Privacy Policy

Summary of Key Points

• We collect your account details, match data, and device information to run DEUCE leagues.

• Your DMR rating is calculated algorithmically from match results.

• We do not sell your data or use it for advertising.

• Payments are handled by third-party processors; we never see your full card details.

• You can access, correct, or delete your data at any time.

• You must be at least 16 years old to use DEUCE (16–17 with parental consent).

• Malaysian law (PDPA 2010) governs how we handle your personal data.

Introduction

Deuce League Sdn. Bhd. ("DEUCE," "we," "us," or "our") operates the DEUCE: Flex League mobile application and website at deuceleague.com (collectively, the "Services"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Services. Our website currently collects email addresses for launch updates; once the App is available, the website will primarily provide information about the App and direct users to the relevant app store listings.

When you create an account, you will be asked to read and actively consent to this Privacy Policy. You may withdraw your consent at any time by contacting us or deleting your account, though this may affect your ability to use certain features of the App. If you do not agree with this policy, please do not use the Services.

Information We Collect

Information You Provide to Us

Account Information Username, display name (e.g., your real name), email address, gender, profile photograph (optional), and location (city or area, for league placement).

Authentication Data When you sign in using a third-party authentication service, we receive certain information from that provider to create and manage your account:

• Sign in with Apple: We receive your name and email address. If you choose Apple's "Hide My Email" option, we will receive an anonymised relay email address instead.

• Sign in with Google: We receive your name, email address, and profile picture.

We do not receive or store your password from these providers. We use this information solely for account creation, authentication, and displaying your profile within the App.

Player Profile Information Skill assessment questionnaire responses, sport preferences (tennis, padel, pickleball), playing format preferences (singles, doubles), and self-reported external ratings (e.g., DUPR ratings and reliability scores for Pickleball).

Match and League Data Match results and scores, DEUCE Match Rating (DMR), league and division membership, win/loss records and statistics, and match history.

Communications In-app chat messages with other players, social feed posts and interactions, and support enquiries and correspondence.

Payment Information When you pay league entry fees or other charges through the App, your payment is processed by our third-party payment provider, FIU, and/or through Apple Pay or Google Pay. We do not collect or store your full payment card details, bank account numbers, or FPX credentials. Payment information is transmitted directly to and handled by these payment providers in accordance with their own privacy policies and security standards (including PCI-DSS compliance for card payments). We may receive and retain limited transaction information such as the transaction amount, date, and a confirmation of payment status for our records.

Information Collected Automatically

Device Information Device type and model, operating system and version, unique device identifiers, and mobile network information.

Usage Information App features accessed, time and duration of use, interactions within the App, and referring and exit pages.

Push Notification Data Device tokens for push notifications, and notification preferences and settings.

Analytics and Performance Data We may use third-party analytics and performance monitoring tools (such as Firebase Analytics and Firebase Crashlytics) to collect anonymised usage data and crash reports. These tools may use device identifiers to help us understand how the App is used and to identify technical issues. We do not use advertising identifiers or any advertising SDKs, and no data collected through these tools is used for advertising purposes.

How We Use Your Information

We use the information we collect to:

• Create and manage your account

• Determine your eligibility for leagues and divisions based on your skill level, location, and gender

• Facilitate match scheduling and coordination between players

• Calculate and update your DEUCE Match Rating (DMR)

• Display leaderboards and standings

• Enable in-app communication between players

• Send push notifications about matches, league updates, and important announcements

• Provide customer support

• Analyse aggregated and anonymised usage patterns to improve App performance, identify and fix technical issues, and develop new features

• Ensure fair play, detect irregularities in match reporting, and enforce our Terms of Service

• Comply with legal obligations

We will not process your personal data for any purpose other than those stated above, or any directly related purpose, without first obtaining your consent.

Algorithmic Processing (DEUCE Match Rating)

We use algorithmic processing to calculate your DEUCE Match Rating (DMR) based on match results, scores, and other performance data. This rating is used to place you in appropriate leagues and divisions. Your DMR is not determined by manual review — it is calculated automatically using our rating algorithm. If you believe your rating does not accurately reflect your skill level, you may contact us at support@deuceleague.com.

How We Share Your Information

With Other Users

Certain information is visible to other DEUCE users: username, display name, and profile photo; city/area (general location); sport preferences; DEUCE Match Rating (DMR); league and division membership; match history and results; and social feed posts.

With Service Providers

We may share information with third-party service providers who assist us in operating the App. These providers are contractually obligated to protect your information and use it only for the services they provide to us.

Apple Purpose: Authentication (Sign in with Apple) Data Shared: Authentication tokens

Google Purpose: Authentication (Sign in with Google) Data Shared: Authentication tokens

Apple Push Notification Service (APNs) Purpose: Push notifications Data Shared: Device tokens, notification content

Amazon Web Services (AWS), Google Cloud Platform, and/or Firebase Purpose: Cloud hosting, storage, analytics, and performance monitoring Data Shared: All app data (encrypted)

FIUU Purpose: Payment processing (credit/debit cards, FPX) Data Shared: Transaction data, payment confirmation (card/banking details handled directly by FIU)

Apple Pay / Google Pay Purpose: Payment processing Data Shared: Transaction data, payment confirmation (payment credentials handled directly by provider)

Chat Message Monitoring

We do not routinely monitor the content of messages sent between users, whether in private conversations or division group chats. However, we may review messages if they are reported by a user, or if we have reasonable grounds to believe they violate our Terms of Service, including but not limited to harassment, abuse, or unsportsmanlike conduct. Any such review will be conducted only by authorised personnel and limited to what is necessary to investigate the reported issue.

