policy.

12. Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through our platform.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically. Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

14. GDPR Compliance (EEA Users)

For users in the European Economic Area, our legal bases for processing are:

• Contract: Processing necessary to perform our contract with you
• Legitimate Interests: Processing for our legitimate business interests
• Consent: Where you have given explicit consent
• Legal Obligation: Processing required to comply with law

You may lodge a complaint with your local data protection authority if you believe your rights have been violated.

15. Complaints

If you are unsatisfied with how we handle your data, you have the right to lodge a complaint with the National Information Technology Development Agency (NITDA), the Nigerian data protection authority, in addition to contacting us directly.

16. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: