Privacy policy
Last updated: August 3, 2026.
This Privacy Policy applies to the processing of personal data of Esports World Cup (EWC) website users. By accessing or using the website, you acknowledge that you have read this Privacy Policy. The Esports Foundation (EF, we, us, our) is committed to protecting user data collected and processed through the EWC website and we follow strict guidelines to protect personal data. The website collects and processes personal data in accordance with applicable laws and regulations. This Privacy Policy explains what personal data we collect, for what purpose, to whom we disclose the data, how long we keep it, how we protect your personal data as well as the safeguards applied when transferring personal data internationally. It also describes your rights and how you can exercise or invoke them.
Who we are
The Esports Foundation is a non-profit foundation established under the laws of the Kingdom of Saudi Arabia.
Registered Address: 3936 Al Nakheel District, Unit Number 5, 12382-6651 Riyadh, Saudi Arabia
Contact Email: [email protected]
For the purposes of applicable data protection legislation, EF is the controller responsible for your personal data as described in this Privacy Policy.
What Personal Data We Collect and Process
By “personal data” we mean any information that can be used on its own or together with other information to identify a person, including name, personal identification number, addresses, contact numbers, license numbers, records, personal assets, bank and credit card numbers, photos and videos of an individual, and any other data of personal nature. This also includes online identifiers, cookie identifiers, device identifiers, and any information relating to an identified or identifiable natural person.
On the website, and in alignment with the principle of data minimization, we collect personal data only when needed. We collect the following information:
Information about your use of the website (usage data), including the pages you visit, links you click, the date and time of your visits, and your interactions with EWC website content.
Information establishing your identity and contact details, including your name, username, email address, phone number, nationality, date of birth, country of residence and postal address where provided.
Payment and transaction information, including information required to process payments, administer prizes and maintain transaction records, where applicable.
Account and registration information, including information provided when creating an account, registering for competitions, events, promotions, newsletters or other EWC services.
Technical and device information, including your IP address, approximate location, time zone, browser type and versions, operating system, device identifiers, cookies and similar technologies, and other system- or service-specific technical information.
Communications and correspondence, including information you provide when contacting us through contact forms, email, telephone, social media channels, support requests, surveys or feedback forms.
Competition, event and participation information, including information relating to your participation in EWC competitions, registrations, events, promotions, surveys and other related services, where applicable.
How We Collect Your Personal Data
We gather most of the personal data and we use from the following resources:
Yourself, and from what we receive from you by actively obtaining your personal information ourselves, for example, through the use of cookies, pixels, analytics technologies, server logs, and similar tracking technologies.
The technology you use to access the website and or other Esports World Cup systems.
From third party service providers where necessary to deliver our services, administer competitions, process payments, or comply with legal obligations.
Why We Collect and Use Your Personal Data
Your personal data is processed for the following purposes and on the following bases, where available under applicable data protection laws:
Purpose of processing Personal Data Legal Basis
Providing access to the EWC website and related EWC services Information establishing your identity and contact details; account and registration information Performance of a contract
Administering competitions, registrations, events, promotions and surveys Information establishing your identity and contact details; account and registration information; competition, event and participation information Performance of a contract
Responding to enquiries and communications you send to us Information establishing your identity and contact details; communications and correspondence Performance of a contract Our legitimate interest in managing communications and supporting users
Sending you information about our events, products, services and offerings that may be of interest to you Information establishing your identity and contact details Consent (where required by applicable law)
Operating, maintaining and improving the website and services Usage data; technical and device information Our legitimate interests in operating, improving and developing the website and related services
Analyzing website usage, performance and user engagement Usage data; identifiers, location information and other technical information Our legitimate interests in understanding how the website is used, improving user experience and minimizing disruption to the website Consent (where required by applicable law)
Monitoring the security of our website and systems Technical and device information; usage data Our legitimate interests in protecting the security, integrity and availability of our website and systems
Preventing fraud, misuse unauthorized access Usage data; technical and device information; account and registration information Our legitimate interests in preventing fraud, misuse and unauthorized access and safeguarding our users and services
Processing payments, administer prizes and maintain transaction records Payment and transaction information, information establishing your identity and contact details Performance of a contract Compliance with legal obligation (where accounting, tax or statutory records are required)
Complying with applicable laws, regulations, court orders and regulatory requests, including disclosures required by law. Any personal data relevant to the applicable legal requirement Compliance with legal obligation
Who Do We Share Your Personal Data With
We may share your data with:
EF affiliates, partners, event organisers, tournament operators and other operational partners involved in administering competitions, registrations, events, promotions and related services
Sponsors and commercial partners, where you participate in sponsor-related activities, campaigns, competitions, promotions or events
Cloud hosting providers (for system operation)
Payment processors (for transactions)
Analytics providers (for website performance)
Customer support tools (for user assistance)
Government authorities, regulators, law enforcement agencies, and professional advisors where disclosure is required or permitted by applicable law.
