This Privacy Policy explains how we collect, use, share, and protect your information when you use Major eLeagues ("MeL", "we", "our", or "us"). By using our services, you agree to the collection and use of information in accordance with this policy.

We collect information that you provide directly to us, including email addresses, usernames, authentication tokens, team-related data, tournament registration information, player rosters, and other information necessary to provide our services. When you submit feedback, we automatically collect device information (such as device type, operating system version, browser type, and platform) to help us troubleshoot issues and improve our application. We may also collect information about your interactions with our platform, including IP address, pages visited, and usage patterns. For tournament participation, we collect and publicly display tournament brackets, match results, scores, team compositions, and player statistics. Match chat logs from our platform's chat system are also collected and stored for dispute resolution and platform safety purposes. For premium subscriptions, we collect payment and billing information as described in Section 1A below. We may also collect location data (such as IP-based location, city, state, and country) through our third-party service providers for analytics, fraud prevention, tax calculation, and service improvement purposes. We also collect age assurance data to confirm which age band your account falls into (Section 1D), wallet, prize and payout data if you win prize money in a Major eLeagues-hosted tournament (Section 1E), and authentication data if you register a passkey or an authenticator app (Section 1F). If you turn on notifications, we store what is needed to deliver them: for our mobile app, a push token for your device, and in a web browser, a push subscription created by your browser (a delivery address and encryption keys) together with your browser's name and version. In a web browser, we delete the subscription when you turn notifications off or sign out in that browser. We delete all of this information when you delete your account, and we remove a token or subscription sooner if your device or browser reports that it is no longer valid.

If you enable biometric authentication on our mobile application (such as fingerprint or Face ID login), we use your device's secure biometric authentication system to verify your identity. We do NOT collect, store, or have access to your actual biometric data (fingerprints, facial scans, etc.). Biometric authentication is handled entirely by your device's operating system (iOS or Android) using secure hardware enclaves. We only receive a success or failure response from your device. You can enable or disable biometric authentication at any time through your device settings or within the app's preferences. Biometric data never leaves your device and is never transmitted to our servers.

When you subscribe to a premium plan, we collect and process payment information through our third-party payment processor, Stripe, Inc. Payment data collected includes: billing name, billing address (street, city, state, postal code, country), phone number (optional), email address for payment receipts, and payment method details. We do NOT store complete credit card numbers, CVV codes, or full payment credentials on our servers. Instead, we securely store: encrypted Stripe payment method tokens (encrypted identifiers that reference your payment method stored with Stripe), the last four digits of your card number for display purposes, card brand (Visa, Mastercard, etc.), card expiration date, and billing address information. All sensitive payment data is processed and stored by Stripe in compliance with PCI DSS (Payment Card Industry Data Security Standards). We also collect and store transaction history, including subscription purchase dates, renewal dates, amounts charged, payment status (successful, failed, pending) and associated metadata for accounting and customer support purposes.

By subscribing to a premium plan, you authorize us to share necessary information with Stripe to process payments and manage your subscription. Information shared with Stripe includes: your email address, billing name and address, subscription plan details, transaction amounts, and any customer identifiers necessary for payment processing. Stripe uses this information to process payments, detect and prevent fraud, comply with legal obligations, and provide payment services. Stripe's use of your personal information is governed by Stripe's Privacy Policy (https://stripe.com/privacy) and Terms of Service (https://stripe.com/legal). We may also receive information from Stripe, including payment confirmation, payment failure notifications, fraud alerts, chargeback information, and subscription status updates. We use this information to manage your subscription, provide customer support, maintain accurate billing records, and prevent fraudulent activity.

To meet our eligibility requirements and to restrict prize money and wallet features to adults, we collect and store age assurance data. What we collect depends on your device: (a) Device age signal (iOS and Android, where supported): We ask your operating system to share an age range through the age signal service it provides. We receive a range only - for example, a lower bound of 18 with no upper bound - together with whether that range was declared by the user or by a guardian. We do NOT receive your date of birth through this method, and we do not ask your device for it; (b) Date of birth entry (web, and operating systems that cannot provide a signal): We ask you to enter your date of birth once. It is transmitted to us for the sole purpose of determining your age band. We do not store the date itself, cache it on your device, or write it to our application logs; we store the resulting age band and the fact that a date of birth was supplied. What we store: your age band (under 16, 16 to 17, 18 and over, or not determined), your account's age status, the resulting feature permissions, the date and time of the check, basic technical details about the device and app used for it, and a device installation identifier that allows our support team to link a later change to the signal back to your account. We also record that a check was attempted, so that repeated conflicting submissions can be identified. How we use it: solely to determine which features your account may use, to comply with our legal obligations regarding minors and prize money, to demonstrate that prize payments were made to eligible recipients, and to detect attempts to circumvent age restrictions. Age assurance data is not used for advertising, profiling, or marketing, and it is not sold or shared for cross-context behavioral advertising. We deliberately keep raw age bounds and dates of birth out of our error logs and diagnostic reports; only the resulting age band is recorded there. Retention is described in Section 5B.

