EWC PLAY PRIVACY NOTICE

Last updated: 30 June 2026

1. Who we are

The Esports Foundation (the "EF”, “we”, “us”, or “our”) is a non-profit organisation headquartered in Riyadh, Saudi Arabia, dedicated to advancing the esports and gaming sectors and serving as the hosting entity of the Esports World Cup. Our registered address is 3450 Al Imam Saud Ibn Faisal rd, 6496 Al Malqa District, 13523, Riyadh, Saudi Arabia.

This Privacy Notice applies to participants who register for, access or participate in EWC Play, the gamification and fan engagement hub made available on www.esportsworldcup.com and related digital surfaces, including Fantasy, Pick’ems, Quests, Rewards and Leaderboards (“EWC Play” or the “Platform”). EWC Play is a free-to-play platform that connects fans through predictions, fantasy games, quests, rewards, live participation, dynamic leaderboards, social engagement and multigame progression. EWC Play is intended to be available worldwide except where participation is prohibited by applicable local law or restricted by product-specific territorial restrictions disclosed in the applicable Specific Rules. Quests are generally available globally, but certain physical onsite Quests and related onsite reward redemption may be limited to France, as described in the applicable Specific Rules.

To participate in EWC Play, you must register for and maintain a user account, and you may be required to provide personal data to EF in connection with the operation of the Platform, your participation in games and competitions, and the delivery of any Prizes. EF collects this personal data directly from you, and also generates certain data through your use of the Platform, in order to operate EWC Play, administer games and competitions, verify your eligibility, determine and deliver Prizes, prevent fraud, and improve the Platform.

We are committed to protecting your personal data and complying with all applicable data protection laws. This Privacy Notice explains what personal data we collect in connection with EWC Play, the purposes for which we use it, with whom it may be shared, how long it is retained, and the rights available to you in relation to your personal data.

EF is the controller responsible for the processing of personal data described in this Privacy Notice. This Privacy Notice should be read together with the Esports Foundation website Privacy Policy and the EWC Play Terms and Conditions (the “Terms”). Any capitalised terms used but not defined in this Privacy Notice have the meanings given to them in the Terms.

2. What personal data we collect and process

By “personal data” we mean any information that can be used on its own or together with other information to identify a person. This includes data such as names, usernames, ID numbers, contact details and any other information linked to an individual.

We collect personal data directly from you when you register for and use EWC Play, and we also generate or derive personal data through your participation on the Platform. Depending on the circumstances, this may include the following categories of personal data:

  • Account and registration data, such as your name, display name or username, avatar, email address, date of birth and age, country of residence, login method and login credentials;
  • Eligibility and verification data, such as your age, date of birth, residency or location, nationality, and, where required to confirm eligibility to participate, to confirm that you are aged eighteen (18) or over before Prize payment or fulfilment, or otherwise to award or deliver a Prize, identity documents and supporting evidence, together with parental or guardian affirmation information for participants aged seven (7) to seventeen (17) and, for participants resident in France under the age of fifteen (15), information relating to the consent of the holder of parental responsibility;
  • Profile, gameplay and progression data, such as your tier badge, points balance, XP, current rank and ranking across leaderboards, tier progression, applicable points multiplier or boost, faction status, fantasy rosters, picks and predictions, quest completions, trivia answers, QR- scan activity, points history and activity or audit logs;
  • Prize, reward and payment data, such as bank account details and other financial information required to deliver monetary Prizes, delivery or shipping details for merchandise, and any affidavits, declarations, tax forms or releases required for winner verification;
  • Communications and support data, such as your correspondence with our support channels and your contact preferences;
  • Social and user-generated content, such as your username, display name, avatar, branded profile or “share” cards, and any content, tags or reposts you create or submit through social sharing features and quests, which may be visible to other users or the public when you participate in public leagues, leaderboards, factions or share-profile functions;
  • Technical, device and usage data, such as your IP address, device and connection information, approximate location or geolocation data used to enforce territorial restrictions and geo- blocking, including product-specific territorial restrictions and any France-only restrictions applicable to physical onsite Quests or onsite reward redemption, and information about how you access and use the Platform; and
  • Any other information you are requested to provide that is strictly necessary to operate EWC Play, administer the relevant game, quest, leaderboard or campaign, verify your eligibility, or award and deliver a Prize.

Where we process financial information (such as bank account details collected for the purpose of Prize delivery), we treat this as sensitive personal data and apply appropriate safeguards, processing it only to the extent necessary for the specified purpose and in accordance with applicable data protection laws.