All third parties are contractually bound to protect your data.
International Data Transfers
Your personal data may be transferred outside Saudi Arabia or the country in which you reside, including to countries where our service providers, affiliates or partners operate. We take appropriate steps to ensure that any cross-border transfers are carried out in compliance with applicable data protection laws and are subject to appropriate safeguards designed to protect your personal data. Such safeguards may include transferring personal data to jurisdictions that have been recognized as providing an adequate level of protection or implementing approved contractual and other lawful transfer mechanisms.
In particular, where we transfer personal data from the European Economic Area, including France, to countries that have not been recognised as providing an adequate level of protection, we will implement appropriate safeguards as required by applicable data protection laws. These safeguards may include the European Commission’s standard contractual clauses, supplementary technical and organisational measures where required, or another lawful transfer mechanism. You may contact us at [email protected] for further information about the safeguards used for international transfers of your personal data.
How Do We Protect Your Personal Data
We are committed to maintain the privacy and confidentiality of all personal data collected. Such data may only be disclosed or shared when approved and required by law, or when we believe that such action is necessary or desirable to fulfil the purpose for which we have collected the data, the basis on which we have relied to collect your personal data, or for technical support. We ensure that the records we hold about you are kept secure and made available only to those who have the clearance to see them. We do this by implementing technical and organizational business measures such as:
Access management controls to systems and networks
Training staff to maintain and protect your data
Implementing technical and organizational business controls in place over where data is stored
Encryption of personal data where appropriate
Multi-factor authentication for privileged access
Security monitoring and logging
Periodic access reviews
Vulnerability management and regular security patching
How Long We Retain Your Personal Data
We will retain your personal data for as long as necessary for the purposes for which it was collected, and for satisfying any legal, regulatory, accounting, or reporting requirements. Specific retention periods include:
Account data: retained for three years after account inactivity
Marketing data: retained until consent is withdrawn or you object to marketing, and in any event no longer than the period permitted under applicable law after your last active interaction with us. We may retain limited suppression-list information to ensure that your opt-out is respected.
Transaction records: retained for five years in accordance with statutory requirements
Technical logs: retained for 12 months, unless a longer period is required for security investigations, fraud prevention, legal claims or compliance with legal obligations.
Personal data will be deleted when it is no longer required, unless:
retention is required by applicable law or regulation, in which case the personal data will be retained for the period prescribed by that law or regulation and deleted thereafter; or
the personal data is relevant to actual or anticipated legal proceedings, investigations or claims, in which case it may be retained until those matters have been resolved and any applicable limitation periods have expired.
Once the relevant retention period has ended and there is no longer a lawful basis for retaining the personal data, it will be securely deleted or anonymised.
Data Breach Notification
In the event of a personal data breach, we will notify the competent authority as required by law and inform affected users when there is a high risk to their data. Notifications will be made within the timeframes required under applicable law.
What Are Your Rights
Depending on your jurisdiction, you may have the following rights:
Right to be informed: You have the right to be informed how we collect, process and disclose your personal data, including the purposes and legal basis of processing. You can access such details through this Privacy Policy or by contacting us using the information set out in the ‘Who Can You Contact’ section below.
Right to request access: You have the right to ask for access to, and copies of, your personal data.
Right to request correction: You have the right, under certain circumstances, to request that we delete your personal data. For information on how to delete your account see the Account Deletion section below.
Right to request restriction of processing: You have the right, under certain circumstances, to ask us to restrict the processing of your personal data.
Right to request destruction: You have the right, under certain circumstances, to request that we delete your personal data. For information on how to delete your account see the Account Deletion section below.
Right to withdraw consent: Where we have processed your personal data solely based on consent, you have the right to revoke this consent at any time. You may do so through the Data Subject Rights (DSR) portal available within your account, by adjusting your account settings where applicable, by contacting us using the details set out in the ‘Who Can You Contact’ section below or by unsubscribing from relevant communications, as applicable.
