Privacy Policy

MMA Reign, operated from Denmark, acts as the data controller for personal information processed through this platform.

For privacy questions or requests, email contact@mmareign.com or use the Contact page.

We collect only the data needed to operate the platform:

• Account data: email address, username, full name (if provided), avatar.
• Gameplay and prize data: predictions, draft picks, tournament results, points, XP, wallet balances, prize ledger entries, and payout status.
• Subscription and payment records: Stripe customer and subscription identifiers, billing status, paid period, and limited payment-method details supplied by Stripe. MMAReign does not receive or store full card numbers.
• User content: forum posts, replies, votes, chat messages.
• Technical data: IP address, browser type, device information, session identifiers (used for security and analytics).
• Cookies: see our Cookie Policy.

We process your data under the following GDPR legal bases:

• Contract (Art. 6(1)(b)): to create and maintain your account and provide the service.
• Legitimate interest (Art. 6(1)(f)): to secure the platform, prevent fraud, and improve features.
• Consent (Art. 6(1)(a)): for non-essential cookies, marketing emails, and newsletters.
• Legal obligation (Art. 6(1)(c)): where required by law.

• Operate, maintain, and improve the platform.
• Track gameplay, scoring, leaderboards, tournaments, wallets, and prize eligibility.
• Process Premium subscriptions, confirm entitlement, manage billing support, and prevent payment fraud.
• Send transactional emails (account, password reset, event reminders, and billing-related notices).
• Send newsletters and marketing communications — only with your explicit consent.
• Detect and prevent fraud, abuse, and security incidents.

We do not sell your personal data. We share data only with trusted processors needed to run the service:

• Base44 — hosting, authentication, backend infrastructure, and platform email delivery.
• Stripe — Premium checkout, recurring billing, payment security, and the customer portal.
• Google — optional OAuth sign-in.
• Third-party MMA data providers — only public fight and fighter data, not account or payment data.

We use appropriate data-processing terms and safeguards where required by applicable data-protection law.

Some processors may be located outside the EU/EEA. When this happens, we rely on EU-approved safeguards such as Standard Contractual Clauses (SCCs).

• Account data: kept while your account is active and then deleted or anonymized through the account-deletion process, subject to legal exceptions.
• Gameplay history: identifying data is removed or anonymized where needed to preserve leaderboard and competition integrity.
• Payment, subscription, wallet, prize, and transaction records: retained as necessary for accounting, fraud prevention, disputes, and other legal obligations.
• Technical and security logs: generally retained for a limited operational period unless needed to investigate abuse or incidents.
• Marketing consent and unsubscribe records: retained as needed to honor your current choice and demonstrate consent history.

Account deletion may therefore preserve limited anonymized gameplay or legally required financial records, but not more personal data than necessary.

You have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data ("right to be forgotten").
• Restrict or object to processing.
• Data portability — receive a copy of your data.
• Withdraw consent at any time.
• Lodge a complaint with your local Data Protection Authority (in Denmark: Datatilsynet — datatilsynet.dk).

You can exercise most rights directly from your Settings page, or by contacting us.

We apply industry-standard technical and organizational measures — encryption in transit, access controls, and regular reviews — to protect your data. No system is 100% secure; please notify us immediately if you suspect a breach.

The platform is not intended for users under 13 years old. We do not knowingly collect data from children under 13.

We may update this Privacy Policy. Significant changes will be announced on the platform. The "last updated" date at the top reflects the most recent revision.