Privacy Policy

Overview

Tiki Taka ("we", "us", "the platform") is a football matchday platform that provides live scores, AI-powered match predictions, a Telegram bot, league hubs, news aggregation, and a prediction game. This privacy policy explains what data we collect, how we use it, and what rights you have. We are committed to being transparent about our data practices and protecting your privacy.

What data do we collect?

Account data: If you sign in through Telegram, we store your Telegram user ID, display name, and profile photo URL. We do not access your Telegram messages, contacts, or any other Telegram data beyond what is provided during the login flow.

Usage data: We collect anonymized analytics about page views, feature usage, and navigation patterns using Google Tag Manager and Vercel Analytics. This data helps us understand which features are most valuable and where to improve the product. We do not use this data to build individual user profiles for advertising purposes.

Prediction game data: If you participate in the prediction game, we store your score picks, results, streaks, and leaderboard position. This data is tied to your Telegram account and is visible on the public leaderboard.

Device and browser data: Standard HTTP request information such as IP address, browser type, device type, and referring URL may be collected by our infrastructure providers (Vercel, Cloudflare) for security, performance, and abuse prevention purposes.

How do we use your data?

We use your data to operate and improve the platform. Specifically: to authenticate your identity when you sign in, to save your prediction game progress and display leaderboard rankings, to deliver relevant football content and score alerts through the Telegram bot, to analyze aggregate usage patterns and improve product quality, and to detect and prevent abuse or unauthorized access. We do not sell your data to third parties. We do not use your data for targeted advertising. We do not share your personal information with other users beyond what is visible on the public leaderboard (display name and prediction record).

Third-party services

The platform relies on several external providers to deliver its functionality. Each provider has its own privacy policy governing how data is processed:

• API-Football — Provides real-time match data, standings, and statistics. No user data is shared with API-Football.
• BytePlus ARK — Powers the AI prediction engine and article generation. Match data (not user data) is sent to generate predictions and articles.
• Telegram Bot API — Handles authentication and bot messaging. Subject to Telegram's privacy policy.
• Vercel — Hosts the web application. Subject to Vercel's privacy policy.
• Cloudflare — Provides CDN and security services. Subject to Cloudflare's privacy policy.
• Supabase — Hosts the application database. Subject to Supabase's privacy policy.
• Google Tag Manager — Manages analytics scripts. Subject to Google's privacy policy.

Cookies and tracking

Tiki Taka uses essential cookies for session management and authentication. Analytics cookies are used through Google Tag Manager to understand aggregate usage patterns. We do not use advertising cookies or third-party tracking pixels. Cloudflare may set security-related cookies to protect against malicious traffic.

Data retention

Account data is retained as long as your account is active. Prediction game data is retained indefinitely to maintain historical leaderboard records. Analytics data is retained in aggregate form and is not linked to individual users after processing. If you delete your account, your personal data will be removed within 30 days. Anonymized aggregate data may be retained for product improvement purposes.

Your rights

You have the right to access, correct, or delete your personal data at any time. You can request a copy of the data we hold about you, ask us to correct inaccurate information, or request deletion of your account and associated data. For users in Southeast Asia, we comply with applicable data protection regulations including Malaysia's PDPA, Thailand's PDPA, and Indonesia's PDP Law. To exercise any of these rights, contact us at the email address listed on our contact page.

Children's privacy

Tiki Taka is not directed at children under the age of 13. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a child under 13, we will take steps to delete that data promptly.

Changes to this policy

We may update this privacy policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically to stay informed about how we protect your data.

Contact

If you have any questions about this privacy policy or our data practices, please contact us through the details on our contact page.