1. Introduction & Data Controller Information
BilliardPH ("BilliardPH", "we", "us", or "our") operates the Philippine billiard community and venue network at billiardph.com. This Privacy Policy details our practices regarding the collection, use, disclosure, and protection of personal data.
Data Controller Contact Details
For the purposes of the General Data Protection Regulation (GDPR) and applicable global data protection laws:
Entity: BilliardPH Platform
Privacy & Data Protection Contact: privacy@billiardph.com
Contact Form: billiardph.com/contact
2. Information We Collect
We collect personal data directly from you when you register, participate in events, or interact with our services. We categorize collected information as follows:
A. Account & Identity Data
- Account Credentials: Full name, display name, email address, password hash (salted & argon2 hashed).
- Profile Information: Profile avatar image, nationality/region, skill rating, and optional bio or club affiliation.
- Authentication Logs: Authentication timestamps, IP address at login, and session tokens.
B. Event, Competition & Performance Data
- Tournament Records: Registration details, bracket seeds, table assignments, and frame/rack scores.
- Match Histories: Real-time shot/inning logs, referee score reports, match timestamps, and official dispute logs.
- Rankings & Stats: Elo rating calculations, win-loss records, break statistics, and division standings.
C. Technical & Telemetry Data
- Device & Browser Metadata: User agent string, operating system version, browser type, and screen resolution.
- Network Telemetry: IP address (anonymized for analytics), request headers, WebSocket connection state, and latency metrics.
- Usage Metrics: Page views, feature interactions, and performance diagnostics collected via Cloudflare Analytics.
3. How We Use Your Information
We process your personal data strictly for legitimate operational, contractual, and legal purposes:
Tournament Operations
Generating brackets, assigning tables, calculating Elo ratings, and maintaining official sport record histories.
Real-Time Scoreboards
Broadcasting live score updates over WebSockets to venue digital scoreboards, stream overlays, and mobile devices.
Account Management
Authenticating logins, facilitating role assignments (Player, Referee, Organizer), and sending transaction emails.
Platform Integrity & Security
Preventing match manipulation, enforcing rate limits, detecting fraud, and securing multi-tenant venue isolation.
4. Data Sharing & Sub-processors
BilliardPH never sells your personal data to third parties or advertising networks. We share data strictly as required to provide platform functionality:
Cloudflare Pages & Workers
Global (Edge Network)Global edge application hosting, serverless routing, and API execution
Cloudflare D1
United States / EU RegionsServerless SQL database storing user profiles, tournament brackets, and match records
Cloudflare R2
Global CDNObject storage for user avatars, club logos, and tournament event media
Cloudflare Web Analytics
GlobalPrivacy-preserving web telemetry and performance monitoring (cookie-less)
Transactional Email Service
United States / EUDelivering account activation, password resets, and match notification emails
Public Participant Data
BilliardPH is a competitive sports network. By participating in tournaments, your public display name, avatar, club affiliation, and match results are visible on public leaderboards and event brackets.
5. Data Retention & Security Standards
We enforce rigorous technical and organizational security controls powered by Cloudflare's global edge infrastructure:
- Encryption in Transit: Mandatory TLS 1.3 encryption across all HTTPS endpoints and WSS WebSocket channels.
- Encryption at Rest: Database records on Cloudflare D1 and uploaded assets on Cloudflare R2 are encrypted using AES-256 encryption.
- Data Retention Schedule: Active account data is retained for the lifetime of your account. Inactive accounts with no tournament activity for 24 months are flagged for archiving. Historical match records remain preserved for sports integrity purposes in anonymized format upon account deletion.
6. Your Privacy Rights (GDPR & CCPA/CPRA)
Depending on your region (e.g., European Economic Area, United Kingdom, California), you hold specific statutory privacy rights:
Right to Access & Portability
You may request a machine-readable export (JSON/CSV) of your personal data, profile settings, and match logs.
Right to Rectification & Erasure
You can update incorrect profile details directly in your account settings or request complete account deletion ("Right to be Forgotten").
Right to Object & Restrict
You may object to specific automated processing or opt out of optional telemetry communications.
- Right to Erasure (Deletion): You may request the deletion of your account and associated personal data by emailing privacy@billiardph.com.
8.0 Contact Information & DPO
If you have any questions, concerns, or requests regarding this Privacy Policy or BilliardPH's data practices, please contact our team: