Privacy Policy

This policy explains what personal data The X-League (“X-League”, “we”) collects through the X-League app and xleague.com.sg, why we collect it, and what you can do about it. We handle personal data in line with Singapore’s Personal Data Protection Act 2012 (PDPA).

What we collect

If you sign in — as a team captain, as league staff, or as a player claiming your profile — we collect the email address or mobile number you sign in with. Signing in by SMS sends a one-time code to your number.

If you turn on notifications in the app, we keep your device’s notification token, whether it is an iPhone or an Android phone, and which club you follow, so that we can tell you when your club’s result or highlights are in. If you are signed in, we also store your sign-in email against that device, so a message meant for a team’s captain reaches that captain rather than everybody.

If you are a registered player, your team captain gives us your full name, the name you want shown (your “known as” name), your kit number, your date of birth and your mobile number. We use these to register you for the league and to check eligibility for divisions that have an age rule. Captains are told to get your agreement before adding you.

Match records. Results, goals, assists, yellow and red cards and man-of-the-match votes are recorded for every match played.

We do not use analytics, advertising or tracking tools in the app, and we do not sell personal data.

What is public

League tables, results, fixtures and match events are published in the app and on this website. Where a match event names a player, the name shown is their “known as” name — or their full name, if no “known as” name has been given. If you would rather not appear under your full name, ask your captain to fill in a “known as” name for you. Dates of birth and mobile numbers are never published.

Who processes data for us

We use service providers to run the app and this website. They process personal data only in order to provide their service to us:

• Supabase — our database and sign-in service.
• Vercel — hosts this website and the services the app talks to.
• Expo, Apple and Google — deliver notifications and app updates.
• Twilio — sends sign-in codes by SMS.
• Anthropic — when league staff paste a referee’s match report into score entry, the text of that report, which names players, is sent to Anthropic’s AI service to be read into a draft result. League staff check every line before anything is saved.

The app shows the league’s Instagram posts and YouTube videos. Opening one takes you to Instagram or YouTube, where their own privacy policies apply.

How long we keep it

Your sign-in details are kept until you delete your account. Player registration details and match records form the league’s historical record and are kept for as long as X-League runs the league — a player can be made inactive rather than deleted, so that past results still add up. Notification tokens are removed when you ask us, or when a device stops accepting notifications.

Your choices

• Delete your account in the app — see below.
• Ask what we hold about you, ask us to correct it, or ask us to stop using it, by contacting us below.
• Turn off notifications at any time in your phone’s settings.

Younger players

X-League has no minimum age to play. Where a registered player is under 13, their captain must have the agreement of a parent or guardian before giving us that player’s details, and a parent or guardian may contact us at any time to ask what we hold or to have it corrected.

Contact us

Data protection contact: Navin Nambiar
Email: navin@xleague.com.sg
The X-League, 21 Bukit Batok Crescent, #09-79 Wcega Tower, Singapore 658065

Changes to this policy

If this policy changes we will update the date at the top of this page, and say so in the app where the change is a significant one.