SportTicketRoof Privacy Policy

1. Introduction

Welcome to SportTicketRoof.

SportTicketRoof is a cloud-based event ticketing platform owned and operated by TMVIC Group Ltd (“TMVIC”, “we”, “our”, or “us”). The Platform enables sports federations and authorised event organisers to manage events, sell tickets, validate entry, issue digital tickets and accreditations, and access event reporting.

SportTicketRoof is not an open marketplace. Members of the public cannot create user accounts. All Federation accounts, authorised administrators, point-of-sale (POS) agent accounts and platform administrator accounts are created and managed by TMVIC.

Members of the public simply purchase tickets through the SportTicketRoof website or through an authorised POS agent without creating an account.

For attendee information relating to a particular event, the Federation organising that event is generally the Data Controller, while TMVIC acts as the Data Processor by providing and operating the Platform on the Federation’s behalf.

For Platform administration, Federation administrator accounts, POS agent accounts, security, customer support and Platform operations, TMVIC acts as the Data Controller.

This Privacy Policy explains how we collect, use, store, share and protect personal information when you use SportTicketRoof.

2. Who This Policy Applies To

This Privacy Policy applies to:

• Ticket buyers and event attendees.
• Federation administrators.
• Platform administrators.
• Authorised POS agents.
• Visitors to the SportTicketRoof website.

3. Information We Collect

Depending on how you use SportTicketRoof, we may collect:

Information you provide

• Full name
• Email address
• Telephone number
• Country
• Ticket purchase information
• Event registrations
• Accreditation information
• Communications sent through the Platform

For Federation administrators and authorised POS agents we may also collect:

• Username
• Encrypted password
• User role
• Associated Federation
• Account activity
• Identity verification information during onboarding where required.

Information generated when you use the Platform

We may collect:

• Ticket purchase history
• QR code validation records
• Entry and attendance records
• Transaction references
• Login history
• Security and audit logs
• Browser type
• Device type
• Operating system
• Language preferences
• Basic technical information necessary to operate the Platform

4. Information We Do Not Collect

SportTicketRoof does not collect:

• Payment card numbers
• Card security codes (CVV/CVC)
• Full banking information

Payments are processed securely by independent payment providers. We only receive transaction references and payment status confirmations.

We do not use your IP address to determine which country or events you may view. Event availability is determined by Platform configuration and your selected country.

5. How We Use Your Information

We use personal information to:

• Process ticket purchases.
• Deliver digital tickets and accreditations.
• Validate entry at events.
• Manage Federation workspaces.
• Operate and maintain the Platform.
• Provide customer support.
• Prevent fraud and misuse.
• Detect suspicious or duplicate ticket activity.
• Maintain security.
• Generate event reporting and analytics.
• Meet legal, accounting and regulatory obligations.
• Communicate important service and security updates.

We collect only the information reasonably necessary to provide our services.

6. Legal Basis for Processing

Where applicable, we process personal information based on:

• Performance of a contract.
• Legitimate business interests.
• Compliance with legal obligations.
• Your consent, where required.

Where local privacy laws apply, including the GDPR, UK GDPR, Nigeria NDPA, South Africa POPIA, Kenya Data Protection Act, Ghana Data Protection Act and similar legislation, we rely on the lawful bases recognised under those laws.

7. Sharing Your Information

We only share personal information where necessary.

This may include:

• The Federation responsible for the event you are attending.
• Payment service providers.
• Hosting and cloud infrastructure providers.
• Professional advisers and auditors.
• Government authorities, courts or regulators where legally required.
• Organisations involved in a merger, acquisition or corporate restructuring, subject to appropriate safeguards.

We never sell your personal information.

8. Offline Ticket Sales

Where an authorised POS agent sells tickets without internet connectivity, only the minimum information required to complete the sale is collected.

Once internet access is restored, the information is securely synchronised with SportTicketRoof and the physical collection record must then be securely destroyed.

Any loss or suspected loss of offline records must be reported immediately to TMVIC for investigation.

9. Cookies

SportTicketRoof uses cookies and similar technologies to operate the Platform.

Strictly necessary cookies are used to enable essential features such as ticket purchases, authentication and security.

Optional cookies are used only with your consent. You can manage your preferences through our Cookie Settings at any time.

10. International Transfers

SportTicketRoof is hosted using infrastructure located within the European Union or other approved hosting locations selected by TMVIC.

Where personal information is transferred internationally, we apply appropriate legal safeguards, including Standard Contractual Clauses, adequacy decisions or equivalent protections recognised under applicable law.

11. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes described in this Privacy Policy or as required by law.

Certain information may remain in secure encrypted backups for a limited period before permanent deletion.

12. Your Privacy Rights

Subject to applicable law, you may have the right to:

• Access your personal information.
• Correct inaccurate information.
• Request deletion of your information.
• Restrict or object to certain processing.
• Receive a copy of your information where applicable.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with your local data protection authority.

13. Security

We use appropriate administrative, technical and organisational security measures to protect personal information.

These include role-based access controls, encrypted communications where supported, password hashing, audit logging, access monitoring and regular security updates.

Although we work hard to protect your information, no electronic system can guarantee absolute security.

14. Children

SportTicketRoof is not intended for children under the age of 16 without the involvement of a parent, guardian or authorised organisation where permitted by law.

15. Automated Decision-Making

SportTicketRoof does not make decisions that produce legal or similarly significant effects solely through automated processing.

16. Changes to This Policy

We may update this Privacy Policy from time to time.

Any material changes will be published on the Platform and, where appropriate, communicated by email.

The “Last Updated” date indicates the latest revision.

17. Contact Us

TMVIC Group Ltd

Privacy Office

Email: privacy@sportticketroof.com

Privacy Lead: Martin Fuabah

Email: dpo@sportticketroof.com

If you have questions about this Privacy Policy or how your personal information is handled, please contact our Privacy Office.