Privacy Policy
This policy explains how the Amateur Football League collects, uses and protects personal data when you use its website and electronic services.
Scope and data controller
This policy applies to the website, electronic services and digital platforms operated by the Amateur Football League. The League is the controller of personal data collected through these channels and processes it in accordance with the Saudi Personal Data Protection Law, its Implementing Regulations and other applicable laws in the Kingdom of Saudi Arabia.
Data we may collect
- Identity and membership data, including name, national ID or residency number, membership number, date of birth and nationality.
- Contact details, including mobile number, email address and postal address.
- Account data, sporting or administrative capacity, team or regional association and account permissions.
- Documents, requests and bank details voluntarily submitted where required for a service.
- Usage and technical records, including browser and device type, IP address, access times and security logs.
- Correspondence, support requests and feedback sent to us.
How we collect data
We collect information you provide when registering, updating an account, uploading documents, submitting requests or contacting us. We may also collect limited technical data automatically to operate, secure and improve the website. Data may be received from authorised entities where necessary to provide a service or verify information.
Purposes of processing
- Creating accounts, verifying identity and membership, and managing user permissions.
- Providing sporting and administrative services and processing requests, approvals and documents.
- Communicating about accounts, services, notifications and technical support.
- Protecting the platform, preventing fraud or misuse and verifying regulatory compliance.
- Improving service quality, measuring performance and producing statistics using minimised or anonymised data where appropriate.
- Meeting legal requirements, performing contractual obligations or pursuing legitimate interests where permitted by law.
Lawful basis and consent
We process data with the data subject’s consent where consent is required, to perform a requested service, to comply with a legal obligation, or under another lawful basis permitted by the Personal Data Protection Law. Consent may be withdrawn where processing relies on it, without affecting earlier lawful processing or processing required by law.
Sharing and disclosure
The League does not sell personal data. We may share only the minimum necessary data with service providers acting on our behalf, authorised competent entities, or where required by law or a valid order. Recipients must protect the data and use it only for the stated purpose.
Retention and disposal
Data is retained in appropriate technical environments only for as long as needed for the purpose of collection or as required by applicable laws and records-retention policies. It is then securely deleted or destroyed unless a lawful basis requires longer retention.
Transfers outside Saudi Arabia
Where a service requires personal data to be transferred outside Saudi Arabia, the transfer will be limited to what is necessary and conducted in accordance with the Personal Data Protection Law and its applicable transfer requirements.
Data security
The League applies appropriate organisational and technical measures against unauthorised access, use, alteration, disclosure or loss. Users must keep their credentials confidential and report suspected unauthorised use. No electronic transmission or storage method can be guaranteed to be completely secure.
Cookies and analytics
The website may use cookies and similar technologies to operate sessions, remember language preferences, improve security and measure performance. Some cookies can be controlled through browser settings; disabling essential cookies may affect website functions.
Your data rights
Subject to applicable legal controls and exceptions, you may be entitled to know why and on what basis your data is collected, access it, obtain a copy, request correction, completion or updating, request destruction where no lawful need remains, and withdraw consent where consent is the basis of processing.
Requests may be submitted through the contact channel below. We may request information to verify your identity before acting on a request.
Children’s data
Where a service concerns a person below the legal age, the parent or legal representative must provide the required consent and information. Such data is processed only as necessary to provide the service and protect the child’s interests.
External links
The website may contain links to third-party websites or services not operated by the League. Their own privacy policies apply, and the League is not responsible for their content or practices.
Enquiries and complaints
For questions about this policy or to exercise your personal-data rights, contact info@afl.sa. If you are dissatisfied with how a request is handled, you may submit a complaint to the competent authority under the procedures applicable in Saudi Arabia.
Policy updates
We may update this policy when services or legal requirements change. Updates will be published on this page with a revised date. Continued use after an update takes effect constitutes acceptance to the extent permitted by law.