Privacy Policy

1. Introduction

Welcome to HoopersHub ("we," "our," or "us"). We are committed to protecting your privacy and personal information in compliance with the Personal Data Protection Act 2012 (PDPA) of Singapore. This Privacy Policy explains how 2XP Pte. Ltd. collects, uses, shares, and protects information when you use our basketball league management platform (the "Service").

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

2. Data Protection Officer

In accordance with the PDPA, we have appointed a Data Protection Officer (DPO) who is responsible for ensuring our compliance with data protection obligations. You may contact our DPO for any questions or concerns regarding your personal data:

Our DPO is available during Singapore business hours to address your data protection inquiries.

3. Information We Collect

We collect different types of information depending on your role within our platform:

3.1 Information from All Users

• Account credentials (name, email address, password)
• Phone number (optional)
• Profile preferences and notification settings
• Timezone and language preferences
• Usage data and activity logs
• Device information, IP address, and browser type

3.2 Player Information

If you register as a player, we may collect:

• Personal details (name, date of birth, gender)
• Physical attributes (height, weight, playing position)
• School affiliation and jersey number preferences
• Profile photo and biography
• Emergency contact information
• Game statistics and performance data
• Social media handles (Instagram, Twitter/X)
• Team affiliations and competition history

3.3 Parent/Guardian Information

If you register as a parent or guardian, we may collect:

• Your contact details and relationship to child(ren)
• Information about your child(ren)'s player profiles that you manage
• Payment and billing information for subscriptions or registrations
• Communication preferences for notifications about your child(ren)

3.4 Organization Manager Information

If you register as a Team Manager, League Manager, or Academy Manager, we may collect:

• Organization details (name, logo, contact information, address)
• Your role and responsibilities within the organization
• Roster and player management data
• Schedule, game results, and tournament information
• Billing and subscription information
• Administrative action history for compliance purposes

3.5 Fan Information

If you use our Service as a fan, we may collect:

• Leagues, teams, and players you follow
• Viewing preferences and interests
• Interaction history with content

3.6 Payment Information

We use Stripe as our payment processor. We do not collect or store credit card numbers. When you make a payment, your payment information is transmitted directly to and processed by Stripe. We only receive confirmation of successful transactions and limited billing details (such as the last four digits of your card) for record-keeping purposes.

3.7 Social Media Integration

If you connect your social media accounts (Instagram, Twitter/X), we may collect:

• Your social media username and profile information
• Posts you choose to sync to your player profile
• OAuth authentication tokens (securely encrypted)

4. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Process registrations, transactions, and subscriptions
• Enable communication between users (teams, players, managers, parents)
• Display player statistics and performance data
• Send notifications about games, schedules, and platform updates
• Personalize your experience based on your role and preferences
• Process payments and manage billing
• Prevent fraud and ensure platform security
• Comply with legal obligations
• Analyze usage patterns to improve our Service

5. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

Within the Platform

• Player profiles may be visible to team managers, league administrators, and other users based on your privacy settings
• Team rosters and game statistics may be publicly displayed
• Parents can view and manage their children's profiles

Service Providers

• Payment processing (Stripe)
• Cloud hosting and infrastructure services
• Analytics and performance monitoring
• Email and notification delivery services

Legal Requirements

We may disclose information when required by law, court order, or government regulation, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, collection, use, disclosure, copying, modification, disposal, or similar risks, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication and role-based access controls
• Regular security assessments and vulnerability testing
• Employee training on data protection and security practices
• Encrypted storage of OAuth tokens and sensitive credentials
• Secure backup procedures with access restrictions
• Monitoring and logging of access to personal data

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Data Breach Notification

In accordance with the PDPA's Data Breach Notification Obligation, we have established procedures to handle data breaches:

• Assessment: We will assess any suspected data breach in a reasonable and expeditious manner to determine if it is a notifiable data breach
• PDPC Notification: If a data breach is likely to result in significant harm to affected individuals, or affects 500 or more individuals, we will notify the Personal Data Protection Commission (PDPC) within 3 calendar days of determining it is notifiable
• Individual Notification: We will notify affected individuals as soon as practicable if the breach is likely to result in significant harm, so you can take steps to protect yourself
• Remedial Action: We will take immediate steps to contain the breach and prevent further unauthorized access or disclosure

If you suspect any unauthorized access to your account or personal data, please contact us immediately at dpo@hoopershub.sg.

