Sportix Privacy and Personal Data Protection Policy

1. Scope of application

This Policy applies to personal data processed through Sportix in relation to groups of data subjects including, but not limited to:

• Visitors to the Sportix website or applications;
• People who register a Sportix account;
• Players;
• Athletes participating in tournaments;
• People who register for or book courts;
• Customers of Venue Owners managed through Sportix;
• Venue Owners;
• Employees of Venue Owners;
• Club owners or club managers;
• Coaches;
• Tournament organizers;
• Representatives of businesses or organizations using Sportix;
• People who contact Sportix support;
• Other individuals whose data is processed through the Platform.

This Policy does not independently govern processing carried out by a third party outside the scope of Sportix and for that party’s own purposes.

2. Data controller

Entity operating the Sportix Platform:

The Sportix Platform is currently developed and operated by the Sportix individual/development team.

As of the effective date of this Policy, Sportix is not operated under a separate corporate legal entity.

Website: https://sportix.vn

Contact email for personal data: [email protected]

Depending on the specific activity, Sportix may act as the party determining the purposes and means of personal data processing, as a personal data processor, or in other roles as prescribed by law.

In some cases, Venue Owners, tournament organizers, clubs or other partners may themselves determine the purposes and methods of processing part of the personal data and must bear responsibility for that processing under applicable law.

3. What is personal data?

“Personal data” is data or information that can identify or help identify a specific individual under applicable law.

Depending on how Users use Sportix, the personal data processed by Sportix may include basic personal data and, in some necessary cases, sensitive personal data as prescribed by law.

Sportix only processes data consistent with the relevant scope, features and purposes.

4. Types of data Sportix may collect

4.1. Account information

When Users register for or use a Sportix account, we may process:

• Full name;
• Display name;
• Phone number;
• Email address;
• Avatar;
• Date of birth or age group where necessary;
• Gender where Users voluntarily provide it or where needed for competition features;
• Country, province/city or region;
• Account credentials;
• Account code or internal identifier;
• The account’s role on the system;
• Account status;
• Account creation date and account change history.

Sportix does not require Users to provide more information than is necessary for each specific function.

4.2. Player profile

When using Player features, data may include:

• Sport;
• Skill level or playing level;
• Club or team;
• Competition information;
• Achievements;
• Match history;
• Wins/losses;
• Scores;
• Rankings;
• Rating, ELO or similar competency metrics;
• Tournament participation history;
• Teammates or opponents;
• Other sports information provided by the User.

Some of this information may be displayed publicly or to the Sportix community, depending on the nature of the feature and the privacy settings in effect.

4.3. Tournament data

When Users register for, participate in or run a tournament, Sportix may process:

• Registration information;
• Competing teams;
• Member lists;
• Seeds or groupings;
• Events;
• Levels;
• Brackets;
• Match schedules;
• Competition courts;
• Match results;
• Scores;
• Standings;
• Achievements;
• Check-in status;
• Registration fees;
• Payment status;
• Information provided by the organizer relating to the tournament.

Match results and certain related data may be made public to support tournament operations, rankings, performance lookup or community sports operations.

4.4. Booking and Venue Owner data

When Users search for or book a court, Sportix may process:

• Booker’s name;
• Phone number;
• Email;
• Venue Owner or branch;
• Court booked;
• Date and time of use;
• Booking duration;
• Price;
• Deposit;
• Booking status;
• Payment status;
• Booking cancellation or change history;
• Notes relating to the booking;
• History of service use at the Venue Owner.

If a booking is created by an employee of the Venue Owner, customer information may be entered into the system by that employee within the permitted scope.

4.5. Payment and transaction data

When Sportix supports payment features, the data processed may include:

• Transaction value;
• Transaction code;
• Transaction time;
• Payment method;
• Payment status;
• Payment details;
• Reconciliation information;
• Refund or transaction cancellation information.

Card information or sensitive financial information may be processed directly by the payment service provider and is not necessarily stored in full on the Sportix system.

4.6. Content provided by Users

Sportix may process:

• Images;
• Videos;
• Comments;
• Posts;
• Reviews;
• Feedback;
• Messages or exchange content;
• Tournament information;
• Venue information;
• Documents uploaded by Users;
• Other content that Users proactively provide.