If you win prize money in a Major eLeagues-hosted tournament, we process the following. Wallet and prize records: your wallet balance, the amount and currency of each prize credit, the tournament and placement it relates to, the hold and release date applied to it, your lifetime earnings total, and every transaction, adjustment, and withdrawal request on your account, together with a record of the actions taken on each one. Withdrawal records: the amount requested, the status of the request and the time of each status change, the reference our payment processor assigns to the payment, its expected arrival date, and any failure reason returned by your bank. Payout account data (Stripe Connect): when you set up payouts, you are handed to Stripe Connect, operated by Stripe, Inc. Stripe collects your identity information, government identification where required, bank or payout account details, and tax information DIRECTLY from you. We do NOT collect, receive, or store your full bank account number or your government identification. From Stripe we receive and store a reference to your connected account, its verification and payout status, and the reason a payout was blocked or rejected where that applies. Public earnings information: your username, avatar, and lifetime earnings total may appear on a public earnings leaderboard within the platform. Individual transactions, withdrawal amounts, and payout details are never shown publicly. How we use it: to credit prizes, operate the wallet ledger, process and review withdrawal requests, run competitive integrity checks before releasing funds, prevent fraud and money laundering, meet tax and financial record-keeping obligations, and provide customer support. Retention is described in Section 5B.

Passkeys. If you register a passkey, a cryptographic key pair is created. The private key is generated and held by your device's secure hardware or by your platform credential manager (such as iCloud Keychain or Google Password Manager). It never leaves your device and is never transmitted to us. We and our authentication provider store only the corresponding public key, a credential identifier, a name you choose for it, the date it was created, and the date it was last used. A passkey is unlocked on your device by your own screen lock, fingerprint, or face recognition. As with the biometric login described in Section 1C, we do not collect, receive, store, or have any access to your fingerprint, facial scan, or any other biometric data. We receive only the cryptographic assertion your device produces. Two-factor authentication. If you register an authenticator app, we and our authentication provider store the enrollment record needed to verify your codes, together with the time of your most recent verification. We store the result of a verification, never the code itself. You can list, rename, and delete your registered passkeys at any time from your security settings. Deleting a passkey removes its public key from our authentication provider; the private key is removed by your own device or credential manager. How we use it: solely to authenticate you, to authorize money actions on your account, and to detect and investigate account takeover. This data is never used for advertising or profiling.

We use your data to manage your account, facilitate matches and tournaments, personalize your experience, improve our services, analyze usage patterns, communicate with you, prevent fraud and abuse, process tournament registrations and results, monitor competitive integrity through match and tournament oversight, and comply with legal obligations. Device information collected during feedback submission is solely used to better understand technical issues and improve the functionality and user experience of our application. Tournament-related data (brackets, results, scores, team rosters) is used to display public leaderboards, rankings, and competitive statistics. Match chat logs are used for dispute resolution, enforcement of our Code of Conduct, and platform safety monitoring. Payment and billing data is used to process subscription payments, manage your premium membership, send payment receipts, billing notifications and payment disputes, comply with tax reporting obligations, detect and prevent payment fraud, and maintain financial records for accounting and legal compliance purposes. Age assurance data is used only to determine which features your account may access and to meet our legal obligations regarding minors and prize money. Wallet, prize, and payout data is used to credit prizes, review and process withdrawals, run competitive integrity checks, prevent fraud and money laundering, and satisfy tax and financial record-keeping requirements. Passkey and authenticator data is used only to sign you in, to authorize money actions, and to detect account takeover.