Right to data portability: Where provided under applicable data protection laws, you may have the right to receive certain personal data that you have provided to us in a structured, commonly used and machine-readable format and to request that we transfer that personal data to another organisation where technically feasible.
Right to object: Where provided under applicable data protection laws, you may have the right to object to the processing of your personal data in certain circumstances, including where we process your personal data based on our legitimate interests.
Right to object to direct marketing: You have the right to object at any time to the processing of your personal data for direct marketing purposes. If you exercise this right, we will stop using your personal data for direct marketing purposes.
Right to provide general or specific instructions after your death: You have the right to provide general or specific instructions regarding the retention, deletion, and disclosure of your personal data after your death.
Right to submit a complaint: You have the right to submit a complaint about our use of your personal data or to submit a complaint to the competent authority, the details of which are set out below in the ‘Who Can You Contact’ section of this Privacy Policy.
If you choose to exercise any of your rights, we will respond as soon as reasonably possible and in line with applicable data protection laws. Where the GDPR applies, we will respond to your request without undue delay and in any event within one month of receipt of the request. This period may be extended by up to two further months where necessary, taking into account the complexity and number of requests. We will inform you of any such extension and the reasons for it.
In some cases, we may need to request additional information to verify your identity or to better understand the nature of your request. If you wish to exercise your rights, you may submit your request through the DSR portal available within your account or contact us at [email protected] .
Account Deletion
When you delete your account:
Your profile data will be permanently deleted
Some data may be retained where required by law (e.g., financial records)
Personalization
We use your preferences (e.g. favorite games, teams) to personalise your experience and recommend content.
This processing is based on your consent and can be disabled at any time. Personalisation features can be managed or disabled through your account settings. Where personalisation is based on your consent, you may withdraw that consent at any time through your account settings or via the DSR portal.
Children’s Privacy
Where our services are intended for or accessible to children, we process children's personal data in accordance with applicable laws and implement additional safeguards. This may include age requirements-appropriate notices, collecting age or birth date information to verify eligibility, applying any age-related access controls, and obtaining parental or legal guardian consent where required. Where appropriate, we may restrict access to certain features, activities, payments or services, competitions or promotions prizes based on age. Where necessary, we may also request evidence of parental or legal guardian authority
Changes to this Privacy Policy
To ensure that we continue to offer the best possible experience and the highest level of protection to you, we reserve the right to update this Privacy Policy as and when necessary, to reflect changes in our practices, services or applicable laws and regulations. Any updates will be posted on this website and reflected by the “Last Updated” date above. If we make material changes to this Privacy Policy, we will seek to notify you through appropriate means, such as notice available on this website or via email. We therefore recommend you reviewthis Privacy Polic periodically to stay informed about how we protect your personal data.
Our Use of Cookies
Esports World Cup website uses cookies, pixels, and other consent mechanisms to improve your experience on our website. You may disable cookies in your browser settings, but this may affect certain functionalities of the website. Please refer to our Cookie Notice for further information about the categories of cookies we use, their purposes, retention periods, and how you can manage your cookie preferences.
Link to other websites
Our website may contain links to third party sites, which may be subject to separate privacy notices or policies. These sites are not under our control, and we are not responsible for any third party privacy notices or policies. It is your responsibility as a user to ensure that you are aware of or seek out information regarding any applicable policies of third party sites which you choose to access.
Contact Us
If you have any questions or inquiries regarding this Privacy Policy, please contact us at [email protected].
If you wish to make a complaint about our use of your personal data, we suggest that you first contact us at the details above. We will investigate and attempt to resolve any complaints and disputes, and we will endeavor to help you exercise your rights within a reasonable timeframe.
You are also entitled to make a complaint to the competent government authority(ies). For Saudi Arabia, the competent authority is the Saudi Data & Artificial Intelligence Authority (SDAIA), and complaints can be submitted via the National Data Governance Platform: dgp.sdaia.gov.sa. For France, the competent supervisory authority is the Commission Nationale de l'Informatique et des Libertés (CNIL) (3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07; +33 (0)1 53 73 22 22) and complaints can be submitted via the CNIL website at https://www.cnil.fr or via email at [email protected]. If you are located elsewhere in the European Economic Area, you may lodge a complaint with the supervisory authority of your habitual residence, place of work, or place of the alleged infringement.