Users should not post other people’s personal data without the right or a legal basis to do so.

4.7. Support and customer care data

When Users contact Sportix, we may collect:

• Content of the request;
• Email;
• Phone number;
• Exchange content;
• Booking ID;
• Tournament ID;
• Supporting images or videos;
• Technical logs;
• Complaint content;
• Outcome of the support request.

4.8. Device and technical data

When Users use the Platform, Sportix may automatically record certain data such as:

• IP address;
• Device type;
• Operating system;
• Application version;
• Browser;
• Device language;
• Access session identifier;
• Access time;
• Pages or features used;
• Technical events;
• Crash logs;
• Security logs;
• Audit logs;
• Information necessary to detect fraud or unusual access.

This data is used mainly to operate, secure, analyze and improve the Platform.

4.9. Location data

Sportix may process location information when needed to:

• Display courts near the User;
• Search for Venue Owners by area;
• Provide maps;
• Suggest suitable sports activities;
• Provide other features involving location.

Sportix only accesses the device’s precise location when it has the corresponding permission from the device or the User, as required by the operating system and the law.

Users can manage location permissions through their device settings.

5. Sources of data collection

Sportix may receive personal data from:

5.1. Users themselves

For example, when Users:

• Register an account;
• Update their profile;
• Register for a tournament;
• Book a court;
• Make a payment;
• Upload content;
• Contact support.

5.2. Tournament organizers

Organizers may provide athlete or team member data when creating or running a tournament.

Organizers are responsible for ensuring they have the legal right to provide that data to Sportix.

5.3. Venue Owners

Venue Owners or authorized employees may enter customer information to:

• Create bookings;
• Manage court schedules;
• Manage customers;
• Manage transactions;
• Support the Venue Owner’s operations.

Venue Owners are responsible for the lawfulness of collecting and providing data within their management scope.

5.4. Third-party services

If Users sign in, make payments or use Sportix through a third-party service, Sportix may receive certain information consistent with the permissions Users have granted to that service.

5.5. Automatically from the system

Certain technical data is generated as Users interact with the Platform, including logs, activity history, device data and security data.

6. Purposes of processing personal data

Sportix may process personal data for the following purposes.

6.1. Creating and managing accounts

Including:

• Account registration;
• Sign-in;
• Authentication;
• Profile management;
• Account recovery;
• Managing permissions and roles.

6.2. Providing sports features

Including:

• Player profiles;
• Player search;
• Player connections;
• Match history;
• Achievements;
• Rating;
• Ranking;
• Match history;
• Other sports community features.

6.3. Organizing and running tournaments

Including:

• Tournament registration;
• Team seeding;
• Group assignments;
• Seeding;
• Brackets;
• Match schedules;
• Check-in;
• Result recording;
• Rankings;
• Publishing results;
• Resolving complaints.

6.4. Providing and managing bookings

Including:

• Finding courts;
• Checking availability;
• Creating bookings;
• Confirming bookings;
• Holding seats;
• Changing schedules;
• Cancelling bookings;
• Handling no-shows;
• Reconciling payments;
• Supporting Venue Owners in managing court schedules.

6.5. Processing transactions

Including:

• Payment;
• Deposits;
• Refunds;
• Reconciliation;
• Transaction control;
• Issuing documentation where necessary.

6.6. Supporting Users

Including:

• Responding to requests;
• Handling errors;
• Handling complaints;
• Booking support;
• Tournament support;
• Account recovery.

6.7. Ensuring safety and preventing fraud

Sportix may process data to:

• Detect fake accounts;
• Detect unusual sign-ins;
• Prevent tournament fraud;
• Detect ranking manipulation;
• Detect unusual bookings;
• Prevent fraudulent payments;
• Prevent spam;
• Block bots;
• Investigate violations of the Terms of Use;
• Protect Sportix and Users.

6.8. Improving the Platform

Data may be used to:

• Analyze product usage;
• Identify errors;
• Measure performance;
• Improve UX/UI;
• Develop new features;
• Assess service quality.

Where appropriate, Sportix may use data that has been aggregated or processed to limit the ability to directly identify individuals.