We do not sell your personal data. We may share information with: (a) Service providers who assist in operating our platform, including Stripe for payment processing, third-party analytics providers, and third-party error tracking and monitoring services; (b) Law enforcement or regulatory authorities when required by applicable laws; (c) In connection with a merger, sale, or acquisition; or (d) With your consent. When we share data with third parties, we require them to respect the security of your information and treat it in accordance with applicable laws. Specifically, payment information is shared with Stripe, Inc. for the purpose of processing subscription payments, managing recurring billing and preventing fraud. Stripe is prohibited from using your payment information for any purpose other than providing payment processing services to us. Our analytics providers receive anonymized usage data to help us improve our platform's user experience and functionality. Our error tracking services receive diagnostic information to help us identify and fix technical issues. We may also share aggregated, anonymized data that cannot identify you individually with third parties for analytics, research, or marketing purposes. In addition to Stripe's role in subscription payments, Stripe Connect acts as our payout processor for prize winnings. When you set up payouts, Stripe collects your identity, bank, and tax information directly from you and acts as an independent controller of that information under Stripe's own privacy policy and the Stripe Connected Account Agreement you accept. We share with Stripe only the information needed to create and maintain your connected account and to send your payout. We share with our authentication provider the information needed to operate sign-in, two-factor authentication, and passkeys for your account, including your registered credentials' public keys and metadata. Age assurance signals are received from Apple and Google through your device's operating system. We do not send your personal information to Apple or Google for this purpose, and they do not receive your Major eLeagues account details as part of it. We may also disclose wallet, payout, and identity information to tax authorities, auditors, regulators, and law enforcement where required by law, and to payment providers where necessary to investigate fraud, a chargeback, or a suspected violation of our Terms. Push notifications. Notifications are delivered through the push service run by the maker of your device or browser (such as Apple, Google, Microsoft or Mozilla) and, for our mobile app, through a notification delivery provider that works on our behalf. These services receive the device token or browser subscription a notification is sent to and the notification itself. In a web browser, the notification is encrypted so that only your browser can read it. Embedded video players. When a page on MeL shows a live stream, replay or clip, the video plays in the embedded player of the platform that hosts it, currently Twitch (Twitch Interactive, Inc.) or YouTube (Google LLC). As with any website you visit, that platform receives your IP address and information about your browser or device when its player loads, and it may set its own cookies and similar technologies under its own privacy policy: for Twitch, https://www.twitch.tv/p/legal/privacy-notice/, and for YouTube and Google, https://policies.google.com/privacy. This happens only on pages where a stream, replay or clip is shown.

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Payment information is secured using industry-standard encryption protocols. Stripe payment method tokens stored in our database are encrypted using AES-256 encryption with secure key management. All payment data transmitted between your device, our servers, and Stripe uses TLS (Transport Layer Security) encryption. We use Stripe Elements for payment form integration, which ensures that sensitive card data never touches our servers and is transmitted directly to Stripe's PCI DSS-compliant infrastructure. Access to payment and billing data is restricted to authorized personnel only and is logged for security auditing purposes. We conduct regular security assessments and monitoring to detect and prevent unauthorized access. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for any activities that occur under your account.

We retain your personal data for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy. You can request deletion of your personal data by contacting us at support@majoreleagues.com. Note that match history, tournament results, reputation data, and competitive statistics may be retained in an anonymized form after account deletion for platform integrity, historical records, and statistical purposes. Tournament brackets, results, and public competitive data are considered part of the platform's historical record and may be retained indefinitely even after account deletion. Match chat logs may be retained for up to 12 months for dispute resolution purposes. Payment and billing data is subject to specific retention requirements as outlined in Section 5A below. Wallet, prize, payout, tax, and age assurance data is subject to the specific retention requirements set out in Section 5B, some of which continue to apply after your account is deleted.

Payment and billing information is retained for as long as necessary to fulfill legal, tax, accounting, and regulatory obligations. Transaction records, including payment amounts, dates, subscription history, and billing information, are retained for a minimum of seven (7) years from the date of the transaction to comply with tax reporting requirements and financial record-keeping laws. Encrypted Stripe payment method tokens are retained while your account is active and for up to 90 days after account deletion or subscription cancellation to process any disputes, or handle chargebacks. After this period, payment method tokens are permanently deleted from our systems. Upon account deletion, we will anonymize your payment and billing data by removing personally identifiable information (name, email, address) while retaining transaction records with anonymized identifiers for tax and legal compliance purposes. If you have an active subscription or pending transactions, payment data cannot be deleted until the subscription is cancelled and all transactions are finalized. You may request deletion of your payment methods at any time through your account settings or by contacting support@majoreleagues.com, provided you do not have an active subscription or pending charges.

