Privacy Policy

At XI Royale ("we", "our", or "us"), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use our platform.

1. Information We Collect

We collect information that you provide directly to us when registering and using our services:

• Personal Identity Information: Phone number, email address, and your registered M-Pesa account name.
• Account Credentials: Cryptographically hashed passwords. We do not store plaintext passwords.
• Gaming Data: Fantasy Premier League (FPL) Team ID, gameweek scores, historical performance, and competition entry records.
• Transaction Data: Deposit and withdrawal amounts, timestamps, and M-Pesa transaction reference codes. We do not have access to your M-Pesa PIN or underlying banking credentials.
• Technical Data: IP addresses, browser types, and usage logs to monitor security and prevent fraud.

2. How We Use Your Information

We use the collected information for the following core operational purposes:

• To create and manage your XI Royale account.
• To process entry fees and facilitate prize payouts via the Safaricom M-Pesa network.
• To sync your team data with the official FPL API and calculate competition standings.
• To detect, prevent, and address technical issues, fraud, and violations of our Terms of Service.
• To communicate with you regarding your account, transactions, and critical platform updates.

3. How We Share Your Information

We do not sell, rent, or trade your personal data to third parties for marketing purposes. We only share information under the following circumstances:

• Service Providers: We share necessary transaction data with Safaricom to process M-Pesa payments securely.
• Public Platform Data: Your FPL Team Name, Manager Name, and competition scores are visible to other users within the competitions you join.
• Legal Compliance: We may disclose your information if required by law, subpoena, or other legal process, or if necessary to investigate fraud or protect the rights and safety of XI Royale and our users.

4. Data Security

We implement industry-standard administrative, technical, and physical security measures to protect your personal information. This includes HTTPS encryption for all data transfers and secure hashing for passwords. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure.

5. Data Retention

We retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy, or as required by Kenyan financial reporting and anti-money laundering (AML) regulations.

6. Your Data Rights

You have the right to access, correct, or request the deletion of your personal data. You can update your profile information directly within the application. If you wish to permanently delete your account and associated data, please contact our support team. Note that we may be legally required to retain certain financial transaction records even after account deletion.

7. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us via the support section in the XI Royale platform or at our official support email address.