Privacy Policy

Effective date: 26 November 2025  |  Version: 1.0

This Privacy Policy explains how Mohammedan Sporting Club Dhaka (“we”, “the Club”) collects, uses, discloses, and protects personal information related to our websites, mobile pages, membership, ticketing, events, and fan communications. It also sets out your choices and rights. ⚽🇧🇩

📌 Important: This document is an informational template for a football club privacy policy and does not constitute legal advice. Local requirements can vary; seek legal counsel to tailor this policy.

🏁 Scope & Who We Are

This policy applies to data gathered when you:

  • Visit our official website, microsites, or social pages;
  • Purchase tickets or merchandise, join membership programs, or participate in promotions;
  • Attend matches, academies, or community events (including CCTV zones);
  • Contact us for media, partnerships, or customer support.
Controller
Mohammedan SC Dhaka, Motijheel, Dhaka, Bangladesh (club administration committee).
Contact (privacy)
[email protected] (preferred) or “Privacy Office” at our postal address.

📦 What Personal Data We Collect

We collect information directly from you, automatically from your device, and from trusted partners (e.g., ticketing/payment providers). Categories include:

Category Examples Source
Identification 👤 Name, date of birth, membership ID, jersey personalization text You (forms, checkout, membership)
Contact 📧 Email, phone, address, social handle You; updates from your account
Transaction 💳 Order history, ticket purchases, partial payment details* Ticketing/checkout providers
Device & Usage 📱 IP, browser type, cookie IDs, pages viewed, approximate location Automatically via cookies/analytics
Media & Events 🎥 Event photos/video, CCTV recordings inside/around venues Club photographers, stadium security
Preferences 🎯 Favorite players, newsletter topics, language You (settings, cookie choices)

*We do not store full card numbers on Club systems; payments are processed by PCI‑compliant providers.

⚖️ Legal Bases & How We Use Your Data

Depending on your location, we rely on one or more legal grounds (e.g., consent, contract, legal obligation, legitimate interests). Typical purposes include:

  • 🛒 Provide services: Fulfil ticketing, membership, shop orders, or academy registrations.
  • ✉️ Communications: Send confirmations, matchday updates, and customer support responses.
  • 📣 Marketing (opt‑in/opt‑out): Newsletters, promotions, partner offers, and fan surveys.
  • 📊 Analytics: Measure site performance, improve content, fight spam and abuse.
  • 🛡️ Security & compliance: Fraud monitoring, access control, CCTV for safety, and record-keeping.
Purpose Typical Data Used Legal Basis (illustrative) Retention (typical)
Order & ticket fulfilment Identification, contact, transaction Contract; legitimate interest 7 years (tax/audit)
Account & membership Identification, contact, preferences Contract; legitimate interest Active + 24 months inactivity
Marketing emails Contact, preferences Consent; legitimate interest (where applicable) Until opt‑out + 24 months log
Security (CCTV) Media & events Legitimate interest; legal obligation 14–90 days unless incident
Analytics & cookies Device & usage, cookie IDs Consent (non‑essential) Up to 24 months (cookie life)

🍪 Cookies & Similar Technologies

We use cookies, pixels, and local storage to run our site, remember preferences, and analyze performance. Marketing cookies are optional and require consent where required by law.

Type What it does Examples
Essential 🔑 Security, session, cart, consent store Login session, CSRF, cookie banner
Functional 🧩 Preferences like language, region Locale, favorite content
Analytics 📈 Visits, pages, device metrics Page views, referral source
Marketing 📢 Personalized offers/ads Campaign pixels (opt‑in)

You can manage cookies via our banner and your browser settings. Blocking some cookies may affect site functionality.

🤝 When We Share Your Data

We do not sell personal data. We share limited data with:

  • 🧾 Processors: Ticketing, payment, email, analytics, hosting, and security providers bound by contracts;
  • 🏟️ Event partners: Stadium operators, security, and accreditation bodies for matchday operations;
  • ⚖️ Authorities: When required by law, court order, or to protect safety and rights;
  • 🔁 Corporate events: Reorganization or transfer of Club activities (data safeguarded under this policy).

