Privacy Policy

This Privacy Policy explains how your personal data is collected, used, stored, and protected when you use ExA Cup. Your data is collected by ExA Cup (the Operator, we, us, or our), acting as the data controller.

We are committed to protecting your privacy and to handling your personal data in a lawful, fair, and transparent manner. Please read this Policy together with our Terms of Service.

By using ExA Cup and by providing your personal data to us, you consent to the collection, use, and processing of your data as described in this Policy. Where we rely on your consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.

Personal Data. We may collect your full name, date of birth, country of citizenship, residential address, identification document, utility bill or proof of address, phone number, and email address.

Usage Data. We may collect data about how you use the Platform, including approximate location, device information, IP address, preferences, and browser type and settings.

Public Data. Where you choose to link or share them, we may collect information from your public social-media profiles.

We collect data that you provide directly when you register, verify your identity, make a transaction, request a redemption, or contact us. We also collect data automatically through cookies and similar technologies as you use the Platform, and we may receive data from third parties such as identity-verification, payment, and analytics providers.

We use your data to create and manage your Account, to provide and improve the Platform, to process transactions and redemptions, to verify your identity, to comply with legal, regulatory, anti-money-laundering, and sanctions obligations, to detect and prevent fraud and misuse, to communicate with you about your Account, and, with your consent where required, to send you marketing.

To operate our rewards and watch-to-earn features and to prevent fraud, we collect activity and integrity data, including whether a stream is in focus and audible, presence and interaction signals, session duration, device and browser fingerprints, IP address and approximate location, and patterns across accounts and devices. We use this data to verify genuine activity, calculate eligibility and rewards, detect automation, multiple accounts, and abuse, and to withhold or void rewards and payouts where manipulation is detected.

We retain your personal data only for as long as necessary for the purposes set out in this Policy and to comply with our legal obligations. In particular, to meet anti-money-laundering and counter-terrorist-financing requirements, we retain certain identity and transaction records for at least five years after the closure of your Account.

We implement appropriate technical and organizational measures designed to protect your personal data against unauthorized access, loss, misuse, or alteration. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Where you have consented, we may send you marketing communications about products, promotions, and offers. You may opt out of marketing at any time by using the unsubscribe link in our messages or by contacting us. Opting out of marketing does not affect service or transactional communications.

We use cookies and similar technologies to operate the Platform, remember your preferences, keep you signed in, measure usage, and improve our services. You can control cookies through your browser settings, though disabling certain cookies may affect the functionality of the Platform.

Subject to applicable law, you have the right to access the personal data we hold about you, to have inaccurate data rectified, to request erasure of your data, to restrict our processing, to object to processing, and to request portability of your data in a structured, commonly used format.

To exercise any of these rights, contact us using the details below. We may need to verify your identity before responding to a request.

Your personal data may be transferred to, and processed in, countries other than the one in which you reside, including where our service providers operate. Where we transfer data internationally, we take steps to ensure that an appropriate level of protection applies.

We do not sell or rent your personal data. We may share it with service providers who process data on our behalf, such as identity-verification, payment, delivery, and analytics providers, and we may disclose it where we are legally required to do so, or to protect our rights, users, or the Platform.

If you have any questions about this Privacy Policy or wish to exercise your rights, contact us at support@exacup.com.

This Privacy Policy is reviewed at least annually and may be updated from time to time. Changes take effect when the revised Policy is posted on the Platform, and your continued use of the Platform constitutes acceptance of the updated Policy.