Privacy Policy

1. Who processes your data.

Portbox Co., Ltd. (CEO: Jung Hosu) (Republic of Korea · business registration no. 740-86-02866 · 635 Dongtan-daero, Hwaseong-si, Gyeonggi-do 18468, Republic of Korea) processes personal data for betsgo-global. Contact: [email protected].

2. What we collect.

• Account: email address, display name, profile picture (optional), language, time zone and notification settings; if you use Google sign-in, the account identifier and email provided by Google. If you use Sign in with Apple: the account identifier, the email address (or, if you choose to hide it, the relay address created by Apple), your name (provided once, at first sign-in) and the token used to disconnect the account from Apple when you delete it.
• User content: posts, photos, predictions, reactions and reports.
• Consent records: version and time of your acceptance of the Terms, this Policy and cookie choices.
• Date of birth · sign-in codes: The date of birth you enter when you sign up is used only to check that you are an adult and is not stored. We record only the result (whether you are an adult, when it was checked, and the country used as the basis). Sign-in codes are sent to the email address you enter and are kept only as an encrypted value for 10 minutes.
• Device and access data: browser type, device type, language, time zone, a hashed (masked) IP address, and access times. If you use the app: app version, operating system version and device model.
• Usage data: which screens and posts you view, predictions placed, edited or cancelled, search terms (kept within the Service; only the search category and result count go to analytics), and whether you use the installed app or the iPhone or Android app.
• Notification (push) tokens: if you allow notifications, the token used to deliver them to that device or browser.
• Advertising data: advertising cookies, the device advertising identifier, and your advertising consent choices. Advertising cookies and identifiers are collected by Google and its advertising partners, which serve the ads; the Operator does not link them to your account.

3. Why we collect it and on what basis.

• Creating your account, signing you in and keeping it secure (performance of contract).
• Settling predictions and showing performance and rankings (performance of contract).
• Handling reports, enforcing the rules and preventing abuse (legitimate interest).
• Statistics to improve the Service (consent where required by law; otherwise legitimate interest).
• Compliance with legal obligations.
• Serving ads, measuring their performance and preventing invalid clicks (for personalised ads: consent where required by law; otherwise legitimate interest).
• Sending notifications (only if you have allowed them on your device; consent).
• Translating member posts and replies into eight languages, and AI bot replies: post text is sent to external AI services (section 5) only if the author has allowed external AI processing (consent). You can change this at any time at sign-up, when writing, or in account settings; once it is off, nothing new is sent. Translating bot posts is performance of contract. Please do not put personal data in post text.

4. How long we keep it.

• Account data: until you delete your account; deletion is carried out after a 7-day grace period.
• Published predictions and settlement records: retained for statistics with the link to the author removed (no account, name or picture attached).
• Access logs: 30 days. Report and sanction records: 90 days (longer while a dispute is open).
• Consent records: retained after account deletion with the link to the account removed.
• Notification tokens: until you turn notifications off, sign out or delete your account. Tokens that fail delivery are deleted.
• Sign in with Apple tokens: revoked with Apple and deleted when you delete your account.
• What account deletion removes: account data, posts and photos, post edit history, personal data within post text, translations, search index entries, caches and notifications. Copies may remain in backups for the backup retention period (190 days); if a backup is restored, deletions are re-applied.

5. Who we share it with (including international transfers).

Authorities or courts where the law requires. We do not sell personal data for money. However, passing advertising cookies and advertising identifiers to Google for personalised advertising may be treated as a "sale" or "sharing" under the laws of some US states; you can opt out as described in section 8.

6. International transfers.

The Operator is located in the Republic of Korea and the servers are located in the United States. Your personal data is stored and processed abroad by the recipients, in the countries, for the data, purposes and on the bases listed in section 5, for the periods in section 4. Server storage is essential to providing the Service, so if you do not agree to that transfer you cannot use the Service. Analytics (GA4) and personalised advertising are optional and you can use the Service without them (if you decline personalised advertising, non-personalised ads are shown). Questions go to [email protected].

7. Cookies.

Essential cookies (sign-in session, security, language, time zone) are required for the Service to work. Analytics cookies (GA4) are used only after consent where the law requires it. You can delete or block cookies in your browser; some features may then stop working. Consent prompts are shown based on the country you connect from, and you can withdraw consent at any time in Settings; on withdrawal the analytics cookies are deleted and sending stops. Advertising cookies (Google AdSense and its advertising partners) are used to show ads, count them and prevent invalid clicks. Google and its advertising partners may use cookies to select ads based on your visits to this Service and other sites; such personalised advertising takes place only after consent where the law requires it. In the European Economic Area, the United Kingdom and Switzerland your choice is collected with a consent tool certified by Google. You can opt out of personalised advertising by visiting Google's Ads Settings (https://www.google.com/settings/ads), and out of other vendors' use of cookies for personalised advertising at www.aboutads.info. In the iPhone app we do not use the device advertising identifier for personalised advertising; only non-personalised ads are shown.

8. Your rights.

You may at any time access and correct your data, delete your account, download your posts, predictions and settings as a file, and withdraw consent. Your rights: access, rectification, deletion, download (portability), withdrawal of consent and restriction of processing. Requests made in the settings screen or to [email protected] are handled within the period set by the applicable law (one month in the EU and UK, 15 days in Brazil, 10 days in the Republic of Korea, 30 days elsewhere); if we need longer, we tell you why. You may also lodge a complaint with the data protection authority of your country. You can change your analytics and advertising consent at any time in Settings or through the "Privacy choices" link at the bottom of the screen. If you live in certain US states (such as California), you have the right to opt out of the "sale" or "sharing" of personal data and of personalised advertising, and you will not be discriminated against for exercising your rights. Requests made through the "Privacy choices" link or to [email protected] are handled within the period set by the law of your state. You can delete your account on the website or in the app. If the account was created with Sign in with Apple, we also revoke its sign-in connection (token) with Apple.

Deleting your account

9. Children.

Only adults under the law of their country of residence may register; minors are not permitted to sign up. If we learn that we hold personal data of a minor, we delete the account and the data.

10. Security.

Passwords are stored in a non-reversible form, transfers are encrypted, and administrator access is controlled by two-factor authentication and access logs.

11. Changes.

Changes to this Policy are announced within the Service at least 7 days before they take effect. Material changes require renewed consent.

12. Business transfer or incorporation.

If the Operator transfers all or part of the business to another party, merges, or converts into a company, personal data may be transferred to the recipient. Before the transfer we will tell you, by in-service notification and to your registered email address, the recipient's name and contact details, the time of the transfer and what you can do if you do not want your data transferred (delete your account); for users we cannot reach, the notice is posted on the Service for at least 30 days. The recipient may use the personal data only for the purposes that applied at the time of the transfer.