You are not required to provide personal data that is not necessary for your participation in EWC Play or for the delivery of a Prize. If mandatory information is not provided, EF may not be able to register your account, allow you to participate in some or all features of EWC Play, or award or deliver some or all elements of a Prize.

3. Why and on what legal basis we collect and process your personal data

We process your personal data for the purposes set out below and rely on the corresponding legal bases under applicable data protection laws.

  • Creating and administering your account and providing EWC Play and its features (including Fantasy, Pick’ems, Quests, Leaderboards and the Rewards Hub), as necessary to perform our contract with you under the Terms.
  • Verifying your eligibility (including age, residency and identity), enforcing territorial restrictions and applying geo-blocking, IP-based or residence-verification controls, including product-specific territorial restrictions and any France-only restrictions applicable to physical onsite Quests or onsite reward redemption, as necessary to perform our contract with you, to comply with our legal obligations, and for our legitimate interests in protecting the integrity of the Platform.
  • Operating gameplay mechanics, including scoring, points and XP, tier progression, multipliers, rankings, leaderboards, factions and the maintenance of points histories and audit logs, as necessary to perform our contract with you and for our legitimate interests in operating EWC Play fairly and reliably.
  • Determining whether you are eligible to receive a Prize, including verifying before Prize payment or fulfilment that you are aged eighteen (18) or over, and awarding, verifying and delivering Prizes, including conducting identity, age, residency, sanctions and anti-fraud checks, as necessary to perform our contract with you and to comply with our legal obligations.
  • Processing bank account details and other financial information to deliver monetary Prizes, as necessary to perform our contract with you and to comply with our legal obligations (including payment services, anti-money laundering and tax requirements), and, where required for the processing of financial data, on the basis of your explicit consent.
  • Displaying your username, display name, avatar, rank, score, points balance, XP, tier and faction participation on leaderboards and other public or display surfaces (including broadcast overlays, festival screens, embeddable displays or publicly accessible pages), as necessary to perform our contract with you and for our legitimate interests in operating EWC Play and its competitive and social features.
  • Enabling social sharing features and quests, and hosting, reproducing and displaying user- generated content in accordance with the licence granted under the Terms, as necessary to perform our contract with you and for our legitimate interests in promoting EWC Play and the Esports World Cup, and, where required, on the basis of your consent.
  • Providing personalised recommendations and surfacing relevant quests, predictions, content and rewards through our recommendation engine, for our legitimate interests in offering a relevant and engaging experience, and, where required by applicable law, on the basis of your consent (including for any non-essential cookies or similar technologies).
  • Preventing and detecting fraud, cheating, abuse, manipulation and security incidents, protecting the integrity and security of the Platform, and enforcing the Terms, for our legitimate interests and to comply with our legal obligations.
  • Analysing use of the Platform and improving EWC Play, its features and content, for our legitimate interests in developing and improving our services, and, where required by applicable law, on the basis of your consent.
  • Communicating with you about EWC Play, including operational, administrative and service- related communications (such as account, game and Prize notifications), as necessary to perform our contract with you and for our legitimate interests in operating the Platform effectively.
  • Sending newsletters, promotional materials and other marketing communications, where you have provided your explicit consent, which you may withdraw at any time.
  • Processing the personal data of participants aged seven (7) to seventeen (17) on the basis of parental or guardian affirmation obtained at sign-up or participation where required by applicable law, and, for participants resident in France under the age of fifteen (15), obtaining the consent of the holder of parental responsibility for the processing of personal data in connection with information society services, in accordance with applicable data protection laws.
  • Complying with applicable legal and regulatory obligations (including anti-money laundering, sanctions, tax and accounting requirements), responding to lawful requests from competent authorities, and establishing, exercising or defending legal claims, as necessary to comply with legal obligations and for our legitimate interests.

4. Who we share your personal data with

For the purposes set out above, we may share your personal data with third parties involved in operating EWC Play and delivering Prizes, including:

  • service providers and processors that support the operation of the Platform, such as hosting, cloud, IT, technology, analytics and customer-support providers;
  • payment and prize-fulfilment providers, such as banks and payment service providers (to deliver monetary Prizes), and merchandise, shipping, logistics and experience providers (to deliver non-monetary Prizes);
  • identity, age, residency, eligibility and anti-fraud verification providers, where required to verify participants or potential winners;
  • sponsors and partners, in connection with sponsored quests, sponsor leaderboards, co-branded campaigns and sponsor-funded Prizes, where you participate in sponsor-related features or campaigns, and as described in any applicable campaign-specific notice or consent mechanism;
  • social media platforms, including Facebook, X and Reddit (in connection with profile sharing) and TikTok, Instagram and X (in connection with social sharing quests), where you use those features;
  • rights holders, publishers, clubs and creators, where necessary in connection with licensed content, factions or competitions;
  • competent courts, regulators, law enforcement and other authorities, where required to comply with applicable law, respond to lawful requests, or establish, exercise or defend legal claims; and
  • our affiliates, successors and assignees, where we transfer or reorganise our business in accordance with the Terms.

