Privacy Policy

Last updated: 30 June 2026

This Privacy Policy explains how GRIT ("we", "us") collects, uses, and protects your personal data, in accordance with Egypt's Personal Data Protection Law No. 151 of 2020 ("PDPL") and its executive regulations.

1. Data Controller

GRIT acts as the data controller for personal data collected through the platform. As required under the PDPL, GRIT is responsible for determining the purposes and means of processing your personal data.

2. Data We Collect

• Account data: phone number and/or email address, full name, nickname, skill level, sport preferences, profile photo.
• Registration data: team name, tournament registrations, payment screenshots submitted for InstaPay confirmation.
• Performance data: match scores, points, rankings, and statistics generated from your participation in tournaments.
• Sponsor inquiry data: if you submit a sponsorship request, we collect your company name, contact details, and message.
• Technical data: IP address, device/browser information, and usage logs collected automatically for security and performance purposes.

3. How We Use Your Data

• To create and manage your account and authenticate you via OTP;
• To process tournament registrations and verify InstaPay payments;
• To calculate and display rankings, points, and statistics;
• To communicate with you about your registrations, tournaments, and account;
• To send newsletter updates, if you opt in;
• To maintain the security and integrity of the Service, including preventing fraud and unauthorized access.

4. Legal Basis for Processing

We process your personal data on the basis of: (a) your explicit consent, given at the time of registration and profile completion; (b) the necessity of processing to perform our contract with you (registering you for tournaments, confirming payments); and (c) our legitimate interest in operating and securing the platform, where this does not override your fundamental rights under the PDPL.

5. Data Sharing & Third Parties

We share limited personal data with the following categories of service providers, solely to operate the platform:

• SMS/OTP delivery providers, to send verification codes to your phone number;
• Cloud file storage providers, to store uploaded images such as payment screenshots, profile photos, and tournament/sponsor images;
• Tournament organizers, who can see the registration and contact details of teams registered for their specific event, strictly for the purpose of running that tournament.

We do not sell your personal data. We do not process card or bank account numbers — InstaPay payments are manual bank transfers verified by organizers from screenshots you choose to upload.

6. Data Retention

We retain your personal data for as long as your account is active, and for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated data at any time, subject to Section 7 below.

7. Your Rights Under the PDPL

As a data subject under Egypt's Personal Data Protection Law, you have the right to:

• Access the personal data we hold about you;
• Request correction of inaccurate or incomplete data;
• Request erasure of your data, subject to legal retention requirements;
• Withdraw consent to processing at any time, where consent is the basis for processing;
• Object to or restrict certain processing of your data;
• Request a copy of your data in a portable format.

To exercise any of these rights, contact us through the details provided on the platform. We will respond within the timeframe required under the PDPL's executive regulations.

8. Data Security

We apply reasonable technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse, including encrypted transmission, access controls, and secure password/credential handling. No system is completely secure, and we cannot guarantee absolute security of data transmitted to or from the Service.

9. Cookies & Similar Technologies

We use essential cookies and local storage to keep you signed in and remember your preferences. We do not currently use third-party advertising or tracking cookies.

10. Children's Privacy

The Service is not directed at children under 16. We do not knowingly collect personal data from children under 16 without parental or guardian consent. If you believe a child has provided us with personal data without appropriate consent, contact us so we can remove it.

11. International Data Transfers

Some of our service providers (such as cloud storage and SMS delivery) may process data outside Egypt. Where this occurs, we take steps consistent with the PDPL's requirements for cross-border data transfer, including relying on providers with appropriate data protection safeguards.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date at the top of this page.

13. Contact

For privacy-related questions or to exercise your rights under the PDPL, contact our team via the details provided on the GRIT platform.