Privacy at Deuce Ladder

A Deuce ladder has a public standings page, readable by anyone with no account and indexed by search engines. That is a platform commitment stated on the about page.

Public on that page: your display name, rung, level band and current status, plus your played matches, wins and losses, walkovers given and received, and the date of your last played match.

Your results appear in the recent results list: date, scoreline, who won, and rung movement.

Never public: your email address, phone number, street address, exact location, availability, date of birth, and your guardian's contact details if you are a minor.

Signup shows your standings row as it will appear, names what is public, and offers the search opt-out in plain language on the screen. A privacy commitment a player only discovers by reading a policy page is a defense, not a commitment.

Your display name is yours to choose and change. A shortened form is offered at signup, for example a first name plus a surname initial.

No payment card numbers. Card data goes to the payment processor and never touches our systems.

No identity documents. No passport, no driver's license, no membership card image.

No health data: not injury detail, not fitness data, nothing from a wearable. A player declaring an absence never has to say why under rule 11.1, which is a privacy decision as much as a courtesy.

No precise location tracking. City-level detection for finding ladders, and nothing that follows you.

We do not sell, rent or license your personal data. Not to advertisers, not to equipment brands, not to coaches, and not to your own club.

An opponent sees what the standings page shows, plus the match thread you share.

Contact runs through an in-app message thread. Your email address and phone number are not shown to the other player, whatever their status in the ladder.

If you give an opponent your number in the thread, that is your decision. We do not put it there for you.

For players under 18, an in-app thread is the only channel and it cannot be switched to direct contact. See section 6.

Your organizer's published contact address is a Deuce-routed relay by default, not their personal email.

Any player may opt out of appearing in search engines, at any time, for any reason. It is a single setting.

It sets noindex on your player record inside that ladder, and replaces your display name in the public standings with an initial plus a surname.

Your row stays in the standings. Removing it would break the rung numbering for every other player and make the standings wrong for everyone. That is the honest limit of this setting.

Your results still appear, attributed to the shortened name.

, on the signup screen and in the joiner email. That is a build requirement, because an opt-out nobody knows about is not a choice.

Search engines take time to drop a page they have already crawled. We request removal and cannot promise a date.

A player under 18 may join only where the organizer has enabled minors for that ladder. It is off by default under rule 1.5 in the rules.

Where enabled, a guardian email address is required at signup. The guardian receives a notice that the account exists, what is public, and how to close it.

Contact between a minor and an opponent is limited to the in-app thread. A phone number is never shown on either side, and no setting reveals one.

A guardian may request access, correction, the search opt-out or deletion by writing to hello@deuceladder.com.

We do not knowingly hold data for a player under 14. An account found to belong to one is closed and its personal data deleted.

We do not market to minors and never send one a promotional email. Notifications about their own matches only.

Your organizer sees your display name, your administration email, your level input, your full match record, your match threads in their ladder, and your absence dates, all of which they need to run the ladder and resolve a dispute under section 18 of the rules.

Your organizer does not see your payment details, your data from other ladders, or your activity elsewhere on the site.

A club can export its own ladder's roster and full match history at any time without asking us, per the clubs page. If a club leaves, it leaves with its data.

Every organizer adjustment, removal and dispute resolution is written to that ladder's public activity log with the organizer's name and stated reason, under rules 2.5, 15.5 and 18.4. Transparency runs in both directions.

A club that runs a ladder is a separate controller of the data it exports. What it then does with your email address is governed by its own policy, not ours. Ask them.

You can delete your account. Your profile, email address, level inputs, absence records and match threads go.

What cannot vanish is the result of a match somebody else played. Their record, their rung and their season depend on it, and deleting the match would rewrite their history without their consent.

So your played matches remain with your name replaced by a non-identifying label, for example "former player". The scoreline and date stay; nothing in the row identifies you.

That is the only place a deletion request does not produce total erasure, and we name it in plain sight. If it is not acceptable to you, the right time to know is before you join.

If you want your name off a public page faster than a full deletion allows, the search opt-out in section 5 takes effect immediately on our side.

Deletion requests go through account settings, or to hello@deuceladder.com if you cannot reach them. We act within {{DELETION_SLA_DAYS}} days and tell you when it is done.

Deuce is English-first and global at launch, so your data may be processed in a country other than the one you live in. Primary hosting is in {{DATA_REGION}}. The controller, Beyond Border Group Ltd, is in Hong Kong SAR, so staff access to your data happens from Hong Kong wherever the hosting sits. Hong Kong has no adequacy decision from the European Commission, and 12.2 is how that gap is covered.

Where data moves out of the UK, the EEA or Switzerland, the transfer runs on {{TRANSFER_MECHANISM}}, for example standard contractual clauses with the additional measures the relevant regulator expects.

You can ask us for a copy of the transfer terms that apply to you.

{{GDPR_SECTION}}. Covers controller identity, the legal bases in section 13, the retention schedule in section 8, the transfers in section 12, the right to complain to a supervisory authority, and the representative and DPO contacts if we are required to appoint them.

{{UK_GDPR_SECTION}}. Substantially the same obligations as 14.1, with the ICO as supervisory authority and a separate transfer mechanism. Relevant at launch: a material share of club ladder activity is in Britain.

{{CCPA_SECTION}}. Covers the categories collected and disclosed, the rights to know, delete and correct, and the right to opt out of sale or sharing. We do not sell or share personal information as those terms are defined, per 3.5, and the notice must still say so in the required form.

{{OTHER_JURISDICTIONS_SECTION}}. Added as launch markets are confirmed. We will not list every privacy statute in the world to look thorough.

The controller is Beyond Border Group Ltd, a Hong Kong company, so the Personal Data (Privacy) Ordinance (Cap. 486) applies to us directly and not only to visitors in Hong Kong. Under it you may ask what data we hold about you and ask us to correct it, at hello@deuceladder.com, and the statutory deadline for answering a data access request is 40 days. We answer sooner. We do not use your personal data in direct marketing, so the PDPO consent rules on marketing have nothing to bite on here, and section 3.5 says we do not transfer your data to anyone for gain. A complaint that we have not fixed goes to the Office of the Privacy Commissioner for Personal Data. This clause is numbered last because clause numbers on this page never move, not because Hong Kong is an afterthought.

When this policy changes materially, we email every account holder before the change takes effect and say what changed in one sentence at the top of the page.

Every version is numbered and dated, and previous versions stay available.

We will not change this policy to permit selling your data. If that ever becomes the plan, the honest thing is a new company, not a version number.