Privacy Policy

Registration data: • Username • Email address • Password (stored encrypted) Platform usage data: • Virtual teams created • Transfers and transactions • Scores and rankings • League participation • Game preferences Technical data: • IP address • Browser and device type • Operating system • Pages visited and time spent • Cookies and similar technologies Communication data: • Support messages • Notification preferences

We process your personal data based on: Contract performance (Art. 6.1.b GDPR): • Provision of fantasy game service • Management of your user account • Transaction processing Consent (Art. 6.1.a GDPR): • Sending commercial communications • Analytics cookies • Participation in surveys or promotions Legitimate interest (Art. 6.1.f GDPR): • Platform improvement and optimization • Fraud prevention and security • Aggregated statistical analysis

We use your data to: Service provision: • Create and manage your account • Enable game participation • Process transactions and transfers • Calculate scores and rankings • Manage leagues and competitions Communications: • Service notifications (changes, updates) • Lineup and market deadline reminders • Commercial communications (only with your consent) Service improvement: • Usage analysis to improve experience • Bug detection and correction • Development of new features Security: • Fraud and multiple account prevention • Protection against unauthorized access

Your data may be shared with: Service providers: • Supabase (United States): Hosting, database and authentication. Complies with EU Standard Contractual Clauses. • Google Analytics (United States): Usage analysis (only if you consent). Complies with Standard Contractual Clauses. • Stripe (United States): Payment processing (when enabled). PCI-DSS certified. Public authorities: When legally required. We do not sell or share your data with third parties for commercial purposes.

Some of our service providers are located outside the European Economic Area (EEA), primarily in the United States. These transfers are protected by: • Standard Contractual Clauses approved by the European Commission • Additional technical and organizational security measures • Transfer impact assessment You can request more information about applicable safeguards by contacting us.

Account data: While your account remains active and for 2 additional years after deletion (for legal obligations and defense of claims). Transaction data: 5 years for tax and accounting obligations. Technical logs: 12 months. After these periods, your data will be deleted or irreversibly anonymized.

You have the right to: Access: Know what data we process about you. Rectification: Correct inaccurate or incomplete data. Erasure: Request deletion of your data. Objection: Object to processing in certain cases. Restriction: Request processing restriction. Portability: Receive your data in structured format. Withdraw consent: At any time, without affecting the lawfulness of prior processing. How to exercise your rights: Send an email to mgpeapp@gmail.com indicating the right you wish to exercise and attaching a copy of your ID document. Supervisory authority: You can file a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es

We use cookies and similar technologies for: Necessary cookies: • Keep you logged in • Remember your language preference • Save your consent settings Analytics cookies (with your consent): • Google Analytics to understand how you use the platform You can manage your cookie preferences at any time from the "Manage cookies" link in the footer.

We implement technical and organizational measures to protect your data: • Encryption of passwords and sensitive data • Secure connections (HTTPS/TLS) • Role-based access control • Regular backups • Security monitoring • Internal security policies Despite these measures, no system is completely secure. We recommend using strong passwords and not sharing your credentials.

MGP Fantasy is intended for users over 18 years of age. We do not intentionally collect data from minors. If we detect that a minor has registered an account, we will delete it along with their personal data.

We may update this Privacy Policy when necessary. Changes will be published on this page with a new update date. For significant changes, we will notify you by email or through a prominent notice on the platform.

For any privacy or data protection inquiries: Email: mgpeapp@gmail.com We will respond to your request within a maximum of one month.