Privacy policy

Privacy Policy – Tifogame (Version October 2025)

Welcome to Tifogame. We value your trust and are committed to protecting your personal data. This privacy policy explains what data we collect, how we use it, and what rights you can exercise.
Tifogame always complies with the provisions of the General Data Protection Regulation (GDPR) – Regulation (EU) 2016/679.

1. Our Principles

Tifogame processes personal data according to the following core principles:

• Clarity and transparency

• Purpose limitation: data are used only for specific purposes

• Data minimisation and storage limitation

• Accuracy of data

• Confidentiality, integrity and availability (CIA)

2. Collection of Personal Data

We collect only the data necessary for organising our activities.
When registering or participating in our prediction contests, we may process the following personal data:

• Name and surname

• Email address

• Username

• Possibly data obtained via your Facebook or Google account (when using social login)

These data are obtained directly from you upon registration.

3. Purposes and Legal Basis

Tifogame processes your personal data for:

• organising and managing prediction contests;

• registering your participation and verifying your identity;

• informing you about results or prizes;

• improving the user experience through anonymised statistics.

Legal bases for processing:

• Performance of a contract (participation in a contest),

• Consent (for cookies or social login),

• Legitimate interest (improving and securing our services).

You can withdraw your consent at any time.

4. Retention Period

Tifogame does not retain personal data longer than necessary for the purposes collected.

• As a rule, we retain data for a maximum of 2 years after last use or participation.

• If a Data Processing Agreement (DPA) with a client applies, we delete the data within 6 weeks after the event, unless legal obligations require otherwise.

• Aggregated and anonymised data may be stored longer for statistical purposes.

5. Data Security

We take appropriate technical and organisational measures to protect your data from loss, misuse, and unauthorised access, including:

• encrypted data transmission (HTTPS/SSL);

• secure servers within the EU (Microsoft Azure, Amsterdam);

• regularly updated security software;

• strict password management and access control.

Our hosting partner, Microsoft Azure, complies with the highest international security and privacy standards.
More information: Microsoft Trust Center – Data Privacy & Management

In case of a data breach affecting your personal data, we will notify you without undue delay and, if required, report it within 72 hours to the Data Protection Authority (GBA).

6. Disclosure to Third Parties

Tifogame does not sell or rent your personal data to third parties.
Data are shared only with carefully selected processors (such as IT providers) who technically support our services.
We have signed Data Processing Agreements (DPAs) with all our processors in accordance with GDPR requirements.
These parties use your data solely for providing services to Tifogame and not for their own purposes.

7. Use of Aggregated Data

We use aggregated and anonymised data to:

• analyse usage patterns,

• optimise website performance,

• create reports and user statistics.
  These data contain no identifiable personal information.

8. Cookies and Similar Technologies

Our website uses cookies to improve its operation and user experience.

Three types of cookies are used:

1. Strictly necessary cookies – required for proper website functioning (no consent needed).

2. Statistical cookies – with your consent, we use Google Analytics to collect anonymous usage statistics.

3. Social login and marketing cookies – active only when you log in via Facebook or Google, collecting:

   • name,

   • first name,

   • email address.

If you prefer not to use these cookies, you can always register via email instead.
You can manage or withdraw your cookie preferences via your browser settings or our cookie banner.

More information:

• Google Privacy Policy

• Meta (Facebook) Privacy Policy

9. Your Rights

Under the GDPR, you have the following rights:

• Right of access to your data

• Right to rectification of inaccurate data

• Right to erasure (“right to be forgotten”)

• Right to restriction of processing

• Right to object to processing

• Right to data portability

• Right to withdraw your consent

You can exercise these rights by contacting us at: