How FutbolPool collects, uses, and protects your data.
Updated 2026-05-20 · ~5 min read
At FutbolPool we take your privacy seriously. This policy explains how we collect, use, disclose, and safeguard your information when you use our application and website. We comply with applicable data protection laws, including the EU GDPR and East African data protection legislation.
1. Introduction
FutbolPool ("we", "us", "our") operates a social football prediction platform primarily serving users in East Africa (Kenya, Tanzania, Uganda, Rwanda) and other regions.
By using our Service you consent to the collection and use of your information as described in this policy. If you do not agree, do not use our Service.
Data Controller: FutbolPool is the data controller responsible for your personal data. For contact details, see Contact us below.
Usage data: pages visited, features used, time spent, click patterns.
Location data: country-level location derived from IP. We do not collect precise GPS location.
Log data: IP address, access times, referring URLs, error logs.
Information from third parties
Football data: match schedules, scores, and team information from sports data providers.
Analytics: aggregated usage statistics from Mixpanel.
3. How we use your information
We use your information for the following purposes, mapped to the legal bases under GDPR.
Purpose
Legal basis (GDPR)
Provide and maintain the Service
Contract performance
Process predictions and calculate scores
Contract performance
Manage your account and authentication
Contract performance
Send service notifications (match reminders, score updates)
Legitimate interest
Analyse usage to improve the Service
Legitimate interest
Prevent fraud and ensure security
Legitimate interest
Send promotional communications
Consent
Comply with legal obligations
Legal obligation
4. Information sharing
We do not sell your personal information. We share information only in the following circumstances.
With other users
Your display name and predictions are visible to other users in your leagues.
Your rank may appear on public leaderboards.
You can control some visibility settings in your profile.
With service providers
We work with trusted third-party service providers who help us operate the Service.
Hosting: DigitalOcean (EU region).
Analytics: Mixpanel (anonymised).
Authentication: Google, Facebook.
SMS: Africa's Talking (phone verification in East Africa).
For legal reasons
We may disclose your information if required by law or if disclosure is necessary to comply with legal process, protect our rights, or prevent fraud.
5. Data retention
We retain your information for as long as necessary to provide the Service.
Account data: retained while your account is active, plus 30 days after deletion request.
Predictions: retained for the duration of the tournament, then aggregated and anonymised for statistics.
Usage logs: retained for 90 days for security and debugging.
Analytics data: retained in anonymised form indefinitely for service improvement.
When you delete your account, we delete or anonymise your personal data within 30 days, except where we are required to retain it for legal or legitimate business purposes.
6. Your rights
Depending on your location, you may have the following rights regarding your personal data.
Right to access — request a copy of the personal data we hold about you.
Right to rectification — request correction of inaccurate or incomplete data.
Right to erasure — request deletion of your personal data under certain circumstances.
Right to restrict processing — request that we limit how we use your data.
Right to data portability — request a copy of your data in a machine-readable format.
Right to object — object to processing based on legitimate interests or for marketing.
Right to withdraw consent — withdraw consent at any time where we rely on consent.
To exercise any of these rights, email [email protected]. We respond within 30 days.
For EU/EEA residents: you have the right to lodge a complaint with your local data protection authority.
7. Cookies and tracking
We use cookies and similar technologies to keep you signed in, remember preferences, understand usage, and improve the Service.
Essential cookies: required for the Service to function (authentication, security).
Analytics cookies: help us understand usage patterns (Mixpanel).
Most browsers let you control cookies in settings. Disabling essential cookies may prevent you from using parts of the Service.
8. Data security
We implement appropriate technical and organisational measures to protect your data.
Encryption: data is encrypted in transit (HTTPS/TLS) and at rest.
Password security: passwords are hashed using industry-standard algorithms.
Access controls: limited access to personal data on a need-to-know basis.
Regular audits: security practices are reviewed and updated.
Secure infrastructure: hosted on cloud infrastructure with DDoS protection.
No method of transmission over the internet is fully secure. We cannot guarantee absolute security.
9. Children's privacy
FutbolPool is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal data from a child under 18, we will delete it promptly.
If you are a parent or guardian and believe your child has provided us with personal information, contact [email protected].
10. International transfers
Our primary servers are located in the European Union. Some service providers may process data in other countries.
When we transfer data outside the EU/EEA we ensure appropriate safeguards via Standard Contractual Clauses, adequacy decisions, or certification schemes. For users in East Africa, data may be processed in the EU, which generally provides strong data protection standards.
11. Third-party services
Our Service integrates with the following third-party services.
We encourage you to review the privacy policies of these third-party services.
12. Changes to this policy
We may update this policy from time to time. When we make material changes we will update the "Last updated" date, notify you via email or in-app notification, and obtain consent where required by law.
We encourage you to review this policy periodically.
13. Contact us
If you have questions or requests regarding this policy or our data practices, contact us: