Matches › Privacy policy (GDPR)

Privacy policy

Under the General Data Protection Regulation (EU) 2016/679 (GDPR) and Greek law 4624/2019. Last updated: 2026-10-20.

1. Controller

MyGoal90. Contact details: see Terms of use.

2. What we collect and why

  • Without an account: an anonymous visit counter (page, language, source — no cookies, no IP kept permanently), purely for operational statistics. Legal basis: legitimate interest.
  • Google Analytics: only if you accept it in the consent banner (anonymised IP). Legal basis: consent, which you can withdraw at any time on the Cookies page.
  • Account (optional): username, e-mail and/or phone, password (stored hashed), sign-up date, last login, favourites, notes, contest predictions. Legal basis: performance of a contract (the service you asked for).
  • E-mail notifications (optional): your e-mail, only after double opt-in, for the daily tips. Legal basis: consent; one-click unsubscribe in every message.
  • Contests: your predictions, your score and, if you win, the contact details you give us for the prize. Legal basis: contract and legal obligation (tax, where applicable).
  • Subscription (when enabled): payments are handled by Stripe; we keep only the subscription status, never card details.
  • Server logs: technical data (IP, time, page, browser) for security and debugging, for up to 30 days. Legal basis: legitimate interest.

3. Who receives it

We do not sell or rent personal data. Processors acting for us under GDPR contracts: the server hosting provider (EU), the e-mail delivery provider (for notifications), Google (Analytics, only with consent; YouTube for videos in “nocookie” mode), Stripe (payments). The Telegram, Viber and Facebook channels run under their own terms — there we receive no personal data beyond what the platform shows publicly. Transfers outside the EEA only with GDPR safeguards (standard contractual clauses / EU-US Data Privacy Framework).

4. How long

  • Account: while active and up to 12 months after the last login, or until you ask for deletion.
  • Notification e-mail: until you unsubscribe.
  • Contest: the leaderboard is kept anonymously (username) for history; prize details up to 5 years where the law requires.
  • Logs: up to 30 days.

5. Your rights

You have the right of access, rectification, erasure (“right to be forgotten”), restriction, portability and objection, and to withdraw consent at any time without affecting earlier processing. You can delete your account yourself from your account page or write to us; we answer within 30 days. We may ask you to confirm your identity. You may also complain to the Hellenic Data Protection Authority or your local supervisory authority.

6. Security

https only, hashed passwords, API keys only on the server, restricted access, regular backups. No method is 100% secure; if a breach affecting you occurs, we will inform you as the law requires.

7. Minors

The site is not intended for persons under 18, and its betting-related sections not for persons under 21. We do not knowingly collect minors' data; if we learn of it, we delete it.

8. Changes

This policy may be updated; the date at the top shows the current version. Important changes will be announced on the site.