6.9. Sending service notifications

Sportix may send:

• Registration confirmations;
• OTPs;
• Booking notifications;
• Schedule changes;
• Tournament notifications;
• Match results;
• Security alerts;
• Account notifications;
• Important information relating to the service.

These may be notifications necessary for the Platform to operate and are not always considered advertising.

6.10. Marketing and communications

Where the law requires it, Sportix only sends advertising, marketing or promotional content to Users once there is an appropriate basis or consent.

Users may decline marketing content through an unsubscribe mechanism, account settings or Sportix contact channels.

Declining marketing does not affect necessary notifications relating to accounts, bookings, tournaments or security.

6.11. Legal compliance

Sportix may process or provide data where necessary to:

• Fulfill legal obligations;
• Comply with lawful requests from competent state authorities;
• Resolve disputes;
• Fulfill accounting, tax or financial obligations;
• Protect the legal rights and interests of Sportix, Users or third parties.

7. Legal bases for processing data

Depending on each activity and legal requirement, Sportix processes personal data on an appropriate basis, which may include:

• The consent of the data subject;
• The performance of a contract or agreement with the User;
• The exercise of Sportix’s legal rights and obligations;
• The performance of obligations under legal regulations;
• Cases of data processing that do not require consent and are permitted by law;
• Other lawful bases under applicable regulations.

Where processing is based on consent, Users have the right to withdraw consent in accordance with the law.

Withdrawal of consent does not affect the lawfulness of processing carried out before the time of withdrawal.

In some cases, withdrawal of consent may prevent Sportix from continuing to provide certain features.

8. Data shown to other Users

Because Sportix is a sports and community platform, certain information may be shown to other Users.

The information may include:

• Player name;
• Avatar;
• Sport;
• Level;
• Club;
• Team;
• Achievements;
• Match history;
• Tournament results;
• Ranking;
• Rating;
• Bracket;
• Relevant tournament registration information;
• Content Users proactively publish.

Sportix will apply a display scope appropriate to the nature of each feature.

Users should understand that information made public on the Internet or within the Sportix community may be viewed, saved or shared by others beyond Sportix’s direct control.

9. Sharing data with Venue Owners and Organizers

9.1. Venue Owners

When Users make a booking, Sportix may provide the Venue Owner with the information necessary to provide the service, for example:

• Name;
• Contact information;
• Booking time;
• Court;
• Price;
• Payment status;
• Booking notes.

Venue Owners must use this information for purposes consistent with providing and managing the service.

9.2. Tournament organizers

When Users register for a tournament, Sportix may provide the organizer with the information necessary to:

• Verify athletes;
• Assign events;
• Form teams;
• Run brackets;
• Build schedules;
• Confirm payments;
• Contact athletes;
• Publish results.

Organizers are responsible for protecting the personal data they access through Sportix and must not use that data for inappropriate purposes.

10. Sharing data with service providers

Sportix may use third-party providers to support the operation of the Platform, including but not limited to:

• Cloud hosting;
• Databases;
• Storage services;
• Email;
• SMS;
• Push notifications;
• Map services;
• Analytics;
• Monitoring;
• Customer support;
• Cybersecurity;
• Payment gateways;
• Authentication;
• Other technology services.

These parties may only access data to the extent necessary for the service they provide and are subject to appropriate data protection obligations under agreements and applicable law.

Sportix does not sell Users’ personal data to third parties for money as a data brokerage business.

11. Cookies and similar technologies

The Sportix website may use cookies or similar technologies to:

• Maintain sign-in state;
• Remember settings;
• Protect accounts;
• Measure performance;
• Analyze how the website is used;
• Improve the experience;
• Measure the effectiveness of campaigns where applicable.

Depending on the type of cookie and legal requirements, Sportix may ask Users to choose or consent before activating certain non-essential cookies.

Users can also manage cookies through their browser.

Disabling certain cookies may reduce or prevent the operation of some features.

12. Personal data of children

Sportix is especially cautious when processing the personal data of children.

Where Sportix provides features for minors or children as defined by applicable law, Sportix may:

• Require age verification;
• Restrict certain features;
• Require the consent or confirmation of a parent or guardian where the law requires it;
• Reduce the scope of data made public;
• Apply additional protective measures.

