Privacy policy

Last Updated: January 2026

1. Introduction and Overview

Matchday Maths Pty Ltd (ABN [INSERT ABN], registered in Victoria, Australia) ("Matchday Maths," "we," "us," "our," or "Company") is committed to protecting your privacy and ensuring transparent data handling practices.

This Privacy Policy explains:

• What personal information we collect
• How we collect it
• Why we collect it
• How we use, store, and protect it
• Your rights regarding your data
• How we comply with applicable privacy laws

This Privacy Policy applies to all users of Matchday Maths services, including our website, web applications, and mobile applications (iOS/Android). It works in conjunction with our Terms of Use and Legal Disclaimer.

Please read this policy carefully. If you do not agree to our privacy practices, you should not use Matchday Maths.

2. Applicable Privacy Laws and Compliance Frameworks

2.1 Australian Privacy Compliance

Matchday Maths complies with the Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles (APPs). These principles govern:

• APP 1: Open and transparent management of personal information – We maintain transparent privacy practices and make this policy easily accessible
• APP 2: Collection of solicited personal information – We only collect information that is reasonably necessary for functions we perform
• APP 3: Collection of unsolicited personal information – We destroy or de-identify unsolicited information unless legally required to retain it
• APP 4: Dealing with personal information generally – We handle information fairly, lawfully, and transparently
• APP 5: Notification of personal information management practices – We take reasonable steps to notify you of our practices (this policy)
• APP 6: Use and disclosure – We only use or disclose information for primary purposes or related secondary purposes
• APP 7: Data quality and data correction – We take reasonable steps to ensure data accuracy and allow corrections
• APP 8: Data security – We take reasonable security measures to protect data from misuse and loss
• APP 9: Access and correction – You have the right to access and correct your personal information
• APP 10: Anonymity and pseudonymity – We allow anonymous interactions where practicable
• APP 11: Security of personal information – We implement security protocols to protect information
• APP 12: Access to personal information – We provide access to your data upon request
• APP 13: Correction of personal information – We correct inaccurate information when notified

2.2 European Union – GDPR Compliance

For users located in the European Union or European Economic Area, Matchday Maths complies with the General Data Protection Regulation (GDPR) (EU) 2016/679 and ePrivacy Directive 2002/58/EC.

This includes:

• Lawful basis for processing (consent, contract, legal obligation, vital interests, public task, legitimate interests)
• Your rights: access, rectification, erasure, restriction, portability, objection
• Data protection by design and by default
• Explicit consent for non-essential cookie tracking
• International data transfers with appropriate safeguards
• Breach notification within 72 hours to supervisory authorities
• Data Protection Impact Assessments (DPIA) for high-risk processing
• Data Protection Officer (DPO) contact availability

2.3 Other Jurisdictions

Matchday Maths complies with applicable privacy and data protection laws in all jurisdictions where we operate or where our users are located, including:

• California Consumer Privacy Act (CCPA)
• State and territorial privacy laws in Australia
• Canadian Personal Information Protection and Electronic Documents Act (PIPEDA)
• Other relevant international data protection frameworks

3. What Personal Information We Collect

3.1 Information You Provide Directly

Account Registration Information:

• Full name
• Email address
• Date of birth
• Residential address and postal code
• Phone number (optional)
• Username and password
• Gender (optional)
• Preferred sports and betting interests

Payment and Billing Information:

• Credit card details (processed securely via Stripe or equivalent gateway; we do not store full card details)
• Billing address
• Payment history and subscription details
• Transaction records and receipt information
• Invoice details

Verification and Compliance Information:

• Government-issued identification (driver's license, passport for age verification and AML/CTF compliance)
• Proof of address documentation
• Source of funds information (for AML/CTF Act 2006 compliance)
• Tax identification numbers (if applicable)
• KYC/Know Your Customer information

Communication and Support Information:

• Emails and messages sent to us
• Support ticket details and feedback
• Complaints and dispute information
• Preferences for communications (marketing, newsletters, service updates)