Prize money creates financial records that we and our payment processor are legally required to keep, and those obligations survive the deletion of your account. Retained by Major eLeagues: wallet transaction records, prize credits, adjustments, withdrawal requests and their outcomes, together with the associated amounts, dates, currencies, and tournament references, are retained for a minimum of seven (7) years from the date of the transaction in order to satisfy tax reporting, financial record-keeping, anti-fraud, and anti-money-laundering obligations. Where your account is deleted, we retain these records with the minimum identifying information necessary for them to remain a valid tax and accounting record and to link a payout to the correct recipient if a tax authority, auditor, or payment provider requires it. Identifying information that is not needed for that purpose is removed. Retained by Stripe: your connected payout account, the identity and tax information you supplied to Stripe directly, and Stripe's own records of the payouts made to you are held by Stripe under Stripe's retention obligations and privacy policy (https://stripe.com/privacy). Deleting your Major eLeagues account does not delete your Stripe records, and we cannot delete them on your behalf; requests concerning data held by Stripe must be made to Stripe. Where required, we retain your connected account identifier so that a historical payout can still be traced to the correct Stripe record. Age assurance records: your age band, account age status, and the timestamps and platform metadata of your age checks are retained for as long as your account exists, and for up to seven (7) years afterwards where they form part of the record supporting a prize payment, so that we can demonstrate an adult-only payment was made to an eligible recipient. Where no prize money was ever paid to you, age assurance data is deleted with your account. Dates of birth submitted through the fallback check are not retained at any point. Passkey and authenticator records: registered credentials are deleted when you delete the credential or your account. Security event logs relating to sign-ins and money actions are retained for up to twenty-four (24) months for fraud investigation and account security purposes. Limits on deletion: if you have a pending or processing withdrawal, an unresolved payment dispute, an open fraud or competitive integrity investigation, or an outstanding negative wallet balance, we cannot complete a deletion request until those matters are resolved.

Depending on your location, you may have rights to: (a) Access personal data we hold about you; (b) Request correction of inaccurate data; (c) Request deletion of your data; (d) Object to or restrict processing of your data; (e) Data portability; (f) Withdraw consent. To exercise these rights, please contact us at support@majoreleagues.com. For payment and billing data specifically, you have the right to: access your transaction history and billing records through your account dashboard or by requesting a copy from us; request correction of billing information if it is inaccurate; request deletion of payment methods that are not associated with active subscriptions; object to the processing of your payment data, though this may result in the termination of your subscription; and receive a copy of your payment and transaction data in a portable format. Please note that certain payment data must be retained for legal and tax compliance purposes even after account deletion, as described in Section 5A. We will respond to your data rights requests within 30 days of receipt and verification of your identity. Prize money and payouts place additional limits on deletion. Financial, tax, and age assurance records that support a prize payment must be retained as described in Section 5B and cannot be erased on request. Records held by Stripe about your connected payout account, including the identity and tax information you gave Stripe directly, must be requested from or corrected with Stripe. You may remove a registered passkey or authenticator at any time from your security settings, although removing every credential may prevent you from accessing your account or your wallet balance.

Your information may be transferred to and processed in countries other than your country of residence, which may have different data protection laws. We implement appropriate safeguards to protect your information when transferred internationally. Our service providers (including Stripe for payment processing, analytics providers, and error tracking services) may process your data in the United States and other jurisdictions. By using our services, you acknowledge and consent to the transfer of your information to these countries. We ensure that all international data transfers comply with applicable data protection regulations, including the use of Standard Contractual Clauses (SCCs) approved by the European Commission where required.

Our services are intended for individuals aged 16 and older. We do not knowingly collect personal information from children under 16, and accounts we determine to belong to a user under 16 are restricted from using the platform. Users aged 16 and 17 require the consent and oversight of a parent or legal guardian, and are excluded from prize tournaments, the MeL Wallet, and withdrawals. Those features are restricted to users we have confirmed as 18 years of age or older. We apply these restrictions using the age assurance process described in Section 1D. We do not use age assurance data for advertising or profiling, and we do not serve personalized advertising to users we have not confirmed as adults. If you believe we have collected information from a child under 16, please contact us immediately at support@majoreleagues.com so that we can remove it.

