1. Introduction

Fantasy Boss Ltd ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect personal information in accordance with UK GDPR and the Data Protection Act 2018.

2. Data We Collect

• Identity and contact details (e.g. name, address, email, phone)
• Account and usage data (e.g. login activity, game history)
• Financial and transaction data (via third-party processor Paysafe)
• Age and identity verification data (via Veriff)
• Technical data (e.g. IP address, device type, browser)

3. How We Use Your Data

• To create and manage your account
• To process contest entries and payments
• To ensure compliance with legal and regulatory obligations
• To monitor gameplay for fairness and integrity
• For marketing (with opt-in consent)

4. Legal Bases for Processing

We process your data under the following legal bases:

• Contractual necessity (e.g. providing access to contests)
• Legal obligation (e.g. KYC, AML compliance)
• Legitimate interests (e.g. preventing fraud)
• Consent (e.g. marketing, cookies)

5. Sharing Your Data

We may share your data with:

• Identity verification providers (e.g. Veriff)
• Payment processors (e.g. Paysafe)
• Data providers (e.g. SportsMonks)
• Marketing and communications platforms (e.g. OneSignal)
• Regulators or authorities if required by law

6. International Transfers

Some partners may process data outside the UK. We ensure safeguards are in place, such as Standard Contractual Clauses (SCCs) and data processing agreements.

7. Data Retention

We retain personal data for as long as necessary to fulfill regulatory obligations, resolve disputes, and enforce agreements. Account data is typically retained for 6 years.

8. Your Rights

Under UK GDPR, you have the right to:

• Access your data
• Correct inaccurate information
• Request deletion (subject to legal limits)
• Object to or restrict processing
• Data portability
• File a complaint with the ICO

9. Cookies & Tracking

We use cookies for:

• Site functionality
• Analytics
• Personalised content and marketing

Users can manage cookie preferences via browser settings.

10. Data Security

We implement industry-standard measures to protect personal data, including:

• Encryption
• Access controls
• Secure servers
• Regular audits and staff training

11. Pre-Season Email Reminders

If you submit your email address through the "Get a pre-season reminder" form on this website, we will use it to send you a single reminder email before the start of the upcoming Premier League season.

• Lawful basis: your consent (UK GDPR Article 6(1)(a) and PECR Regulation 22).
• Purpose: one reminder email per season, to let you know when Gameweek XI is ready for the new season.
• Retention: we keep your email address only for as long as needed to send the reminder and confirm delivery, and will delete it shortly after the season opens unless you have separately created a Gameweek XI account or opted in to other marketing.
• Processor: this collection is handled by OneSignal on our behalf under a written data processing agreement.
• Withdraw consent: every reminder email includes an unsubscribe link, and you can email support@gameweekxi.com at any time. Unsubscribing here does not affect any other consents you have given us.

This collection is separate from Gameweek XI account marketing communications, which are governed by the preferences set on your account.

12. Contact Us

If you have questions or requests regarding this policy, contact us at:

support@gameweekxi.com