User-Generated Content:

• Bet tracking and performance data you log
• Notes, annotations, or comments you add
• Preferences and saved filters
• Watchlists or favourite teams/players

3.2 Information Collected Automatically

Device and Technical Information:

• IP address (including location inference)
• Device type, model, and operating system
• Browser type, version, and settings
• Mobile device identifiers (IDFA, Android Advertising ID)
• Device fingerprinting information
• Unique identifiers and user session IDs

Usage and Interaction Data:

• Pages and features accessed
• Time spent on each page or feature
• Click behaviour and navigation patterns
• Features used (EV finder, rankings, bet tracking, etc.)
• Search queries and filters applied
• Errors and technical issues encountered
• Login times and frequency of use

Cookies and Tracking Technologies:

• Cookie identifiers and values
• Tracking pixels and web beacons
• Local storage data (localStorage, sessionStorage)
• Cross-site tracking data (with consent where required)

Location Data:

• Approximate location based on IP address
• Precise location (with permission on mobile apps)
• Timezone information

Communication Data:

• Push notification engagement (opened, dismissed, clicked)
• Email open rates and click tracking
• SMS engagement (if applicable)

3.3 Information from Third Parties

Third-Party Data Sources:

• Sports data providers (team stats, player information, injury reports)
• Odds APIs and bookmaker data feeds
• Credit reference agencies and fraud prevention services (identity verification)
• Public records and verification services (age verification, background checks)

Social Media and Integration Partners:

• Social login information (if you link social media accounts)
• Publicly available social media information (profile, interests)
• Third-party app integrations and their shared data

Other Users:

• Referral information if referred by another user
• Support communications mentioning you
• Aggregate or anonymized data about user cohorts

4. How We Use Your Personal Information

4.1 Primary Purposes of Collection and Use

Account Management and Service Delivery:

• Creating and maintaining your account
• Providing access to Matchday Maths features and services
• Processing subscription payments and billing
• Delivering customer support and technical assistance
• Responding to your inquiries and requests
• Notifying you of service changes, outages, or updates

Compliance and Legal Obligations:

• Age verification (ensuring you are 18+ to use the service)
• Anti-Money Laundering and Counter-Terrorism Financing (AML/CTF) compliance under the AML/CTF Act 2006 (Cth)
• Know Your Customer (KYC) verification and identity confirmation
• Sanctions screening and watchlist checks
• Responsible gambling compliance and BetStop self-exclusion verification
• Legal and regulatory reporting
• Fraud detection and prevention
• Dispute resolution and complaint handling

Analytics, Improvement, and Research:

• Analyzing user behaviour and engagement patterns
• Understanding feature usage and user preferences
• Identifying and fixing technical issues and bugs
• Optimizing platform performance and user experience
• Conducting market research and user surveys
• A/B testing and experimentation
• Improving our models, algorithms, and predictive accuracy
• Training and improving machine learning systems

Security and Fraud Prevention:

• Detecting and preventing fraudulent activity and abuse
• Protecting against unauthorized access and cyber threats
• Monitoring for suspicious activity or data breaches
• Securing accounts and preventing unauthorized transactions
• Verifying user identity during authentication

Marketing and Communications:

• Sending promotional emails, newsletters, and product updates (with consent)
• Notifying you of new features, sports, or services
• Customizing content and recommendations based on your interests
• Conducting marketing campaigns and promotions
• Measuring marketing effectiveness and ROI

Personalization and Recommendations:

• Personalizing your experience based on preferences and behaviour
• Customizing which sports, teams, or markets are displayed
• Providing targeted content recommendations
• Suggesting relevant features or analyses

Aggregate Analytics and Research:

• Creating anonymized, aggregate reports on user demographics, behaviours, and trends
• Benchmarking performance metrics
• Publishing research findings (without identifying individuals)
• Supporting business intelligence and strategic decision-making

4.2 Secondary and Related Purposes

We may use your information for secondary purposes related to the primary purpose of collection if:

