Privacy Policy / นโยบายความเป็นส่วนตัว
Version 2.1 — Effective date: 17 October 2026
This Privacy Policy explains how Saibots Pte. Ltd. ("we", "us", "CourtRival") collects, uses, shares and protects personal data when you use CourtRival (courtrival.com and its related services), including court listings, accounts, coach profiles and tournament registration. It is written to meet Thailand's Personal Data Protection Act B.E. 2562 (2019) ("Thai PDPA") and Singapore's Personal Data Protection Act 2012 ("Singapore PDPA").
สรุปโดยย่อ
Saibots Pte. Ltd. (สิงคโปร์) เป็นผู้ควบคุมข้อมูลส่วนบุคคลของ CourtRival บริษัท Hubql Thailand Co., Ltd. พัฒนาและดูแลระบบให้เราในฐานะผู้ให้บริการ ข้อมูลของท่านจัดเก็บที่สิงคโปร์ เราไม่เก็บข้อมูลอ่อนไหว (เช่น ข้อมูลสุขภาพ) และไม่ขายข้อมูลของท่าน คุกกี้วิเคราะห์และโฆษณาจะทำงานหลังจากท่านยินยอมเท่านั้น ท่านสามารถขอเข้าถึง แก้ไข หรือลบข้อมูลได้ที่ privacy@courtrival.com
1. Who we are / ผู้ควบคุมข้อมูลส่วนบุคคล
Saibots Pte. Ltd., a company incorporated in Singapore, operates CourtRival and is the data controller for the personal data described in this policy.
Hubql Thailand Co., Ltd. develops, operates and supports the platform for us. It acts as our service provider (data processor): it handles personal data only on our instructions and only as needed for that work, for example to fix a problem or answer a support request.
Contact for privacy questions, data requests and our Data Protection Officer (Singapore PDPA): privacy@courtrival.com
Tournament organisers. Clubs and organisers use CourtRival to run their own tournaments. For a tournament you register for, the organiser decides which details its form asks for and uses them to run its event, and it is responsible for that use. We host the registration for the organiser and handle the data as described here.
2. Personal data we collect / ข้อมูลส่วนบุคคลที่เราเก็บรวบรวม
2.1 Account and sign-in
You can sign up with an email address and password, or with LINE. With email, we store your email address and a securely hashed password. With LINE, we receive your LINE user ID, display name, profile picture and email address (if you allow LINE to share it). If you turn on two-step sign-in, we store the authenticator settings.
2.2 Player profile
Details you choose to add: name, nickname, Thai name, photo, short bio, city and district, phone number, LINE ID, date of birth, sports, playing level and ratings (for example NTRP, UTR, WTN or a local ranking), and whether you want to play or teach. Players you connect with (friends, and players who join the same open match) can see your profile details so you can arrange to play.
2.3 Coach profiles
If you create a coach profile, its published details are public: name, photo, bio, city and district, sports, specialisations, certifications, hourly rate and verification status. The email and phone number you give for the coach profile are for us to contact you and are not shown on the profile.
2.4 Tournament registration
You register with your CourtRival account. The organiser chooses which fields its form uses. Always: first and last name (English), nickname, gender, phone number and category. Depending on the tournament: Thai name, email, LINE ID, date of birth, emergency contact (name, phone, relationship), preferred competition date, whether you are a coach, and how you heard about the tournament. If you are a minor (section 8): your parent's or guardian's name, phone and relationship to you, and their consent.
Payment slips. If the tournament has an entry fee, you pay the organiser directly by bank transfer and upload the transfer slip. CourtRival does not process payments. Slips are kept in private storage, shown only to you and the organiser through short-lived links, and deleted 90 days after the payment is approved.
We do not collect sensitive personal data (such as health information, including food allergies, religion or biometric data) in tournament registration or anywhere else on CourtRival.
2.5 Court reports and photo submissions
If you send us details or corrections about a court, we collect your email address and message, and any photos you attach (up to six), together with the version of the photo licence you accepted, when you accepted it, and the optional name you give for photo credit. Photos are stored privately until our team reviews them: declined photos are deleted, and approved photos are published on the court listing (with your credit name, if given) under the photo submission terms.
2.6 Lead and contact forms
If you ask us to contact you (for example to join CourtRival as a venue or organiser, or to request a demo), we collect your email address, the page you used, how you found us (referrer and campaign tags), and a record of your consent: the exact consent text, the policy version, the time, your IP address and browser.
