Match'dUP Privacy Policy

This Privacy Policy explains how Match'dUP collects, uses, stores and protects personal information when you visit our website, create an account, purchase or use MatchScans, subscribe to a plan, contact us, or otherwise use the Match'dUP service.

Match'dUP is a football intelligence platform that allows users to create personalised football accumulator analysis based on criteria such as matchday, number of selections and preferred risk profile.

For the purposes of applicable data protection law, the data controller responsible for your personal information is:

In this Privacy Policy, "Match'dUP", "we", "us" and "our" refer to the entity identified above.

The information we collect depends on how you interact with Match'dUP.

Account information

When you create or maintain a Match'dUP account, we may collect:

• your name;
• email address;
• authentication and account identifiers;
• account creation and update dates;
• account status;
• subscription status;
• account preferences; and
• other information you voluntarily provide through your account.

We do not need your bookmaker login credentials and you should not provide them to us.

MatchScan and product usage information

When you use Match'dUP, we may process information relating to how you configure and use the service, including:

• selected matchday;
• requested number of selections;
• selected risk profile;
• stake entered into a MatchScan;
• competition and fixture preferences;
• MatchScans created;
• selections generated or displayed;
• MatchScan status and history;
• credits used or purchased;
• product interactions; and
• other settings or preferences associated with your use of Match'dUP.

A stake entered into Match'dUP is used to provide relevant product calculations or presentation. Match'dUP does not hold that stake or place a wager on your behalf.

Payment and subscription information

Where you purchase a subscription, MatchScan or MatchScan credit pack, we may process:

• your selected plan or product;
• transaction status;
• payment amount;
• currency;
• purchase date;
• subscription status;
• billing cycle;
• payment-provider customer identifiers;
• payment-provider subscription identifiers; and
• information necessary to administer refunds, cancellations or payment disputes.

Payments may be processed by third-party payment providers such as Stripe.

We do not intend to store complete payment-card numbers or card security codes on Match'dUP systems where these are collected and processed directly by the payment provider.

Technical and security information

When you access Match'dUP, certain technical information may be collected automatically, including:

• IP address;
• browser type;
• device type;
• operating system;
• approximate location derived from IP address where applicable;
• date and time of access;
• requested pages or application routes;
• session information;
• authentication and security events;
• error and diagnostic information; and
• other technical information reasonably required to operate and secure the service.

Communications

If you contact us, we may retain:

• your name;
• email address;
• the content of your message;
• support history; and
• information reasonably required to investigate or respond to your enquiry.

Match'dUP is not designed to require users to provide special category personal information such as information concerning:

• racial or ethnic origin;
• political opinions;
• religious or philosophical beliefs;
• trade union membership;
• genetic information;
• biometric identification;
• health information; or
• information concerning a person's sex life or sexual orientation.

Please do not provide this type of information unless we specifically request it for a legitimate and lawful purpose.

Match'dUP is also not intended to collect bookmaker passwords or other credentials for third-party betting accounts.

We may use personal information to:

• create and administer your account;
• authenticate you and maintain account security;
• provide MatchScans;
• personalise MatchScans according to the criteria you select;
• maintain your MatchScan history;
• administer MatchScan credits;
• administer subscriptions and purchases;
• process and reconcile payments;
• maintain your preferences;
• provide customer support;
• communicate important service information;
• investigate errors and technical problems;
• detect, investigate and prevent fraud, abuse and unauthorised access;
• protect Match'dUP, its infrastructure and its users;
• understand how the service is being used;
• improve the reliability and functionality of Match'dUP;
• maintain appropriate accounting and business records;
• establish, exercise or defend legal claims; and
• comply with legal and regulatory obligations.

We will not use personal information for materially incompatible purposes without an appropriate legal basis.

Under applicable UK data protection law, we must have a lawful basis for processing personal information.

Depending on the circumstances, we may rely on the following.

Performance of a contract

We process information where necessary to provide the Match'dUP services you have requested.

This can include:

• creating and operating your account;
• generating and storing MatchScans;
• maintaining your credits;
• administering subscriptions;
• processing purchases;
• providing paid functionality; and
• responding to service-related requests.

Legitimate interests

We may process information where necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests.

These interests may include:

• operating and improving Match'dUP;
• protecting the security of the platform;
• preventing fraud and abuse;
• diagnosing technical problems;
• understanding product usage;
• maintaining appropriate business records; and
• protecting our legal rights.

