Privacy Policy

Introduction

This Privacy Policy (the "Policy") explains how iFut Brasil ("iFut", "we"), as the Controller of Personal Data, collects, uses, shares, handles and processes information and Personal Data of individuals, including users, customers, third parties of our customers ("you", "user"), and business partners in carrying out its activities, whether through its portals or the offering of services.

It also sets out information about your rights regarding your personal data, in accordance with the LGPD (the Brazilian General Data Protection Law, Law No. 13,709/18).

Updates to the Privacy Policy

Whenever necessary, iFut Brasil reserves the right to change this Policy to comply with current legislation or to reflect other changes in our data processing, policies or privacy and risk management strategy.

Glossary

The terms below are used in this Policy:

iFut or iFut Brasil: A company providing services for organizing football championships and other competitions, focused on the amateur market.

LGPD: Brazilian General Data Protection Law, No. 13,709/2018,

National Data Protection Authority (ANPD): The Brazilian public administration body responsible for regulating, supervising and applying administrative penalties related to data protection.

Data Controller: Any natural or legal person, public or private, that processes personal data for any purpose provided for in the LGPD is considered a processing agent. In that case, the LGPD lists the Data Controller and the Data Processor as processing agents.

Data Processor: Any natural or legal person, public or private, that processes personal data on behalf of the Controller.

Data Protection Officer (DPO): An individual formally appointed as responsible for the privacy and protection of the regulated personal data managed by iFut, also responsible for answering data subject requests and for communicating and reporting to privacy regulatory authorities.

Personal Data: Information relating to an identified or identifiable natural person.

Sensitive personal data: Personal data on racial or ethnic origin, religious belief, political opinion, membership of a union or of a religious, philosophical or political organization, data concerning health or sex life, genetic or biometric data when linked to a natural person.

Data Subject: The natural person to whom the personal data resulting from the processing refers.

Data Handling and Processing: Operations carried out involving personal data, which may include collection, production, receipt, classification, use, access, reproduction, transmission, distribution, processing, archiving, storage, deletion, evaluation or control of the information, modification, communication, transfer, dissemination or extraction.

Championship Organizer Site, Competition Site, Team Panel and Athlete App: iFut Brasil applications that can be accessed by users and/or customers.

Visitor: a person who visits iFut Brasil's applications.

Customer: a person who hires iFut Brasil's services and/or uses any of our applications.

Security and Privacy of Personal Data

iFut Brasil is committed to protecting the information of our Data Owners, using measures aimed at the protection, integrity, availability and confidentiality of the personal data processed in our environment, because there is no privacy without security.

iFut Brasil also implements mechanisms to prevent, detect and minimize the likelihood and impact of incidents in our technological environment through a variety of security controls.

Data we collect

iFut collects the following categories of personal data and information related to the use of the platform:

Contact data

To establish proper communication with our users, customers and business partners, we may collect information such as name and contact details, including e-mail and telephone.

Marketing and event information

To provide information about our products or services, newsletters and event invitations, we may collect name, e-mail address and telephone, using our own platform or third-party platforms.

Data collected for payment processing

To make payments for products or services, we collect full name, e-mail, CPF or CNPJ (Brazilian tax IDs) and full address. Depending on the payment method chosen, additional information may be requested, such as bank or billing data. Please note that we do not store credit card data on our infrastructure; this information is processed securely and exclusively by the payment providers.

Competition-related data

During the organization and running of competitions on the iFut platform, we collect, process and generate different types of information:

• Public data by nature: standings table, match calendar, match statistics, team and athlete rankings, regulations, competition name and team names.

• Identifiable personal data: basic information about squad members, such as name, position and date/time of registration in the competition.

The competition organizer may choose to make all of this information public or keep it private within the platform, but it is not possible to control privacy granularly by type of data. In addition, this information may be disclosed directly by the organizer outside the platform, without any intermediation or control by iFut, since we act only as a data management tool and we are not responsible for the execution or official communication of the championship.

Regardless of the setting chosen by the organizer, all registered athletes will be able to view, through the athlete app, the information relevant to the championship in which they are participating.

Team manager data

When signing up on the Team Panel, the team manager provides the personal information needed for the platform to work, including name, e-mail and telephone. This data is shared with the competition organizer exclusively for management and communication related to the championship.

Athlete data

The only athlete data that iFut collects as mandatory is name and telephone, needed for the basic operation of the platform.

The competition organizer may require additional information at registration, which may include, among others: CPF, RG (national ID), date of birth, birth certificate, position, shirt number, e-mail, telephone, passport, voter registration card, gender and document attachments. The decision on which data will be collected and whether providing it is mandatory is solely up to the competition organizer.

This additional data is accessible only to the competition organizer and the team manager. iFut does not disclose or make this information public and does not share this data with third parties, ensuring the confidentiality and security of the information.

Browsing data on iFut platforms

Visitors to iFut applications may have certain data collected automatically, such as IP address, sequence of pages visited and details on how they interact with the site or app. All of this information is anonymous and used only for performance analysis, security and improving the browsing experience.

Handling and Processing of Personal Data

iFut handles and processes personal data manually and electronically, allowing access to the information only to employees and service providers who need it to perform their duties. For greater security, iFut provides data protection and information security training to the professionals involved in these activities.

The handling of personal data is carried out according to the legal bases and purposes provided for in the Brazilian General Data Protection Law (LGPD), including, but not limited to:

Performance of Contracted Services

In performing the contracted services, iFut manages registrations and records of athletes, teams and competitions, and provides access to the platform's features, including apps and administrative panels. It also facilitates communication between organizers, team managers and athletes, ensuring the smooth running of activities related to the competitions.

