Privacy Policy
Version 1.0 · Effective date: January 1, 2026
1. The Controller and the Data Protection Officer
The controller of your personal data is Dribble Sports LLC, a limited liability company registered at the Companies Control Department in the Hashemite Kingdom of Jordan under no. (84375), located in King Hussein Business Park, Amman (the “Company”, “We”). The Company’s appointed Data Protection Officer may be contacted at info@dribble.pro.
This Privacy Policy explains how we collect, use, store and share personal data when you use the Dribble application and platform. Terms such as Application, Match, Referee, Venue and User have the meanings given in our Terms of Use.
2. The Data We Process
We process account and profile data; sign-in data, including where you sign in with Google or Apple; location data, such as the addresses you save and, if you allow it, your device’s location; sporting preferences; booking and participation data; payment data; notification preferences; content you upload, including ratings; and technical data about your device and your use of the Application. Full card numbers are held by the licensed payment institution, not by us. We start processing your data when you create your account and, for referee mode, when you activate it.
For users who activate referee mode, we also process verification documents (identification document, Certificate of Non-Conviction and any qualification certificate), any conviction the Referee notifies to us, bank account and tax details for settlement, and match entries (results and statistics) and ratings. The Certificate of Non-Conviction contains sensitive personal data. We process it only to verify eligibility for referee mode, with your consent. Referees provide an up-to-date certificate at the intervals published in the Application; we keep only the most recent version of each document, and we delete them, including from our backups, within 30 days after referee mode is deactivated or the account is closed.
If you register or manage a Venue’s account, we process your name, identity document number and contact details, and the Venue’s bank details, to conclude and perform the Venue’s agreement with us and to settle amounts due to it. We keep this data for the term of that agreement and then for 2 years.
Our website uses strictly necessary cookies and, with your consent, analytics cookies from the analytics provider listed in Section 5; you may withdraw that consent or manage cookies in your browser.
3. Purposes and Legal Bases
We process personal data for the following purposes:
(a) to run the Application, including your account, bookings, matching and recommendations, rankings and payments, verifying Referee eligibility, settling amounts collected for Venues and Referees, and enforcing our terms, because this is necessary to provide the service you sign up for; (b) to comply with our legal obligations, including tax and record-keeping; and (c) for any other purpose for which we ask your separate consent.
Where we rely on consent, we ask for it separately for each purpose, and you may withdraw it at any time as explained in Section 7. Withdrawal does not affect processing carried out before it. Except where the law requires a disclosure, sharing data under Section 4 and transfers outside Jordan under Section 5 rely on your consent. Because the Application cannot operate without the transfers described in Section 5, withdrawing your consent to them means we can no longer provide the Application to you, and we may then close your account.
Ratings and matching involve automated processing of usage, booking, participation and rating data to rank and display the available options. The Application also automatically restricts a User from joining or creating a Match for forty-eight (48) hours after a late cancellation or non-attendance, and a Referee’s average rating and attendance record determine whether he/she continues to meet the eligibility criteria for referee mode; failing them may lead to removal from referee mode.
4. Disclosure and Recipients
We disclose personal data to the following recipients, to the extent necessary to operate the Application and its services, limited to what each needs for the purpose stated:
- Venues: the minimum booking information needed to complete and manage your booking, including the name of the Referee assigned to the Match.
- Referees: the information needed to assign and administer a Match.
- Licensed payment institutions: information necessary to process collections and settlements.
- Technical service providers: our providers, including our app build and distribution provider, who process personal data on our behalf under contract.
- Competent authorities and courts: where the law requires or permits, including to protect your life or safety.
- Other users: your profile details, sporting level, ratings and ranking, as shown in the Application.
Venues and Referees act as independent data controllers in respect of the data disclosed to them and are responsible for their own compliance with the law.
5. Transfers Outside Jordan
Our database, authentication and file storage are hosted by Supabase in the United States. Our other providers outside Jordan are OneSignal (notifications), Expo (app build and distribution) and Apple (sign-in and app distribution) in the United States; Contentful (content) in the European Union / the United States; and Google (Google Sign-In / Google Maps) in the United States. Google LLC (website analytics) in the United States.
We cannot guarantee that these providers protect your data to the standard required under Jordanian law. Because the Application cannot operate without these services, we transfer your data only with your consent, which we ask for when you create your account, and we take the measures the law requires to protect it when it is transferred.
6. Retention
We keep your data while your account is open. When your account is closed, we keep it for ninety (90) days to settle any outstanding refunds, Dribble Credit, complaints or payment disputes, and then delete or anonymise it, unless the law or a decision of a competent authority requires us to keep it longer; deleted data is removed from our backups within 90 days. We keep booking and payment records for 7 years to meet our tax and accounting obligations. After an account is closed, match records, results and statistics that also concern other users are kept only in anonymised form. Referee verification documents are kept as described in Section 2.
7. Your Rights
You may access the data we hold about you, correct it, ask us to delete it, restrict how we use it, withdraw any consent you have given us, or request a copy of it to transfer to another party. You may also object to our processing, including the automated processing described in Section 3, where it is unnecessary for its purpose, excessive, discriminatory, unfair or unlawful.
To exercise any of these rights, including withdrawing your consent, contact our Data Protection Officer at the address in Section 1. You may also use the request forms published by the Personal Data Protection Council. We will first confirm that the request comes from you, and we will respond within fifteen (15) working days of receiving it. If we need more time, we will tell you, explain why, and respond within a further period of no more than fifteen (15) working days.
8. Complaints
You may send a complaint about how we process your personal data to our Data Protection Officer (Section 1). We will give you a reference number and respond within ten (10) days. If we do not respond within that period, or you are not satisfied with our response, you may complain to the Personal Data Protection Unit at the Ministry of Digital Economy and Entrepreneurship. Complaining to us does not affect your rights, and will not affect how we treat you.
9. Security and Data Breaches
We protect personal data with technical and organisational measures, including encryption of data in transit and at rest; role-based access, so that staff see only the data their role requires. If a breach affects your data, we will notify you through the Application or your registered contact details, and we will notify the competent authorities where the law requires.
10. Age Requirements
A Dribble account is available only to persons who have reached 18 years of age. We do not knowingly collect the personal data of persons under 18 for the purpose of creating or operating an account.
11. Changes and Language
We may update this Privacy Policy from time to time. Where we make a material change, we will notify you through the Application or by another appropriate means and will state the effective date of the updated Policy. Where a change involves a new purpose, type or nature of processing for which consent is required, we will obtain the required consent before carrying out that processing.
This Privacy Policy is issued in Arabic and English. If the two texts differ, the Arabic text prevails.
Contact
For questions about this Privacy Policy or your data, contact us at info@dribble.pro