We only share personal data to the extent strictly necessary for the relevant purpose. Where we engage third-party service providers, we require them to process personal data solely for the relevant purposes and in accordance with applicable data protection laws. We are not responsible for the independent data practices of sponsors or social media platforms that act as separate controllers, and we encourage you to review their privacy notices.

5. International data transfers

EF collects personal data in connection with EWC Play directly from participants worldwide, except where participation is prohibited by local law or restricted by the applicable Specific Rules, and generates certain data through your use of the Platform. In order to operate EWC Play and deliver Prizes and rewards, EF may share personal data with affiliates, service providers, sponsors and other recipients that are located outside the Kingdom of Saudi Arabia, outside France or the European Economic Area, or that otherwise process personal data outside the country in which you are based.

Where personal data is transferred outside the Kingdom of Saudi Arabia or the European Economic Area, EF ensures that such transfers are carried out in accordance with applicable data protection laws and that appropriate safeguards are implemented where required. These safeguards may include transfers to countries recognised as providing an adequate level of protection, or the use of approved standard contractual clauses or other lawful transfer mechanisms under the Saudi Personal Data Protection Law and the EU GDPR, in each case limiting transfers to what is strictly necessary for the operation of EWC Play and the delivery of Prizes.

6. Marketing communications

Marketing communications are not required in order to register for or participate in EWC Play or to receive any Prize. Where required by applicable law, you may be asked separately whether you wish to receive marketing communications from EF. Any marketing communications from EF will be sent only where you have provided your explicit consent, and you may withdraw your marketing consent at any time by clicking the unsubscribe link in the relevant communication or by emailing ewcplay@esportsfoundation.com.

7. How long we keep your personal data

We retain personal data collected in connection with EWC Play only for as long as necessary to:

  • operate EWC Play, administer your account and the relevant games, quests, leaderboards and campaigns, and determine and deliver Prizes; and
  • comply with applicable legal, regulatory, accounting, tax or reporting obligations, and to establish, exercise or defend legal claims.

Personal data will be retained for different periods depending on the nature of the data and the purposes for which it is processed.

  • account and profile data is retained for the duration of your account and for a limited period after your account is closed;
  • gameplay, points, leaderboard and audit data is retained for the relevant season or event window and for a further limited period to verify results, resolve disputes and confirm Prize eligibility;
  • Prize, financial and tax records are retained for the period required by applicable anti-money laundering, payment, tax and accounting laws; and
  • records of your marketing consent are retained until you withdraw consent and for a shorter period thereafter.

Once personal data is no longer required for these purposes, it will be securely deleted or anonymised in accordance with applicable law and EF's data retention policies.

8. Your rights

Depending on your jurisdiction, you may have the following rights in relation to your personal data:

  • the right to be informed about how we collect, use and disclose your personal data, including the purposes and legal bases for the processing;
  • the right to request access to your personal data;
  • the right to obtain a copy of your personal data held by us in a readable and clear format, and, where applicable, the right to data portability;
  • the right to request that we correct, update or complete any inaccurate or incomplete personal data we process about you;
  • the right, in certain circumstances, to request the deletion of your personal data;
  • the right, in certain circumstances, to request that we restrict the processing of your personal data;
  • the right to object to the processing of your personal data in certain circumstances, including where we use your data for direct marketing; and
  • where we process your personal data on the basis of your consent, the right to withdraw that consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

You may exercise these rights by contacting us using the details in section 10. We will respond to valid requests within the timeframes required by applicable data protection laws. You also have the right to lodge a complaint with the competent supervisory authority, including the Saudi Data and Artificial Intelligence Authority (SDAIA) in the Kingdom of Saudi Arabia or the Commission Nationale de l’Informatique et des Libertés (CNIL) in France, as applicable. Further information about your rights and how to exercise them is set out in the Esports Foundation website Privacy Policy.

9. Contact us

If you have any questions about this Privacy Notice or how EF processes your personal data in connection with EWC Play, please contact our EF’s Data Protection Officer, Kholod AlQahtani, at ewcplay@esportsfoundation.com. Further information about how to make a complaint is set out in the Esports Foundation website Privacy Policy.