GDPR & Data Rights

Our Commitment

SAGUPA, operated by OfCourse Training Center, is committed to protecting the personal data of all users in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and aligned with the principles of the EU General Data Protection Regulation (GDPR) for any users accessing our Platform from applicable jurisdictions.

Your Rights

Under applicable data protection laws, you have the following rights:

• Right to Access — You can request a copy of the personal data we hold about you.
• Right to Rectification — You can request correction of inaccurate or incomplete data.
• Right to Erasure — You can request deletion of your personal data ("right to be forgotten").
• Right to Restrict Processing — You can request that we limit how we use your data.
• Right to Data Portability — You can request your data in a structured, machine-readable format.
• Right to Object — You can object to processing of your data for certain purposes.
• Right to Withdraw Consent — Where processing is based on consent, you may withdraw it at any time.

Lawful Basis for Processing

We process your personal data on the following legal bases:

• Consent — When you create a player profile or register for tournaments.
• Contract Performance — To facilitate tournament registration and participation.
• Legitimate Interest — To maintain platform security and improve our services.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Tournament results and match history may be retained for statistical and historical purposes in anonymized form.

International Transfers

Your data may be processed on servers located outside your country of residence (including cloud infrastructure providers). We ensure appropriate safeguards are in place for any international data transfers.

Exercising Your Rights

To exercise any of your data rights, you may contact us through the Platform or submit a written request during tournament events. We will respond to valid requests within 30 days. We may need to verify your identity before processing your request.

Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines or, for EU residents, your local data protection supervisory authority.