• The secondary use is reasonably expected by you or directly related to the primary purpose
• You have consented to the secondary use
• Disclosure is authorized or required by law
• We have a legitimate business interest and such use is not unreasonable

Examples include:

• Analyzing betting patterns to improve model accuracy (primary: service improvement; secondary: predictive accuracy)
• Using contact information to notify about account security (primary: account management; secondary: fraud prevention)

5. Lawful Basis for Processing (GDPR Users)

For users in the European Union or EEA, we process your personal information based on the following lawful bases under GDPR Article 6:

Purpose

Lawful Basis

Account creation and management

Contract – necessary to provide services

Payment processing and billing

Contract – necessary to provide services

Customer support and technical assistance

Contract – necessary to provide services

Age verification and KYC compliance

Legal obligation – AML/CTF Act and gambling regulations

Fraud prevention and security

Legitimate interests – protecting platform and users from harm

Analytics and product improvement

Legitimate interests – improving service quality and user experience

Marketing and promotional communications

Consent – only sent where you have opted in

Cookies and tracking (non-essential)

Consent – explicit consent required under ePrivacy Directive

Anonymized research and benchmarking

Legitimate interests – business intelligence and performance analysis

For special category data (e.g., health information if disclosed), we rely on explicit consent and/or legal obligations related to responsible gambling compliance.

6. Disclosure and Sharing of Personal Information

6.1 When We Disclose Information

We may disclose your personal information to the following recipients:

Service Providers and Business Partners:

• Payment processors (Stripe, other PCI-compliant gateways) for billing
• Cloud storage and hosting providers (AWS, Azure, Google Cloud)
• Email and communication service providers (SendGrid, Firebase)
• Analytics platforms (Google Analytics, Mixpanel, Amplitude)
• Customer support software providers (Zendesk, Intercom)
• Identity verification and KYC providers
• Fraud detection and prevention services
• Data backup and disaster recovery providers
• CDN and content delivery services

Sports Data and Odds Providers:

• The Odds API and other sports data APIs
• Bookmakers and odds feeds (for comparison purposes only)
• Sports statistics providers
• Injury and suspension data providers

Regulatory Authorities and Law Enforcement:

• Australian financial intelligence regulator (AUSTRAC) for AML/CTF reporting
• Liquor and Gaming authorities (state-based)
• Australian Securities and Investments Commission (ASIC) if required
• Police and law enforcement agencies (with legal authority)
• Courts and legal representatives in response to court orders
• Self-exclusion registers (BetStop) for responsible gambling verification

Business Transfers:

• Prospective buyers or investors (with confidentiality agreements) if Matchday Maths is sold, merged, or acquired
• Successor companies that assume privacy obligations

Other Disclosures with Your Consent:

• Third parties you explicitly authorize
• Integration partners you connect your account to
• Co-marketing partners (only with your explicit consent)

6.2 When We Do NOT Disclose Information

We do not sell, rent, or disclose your personal information for commercial purposes without explicit consent. We do not:

• Sell email addresses or contact lists to advertisers or marketers
• Share detailed betting activity or preferences with unrelated third parties
• Disclose payment card information (except securely to processors)
• Share government-issued identification documents beyond verification purposes
• Provide personal data to unaffiliated sports betting operators or bookmakers

6.3 International Data Transfers

Your personal information may be transferred to and stored in countries outside Australia and the European Union, including:

• United States (cloud hosting providers)
• Singapore (APAC region backup)
• Ireland (EU-compliant data centers for GDPR compliance)
• Other jurisdictions where our service providers operate

For EU users: We ensure adequate safeguards for international transfers, including:

• Standard Contractual Clauses (SCCs) with data processors
• Data Processing Agreements (DPAs) compliant with GDPR
• Privacy Shield certification (where applicable)
• Adequacy decisions by the European Commission

You acknowledge that data transferred internationally may be subject to the laws of the receiving country, which may differ from Australian or EU protections.