Improvement of Products and Services

With the aim of continuously improving the user experience, iFut conducts satisfaction surveys and analyzes the use of the platform. These initiatives make it possible to identify technical failures and point out opportunities for improvement, ensuring that browsing is increasingly efficient and pleasant.

Compliance with Legal and Regulatory Obligations

iFut may also process personal data to respond to requests from competent authorities and to comply with legal, judicial or administrative orders. In this context, internal security and compliance audits are carried out, ensuring that all regulatory obligations are duly observed.

Marketing Purposes (where applicable)

Personal data may also be used for marketing purposes, such as announcing news, features and content related to the platform. In addition, user interactions on our official channels, including the site, social networks and e-mails, may be evaluated in order to improve communication and the relevance of the information provided.

Based on the Data Subject's Consent

Finally, when there is a need to process personal data for purposes not covered by the previous cases, iFut will ask for the data subject's consent. This consent will always be specific, informed and highlighted at the time of collection, ensuring transparency and autonomy for the user.

Your Rights as a Data Subject

The LGPD guarantees certain rights to the Data Subject, such as:

Free Access: You have the right to access the personal data that iFut stores about you.

Correction: You have the right to request the updating and correction of your data if it is incomplete, inaccurate or out of date.

Deletion/Erasure: You have the right to request the total or partial deletion of your personal data, without having to explain why, except where keeping the data is necessary for regulatory purposes and in accordance with current legislation, as well as to avoid unwanted processing in the future.

Portability: You have the right to request the portability of the data you provided to iFut, when the processing is based on the consent given or on services performed under contract. iFut must allow you to obtain and use your personal data for your own purposes in a secure and protected way, without affecting the usability of your data.

Objection to Processing: When the processing is based on Legitimate Interests, you have the right to object to the processing of your data by iFut. While your request is being analyzed, iFut will stop processing your data, unless we can demonstrate legitimate reasons to continue the processing.

Withdrawal of Consent: You have the right to withdraw the consent you gave at any time, by requesting the withdrawal through our standard communication channels (e-mail, telephone, contact form, etc.). To exercise your rights over your personal data, contact our DPO at dpo@ifut.com.br.

Storage of Personal Data

iFut will keep your personal data only for the period necessary to fulfil the purposes for which it is processed, including our terms and contracts, aiming at the highest standard in providing our services and carrying out our activities. In addition, we must keep some of your data to comply with current legislation and for regulatory purposes.

Disclosure or Sharing of Information

iFut only shares your personal data with your consent or in accordance with this policy. Otherwise, iFut does not share, sell or distribute any of the information you provide to us.

Cookies

Cookies allow the collection of browsing-related data depending on the type of device used, the permissions you grant through your device settings and the features used in each application. We may use third-party cookies on our site.

Cookies on the institutional page

On the institutional page (www.ifut.com.br) we use our own cookies and third-party measurement technologies. By default, no measurement or advertising cookie is stored: only after your choice in the cookie notice, which you may accept or decline.

• Google Tag Manager: loads the measurement tags of the institutional page.
• GA4 (Google Analytics 4): measures visits and conversions of the institutional page in aggregate form, and only with your authorization.
• Google Ads: measures the conversion of advertising campaigns, and only with your authorization.
• ifut_attr (ifut_attr_stg in the test environment): stores the origin of the visit (campaign parameters such as utm_source and gclid) so that we know which campaign your sign-up came from. Validity: 90 days.
• ifut_consent (ifut_consent_stg in the test environment): stores your choice in the cookie notice (accept or decline). Validity: 365 days.

If you decline, the page works normally and we do not store measurement or advertising cookies. The ifut_attr and ifut_consent cookies are shared between www.ifut.com.br and admin.ifut.com.br.

Data Protection Impact Assessment

The Data Protection Impact Assessment (DPIA) is required for certain specific types of processing when they are likely to result in a high risk to data subjects. Accordingly, iFut must produce this report to analyze, identify and minimize the data protection risks of a project.

This document is for iFut's internal use and may be requested and sent at the request of privacy regulatory authorities at any time.

International Data Transfer

iFut may manage, access or process your personal data in national and foreign territory, provided that they have legislation similar or equivalent to Brazilian law.

Communication with Regulatory Agencies

Should communication with regulatory agencies be necessary, iFut will act promptly through the official channels and documents of those agencies.

Data Protection Officer (DPO)

For more information about this Policy, about how we handle your personal data or to exercise your rights as a data subject, you can contact us at dpo@ifut.com.br

General Provisions

If you choose not to provide certain personal information to iFut, some types of services may not be contracted or may not be performed in the best way, due to the exchange of information required for this.

We are not responsible for the privacy practices of any sites, mobile apps or other digital services not operated by iFut, including those that may be linked to iFut, and we encourage you to review the privacy options available there.

Third-Party Services

iFut uses the following partners to provide its services:

Amazon Web Services: infrastructure service provider. Privacy Policy

Digital Ocean: infrastructure service provider. Privacy Policy

Cloudflare: infrastructure service provider. Privacy Policy

Fly.io: infrastructure service provider. Privacy Policy

Telegram: corporate communication solution. Privacy Policy

Whatsapp: customer support communication solution. Privacy Policy

Webflow: solution that hosts the corporate site. Privacy Policy

Google: corporate solution (e-mail, docs, meetings). Privacy Policy

Iugu: payment service provider. Privacy Policy

Conta azul: accounting services solution. Privacy Policy