Privacy Policy
Last updated:
1. Introduction
KASTLR Competitive ("we", "us", "our") operates kastlr.co.za. We are committed to protecting the personal information of all individuals who participate in or interact with our league. This policy explains what information we collect, why we collect it, and how it is used and protected.
This policy complies with the Protection of Personal Information Act 4 of 2013 (POPIA) of South Africa. By participating in KASTLR Competitive you acknowledge that you have read and understood this policy.
2. Responsible Party
The Responsible Party for your personal information is:
3. What We Collect
We collect only the minimum information necessary to operate the league.
Information you provide
- Steam ID (64-bit) — used as your primary identity in the league
- Display name (in-game name) — displayed publicly on the website
- Country — for residency eligibility verification
- FACEIT ID — optional, for anti-cheat verification purposes
- Contact email address — for match communications and administrative notifications (stored securely, not displayed publicly)
Information generated by participation
- Match statistics — kills, deaths, assists, ratings and related performance data
- Match results and standings history
- Roster history and team affiliations
What we do not collect
- Real names (except where required for prize identity verification, handled off-platform)
- Date of birth
- Physical address
- Identity documents
- Financial information
4. Why We Collect It
- To verify player eligibility to participate in the league
- To track and display match results, standings and statistics
- To communicate match schedules, results and administrative notices
- To maintain accurate historical records as required for Valve Tournament Licence compliance
- To investigate integrity complaints and enforce league rules
5. Consent
By registering to participate in KASTLR Competitive, you provide explicit consent for us to collect and process the information described in this policy for the purposes stated. Consent is recorded at the time of registration with a timestamp and the version of this policy in effect at that time.
You may withdraw consent at any time by contacting us. Withdrawal of consent means you will be unable to participate in the league, as the information is necessary to operate your participation.
6. How We Use Your Information
- Steam ID, display name and match statistics are displayed publicly on kastlr.co.za as part of normal league operations. This is a condition of participation.
- Contact email addresses are used for direct communications only and are never displayed publicly or shared with third parties.
- All data is stored on secured servers. Database access is restricted to authorised administrators only.
7. Data Retention
We retain your data for as long as it is necessary for the purposes described above.
- Match results and statistics are retained permanently as part of the league's historical record.
- Contact information is retained for the duration of your active participation and for up to 24 months thereafter for administrative and integrity purposes.
- Upon a verified deletion request, we will remove contact information and any non-public personal data within 30 business days, subject to any legal or contractual obligations.
8. Your Rights Under POPIA
You have the following rights regarding your personal information:
- Right of access — You may request a copy of the personal information we hold about you.
- Right to correction — You may request that inaccurate information be corrected.
- Right to deletion — You may request that your personal information be deleted, subject to our legal and operational obligations.
- Right to object — You may object to processing of your personal information in certain circumstances.
To exercise any of these rights, contact us at comp@kastlr.com. We will respond within 30 business days.
9. Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, alteration or disclosure. These measures include encrypted database storage, restricted API access, role-based access controls and secure transmission protocols.
In the event of a data breach that poses a risk to your rights and freedoms, we will notify the Information Regulator and affected individuals as required by POPIA.
10. Third Parties
We do not sell, rent or trade your personal information to third parties. Limited data sharing occurs only in the following circumstances:
- Steam API — Steam IDs are verified via Valve's public Steam Web API. No personal data is shared with Valve beyond the Steam ID lookup.
- Infrastructure providers — Data is stored using Supabase database services. Their privacy practices are governed by their own policies.
- Legal requirements — We may disclose information if required to do so by law or in response to a valid legal request.
11. Contact
For any questions, concerns or requests relating to this privacy policy or the handling of your personal information, contact us at:
comp@kastlr.com
You also have the right to lodge a complaint with the Information Regulator of South Africa: www.justice.gov.za/inforeg