🌐 International Data Transfers

Because we work with global providers, your data may be processed outside Bangladesh. Where required, we use safeguards such as contractual clauses or comparable protections to keep your data secure.

🛡️ How We Protect Your Data

  • 🔐 TLS/HTTPS encryption for data in transit;
  • 🗄️ Segmented hosting and role‑based access control;
  • 🧪 Vendor due diligence and confidentiality agreements;
  • 🧯 Incident response and audit logging;
  • 🧠 Staff training on data protection and phishing awareness.

No system is 100% secure; please use strong passwords and enable multi‑factor authentication where available.

🗂️ How Long We Keep Data

We retain data only as long as needed for the purposes above, or as required by law (e.g., tax, accounting, compliance). When no longer needed, data is securely deleted or anonymized.

🧭 Your Privacy Rights

Depending on your location, you may have rights such as access, correction, deletion, restriction, objection, portability, and withdrawal of consent. We will honor applicable requests subject to identity verification and legal limits.

Right What it means How to exercise
Access 👀 Ask for a copy of your personal data Email [email protected]
Rectification ✍️ Fix inaccurate or incomplete data Send corrected details with proof
Erasure 🧹 Request deletion where legally permitted Specify the context (account, marketing)
Restriction ⏸️ Limit processing while a claim is assessed Describe the reason and scope
Portability 🔄 Receive your data in a portable format Identify the data set you need exported
Objection 🚫 Object to marketing or certain uses Use “unsubscribe” or email us
Withdraw consent ❌ Stop optional processing you agreed to Update preferences or email us

👶 Children’s Privacy

Our online services are intended for fans aged 18+. Youth academy forms may collect limited guardian‑approved data for registration and safety. If we learn a child provided data without consent, we will delete it.

📣 Communications & Fan Marketing

You can opt in or out of Club newsletters, matchday alerts, and promotions at any time using email footer links or by contacting us. Transactional messages (e.g., ticket confirmations) will still be sent when you use those services.

📱 Social Media, Photos & User‑Generated Content

  • Posts you tag with our handles may be reshared (crediting your handle).
  • Event photos and stadium imagery may capture spectators in public areas.
  • Submit takedown requests to [email protected] with the link and context.

💳 Ticketing & Payments

Payments are handled by third‑party gateways that meet industry security standards (e.g., PCI DSS). The Club receives confirmation and order metadata, not your full card number.

🔗 Links to Other Sites

Our pages may link to third‑party sites (sponsors, media, ticketing). Their privacy practices are their own; please review their policies.

📝 Changes to This Policy

We may update this Policy to reflect new legal or operational needs. We will post the updated version with a new effective date and, where appropriate, notify you of significant changes.

📬 How to Contact Us

Channel Details Notes
Email (privacy) [email protected] Fastest route for rights requests
General support [email protected] Tickets, membership, orders
Postal Privacy Office, Mohammedan SC Dhaka, Motijheel, Dhaka Include contact details & request type

If you believe we have not addressed your concerns, you may contact your local data‑protection authority (where applicable).

❓ Frequently Asked Questions (FAQ)

1) Do you share my data with advertisers?

We do not sell personal data. With your consent, we may use marketing tools or run sponsor campaigns. You can opt out at any time.

2) Can I attend matches without being photographed?

We minimize close‑ups, but stadiums and fan zones are public places where you may appear in wide shots or crowd imagery. Send takedown requests to our media inbox with the URL.

3) How do I unsubscribe from emails or SMS?

Use the “unsubscribe” link in messages or email [email protected] with the subject “Unsubscribe”.

4) What happens if I delete my account?

We deactivate access and remove non‑essential data. Some records (e.g., invoices) are kept as required by law. Backups are purged on their normal schedule.

5) What if my data is wrong?

Email us with the correct details and proof where relevant; we’ll update our records.

6) Do you track precise location?

No. We collect approximate IP‑based location for security and analytics. Mobile geolocation is off unless you explicitly enable a feature that needs it.

7) Are children allowed to create accounts?

Our online services target adults (18+). Academy registrations are handled with parental/guardian consent and limited collection.