We may update this Privacy Policy from time to time. Each version has a version number and an effective date, and the date of the version currently in force is always shown at the top of this policy. When we make a material change, we will tell you before or when it takes effect, by email to the address on your account and by a notice in the app. Changes to this Privacy Policy do not require you to accept them: they are notified as described above and take effect on the date stated in the notice and at the top of this policy. Where the law requires your consent for a new use of your personal data, we will ask for that consent separately and will not apply the new use to your data without it. You can read the current version at any time in the app, and if you do not agree with a change, you can adjust your privacy settings or close your account. When you accept our Terms and Conditions, including a new version of them, we keep a record of that acceptance as described in Section 9A.

When you accept our Terms and Conditions or this Privacy Policy, including when you accept a new version, we keep a record of that acceptance: your account ID, which document and version you accepted, when you accepted it, the platform you used (website, iOS app or Android app), a salted hash of your IP address (not the address itself), and a shortened copy of your browser or device information (user agent). We use this record only to show that the agreement was made and which version applies to you. We keep it for as long as your account exists and afterwards for the period the law requires us to keep evidence of the agreement.

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with specific rights. You have the right to know what personal information we collect, disclose, or sell; the right to delete your personal information (subject to exceptions); the right to opt-out of the sale of your personal information; the right to correct inaccurate personal information; the right to limit the use of sensitive personal information; and the right to non-discrimination for exercising your privacy rights. We do not sell your personal information as defined by the CCPA/CPRA. To exercise your rights, please contact us at support@majoreleagues.com. We will verify your request using information associated with your account. California residents also have specific rights regarding payment and financial data: the right to know what payment information is collected and how it is used; the right to know which third parties (such as Stripe) receive your payment information; the right to request deletion of payment data, subject to our legal retention obligations for tax and accounting purposes; and the right to opt-out of any sale of payment information (which we do not engage in). For California residents, sales tax is automatically calculated and collected on premium subscriptions in accordance with California state tax laws. California residents who receive prize money should note that wallet, payout, and tax records, and the age assurance records that support a prize payment, fall within the CCPA/CPRA exceptions permitting retention to comply with legal obligations, and cannot be deleted on request for the periods set out in Section 5B. We treat age assurance data and account authentication credentials as sensitive personal information, use them only for the purposes described in Sections 1D and 1F, and do not sell or share them. Categories of personal information we collect. We collect the following categories of personal information: (1) identifiers, such as your username, email address, account ID and IP address; (2) account and profile information, such as your display name, profile and team images, team memberships and the age information described in Section 1D; (3) gameplay and match data, such as match results, statistics, rankings, reputation scores and evidence you upload; (4) linked-account identity, such as the public ID, handle, display name and avatar of a streaming or other account you link; (5) device and usage data, such as device type, operating system, app version, crash reports and, if you allow analytics, how you use the platform; (6) payment-related data, which Stripe, Apple or Google collect and process, while we receive only the limited details described in Section 1A; and (7) communications and reports, such as support requests, chat messages, disputes and reports you submit or that are made about you. Sources. We collect this information from you, from your device, from services you choose to link or pay through (such as streaming platforms, Stripe, Apple and Google), and from other players, for example when they report a match result or content. Business purposes. We use this information for the purposes described in Section 2, including providing and securing the platform, running matches and tournaments, processing payments and payouts, preventing fraud and cheating, moderating content, providing support, fixing bugs and complying with the law. Sale and sharing. We do not sell personal information. On our website, if you turn on "Personalised ads", Google AdSense uses cookies to show ads based on your interests, and in our mobile apps, if you allow personalised ads, Google's ad service may use your device's advertising identifier. California law may treat this as "sharing" personal information for cross-context behavioural advertising. Personalised ads are off until you turn them on, and you can opt out of this sharing at any time by turning them off in Settings → Privacy. We treat a Global Privacy Control (GPC) signal as an opt-out request where our website can detect it: personalised ads are then not used in that browser. We do not otherwise sell or share personal information for cross-context behavioural advertising. How to make a request. Email support@majoreleagues.com with "California Privacy Request" in the subject line, or contact us through the in-app support system. You may use an authorised agent to make a request for you; we will ask the agent for proof that you gave them signed permission and may ask you to verify your identity with us directly. We will respond within 45 days. If we need more time, we will tell you why, and we may take up to a further 45 days. Non-discrimination. We will not discriminate against you for exercising these rights, for example by denying you service, charging you a different price or giving you a different quality of service.