We Do NOT:

• Sell your personal information to third parties

• Share your personal information with advertisers

• Share your chat messages with anyone other than the intended recipients (except as described in Chat Message Monitoring above)

Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

International Data Transfers

Your data is hosted on cloud infrastructure which may include Amazon Web Services (AWS), Google Cloud Platform, and/or Firebase. This may involve processing and storage of your data on servers located outside Malaysia. We ensure that any such transfers are subject to contractual safeguards that require the service provider to protect your data to a standard comparable to the protections under the Personal Data Protection Act 2010.

We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy when transferred internationally.

Data Retention

We retain your information for as long as necessary to provide our services and fulfil the purposes described in this policy.

Account information Retained until you delete your account, plus 30 days.

Match history and statistics Retained indefinitely in anonymised form (personal identifiers removed) for the integrity of historical league records.

DEUCE Match Rating history Retained indefinitely in anonymised form for the integrity of historical league and rating records.

Chat messages 2 years from date sent, or until account deletion.

Social feed posts Until deleted by you, or until account deletion.

Push notification tokens Until you disable notifications or delete your account.

Usage analytics 26 months.

Support enquiries and correspondence 3 years from resolution, or as required by law.

Account Deletion

You may request deletion of your account at any time by contacting us at privacy@deuceleague.com. Upon deletion:

• Your account information will be deleted within 30 days.

• Your match history and DMR rating history will be anonymised. Match results and scores will be retained for the integrity of league records, but your name, profile, and other personal identifiers will be permanently removed. Other players who participated in those matches will still see the match result in their own history, but your identity will appear as a removed or anonymous player. Anonymised data is no longer considered personal data under the Personal Data Protection Act 2010.

• Your chat messages will be deleted.

• Your social feed posts will be deleted. However, if your content was shared or quoted by other users before deletion, those copies may persist in those users' feeds.

Inactive Accounts

Accounts that have been inactive for more than 3 years may be deleted, in accordance with Section 19.2 of our Terms of Service. We will attempt to notify you before deletion using the email address associated with your account.

Data Security

We implement appropriate technical and organisational measures to protect your personal information, including encryption of data in transit (TLS/SSL), encryption of data at rest, secure authentication mechanisms, regular security assessments, and access controls limiting employee access to personal data.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.

Data Breach Notification In the event of a data breach that poses a risk of significant harm to your personal information, we will notify affected users and the Personal Data Protection Commissioner within the timeframes and in the manner required by the Personal Data Protection Act 2010 and its amendments.

Withdrawal of Consent

You may withdraw your consent for the processing of your personal data at any time by contacting us at privacy@deuceleague.com or by deleting your account through the App. Please note that withdrawing consent may result in you being unable to access certain features of the App, including league participation, match scheduling, and communication with other players. Withdrawal of consent will not affect the lawfulness of any processing carried out before the withdrawal.

Your Rights and Choices

Access and Portability You may access most of your personal information directly within the App, including your profile, match history, and ratings.

Correction You may update your account information at any time through the App settings.

Deletion You may request deletion of your account and personal information by contacting us at privacy@deuceleague.com.

Push Notifications You may opt out of push notifications at any time through your device settings or the App settings.

Communication Preferences You may manage your communication preferences within the App settings.

Data Protection Rights Depending on your location, you may have additional rights under applicable data protection laws, including the right to access your personal data, the right to rectification of inaccurate data, the right to erasure, the right to restrict processing, the right to data portability, and the right to object to processing.

To exercise any of these rights, please contact us at privacy@deuceleague.com.

Age Restrictions

The Services are not available to persons under the age of 16. We do not knowingly collect personal information from anyone under 16. If you are a parent or guardian and believe your child under 16 has provided us with personal information, please contact us immediately and we will delete the account.

Users aged 16 or 17 may use the Services only with the consent and ongoing supervision of a parent or legal guardian. The parent or guardian must review and accept our Terms of Service on the user's behalf and assumes full responsibility for the user's activity, including compliance with these Terms and any financial obligations arising from league participation. By allowing your child to use the Services, you consent to the collection and use of their information as described in this policy.

Third-Party Links and Services

The App may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party services you access.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page, updating the "Last Updated" date, and sending you a notification through the App or via email.

Your continued use of the Services after any changes indicates your acceptance of the updated Privacy Policy. For material changes that expand how we collect, use, or share your personal data, we will seek your renewed consent before those changes take effect.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Deuce League Sdn. Bhd. General Enquiries: support@deuceleague.com Privacy & Data Protection (Data Protection Contact): privacy@deuceleague.com Address: 19 Jalan TSB 6, Taman Industri Sungai Buloh, 47000 Sungai Buloh, Selangor, Malaysia

Additional Information for Malaysian Users

DEUCE is a Malaysian company and this entire Privacy Policy is drafted in compliance with the Personal Data Protection Act 2010 (PDPA). This section highlights specific rights available to users under Malaysian law.

Under the PDPA, you have the right to access your personal data held by us, correct any inaccurate personal data, withdraw consent for processing (this may affect your ability to use the App), and make complaints to the Department of Personal Data Protection.

To exercise these rights or make a complaint, please contact our Data Protection Contact at privacy@deuceleague.com.