Parents or legal guardians may contact Sportix if they believe a child’s data is being processed inappropriately.

13. Sensitive personal data

Some special activities may involve data that the law defines as sensitive personal data.

Sportix will only process sensitive personal data when necessary, with an appropriate basis, and will apply corresponding protection measures in accordance with the law.

Sportix does not proactively ask Users to provide sensitive data that is unnecessary for the provision of the service.

Users are advised not to publicly post sensitive information in their profiles, comments, posts or community content.

14. Data processing and retention periods

Sportix retains data for the period necessary to:

• Provide the service;
• Maintain accounts;
• Manage match history;
• Manage bookings;
• Resolve complaints;
• Prevent fraud;
• Fulfill legal obligations;
• Protect legal rights and interests;
• Meet the purposes set out in the Policy.

Retention periods may vary depending on the type of data.

For example:

• Account data may be retained while the account is active;
• Match history and tournament results may be retained long term to maintain records of achievements and the integrity of the ranking system;
• Booking data may be retained for transaction history, reconciliation, complaints and legal obligations;
• Security logs and audit logs may be retained for an appropriate period for security and fraud prevention;
• Data related to accounting or tax obligations is retained for the period required by law.

When data is no longer necessary or the retention period expires, Sportix may delete, destroy, anonymize or take other appropriate processing measures.

15. Account and data deletion

Users may request to close or delete their account through the features provided by Sportix or through support channels.

Deleting an account does not mean that all data will be immediately deleted in every case.

Sportix may continue to retain some data where necessary to:

• Comply with the law;
• Prevent fraud;
• Protect legitimate interests;
• Resolve disputes;
• Maintain the integrity of tournament results;
• Maintain necessary historical data;
• Fulfill financial or accounting obligations.

For example, after an account is deleted, a match result that has been officially recorded may continue to exist in the tournament system to ensure that the results of other Players are not distorted.

Where appropriate, Sportix may anonymize or remove directly identifying information instead of deleting the entire related record.

16. Transferring data abroad

Sportix may use technology services, cloud infrastructure or providers whose systems are located outside Vietnam.

Where processing results in the transfer of personal data abroad, Sportix will fulfill the related obligations under Vietnamese law.

Measures may include:

• Assessing the data transfer activity;
• Preparing and retaining necessary records;
• Applying data protection agreements with the data recipient;
• Applying appropriate technical and organizational measures;
• Fulfilling notification, reporting or other procedural obligations where required by law.

17. Data safety and security

Sportix applies appropriate technical and organizational measures to protect personal data from:

• Unauthorized access;
• Unauthorized use;
• Unauthorized alteration;
• Unauthorized disclosure;
• Data loss;
• Data destruction;
• System attacks.

Measures may include:

• Access control;
• Role-based permissions;
• Authentication;
• Appropriate encryption;
• Logging;
• Monitoring;
• Backups;
• Security reviews;
• Staff access controls;
• Incident response procedures;
• Other security measures.

However, no information system can guarantee absolute safety.

Users are also responsible for protecting their account, password, OTP and device.

Users should not share their password or OTP with anyone.

18. Personal data incidents

In the event of an incident involving personal data, or a suspected one, Sportix may:

• Assess the scope of the incident;
• Take containment measures;
• Remediate the vulnerability;
• Limit the damage;
• Keep records of the incident;
• Coordinate with providers or relevant parties;
• Fulfill notification or reporting obligations to competent authorities and/or data subjects where required by law.

19. Rights of data subjects

To the extent provided by law, Users may have rights over their personal data, including the right to:

• Be informed about data processing activities;
• Consent or not consent where the law requires consent;
• Access or view data;
• Request correction of data;
• Request provision of data;
• Withdraw consent;
• Request deletion of data;
• Request restriction of processing;
• Object to certain data processing activities;
• Complain or request resolution of data-related issues;
• Request compensation where there is a legal basis;
• Exercise other rights provided by law.

Some rights may be limited in cases permitted by law or where data needs to continue to be processed to fulfill legal obligations.

20. How to exercise data rights

Users can exercise some rights directly in their Sportix account, including editing profile information and certain privacy settings.