Legal obligation

We may process or retain information where necessary to comply with applicable laws, regulatory requirements, tax obligations, accounting requirements, court orders or other binding legal obligations.

Consent

Where the law requires consent, we will ask for it.

This may apply, for example, to certain:

• marketing communications;
• analytics technologies;
• advertising technologies; and
• non-essential cookies.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

The ICO requires organisations to determine and disclose their lawful bases and, where legitimate interests are used, explain those interests.

Match'dUP processes football-related information to provide its services.

This may include information concerning:

• fixtures;
• teams;
• competitions;
• results and form;
• league standings;
• team statistics;
• player availability;
• injuries and suspensions where available;
• lineups where available;
• football market and odds information;
• model probabilities;
• data quality and freshness; and
• other football intelligence used by Match'dUP.

Most football information processed by Match'dUP does not relate to the Match'dUP user.

Your interaction with that information, however, may form part of your account and usage data. For example, we may record which MatchScan you requested, its configuration and the selections returned to you.

Match'dUP uses computational models and automated analysis to evaluate football information and generate MatchScan intelligence.

The system may process factors such as available football statistics, form, standings, market information, player availability and other relevant data to calculate or rank potential selections.

These outputs are football intelligence and analytical estimates. They do not determine your legal rights, eligibility for essential services, employment, creditworthiness or other matters producing similarly significant legal effects.

You remain responsible for deciding whether and how to use information provided by Match'dUP.

Match'dUP does not guarantee the outcome of any football match or accumulator.

Payments may be processed by Stripe or another payment provider identified at checkout.

Where a payment provider processes payment-card information, it acts in accordance with its own privacy and security practices.

Match'dUP may receive information from the payment provider necessary to operate your account, such as:

• customer identifier;
• transaction identifier;
• subscription identifier;
• product purchased;
• payment status;
• subscription status;
• billing period; and
• refund or dispute status.

We do not sell payment information.

When Stripe is introduced into production, the precise wording of this section should be checked against the final Stripe integration and contractual setup.

We use third-party service providers to operate Match'dUP.

Depending on the final production configuration, these may include providers of:

• application hosting;
• cloud infrastructure;
• database services;
• authentication;
• payment processing;
• email delivery;
• football data;
• analytics;
• error monitoring;
• security;
• customer support; and
• other technical infrastructure.

These providers may process personal information where necessary to provide their services to us.

Where a provider acts as our processor, we require appropriate contractual and data-protection safeguards. UK GDPR processor contracts have prescribed requirements, including confidentiality, security, subprocessor controls and assistance with data-subject rights.

We do not sell your personal information to data brokers or third parties.

Before launch, this section should be reconciled against Match'dUP's final production vendor/subprocessor register.

Some of our service providers may process information outside the United Kingdom.

Where personal information is transferred internationally and applicable law requires safeguards, we will use an appropriate transfer mechanism, which may include:

• an applicable adequacy decision or regulation;
• recognised contractual safeguards;
• the UK International Data Transfer Agreement;
• the UK Addendum to approved Standard Contractual Clauses; or
• another legally permitted transfer mechanism.

Where required, we will also assess whether additional safeguards are appropriate.

International transfers and applicable safeguards are part of the information organisations need to consider in their data-protection documentation.

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, security and dispute-resolution requirements.

Retention periods may differ according to the type of information.

For example:

• Account information may be retained while your account remains active and for an appropriate period following account closure.
• MatchScan information may be retained as part of your account history until deleted in accordance with our retention practices or following a valid deletion request, subject to legal exceptions.
• Payment and transaction records may be retained for the period required by tax, accounting and other applicable laws.
• Security and technical logs may be retained for a limited period appropriate to security, fraud prevention, troubleshooting and operational requirements.
• Support communications may be retained for as long as reasonably necessary to resolve the issue and maintain appropriate business records.

Where information no longer needs to identify you, we may delete it or anonymise it.

The final production retention schedule should be documented internally and reflected here with more specific periods once operational requirements are fixed. The ICO expressly expects privacy notices to explain retention periods or the criteria used to determine them.

Our public website and application may use cookies and similar technologies.

Some cookies are strictly necessary for functions such as:

• authentication;
• security;
• maintaining sessions;
• remembering essential settings; and
• providing requested functionality.

We may also use optional technologies for purposes such as analytics or performance measurement.

Where consent is legally required for non-essential cookies or similar technologies, those technologies will not be used until the required consent has been obtained.

Users should be able to reject non-essential cookies as well as accept them.

Further information is available in our Cookie Policy and through our cookie preference interface.