2.7 Venue contacts and promotion
When we talk to venues about their listings or about promotion on CourtRival, our team records the venue contact's name, role, how to reach them (LINE, phone or email), their interest in promotion, budget notes and follow-up notes. Only our editors and administrators can see these records.
2.8 Audit log of editor changes
When an editor, venue staff member or administrator changes a court, coach or venue record, we log who made the change, when, and the record before and after. Only our administrators can read the log. It helps us keep listings accurate and undo mistakes.
2.9 Usage, device and security data
When you visit CourtRival, our hosting provider processes your IP address, browser details and the pages you request, and keeps short-term request logs to run and secure the service. We record how you first reached the site (referrer and campaign tags) for the current browser session and send it with any form you submit. Analytics and advertising tools run as described in section 9 and on our Cookie Policy.
2.10 Court availability
We collect court availability from venues' public booking pages and booking systems so we can show free court times. We do not collect or keep the names or details of the people who booked.
3. Why we use it and our legal bases / วัตถุประสงค์และฐานทางกฎหมาย
| Data | Purpose | Legal basis |
|---|---|---|
| Account and profile | Providing your account, sign-in and player features | Contract |
| Coach profile | Publishing your profile so players can find you | Contract |
| Tournament registration and payment slip | Registering you, letting the organiser verify payment and run the event, showing names and results in the public draw | Contract |
| Emergency contact | Safety at the event | Contract; vital interests in an emergency |
| Date of birth | Age categories and identifying minors (section 8) | Contract; legal obligation |
| Court reports and photos | Correcting listings, replying to you, publishing approved photos | Consent (photo licence); legitimate interests |
| Lead and contact forms | Contacting you about CourtRival | Consent |
| Venue contacts | Managing our relationship with venues and promotion offers | Legitimate interests |
| Audit log | Accountability and correcting mistakes in listings | Legitimate interests |
| Security data and request logs | Running, securing and protecting the service from abuse | Legitimate interests |
| Analytics with cookies and advertising | Understanding use of the site; showing ads | Consent |
| Cookieless analytics after you decline | Counting visits without identifying you | Legitimate interests |
Under the Singapore PDPA, we rely on your consent (including deemed consent when you give us data for a purpose, such as a registration), and on the legitimate interests and business improvement exceptions for the matching purposes above.
4. Who we share it with / การเปิดเผยข้อมูล
- Tournament organisers receive the registration details and payment slip for their own tournament.
- The public sees names and results in tournament draws, published coach profiles, and approved photos with the credit name you gave.
- Other players you connect with see your profile details (section 2.2).
- Service providers listed below, who process data for us under contract.
- Authorities, where the law requires it.
We do not sell your personal data.
Services we use
| Service | Data | Purpose | Where | When |
|---|---|---|---|---|
| Supabase | Accounts, profiles, tournament registrations, payment slips, coach and venue records, the audit log; sends account emails (sign-up confirmation, password reset) | Database, sign-in and file storage | Singapore (AWS ap-southeast-1) | Always |
| Cloudflare | IP address, browser details and the pages you request; court report photos; approved photos | Hosting (Workers), content delivery and security, image hosting (Cloudflare Images), private storage of submitted photos until review (R2), database connection pooling (Hyperdrive), short-lived upload tickets (KV), short-term request logs | Cloudflare's global network | Always |
| Cloudflare Turnstile | Browser and device signals, IP address | Stopping spam and bots on forms | Cloudflare's global network | On the court report, join and demo request forms |
| LINE (LY Corporation) | LINE user ID, display name, profile picture and email (if you allow it) | Sign in with LINE | Japan | Only if you choose LINE sign-in |
| PostHog (EU cloud) | Pages viewed, clicks, device and browser type, approximate location, errors in the page | Usage analytics and error tracking | European Union (Germany) | Nothing before you choose. With cookies only after you accept; if you decline, counted without cookies (see section 9) |
| Ahrefs Web Analytics | Pages viewed, referrer, device and browser type, approximate location | Traffic analytics | Ahrefs (Singapore) and its cloud providers | Only after you accept cookies |
| Google AdSense | Cookies and device identifiers, IP address, pages viewed | Showing advertising | Google (USA and worldwide) | Only after you accept cookies |
| Mapbox | IP address, browser details, the map area shown; on the full map, anonymous usage data | Map images on court pages and the interactive map | USA | When a page shows a map |
| Esri (ArcGIS) | IP address, browser details, the map area shown | Map tiles on the home page map | USA | When the home page map loads |
| n8n (n8n Cloud) | Lead forms: email, the page and how you found us, and your consent record (text, time, IP address, browser). Court reports: your email, message, court and photo references | Receiving form submissions and passing them to our team | European Union (Germany) | When you submit a form |
| Slack | Court report notifications, including the reporter's email and message | Notifying our team so we can review and reply | USA | When you send a court report |
| Hubql Thailand Co., Ltd. | Any of the above, when needed for its work | Develops, operates and supports CourtRival for Saibots (our service provider) | Thailand | As needed for development, operations and support |
5. Transfers outside Thailand / การโอนข้อมูลไปต่างประเทศ
Our database and files are stored in Singapore (Supabase, AWS ap-southeast-1). Our hosting provider, Cloudflare, serves the site from its global network, so requests may be handled in the data centre nearest to you. Some services in section 4 are in the European Union, Japan or the USA. We use providers that commit to protecting personal data under their contracts with us (such as data processing terms), as the Thai PDPA and Singapore PDPA require.