7. Data Security and Protection

7.1 Security Measures

Matchday Maths implements industry-standard security measures to protect your personal information:

Technical Safeguards:

• SSL/TLS 1.2+ encryption for all data in transit
• AES-256 encryption for sensitive data at rest
• Secure password hashing (bcrypt, scrypt, or equivalent)
• Two-factor authentication (2FA) options for account security
• Rate limiting and brute-force protection
• Web Application Firewall (WAF) and DDoS protection
• Regular security vulnerability scanning and penetration testing
• Intrusion detection and prevention systems (IDS/IPS)
• Secure API architecture with authentication and authorization controls

Operational Safeguards:

• Principle of least privilege for staff access to personal data
• Role-based access controls (RBAC) for employees and contractors
• Regular security awareness training for staff
• Confidentiality and non-disclosure agreements with employees and contractors
• Audit logs and monitoring of data access
• Background checks for employees with data access

Administrative Safeguards:

• Data security policies and procedures
• Privacy-by-design principles in system development
• Regular security audits and compliance reviews
• Incident response plans and breach protocols
• Disaster recovery and business continuity plans
• Regular backup and recovery testing

7.2 Limitations of Security

While we implement robust security measures, no system is completely secure. We cannot guarantee absolute protection against:

• Sophisticated cyberattacks or zero-day exploits
• Insider threats or employee misconduct
• Phishing or social engineering attacks targeting users
• Hardware or infrastructure failures
• Unauthorized access by determined threat actors
• Breach of third-party services we depend on

You acknowledge these risks and use the Platform at your own risk.

7.3 Data Retention

We retain personal information for as long as necessary to:

• Provide services and fulfill contractual obligations
• Comply with legal and regulatory requirements
• Maintain accurate financial and transaction records
• Respond to legal claims or disputes
• Support our legitimate business interests

Retention Periods by Information Type:

Information Type

Retention Period

Reason

Account registration and profile

Duration of account + 7 years

Service provision, financial records, dispute resolution

Payment and billing information

7 years

Tax compliance, financial audit, AML/CTF requirements

Transaction and bet tracking data

Duration of subscription + 2 years

Financial records, dispute resolution

Verification documents (ID, proof of address)

3 years after last verification

AML/CTF compliance, regulatory requirements

Communications (support tickets, emails)

3 years

Dispute resolution, quality assurance

Usage and analytics data

12-24 months

Product improvement, trend analysis

Cookies (essential)

Duration of session or 12 months

Security and functionality

Cookies (non-essential)

As per consent, typically 12 months

Analytics, marketing (if consented)

Anonymized/aggregated data

Indefinitely

Business intelligence, never identifies individuals

After retention periods expire, we securely delete or anonymize information unless retention is required by law.

8. Your Privacy Rights and Choices

8.1 Australian Privacy Principles – Your Rights

Under the Privacy Act 1988 and Australian Privacy Principles, you have the right to:

Right to Access (APP 12)

• Request access to the personal information we hold about you
• Receive information about how we use and disclose your data
• Request a copy of your information in a portable format

Right to Correct (APP 13)

• Request correction of inaccurate or incomplete information
• Request that we note your correction request if we disagree

Right to Complain

• Lodge a privacy complaint with us
• Escalate complaints to the Office of the Australian Information Commissioner (OAIC)

Right to Opt-Out (Marketing)

• Unsubscribe from marketing communications and promotional emails
• Opt-out of non-essential cookies and tracking

8.2 GDPR Rights (EU Users)

Under the General Data Protection Regulation, you have the following rights:

Right of Access (Article 15)

• Request access to all personal information we hold about you
• Receive your data in a structured, commonly used, machine-readable format (data portability)

Right to Rectification (Article 16)

• Request correction of inaccurate or incomplete personal information

Right to Erasure (Article 17) – "Right to Be Forgotten"

• Request deletion of your personal information
• This is not absolute; we may retain data where:
• Required by law
• Necessary for contract fulfillment
• Required for legal claims or compliance
• Data has been anonymized

Right to Restrict Processing (Article 18)