The ICO states that users need to be informed about cookies and that non-essential cookies generally require agreement before use.

Where permitted by law, we may send information about Match'dUP products, features or services.

Where consent is required, we will obtain it before sending such communications.

You can unsubscribe from marketing communications using the unsubscribe mechanism provided in the communication or by contacting us.

Service communications concerning matters such as account security, purchases, subscriptions or material service changes are not necessarily marketing and may continue where required to operate your account.

We use technical and organisational measures designed to protect personal information against:

• unauthorised access;
• unauthorised disclosure;
• accidental loss;
• alteration;
• destruction; and
• misuse.

Measures may include, where appropriate:

• authentication controls;
• role-based access controls;
• restricted administrative access;
• database security policies;
• encryption in transit;
• secure management of credentials and secrets;
• logging;
• monitoring; and
• separation of privileged infrastructure.

No internet-connected system can be guaranteed to be completely secure. Users should therefore use a strong, unique password and protect access to their Match'dUP account.

Depending on applicable law and the circumstances of the processing, you may have rights including the right to:

• obtain information about how your personal data is used;
• request access to your personal data;
• request correction of inaccurate or incomplete personal data;
• request deletion of personal data;
• request restriction of processing;
• object to certain processing;
• receive certain personal data in a portable format;
• withdraw consent where processing relies on consent; and
• raise concerns about certain forms of automated decision-making where applicable.

These rights are subject to legal conditions and exceptions and do not necessarily apply in every circumstance.

To exercise a privacy right, contact: contact@matchd-up.com

We may need to verify your identity before completing a request.

We will respond within the period required by applicable law.

You may request deletion of your Match'dUP account and associated personal information.

Where a valid deletion request is received, we will delete or anonymise relevant personal information unless retention is necessary for reasons including:

• legal obligations;
• tax or accounting requirements;
• fraud prevention;
• security;
• resolving disputes;
• enforcing agreements; or
• establishing, exercising or defending legal claims.

Deleting your account may permanently remove access to MatchScan history and other account information.

Any treatment of unused purchased MatchScan credits following account closure should be governed by the Match'dUP Terms of Service and applicable consumer law.

Match'dUP is intended for adults aged 18 and over.

We do not knowingly provide Match'dUP accounts to children.

If we become aware that personal information has been collected from a person under 18 contrary to our requirements, we may close the account and take appropriate steps to delete the information, subject to legal retention requirements.

If you believe a person under 18 has created a Match'dUP account, contact us at: contact@matchd-up.com

Match'dUP provides football intelligence and analytical tools. It does not guarantee betting outcomes.

Match'dUP does not accept wagers, hold betting stakes or pay gambling winnings.

Users are responsible for any decision to place a wager with a third-party gambling operator.

You should only gamble where lawful, must comply with the applicable age requirements in your jurisdiction, and should never gamble more than you can afford to lose.

We may disclose personal information where reasonably necessary to:

• comply with applicable law;
• comply with a court order or lawful governmental request;
• investigate suspected fraud or unlawful activity;
• protect the security of Match'dUP;
• protect the rights or safety of users or others;
• enforce our contractual rights; or
• establish, exercise or defend legal claims.

Where legally permitted and appropriate, we will seek to ensure requests for information are valid and proportionate.

If Match'dUP or the business operating it is involved in a merger, acquisition, restructuring, financing, sale of assets or similar corporate transaction, personal information may be disclosed to appropriate advisers and prospective or actual parties to the transaction where reasonably necessary.

Any subsequent processing of personal information remains subject to applicable data-protection law.

This provision does not permit us to simply sell users' personal information as a standalone commercial database.

Match'dUP may contain links to websites or services operated by third parties.

We are not responsible for the privacy practices of independent third parties.

If you leave Match'dUP to use another website, bookmaker or service, that organisation's privacy policy applies to its processing of your information.

We may update this Privacy Policy where our services, technology, suppliers or legal obligations change.

When we make material changes, we will take reasonable steps to bring them to users' attention where required.

The current version will always display its Last updated date.

If you have concerns about how we use your personal information, please contact us first at: contact@matchd-up.com

If you are in the United Kingdom, you also have the right to complain to the Information Commissioner's Office (ICO).

Information Commissioner's Office

If you live outside the UK, you may also have the right to contact the data-protection authority responsible for your jurisdiction.

For questions about this Privacy Policy, our use of personal information or your data-protection rights, contact:

© 2026 Match'dUP. All rights reserved.