This section is our full privacy notice (aviso de privacidad integral) for users in Mexico, under the Federal Law on the Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares) and the rules that apply under it. The rest of this Privacy Policy also applies to you; where this section is more specific, it prevails. The Spanish version of this section is the one that governs for users in Mexico. Identity and domicile of the data controller. The party responsible for your personal data (the responsable) is Major eLeagues, domiciled in Los Angeles, CA, USA. For any matter about your personal data, you can contact us at legal@majoreleagues.com. Personal data we process. We process the categories of personal data listed in Section 10 (Categories of personal information we collect) and described in Section 1: identification and contact data (such as your username, email address and account ID); account, profile and age information; gameplay, match and tournament data; details of streaming accounts you link; device and usage data, including the notification data described in Section 1; payment-related data; and communications and reports. If you win prize money, we also process the wallet, payout and tax data described in Section 1E; the identity, bank and tax data needed for payouts is collected directly by Stripe (Section 1B). We do not ask you for sensitive personal data as defined by Mexican law (such as data about your health, religious beliefs, political opinions or sexual preference), and we have no access to your biometric data (Section 1C). Primary purposes. We process your personal data for the following purposes, which are necessary for our relationship with you: creating and managing your account; organising and running matches, ladders and tournaments, including results, rankings and disputes; awarding and paying prizes and meeting the related tax and age requirements; processing subscriptions through the app stores and Stripe; providing support; keeping the platform safe (moderation, fraud and cheating prevention, and account security); and complying with legal obligations and responding to requests from authorities. Secondary purposes. We also process your data for the following secondary purposes, which are not necessary for the service: showing you personalised ads; sending you promotional communications and newsletters about new features, tournaments and offers; and, if you allow analytics, analysing how you use MeL in order to improve it. Personalised ads are off until you turn them on, and you can turn them off at any time in Settings → Privacy; you can unsubscribe from promotional communications with the link in any such email or in your notification settings; and at any time, including before you start using MeL, you can tell us that you do not want your data used for secondary purposes by writing to legal@majoreleagues.com. Refusing secondary purposes will not be a reason to deny you the service. Data transfers. Major eLeagues is located in the United States, and your personal data is stored and processed in the United States. Service providers that process data on our behalf (such as hosting, authentication, notification delivery, analytics and error-tracking providers) may process it only for our purposes. We also share personal data with the third parties described in Section 3, including Stripe for payments and payouts, tax and other authorities when the law requires it, and an acquirer in a merger or sale. By using MeL, you consent to the transfer of your personal data to the United States and to the other transfers described in this section that require your consent. ARCO rights. You have the right to know what personal data we hold about you and how we use it (Access); to have it corrected if it is out of date, inaccurate or incomplete (Rectification); to have it deleted from our records when you consider it is not being used properly (Cancellation); and to object to its use for specific purposes (Opposition). To exercise any of these rights, email legal@majoreleagues.com with the subject "ARCO Request" and include: (1) your full name, the email address of your MeL account, and a means for us to send you our reply; (2) the right you want to exercise and a clear description of the personal data concerned; (3) a copy of a valid official identification document or, if a representative is acting for you, the representative's identification and the document that proves their authority; and (4) for rectification, the changes you request and documents that support them. If your request is incomplete, we may ask you for the missing information within 5 business days of receiving it, and you will have 10 business days to provide it. We will tell you our decision within 20 business days of receiving your complete request and, if your request is granted, we will carry it out within 15 business days of telling you. These periods may be extended once, for an equal period, when the circumstances justify it, and we will tell you if that happens. We will reply by email and, where applicable, provide your data in electronic form. Exercising these rights is free, except for any justified shipping or copying costs. We use the copy of your identification only to verify your identity. Some data cannot be cancelled while the law requires us to keep it, such as the payout and tax records described in Section 5B; in that case we will block it and delete it when the retention period ends. Revoking consent and limiting use or disclosure. You may revoke the consent you have given us for the processing of your personal data at any time, to the extent the law allows, by emailing legal@majoreleagues.com with the same information required for an ARCO request; the same time periods apply. Revocation does not have retroactive effect, and if you revoke consent to processing that we need in order to provide the service, we may not be able to keep your account open. To limit the use or disclosure of your data, you can turn off personalised ads in Settings → Privacy, manage cookies as described in our Cookie Policy, unsubscribe from promotional communications, unlink a streaming account or turn off MeLTV featuring in Settings → Connections, turn off notifications in your notification settings or your browser, or ask us by email. Cookies and similar technologies. Our website and apps use cookies and similar technologies, as described in our Cookie Policy, to keep you signed in, remember your settings, measure usage if you allow it and, if you turn them on, show personalised ads. You can control them as described in the Cookie Policy and in Settings → Privacy. Changes to this notice. We will announce any change to this privacy notice as described in Section 9: by email to the address on your account and by a notice in the app, before or when the change takes effect. The date of the current version is always shown at the top of this Privacy Policy. Authority. If you believe your right to the protection of your personal data has been violated, you may go to the competent Mexican authority for the protection of personal data: the National Institute for Transparency, Access to Information and Personal Data Protection (Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales, INAI), or the authority that assumes its functions under the law in force.

