Effective date: 26 November 2025 | Version: 1.0
This Privacy Policy explains how Mohammedan Sporting Club Dhaka (“we”, “the Club”) collects, uses, discloses, and protects personal information related to our websites, mobile pages, membership, ticketing, events, and fan communications. It also sets out your choices and rights. ⚽🇧🇩
🏁 Scope & Who We Are
This policy applies to data gathered when you:
- Visit our official website, microsites, or social pages;
- Purchase tickets or merchandise, join membership programs, or participate in promotions;
- Attend matches, academies, or community events (including CCTV zones);
- Contact us for media, partnerships, or customer support.
- Controller
- Mohammedan SC Dhaka, Motijheel, Dhaka, Bangladesh (club administration committee).
- Contact (privacy)
- [email protected] (preferred) or “Privacy Office” at our postal address.
📦 What Personal Data We Collect
We collect information directly from you, automatically from your device, and from trusted partners (e.g., ticketing/payment providers). Categories include:
| Category | Examples | Source |
|---|---|---|
| Identification 👤 | Name, date of birth, membership ID, jersey personalization text | You (forms, checkout, membership) |
| Contact 📧 | Email, phone, address, social handle | You; updates from your account |
| Transaction 💳 | Order history, ticket purchases, partial payment details* | Ticketing/checkout providers |
| Device & Usage 📱 | IP, browser type, cookie IDs, pages viewed, approximate location | Automatically via cookies/analytics |
| Media & Events 🎥 | Event photos/video, CCTV recordings inside/around venues | Club photographers, stadium security |
| Preferences 🎯 | Favorite players, newsletter topics, language | You (settings, cookie choices) |
*We do not store full card numbers on Club systems; payments are processed by PCI‑compliant providers.
⚖️ Legal Bases & How We Use Your Data
Depending on your location, we rely on one or more legal grounds (e.g., consent, contract, legal obligation, legitimate interests). Typical purposes include:
- 🛒 Provide services: Fulfil ticketing, membership, shop orders, or academy registrations.
- ✉️ Communications: Send confirmations, matchday updates, and customer support responses.
- 📣 Marketing (opt‑in/opt‑out): Newsletters, promotions, partner offers, and fan surveys.
- 📊 Analytics: Measure site performance, improve content, fight spam and abuse.
- 🛡️ Security & compliance: Fraud monitoring, access control, CCTV for safety, and record-keeping.
| Purpose | Typical Data Used | Legal Basis (illustrative) | Retention (typical) |
|---|---|---|---|
| Order & ticket fulfilment | Identification, contact, transaction | Contract; legitimate interest | 7 years (tax/audit) |
| Account & membership | Identification, contact, preferences | Contract; legitimate interest | Active + 24 months inactivity |
| Marketing emails | Contact, preferences | Consent; legitimate interest (where applicable) | Until opt‑out + 24 months log |
| Security (CCTV) | Media & events | Legitimate interest; legal obligation | 14–90 days unless incident |
| Analytics & cookies | Device & usage, cookie IDs | Consent (non‑essential) | Up to 24 months (cookie life) |
🍪 Cookies & Similar Technologies
We use cookies, pixels, and local storage to run our site, remember preferences, and analyze performance. Marketing cookies are optional and require consent where required by law.
| Type | What it does | Examples |
|---|---|---|
| Essential 🔑 | Security, session, cart, consent store | Login session, CSRF, cookie banner |
| Functional 🧩 | Preferences like language, region | Locale, favorite content |
| Analytics 📈 | Visits, pages, device metrics | Page views, referral source |
| Marketing 📢 | Personalized offers/ads | Campaign pixels (opt‑in) |
You can manage cookies via our banner and your browser settings. Blocking some cookies may affect site functionality.
🤝 When We Share Your Data
We do not sell personal data. We share limited data with:
- 🧾 Processors: Ticketing, payment, email, analytics, hosting, and security providers bound by contracts;
- 🏟️ Event partners: Stadium operators, security, and accreditation bodies for matchday operations;
- ⚖️ Authorities: When required by law, court order, or to protect safety and rights;
- 🔁 Corporate events: Reorganization or transfer of Club activities (data safeguarded under this policy).