8. Data Accuracy

In accordance with the PDPA's Accuracy Obligation, we take reasonable steps to ensure that:

• Personal data collected is accurate and complete at the time of collection
• Personal data that is likely to be used to make decisions affecting you, or disclosed to other organizations, is kept accurate and up-to-date
• You have the ability to update your personal information through your account settings
• Player statistics and game data are verified by league officials before being finalized

If you believe any of your personal data is inaccurate or incomplete, please contact us or update your information through your account settings.

9. Your Rights Under the PDPA

Under the Personal Data Protection Act 2012 (PDPA) of Singapore, you have the following rights:

• Access: Request access to your personal data and information about how it has been used or disclosed within the past year
• Correction: Request correction of any inaccurate or incomplete personal data
• Withdrawal of Consent: Withdraw your consent for the collection, use, or disclosure of your personal data at any time, subject to legal or contractual restrictions
• Data Portability: Request a copy of your data in a commonly used machine-readable format (where applicable)

To exercise these rights, please contact our Data Protection Officer at dpo@hoopershub.sg. We will respond to your request within 30 days. Please note:

• We may need to verify your identity before processing your request
• A reasonable fee may be charged for access requests to cover administrative costs
• Some requests may be declined if they are frivolous, vexatious, or if we are legally required to retain the data

10. Privacy Controls

We provide players with granular privacy controls to manage their data visibility:

• Profile visibility settings (public, private, or friends only)
• Control over statistics display
• Team and league invitation preferences
• Messaging and contact preferences
• Search visibility settings
• Social media post visibility

You can manage these settings in your account's Privacy section.

11. Children's Personal Data

In accordance with the PDPC's Advisory Guidelines on the PDPA for Children's Personal Data in the Digital Environment (March 2024), we have implemented the following measures:

Age-Based Consent Requirements

• Children under 13: Parent or guardian consent is required before we collect, use, or disclose any personal data
• Children aged 13-17: May provide consent themselves if they can understand our data protection policies and the consequences of providing consent. If we have reason to believe the child does not have sufficient understanding, we will require parent or guardian consent
• Adults 18 and above: May provide their own consent

Protections for Children

• This Privacy Policy is written to be readily understandable by young people
• Children's profiles have enhanced privacy protections enabled by default
• Parents have full control to view, edit, or delete their children's information at any time
• We collect only information necessary for the basketball management features
• Children can withdraw consent as easily as they provided it

Parent and Guardian Controls

• Parents can create and manage player profiles for their children through the Parent Portal
• Parents receive notifications about their children's activities on the platform
• Parents can control privacy settings and visibility of their children's profiles
• Parents will be notified in the event of a data breach affecting their child's data

If you believe we have collected personal information from a child without proper consent, please contact our Data Protection Officer immediately at dpo@hoopershub.sg.

12. Data Retention

In accordance with the PDPA's Retention Limitation Obligation, we retain your personal information only for as long as necessary to:

• Fulfill the purposes for which it was collected
• Provide our Service to you
• Comply with legal, accounting, or reporting obligations
• Resolve disputes and enforce agreements
• Maintain historical records (game statistics, league history) where there is ongoing purpose

When we no longer need your personal data, we will securely delete or anonymize it. Upon account deletion request, we will remove your personal data within 30 days, except where retention is required by law.

13. International Data Transfers

HoopersHub is operated by 2XP Pte. Ltd. in Singapore. In accordance with the PDPA's Transfer Limitation Obligation, when we transfer personal data outside Singapore, we ensure that:

• The recipient country or organization provides a comparable standard of protection to the PDPA
• We have legally enforceable obligations in place (such as contractual clauses) to protect your data
• We obtain your consent where required for the transfer

Our primary service providers (such as cloud infrastructure and payment processing) may process data in various locations, but are bound by contractual obligations to maintain adequate data protection standards.

14. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Maintain your session and remember your preferences
• Analyze usage patterns and improve our Service
• Provide security features

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our Service.

15. Third-Party Links

Our Service may contain links to third-party websites or services (such as social media platforms). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. For material changes, we may also notify you by email or through an in-app notification. We encourage you to review this Privacy Policy periodically.

17. Contact Us

If you have any questions about this Privacy Policy, our data practices, or wish to exercise your rights under the PDPA, please contact us: