Privacy

Bootbag is operated by Sapien Interactive LTD, a company registered in the UK. We are the “data controller” for the personal information described in this policy, meaning we decide how and why it’s used.

Account and profile information

When you sign up, we collect the basics needed to create your Predictor Profile: a username/user handle, email address, password (stored securely, never in plain text), and your Profile Team kit selection.

Date of birth

We ask for your date of birth at sign-up. This isn’t optional — it’s how we make sure the game is age-appropriate for everyone, and how we identify accounts belonging to Predictors under 18 so we can apply extra protections (see Section 8) and gate off any 18+ content, odds, or affiliate marketing behind a parental wall.

Gameplay data

This includes the picks you make each game week, your Freezes, your Slots (spent/unspent), your scores, standings, and any competitions or leagues you enter (including the Invincible competition). Your individual picks are private — other Predictors can only ever see your points and goal data, never which teams you’ve selected.

Marketing preferences and communications

If you opt in to hear from us — newsletters, weekly standings updates, competition announcements, product news — we collect your email address and your marketing preferences for this purpose.

Technical and device information

Standard technical data collected automatically when you use the app: device type, operating system, app version, crash logs, and general usage/performance data. This helps us keep Bootbag working properly on both Android and Apple devices.

Payment or prize-related information

If you win a prize, we need enough information to verify your identity and pay you — for example, your name and bank details for a bank transfer. We only collect this when it’s actually needed to pay out a prize.

We do not knowingly collect any more information than we need to run the game, verify prizes, and keep accounts secure.

We use your information to:

• Create and run your Predictor Profile and Team
• Record your picks, Freezes, Slots, and scores each Round
• Run competitions (like Invincible), verify winners, and pay out prizes
• Show standings and leaderboards (points and goal data only — never your private picks)
• Keep the app secure and prevent unfair play, multiple entries, or “gaming” the system
• Send you service messages (deadline reminders, competition results, account notices)
• Send you marketing communications, but only if you’ve opted in
• Understand how Bootbag is used so we can fix bugs and improve the game
• Meet our legal obligations, including age-verification and gambling-adjacent advertising rules

We keep different types of data in different, purpose-built systems:

• Customer and gameplay data — your account details, Predictor Profile, picks, scores, and competition entries — is stored securely in Google Firebase.
• Marketing data — your email address and communication preferences, used only for newsletters and marketing messages — is stored in SendGrid.

Both providers are reputable, industry-standard platforms with their own strong security and data protection standards. We only share the minimum data each platform needs to do its job — SendGrid, for example, never sees your picks or gameplay data.

Under UK GDPR, we rely on the following legal bases:

• Contract — to create your account and let you play the game, enter competitions, and receive prizes, we need to process your account and gameplay data.
• Consent — for marketing communications, and for processing a younger Predictor’s data with parental/guardian consent (see Section 8).
• Legitimate interests — to keep Bootbag secure, prevent fraud or multiple entries, and understand how the app is used.
• Legal obligation — where we need to verify age, prevent underage access to 18+ content, or meet regulatory requirements.

We don’t sell your personal information. We only share it:

• With Google Firebase and SendGrid, as described above, strictly to run the app and send communications
• With payment or banking partners, where necessary to pay out a prize
• With regulators or authorities, where required by law
• If Bootbag is ever involved in a merger, acquisition, or sale of assets, in which case your information may transfer as part of that deal, under the same protections described here

We never share your individual picks, private profile details, or the fact you’re a younger Predictor, with other users.

Bootbag is built to be enjoyed by football fans of all ages, and we take extra care with younger Predictors.

• Anyone under 18 must have their parent or guardian’s consent to sign up, and it’s the parent or guardian’s responsibility to make sure sign-up is completed correctly.
• We ask for date of birth at sign-up specifically so we can identify under-18 accounts and gate off anything not suitable for them — including betting odds and affiliate marketing aimed at over-18s — behind a parental wall.
• We collect the minimum information necessary from younger Predictors, and we do not knowingly use a younger Predictor’s data for third-party advertising.
• Parents or guardians can contact us at any time (see Section 12) to review, correct, or delete their child’s information.

In plain terms, for our younger players:

Bootbag is a game about picking football teams and seeing how they do. To play, we need to know your date of birth so we know you’re old enough for certain things, and your parent or guardian needs to say it’s okay for you to sign up. We only keep what we need to run the game — your picks, your score, and your username. We don’t show anyone else which teams you’ve picked. If you or your parent ever want to know what we’ve got stored about you, or want it deleted, just ask us.

The Bootbag app may use small amounts of local storage and similar technologies to keep you logged in, remember your preferences, and understand basic app usage. We don’t use these to build advertising profiles of you.

• Account and gameplay data is kept for as long as your account is active, plus a reasonable period afterwards to resolve any disputes, honour prize claims, or meet legal requirements.
• Marketing data is kept until you unsubscribe or ask us to delete it.
• Season-based gameplay data (Slots, standings) resets each new season as described in the Game Rules, but historical records may be retained for competition integrity and record-keeping.

If you close your account, we’ll delete or anonymise your personal information within a reasonable period, except where we’re required to keep it (for example, prize or tax records).

Under UK GDPR, you (or a parent/guardian acting on behalf of a younger Predictor) have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your information (“right to be forgotten”), subject to legal exceptions
• Restrict or object to certain processing, including marketing
• Withdraw consent at any time, where we rely on consent
• Data portability — receive your data in a portable format
• Complain to the UK Information Commissioner’s Office (ICO) if you think we’ve mishandled your data

To exercise any of these rights, contact us using the details in Section 12.

We use industry-standard security measures — including secure storage through Google Firebase and SendGrid — to protect your information from unauthorised access, loss, or misuse. No system is 100% secure, but we work to keep Bootbag’s protections up to date.

If you have questions about this policy, want to exercise your rights, or want to raise a concern about a younger Predictor’s account, contact us at:

support@bootbag.co Sapien Interactive LTD New Derwent House, 69–73 Theobalds Road, London, WC1X 8TA

We may update this policy from time to time — for example, as Bootbag adds new leagues, features, or competitions. We’ll post any changes here with an updated “Last updated” date, and where changes are significant, we’ll let you know in the app.

Betting is 18+ begambleaware.org. Please gamble responsibly.