🌐 International Data Transfers
Because we work with global providers, your data may be processed outside Bangladesh. Where required, we use safeguards such as contractual clauses or comparable protections to keep your data secure.
🛡️ How We Protect Your Data
- 🔐 TLS/HTTPS encryption for data in transit;
- 🗄️ Segmented hosting and role‑based access control;
- 🧪 Vendor due diligence and confidentiality agreements;
- 🧯 Incident response and audit logging;
- 🧠 Staff training on data protection and phishing awareness.
No system is 100% secure; please use strong passwords and enable multi‑factor authentication where available.
🗂️ How Long We Keep Data
We retain data only as long as needed for the purposes above, or as required by law (e.g., tax, accounting, compliance). When no longer needed, data is securely deleted or anonymized.
🧭 Your Privacy Rights
Depending on your location, you may have rights such as access, correction, deletion, restriction, objection, portability, and withdrawal of consent. We will honor applicable requests subject to identity verification and legal limits.
| Right | What it means | How to exercise |
|---|---|---|
| Access 👀 | Ask for a copy of your personal data | Email [email protected] |
| Rectification ✍️ | Fix inaccurate or incomplete data | Send corrected details with proof |
| Erasure 🧹 | Request deletion where legally permitted | Specify the context (account, marketing) |
| Restriction ⏸️ | Limit processing while a claim is assessed | Describe the reason and scope |
| Portability 🔄 | Receive your data in a portable format | Identify the data set you need exported |
| Objection 🚫 | Object to marketing or certain uses | Use “unsubscribe” or email us |
| Withdraw consent ❌ | Stop optional processing you agreed to | Update preferences or email us |
👶 Children’s Privacy
Our online services are intended for fans aged 18+. Youth academy forms may collect limited guardian‑approved data for registration and safety. If we learn a child provided data without consent, we will delete it.
📣 Communications & Fan Marketing
You can opt in or out of Club newsletters, matchday alerts, and promotions at any time using email footer links or by contacting us. Transactional messages (e.g., ticket confirmations) will still be sent when you use those services.
📱 Social Media, Photos & User‑Generated Content
- Posts you tag with our handles may be reshared (crediting your handle).
- Event photos and stadium imagery may capture spectators in public areas.
- Submit takedown requests to [email protected] with the link and context.
💳 Ticketing & Payments
Payments are handled by third‑party gateways that meet industry security standards (e.g., PCI DSS). The Club receives confirmation and order metadata, not your full card number.
🔗 Links to Other Sites
Our pages may link to third‑party sites (sponsors, media, ticketing). Their privacy practices are their own; please review their policies.
📝 Changes to This Policy
We may update this Policy to reflect new legal or operational needs. We will post the updated version with a new effective date and, where appropriate, notify you of significant changes.
📬 How to Contact Us
| Channel | Details | Notes |
|---|---|---|
| Email (privacy) | [email protected] | Fastest route for rights requests |
| General support | [email protected] | Tickets, membership, orders |
| Postal | Privacy Office, Mohammedan SC Dhaka, Motijheel, Dhaka | Include contact details & request type |
If you believe we have not addressed your concerns, you may contact your local data‑protection authority (where applicable).
❓ Frequently Asked Questions (FAQ)
1) Do you share my data with advertisers?
We do not sell personal data. With your consent, we may use marketing tools or run sponsor campaigns. You can opt out at any time.
2) Can I attend matches without being photographed?
We minimize close‑ups, but stadiums and fan zones are public places where you may appear in wide shots or crowd imagery. Send takedown requests to our media inbox with the URL.
3) How do I unsubscribe from emails or SMS?
Use the “unsubscribe” link in messages or email [email protected] with the subject “Unsubscribe”.
4) What happens if I delete my account?
We deactivate access and remove non‑essential data. Some records (e.g., invoices) are kept as required by law. Backups are purged on their normal schedule.
5) What if my data is wrong?
Email us with the correct details and proof where relevant; we’ll update our records.
6) Do you track precise location?
No. We collect approximate IP‑based location for security and analytics. Mobile geolocation is off unless you explicitly enable a feature that needs it.
7) Are children allowed to create accounts?
Our online services target adults (18+). Academy registrations are handled with parental/guardian consent and limited collection.