If you are located in the European Union (EU), European Economic Area (EEA), or United Kingdom (UK), the General Data Protection Regulation (GDPR) provides you with enhanced rights regarding your personal data. You have the right to: (a) Access: Request a copy of the personal data we hold about you; (b) Rectification: Correct inaccurate or incomplete personal data; (c) Erasure (Right to be Forgotten): Request deletion of your personal data, subject to legal obligations; (d) Restriction of Processing: Request that we limit how we use your data; (e) Data Portability: Receive your personal data in a structured, commonly used format and transmit it to another controller; (f) Object to Processing: Object to processing of your data for direct marketing or other purposes based on legitimate interests; (g) Withdraw Consent: Withdraw consent for data processing at any time (without affecting the lawfulness of processing before withdrawal); (h) Lodge a Complaint: File a complaint with your local data protection authority (supervisory authority). To exercise these rights, contact us at support@majoreleagues.com. We will respond within one month of receiving your verified request. For international data transfers from the EU/EEA/UK, we use Standard Contractual Clauses approved by the European Commission and ensure adequate safeguards are in place. Our legal basis for processing your data includes: (i) Contract performance (to provide our services); (ii) Consent (for marketing, analytics, and biometric authentication); (iii) Legitimate interests (for fraud prevention, security, and service improvement); and (iv) Legal obligations (for tax, accounting, and regulatory compliance).

Our app requires certain permissions to function properly. These may include: (a) Camera access: Required for scanning QR codes, capturing match evidence, tournament proof, or profile pictures; (b) Push notifications: To alert you about match invitations, tournament updates, check-in reminders, dispute resolutions, and platform updates. On our website, notifications are optional, and your browser asks for permission only when you turn them on; (c) Biometric authentication (fingerprint/Face ID): Optional permission to enable secure and convenient login using your device's biometric sensors. You can manage these permissions through your device settings or, on our website, your browser's site settings. You can also turn notifications off at any time in your MeL notification settings. Denying certain permissions may limit your ability to use specific features of our platform. In addition: (d) Passkeys and credential manager: Optional. Registering or using a passkey invokes your operating system's credential manager and your device screen lock, fingerprint, or face recognition. Your biometric data stays on your device and is never transmitted to us; (e) Age signal: On supported operating systems, we ask your device to share an age range. You may decline. Declining leaves your account fully usable except for prize tournaments, the MeL Wallet, and withdrawals, and you may complete the check later.

We may send you promotional emails, newsletters, and notifications about new features, tournaments, special offers, and platform updates. You can opt-out of marketing communications at any time by: (a) Clicking the 'unsubscribe' link in any marketing email; (b) Adjusting your notification preferences in your account settings; or (c) Contacting us at support@majoreleagues.com. Please note that even if you opt-out of marketing communications, you will still receive essential account-related emails such as payment confirmations, security alerts, tournament notifications you've registered for, and important service updates.

