Privacy Policy

We collect the following data when you create an account and use the Platform:

• Account data: mobile number (verified via a one-time code), display name, city, skill level, and a profile photo if you add one.
• Booking and transaction data: your bookings, their amounts and status, refund history, and loyalty points.
• Payment data: your card details are processed entirely by the licensed payment service provider — we never store your full card number on our systems.
• Technical data: device identifiers, push notification tokens, usage logs, and analytics data that is only activated with your consent.
• Communications: your messages with our support team, your reviews and your content on the Platform.

Core account data is required to provide the service; optional data (such as a profile photo) can be declined without affecting your use of the Platform.

We process your data exclusively for the following purposes:

• Creating your account, verifying your identity and signing you in.
• Executing bookings, payments, refunds, invoicing and club settlements.
• Running open matches and showing your player profile to participants in your matches.
• Supporting you and responding to your inquiries and complaints.
• Securing the Platform, preventing fraud and abuse, and improving the service.
• Sending operational notifications about your bookings and account.
• Marketing messages — only with your prior consent, which you can switch off at any time as easily as you gave it.

We do not use your data for purposes other than those stated in this policy.

Each processing activity rests on a legal basis under Articles 5 and 6 of the law:

• Contract performance: managing your account and executing your bookings, payments and support — our primary basis.
• Legal obligation: retaining contract, transaction and invoice records under commercial and tax regulations.
• Legitimate interest: protecting the Platform from fraud and improving it through aggregated analytics — for non-sensitive data only and without prejudice to your rights and interests.
• Consent: marketing messages and optional analytics; you may withdraw consent at any time, free of charge, without affecting core services.

We do not sell your personal data to anyone. We share it, in the narrowest scope, with:

• The licensed payment service provider, to process payments and refunds.
• The club you book with: your display name and the booking details needed to deliver the service — never your payment data.
• Technical service providers (hosting, databases, notifications, analytics) under data processing agreements binding them to confidentiality and restricting their use of the data to serving us.
• Competent authorities where there is a legal request or requirement.

We keep your account data for as long as your account is active. Contract and transaction records are kept for at least three years from the contract date under the E-Commerce Law's implementing regulation, and longer where tax regulations require. Support communications are kept for up to three years, and technical logs for up to twelve months.

Once the purpose and statutory periods expire, data is destroyed or anonymized so it can no longer identify you.

We apply technical and organizational safeguards to protect your data: encrypted connections, need-based access restrictions, separation of privileges, and continuous monitoring and updates.

If an incident affecting your personal data occurs that may cause you harm, we are committed to notifying the Saudi Data & AI Authority (SDAIA) within seventy-two hours and informing you without undue delay, in accordance with Article 20 of the law and its regulations.

The Personal Data Protection Law guarantees you the following rights:

• To be informed of the purposes and legal basis of collecting your data.
• To access your personal data held by us.
• To obtain a copy of it in a clear, readable format.
• To request its correction, completion or updating.
• To request its destruction when no longer needed or when you withdraw consent.
• To withdraw your consent at any time, free of charge.

Submit your request via the in-app Help Center; we verify your identity and respond within thirty days (extendable by a further thirty days for complex or repeated requests), free of charge. You may in all cases lodge a complaint with SDAIA as the competent authority.

Some of our technical systems (database, hosting, analytics) are hosted with cloud providers outside the Kingdom. Transfers are limited to the minimum necessary to provide the service and are subject to contractual safeguards and protection obligations consistent with Article 29 of the law and the Regulation on Personal Data Transfer outside the Kingdom.

Payment processing is carried out through a payment provider licensed in the Kingdom of Saudi Arabia.

We use cookies and similar technologies as follows:

• Essential: for sessions, sign-in, and language/theme preferences — required for the Platform to work.
• Analytics and marketing: only activated with your consent via the consent panel; you can change or withdraw your choice at any time from settings.

You can also manage push notifications from your device or account settings at any time.

We may update this policy from time to time. For any material change we will notify you via the Platform or your registered contact channels before it takes effect, and the “Last updated” date at the top of this page will be revised.

For any inquiry or request concerning your personal data (access, a copy, correction, destruction, or withdrawing consent), email us at privacy@padict.sa or use the in-app Help Center, and we will respond within the timeframes above.

The party responsible for processing your data: Padict Establishment — Commercial Registration No. 7054906065, Kingdom of Saudi Arabia.

You may in all cases lodge a complaint with the Saudi Data & AI Authority (SDAIA).