• Request that we limit the processing of your information
• Data is retained but not actively used until dispute is resolved

Right to Data Portability (Article 20)

• Request your data in a portable, machine-readable format
• Transfer your data to another service provider

Right to Object (Article 21)

• Object to processing based on legitimate interests or direct marketing
• Object to automated decision-making and profiling

Right Not to Be Subject to Automated Decision-Making (Article 22)

• Not be subject to decisions based solely on automated processing without human review
• Request human review of significant decisions affecting you

Right to Withdraw Consent (Article 7)

• Withdraw consent to marketing and non-essential processing at any time
• Withdrawal does not affect prior processing based on consent

Right to Lodge Complaints

• Lodge complaints with the relevant Data Protection Authority
• European Data Protection Board (EDPB) or national supervisory authority

8.3 Exercising Your Rights

To Exercise Your Rights:

• Submit a Request to: [INSERT SUPPORT EMAIL] or [INSERT PRIVACY CONTACT]
• Provide Identification – We may verify your identity to protect your privacy
• Specify Your Request – Clearly state which right you wish to exercise
• Response Timeframe:
• Australia (APP): 30 days (may extend to 60 days for complex requests)
• EU (GDPR): 30 days (may extend to 60 days for complex requests)
• No Fee – We do not charge for access requests (except excessive or frivolous requests)

8.4 Cookie Preferences and Tracking Opt-Out

Essential Cookies (No Consent Required):

• Authentication and security
• Session management
• Preference storage
• Fraud prevention

Non-Essential Cookies (Consent Required):

• Analytics and performance tracking
• Marketing and advertising
• User behaviour analysis
• Third-party tracking

Managing Your Cookie Preferences:

• You can manage cookie preferences through your browser settings
• Our cookie consent banner allows you to opt-in/opt-out of non-essential tracking
• You may withdraw consent at any time through your account preferences
• Withdrawing consent does not affect the legality of prior processing

Third-Party Opt-Out Tools:

• Google Analytics Opt-Out Browser Add-on: tools.google.com/dlpage/gaoptout
• Digital Advertising Alliance (DAA) Consumer Choice: optout.aboutads.info
• Interactive Advertising Bureau (IAB) Transparency & Consent Framework: iabeurope.eu/tcf

8.5 Marketing Communication Preferences

Email Marketing:

• Unsubscribe links in every marketing email
• Manage preferences through your account settings
• We honor opt-out requests within 10 business days

Push Notifications:

• Disable through device settings or app notification preferences
• Manage push notification preferences in account settings
• We honor opt-out requests within 24 hours

SMS Communications:

• Reply STOP to any SMS message
• Manage SMS preferences through account settings
• We honor opt-out requests within 10 business days

9. Cookies, Web Beacons, and Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files stored on your device by your web browser. They contain information about your browsing activity and preferences. When you revisit Matchday Maths, our servers can read these cookies to remember your preferences and activity.

9.2 Types of Cookies We Use

Essential/Functional Cookies:

• Session ID and authentication tokens
• Security and fraud prevention tokens
• CSRF (Cross-Site Request Forgery) protection
• Preference storage (theme, language, interface choices)
• Load balancing and performance optimization
• Duration: Session or 12 months

Analytics Cookies:

• Google Analytics (_ga, _gid, _gat)
• Mixpanel or Amplitude (if used)
• Page view and event tracking
• User journey analysis
• Conversion tracking
• Duration: Typically 12-24 months
• Requires Consent (non-essential, GDPR/ePrivacy)

Marketing Cookies:

• Remarketing and retargeting
• Audience segmentation
• Ad performance tracking
• Cross-site advertising
• Duration: Typically 12 months
• Requires Consent (non-essential, GDPR/ePrivacy)

Third-Party Cookies:

• Google Ads (advertising)
• Facebook Pixel (social media integration)
• Stripe (payment processing)
• Third-party analytics providers
• Requires Consent (where non-essential)

9.3 Web Beacons and Pixel Tracking

We use transparent pixels and web beacons in emails and web pages to:

• Track email open rates and click behaviour
• Measure marketing campaign effectiveness
• Identify user preferences and interests
• Retarget users with relevant content

These technologies work similarly to cookies and are subject to the same consent requirements.

