1. What we collect
- Account data: full name, username, email, country, phone, FIFA Ticketing account email, password hash.
- Order data: event, section, quantity, buyer info (first/last name, FIFA account email), chosen payment method, contact preferences.
- Support & communications: messages exchanged with our brokers on WhatsApp, Telegram, or email; call recordings where disclosed.
- Technical: IP address, user agent, device identifiers, session cookies used to keep you logged in.
2. How we use it
- Process and fulfil your order (confirm payment, transfer FIFA tickets).
- Provide customer support and manage refund / dispute workflows.
- Prevent fraud, chargebacks, and platform abuse.
- Comply with legal obligations (tax reporting, anti-money-laundering).
- Send transactional notifications (order status, payment confirmation). We do not send marketing emails without your opt-in.
4. Security & retention
- Data in transit protected by TLS 1.3; at rest by AES-256.
- Passwords stored as salted hashes (Argon2id).
- Order and support records retained for 7 years for tax/dispute compliance.
- Account can be deleted on request — see "Your rights" below. Legal holds may extend retention of order records.
5. Your rights
Subject to local law (GDPR, CCPA, LFPDPPP), you can:
- Access a copy of the data we hold about you.
- Correct inaccurate data. (Profile fields are read-only in the UI; corrections go through support.)
- Delete your account and associated personal data (subject to legal-retention holds).
- Opt out of non-essential communications.
- Lodge a complaint with your local data-protection authority.
6. Contact
Privacy concerns: email our Data Protection Officer at [email protected]. General support: [email protected].