For other requests, Users may contact:

Email: [email protected]

Requests should include:

• Full name;
• Phone number or email linked to the account;
• Content of the request;
• The data or processing activity concerned;
• Information necessary for Sportix to verify that the requester is the data subject or a legal representative.

Sportix may require identity verification to prevent data from being accessed, modified or deleted by unauthorized persons.

Sportix will handle requests within the scope and timeframes prescribed by applicable law.

21. Automated decisions and the ranking system

Sportix may use algorithms or automated mechanisms to support:

• Scoring;
• Rating;
• Ranking;
• Opponent suggestions;
• Tournament seeding;
• Fraud detection;
• Court suggestions;
• Sports activity suggestions;
• Other operational features.

The results of these systems may be based on multiple factors, for example:

• Match results;
• Match history;
• Skill level;
• Tournament data;
• Activity on the Platform.

Sportix may adjust algorithms from time to time to improve accuracy, fairness or safety.

Where the law provides for rights relating to automated decisions, Sportix will apply an appropriate mechanism for Users to exercise their rights.

22. Aggregated and de-identified data

Sportix may create statistical or aggregated data for:

• Statistics on the number of Players;
• Analysis of sports trends;
• Analysis of usage behavior;
• Product research;
• Operational performance reports;
• Service development.

When data has been processed so that it no longer identifies or helps identify a specific individual under applicable legal standards, that data may no longer be considered personal data.

23. Third-party links and services

Sportix may contain links to or integrations with third-party services.

For example:

• Payment gateways;
• Google Maps or map services;
• Social login;
• Email service;
• SMS service;
• Cloud service.

These services may have their own privacy policies.

Sportix does not control all of the independent data processing activities of those third parties.

Users should read the third party’s policy when using their services.

24. Responsibilities of Venue Owners, Organizers and organizations using Sportix

Venue Owners, Organizers, clubs or organizations using Sportix must not:

• Collect data through Sportix for unlawful purposes;
• Export data and then use it for inappropriate purposes;
• Sell customer data;
• Spam Users;
• Disclose data to unauthorized persons;
• Use data outside the permitted service scope or agreement.

These organizations are responsible for:

• Complying with the law on personal data protection;
• Only providing data to Sportix when they have a legal right to do so;
• Controlling employee accounts;
• Revoking access when employees no longer have duties;
• Protecting data accessed from Sportix.

Sportix may restrict or terminate access if it detects inappropriate use of data.

25. Changes to the Policy

Sportix may update this Policy when:

• The law changes;
• Sportix launches new features;
• The methods of processing data change;
• Sportix changes providers;
• Data protection standards need improvement;
• There are significant changes in business operations.

The new version will be published on the Platform and will clearly state the effective or updated date.

For important changes that significantly affect Users’ rights or consent-based processing, Sportix will give notice and/or seek renewed consent where required by law.

26. Relationship with the Terms of Use

This Policy applies together with the Sportix Terms of Use and related policies.

For certain specific services, Sportix may additionally apply:

• Tournament terms;
• Court booking and cancellation policy;
• Payment policy;
• Community rules;
• Cookie policy;
• Product-specific terms or privacy notices.

These documents apply in addition to this Policy to the relevant extent.

27. Resolving personal data complaints

If Users believe their personal data is being processed inappropriately, they may contact Sportix to request a review and resolution.

Sportix may ask Users to provide the information necessary to:

• Verify identity;
• Identify the relevant data;
• Identify the account;
• Identify the booking or tournament;
• Investigate the matter.

Sportix will receive and handle requests in accordance with its internal procedures and applicable law.

Complaining to Sportix does not limit Users’ rights before competent state authorities in accordance with the law.

28. Contact information

For questions, requests or complaints relating to privacy and personal data protection, please contact:

SPORTIX

Operating entity: Sportix individual/development team

Website: https://sportix.vn

Support email: [email protected]

Personal data protection email: [email protected]

If Sportix appoints a department or individual responsible for personal data protection, their contact information may be published in this section or on the Platform.

29. Effect

The Sportix Privacy and Personal Data Protection Policy takes effect on 29/08/2026.

Sportix - Connecting the sports community