9.4 Your Cookie Choices

Browser-Level Control:

• Most browsers allow you to view, manage, and delete cookies
• You can set your browser to refuse all cookies or alert you when cookies are set
• Disabling essential cookies may impair Platform functionality
• Browser-based control: settings/preferences → Privacy/Security → Cookies

Platform-Level Control:

• Our cookie consent banner provides granular opt-in/opt-out options
• Accept essential only, or opt-in to analytics and marketing
• Withdraw or change preferences anytime through account settings
• Preferences are stored and honored on subsequent visits

9.5 Do-Not-Track (DNT) Signals

Some browsers include a "Do Not Track" feature. Currently, there is no universal standard for how to respond to DNT signals. Matchday Maths treats all users consistently regardless of DNT browser settings, but respects explicit opt-out requests made through our cookie consent or account preferences.

10. Responsible Gambling Privacy Measures

10.1 Self-Exclusion and Restrictions

Matchday Maths supports responsible gambling by:

• Verifying users against BetStop (National Self-Exclusion Register)
• Preventing access to users self-excluded from gambling services
• Respecting state-based self-exclusion registers
• Detecting and restricting access for users flagged on problem gambling programs

10.2 Deposit and Usage Limits (Optional)

Users may voluntarily set:

• Monthly deposit limits within the Platform
• Betting activity reminders (time-based or bet-count alerts)
• Account pause or break functionality
• These limits are recorded and enforced through our systems

10.3 Aggregated Gambling Behaviour Analytics

We analyze anonymized, aggregated betting patterns to:

• Identify at-risk user cohorts for outreach
• Improve responsible gambling messaging
• Enhance model accuracy around sustainable betting patterns
• Share findings with gambling research organizations (with consent and anonymization)

11. Children and Minors

11.1 Age Restriction

Matchday Maths is not intended for individuals under 18 years of age.

• We do not knowingly collect personal information from minors
• If we discover we have collected information from a minor, we will delete it immediately
• Guardians who believe a minor's information has been collected should contact us immediately

11.2 Parental Controls

Parents concerned about their child's internet usage may:

• Use device-level parental controls to restrict access
• Use network-level filtering (ISP-level or router-level)
• Monitor browser history and app usage
• Discuss responsible internet practices with children

12. Policy Updates and Changes

12.1 Right to Modify This Policy

Matchday Maths reserves the right to modify this Privacy Policy at any time. Changes become effective immediately upon posting to the Platform.

12.2 Notification of Material Changes

For material changes that adversely affect your privacy rights, we will:

• Provide prominent notice on the Platform
• Send email notification to registered users
• Obtain consent where legally required (e.g., GDPR)
• Provide 30 days' notice before significant changes take effect

12.3 Continued Use = Acceptance

Your continued use of Matchday Maths after policy changes constitutes acceptance of the updated Privacy Policy. If you do not agree to changes, you may discontinue use and close your account.

13. Privacy Complaints and Contact

13.1 Submitting a Privacy Complaint

If you believe Matchday Maths has mishandled your personal information or breached privacy principles:

• Contact Us First:
• Email: [INSERT PRIVACY CONTACT EMAIL]
• Mailing Address: [INSERT REGISTERED OFFICE ADDRESS]
• Include: Your name, account details, description of the issue, and preferred resolution
• Our Response:
• Acknowledge receipt within 5 business days
• Investigate and respond with findings within 30 days
• If unresolved, provide information about further options

13.2 Escalation to Regulators

Australian Users – Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au
• Email: enquiries@oaic.gov.au
• Phone: 1300 363 992
• Lodging a privacy complaint is free

EU Users – Data Protection Authorities:

• European Data Protection Board (EDPB): edpb.europa.eu
• National Supervisory Authority in your country
• You have the right to lodge complaints with your local DPA

13.3 Privacy Officer Contact

Data Protection and Privacy Enquiries:

• Email: [INSERT PRIVACY CONTACT EMAIL]
• Mailing Address: [INSERT REGISTERED OFFICE ADDRESS]
• Response timeframe: 10-15 business days for general inquiries

14. Links to External Websites

Matchday Maths may contain links to external websites, including bookmakers, sports data providers, and resource sites. This Privacy Policy applies only to the Matchday Maths Platform. External websites have their own privacy policies and terms.