6. How long we keep it / ระยะเวลาในการเก็บรักษา
| Data | Retention |
|---|---|
| Account and profile | Until you delete your account |
| Coach profile | Until you remove it or delete your account |
| Tournament registrations | 3 years after the event (records and disputes), then your name is replaced with "Deleted player". If you delete your account, registrations for tournaments that haven't started are deleted; for the others we delete your contact details, date of birth, emergency contact and payment slip at once and keep only your name and results in the draw until then |
| Payment slips | Deleted 90 days after the payment is approved |
| Court report photos | Declined photos deleted at review; approved photos kept while published |
| Court reports and lead form submissions | As long as needed to handle them, or until you withdraw consent |
| Consent records | Kept as evidence of consent (including a parent's or guardian's consent), also after withdrawal or account deletion |
| Venue contacts | While we work with the venue, or until you ask us to delete them |
| Audit log | While the record exists; entries made by you are removed when your account is deleted |
| Request logs | A few days |
7. Your rights / สิทธิของท่าน
Under the Thai PDPA you have the right to: access your data and get a copy; ask how we obtained data you did not give us; receive your data in a machine-readable format or have it sent to another organisation; object to processing; have your data deleted or anonymised; restrict its use; have it corrected; and withdraw consent at any time (this does not affect processing before the withdrawal). You may complain to Thailand's Personal Data Protection Committee (PDPC).
Under the Singapore PDPA you have the right to access your data and learn how it has been used or disclosed in the past year, to have it corrected, and to withdraw consent. You may complain to Singapore's Personal Data Protection Commission.
To use any of these rights, including deleting your account, email privacy@courtrival.com. We may need to confirm your identity, and we respond within 30 days. We may keep some data where the law requires or allows it (for example tournament records, section 6).
8. Children and minors / ผู้เยาว์
CourtRival is meant for adults and for minors with their parent or guardian's involvement. If you are a minor (under 20 in Thailand), your parent or guardian must agree before you create an account or register for a tournament. When a tournament asks for your date of birth and you are under 20, the registration form asks for your parent's or guardian's name, phone and relationship and for their consent; the organiser receives these details and we keep a record of the consent. If you believe a minor has given us data without that consent, contact us and we will delete it.
9. Cookies and analytics / คุกกี้
We use cookies and browser storage that the site needs to work (for example to keep you signed in), and, only after you accept, analytics cookies (PostHog), Ahrefs Web Analytics and Google AdSense advertising. Before you choose, none of these run. If you decline, PostHog still counts page views in cookieless mode: nothing is stored on your device and it cannot recognise you from one day to the next. You can change your choice at any time. Details of every cookie and service are on our Cookie Policy.
10. Security / ความปลอดภัย
- Encryption in transit (TLS) and at rest
- Access controls (row-level security) on every database table
- Private storage with short-lived links for payment slips and photos awaiting review
- Staff access limited to people who need it, with an audit log of changes
11. Changes to this policy / การเปลี่ยนแปลงนโยบาย
We may update this policy. The version and effective date are at the top of this page. If a change is significant, we will tell you on the site or by email, and ask for your consent again where the law requires it.
12. Contact / ติดต่อเรา
Saibots Pte. Ltd. (Singapore), operator of CourtRival
Privacy, data requests and Data Protection Officer: privacy@courtrival.com