By participating in matches, queues, ladders, or tournaments on Major eLeagues, you acknowledge that certain information will be publicly visible, including but not limited to: your username, team affiliations, match results, tournament brackets, tournament placements, competitive statistics, and reputation scores. This information, including tournament brackets and results, match results, leaderboards, player and team pages, and the streams, replays and clips shown on MeLTV, Discover and match pages, is publicly visible on our website and in our apps, including to visitors who do not have a MeL account, unless a tournament is set to private mode by the community host. Private tournaments can still be accessed via direct link if the link is shared. You acknowledge that we may monitor, record, or stream gameplay from matches, queues, or tournaments for quality assurance, competitive integrity, dispute resolution, or promotional purposes. Gameplay occurs within third-party games (such as Call of Duty) which are governed by their respective privacy policies and terms of service.

Linking a streaming account is optional. You can connect a Twitch account, or an account on another streaming platform we support, in Settings → Connections. Linking happens on that platform's own sign-in page: you sign in with the platform, not with us. We never see your password for that platform, and we do not store any password, access token or other login credential for it. Linking shares with us only your public channel identity: the platform's account ID, your handle, display name, profile picture and channel link. We do not copy or store your stream content: live streams and replays stay on the platform, and clips are kept only as links to the platform. A streaming account can be linked to only one MeL account at a time. We check whether your linked channel is live only while you are playing in a MeL match (ladder, queue or tournament), using the platform's public data. When your channel is live during a match and featuring is turned on, your live stream may be shown publicly on MeL, including on MeLTV and Discover on our website and in our apps, together with your username, team and match details. After a match we may show a replay link that points to your past broadcast on the platform. Clips you submit to a match are shown publicly on MeL with credit to you, and clips you agreed to let us repost may also appear on MeL's official social media accounts. Live streams, replays and clips on MeL are public: anyone can see them, including visitors who do not have a MeL account. Streams, replays and clips play through the platform's own embedded player, so that platform's privacy policy also applies when you watch them (see Section 3). Featuring is on by default once you link an account. You can turn it off at any time with the "Feature me on MeLTV" switch in Settings → Connections, which stops the live checks and removes your stream and replays from MeLTV and Discover, or you can unlink the account, which also deletes the replay links we hold for it. How long we keep this information: replay links are deleted automatically 14 days after the platform created the past broadcast they point to; clips stay on MeL until you delete them, you delete your MeL account, or we remove them; and your linked account details are kept until you unlink the account or delete your MeL account. You can also ask us to remove a clip by contacting support@majoreleagues.com. Deleting your MeL account deletes your stream links, replay links and clips. Players aged 16 or 17. Our age requirements are unchanged by these features, and players aged 16 or 17 may appear publicly on MeLTV and Discover when they link a stream and featuring is on. The player, or a parent or guardian, can turn featuring off or unlink the account at any time in Settings → Connections, or ask us to do so by contacting support@majoreleagues.com.

When you report a live stream, replay or clip, we store a record of the report: your account as the reporter, the player or content you reported, the reason you chose, any details you add, and the report's status and how it was resolved. If we restrict a player's access to MeLTV, Discover or clips, whether after a report or following our own review, we also keep a suspension record for that player, including the reason and how long the restriction lasts. Reports and suspension records are visible only to MeL staff who handle moderation and support; they are not shown publicly. We keep these records while your account exists, so that we can handle appeals and repeat violations, and we delete the reports and suspension records linked to your account when you delete it.

We actively monitor and moderate all user-generated content on our platform to maintain a safe, respectful, and appropriate environment for all users. This includes profile pictures, cover images, player avatars, team logos, team cover images, team avatars, GIFs, chat messages, usernames, team names, and any other content you upload, display, or share. We reserve the right to remove any content that violates our Terms and Conditions, Code of Conduct, or this Privacy Policy without prior notice. Content that is inappropriate, offensive, explicit, sexually suggestive, hateful, racist, discriminatory, violent, or otherwise objectionable will result in immediate permanent account termination. Users who are permanently banned for violating our Terms and Conditions (including content violations, cheating, hacking, harassment, fraud, or any other misconduct) forfeit all paid services and will NOT receive refunds for premium subscriptions, unused subscription time or any other purchases. By using our platform and making any purchase, you acknowledge and agree that account termination due to policy violations results in complete forfeiture of all payments, services, and subscription benefits without any refund or compensation.

If you have questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us at support@majoreleagues.com. For payment and billing inquiries, including disputes or questions about charges, please email support@majoreleagues.com with "Billing Inquiry" in the subject line. Legal notices, and requests under the privacy notice for users in Mexico (Section 10A), should be sent to legal@majoreleagues.com. Major eLeagues Los Angeles, CA, USA