We recommend reviewing the privacy policies of linked websites before submitting personal information. We are not responsible for the privacy practices of third parties.

15. Additional Information for Specific Regions

15.1 California Consumer Privacy Act (CCPA) Users

California residents have additional rights under the California Consumer Privacy Act, including the right to:

• Know what personal information is collected, used, and shared
• Delete personal information collected from you
• Opt-out of the "sale" or "sharing" of personal information (though we do not sell data)
• Non-discrimination for exercising your rights

To exercise CCPA rights, contact: [INSERT PRIVACY CONTACT EMAIL]

15.2 Virginia Consumer Data Protection Act (VCDPA) Users

Virginia residents have the right to:

• Access your personal information
• Correct inaccurate information
• Delete personal information
• Opt-out of targeted advertising and sale/transfer of data

To exercise VCDPA rights, contact: [INSERT PRIVACY CONTACT EMAIL]

15.3 Other State and International Privacy Laws

Matchday Maths complies with applicable state, territorial, and national privacy laws in all jurisdictions where users are located. If you believe we are not complying with your local privacy laws, please contact us or your local privacy regulator.

16. Definitions

Personal Information:Any information that identifies you, relates to you, or could be reasonably linked to you (name, email, address, IP address, cookie ID, etc.).

Processing:Any operation performed on personal information, including collection, storage, use, disclosure, modification, or deletion.

Data Controller:The entity (Matchday Maths) that determines the purposes and means of personal information processing.

Data Processor:Third-party service providers who process personal information on behalf of the data controller.

Lawful Basis:The legal justification for processing personal information under GDPR (contract, consent, legal obligation, vital interests, public task, or legitimate interests).

Consent:Your explicit, informed, voluntary agreement to processing of personal information.

Data Subject:You, the individual to whom personal information relates.

Data Protection Impact Assessment (DPIA):A process for evaluating privacy risks associated with processing activities.

Breach:Unauthorized access, disclosure, or loss of personal information.

17. Final Notes and Disclaimer

This Privacy Policy is provided for informational purposes. It outlines our privacy practices and commitments. However:

• It is not a legal contract
• It is not a substitute for legal advice
• Matchday Maths recommends consulting with a privacy lawyer in your jurisdiction
• Specific regulatory requirements may vary by location
• This policy is accurate as of January 2026 and subject to change

By using Matchday Maths, you acknowledge that you have read and understood this Privacy Policy and consent to our privacy practices as outlined herein.

18. Contact and Recourse

For questions, concerns, or requests regarding this Privacy Policy:

General Enquiries:Email: [INSERT SUPPORT EMAIL]Website: https://matchdaymaths.com.au

Privacy-Specific Enquiries:Email: [INSERT PRIVACY CONTACT EMAIL]Mailing Address: [INSERT REGISTERED OFFICE ADDRESS]Response timeframe: 10-15 business days

Complaints:Email: [INSERT PRIVACY COMPLAINT EMAIL]Mailing Address: [INSERT REGISTERED OFFICE ADDRESS]Response timeframe: 30 days

Version 1.0 – January 2026

This Privacy Policy was last updated in January 2026 and reflects current privacy best practices, Australian Privacy Principles, GDPR requirements, and responsible gambling principles.

Disclaimer: This document is provided for informational purposes only and is not a substitute for legal advice. Matchday Maths strongly recommends consulting with a qualified privacy lawyer in your jurisdiction before deploying this privacy policy in production.