Privacy Policy

SportsInc (the "Sports portal" operated by Revor Sports) · www.revorsports.com
Last updated: 30 August 2026

Revor Sports ("we", "us", "our") operates the SportsInc sports portal at www.revorsports.com (the "Portal"). This Privacy Policy explains what information we collect, how we use it, the parties to whom it is disclosed, the methods of disclosure, and the security practices we apply to safeguard it. It applies to players, parents and guardians, club staff, volunteers and officials using the Portal.

1. Information we collect

• Account and registration information: name, date of birth, gender, nationality, residential address, suburb, postcode, state, country, email address and username.
• Player and sport records: player profiles and codes, club memberships and join requests, team rosters, tournament entries, contest registrations, results and rankings.
• Age verification: most players verify their date of birth online through Didit — the identity document goes directly to Didit's secure flow and is never stored on our servers; we keep only the verification outcome (status, document type and the date of birth read from the document). If no passport or ID is available, a birth certificate (or similar document) may be uploaded to the Portal instead and is visible only to the super admin while it is reviewed.
• Guardian relationships: for juniors under 16, the link between the child's profile and the parent/guardian's account.
• Membership and payment records: membership status and expiry, payment history (amounts, dates, payment references and invoice details). We do not collect or store card numbers, CVCs or bank account details.
• Technical information: standard server logs (IP address, browser type, pages visited) used for security, troubleshooting and performance.

2. How we use the information

• To operate the Portal: account creation, player registration, annual memberships, club management, tournament setup, entries, payments, scheduling and results.
• To process payments and issue membership/renewal records through our payment provider.
• To communicate with you: membership confirmations, expiry and renewal notices, entry confirmations, club and tournament notifications, and service emails.
• To keep the Portal secure: verify webhook payments, detect fraud or misuse, and prevent unauthorised access.
• To comply with legal obligations and to enforce our terms.

3. Payments and who processes them

All card payments are handled by Stripe through its hosted Checkout pages. When you pay, you are redirected to Stripe, which collects and processes your payment details under Stripe's Privacy Policy. Stripe is certified to the PCI DSS; we receive from Stripe only the payment outcome, a payment reference, and (for memberships) the subscription and invoice details needed to maintain your membership and records.

Some clubs choose to receive tournament payments on their own Stripe account (via Stripe Connect). In that case the payment is processed by that club's Stripe account and the club is the merchant of record; we never handle or store the payment details.

4. Parties to whom we disclose information, and the method of disclosure

Recipient	What is disclosed	Method
Clubs (your home club; tournament host clubs)	Membership and join requests; player profiles needed for entries; tournament entries, fees and payment status; results	Disclosed only within the Portal to authorised club admins (role-based access); notifications and emails
Stripe (payment processor)	Payment amount, currency, customer email/name, payment outcome and references	Encrypted API calls and signed webhooks (card data is entered by you directly on Stripe's hosted pages)
Host clubs using their own Stripe account	Payment details for tournament entries paid to that club's Stripe account	Via Stripe Connect on the club's own Stripe account
Service providers	Hosting and email delivery (limited data needed to operate the Portal)	Contractual arrangements; encrypted transmission
Authorities	Personal information only when required by law, court order or to protect rights/safety	As required by applicable law

We do not sell, rent or trade personal information. Any other disclosure happens only with your consent.

5. Security practices

• Encryption in transit: all Portal traffic is served over HTTPS; data exchanged with Stripe is encrypted (TLS).
• No card data on our servers: payments use Stripe's hosted Checkout, so card numbers never touch our infrastructure (PCI DSS scope avoided by design).
• Encryption at rest: sensitive configuration (payment keys, webhook secrets) is encrypted at rest.
• Payment verification: webhook signatures are verified before any payment state is changed.
• Age documents: online (Didit) checks never store the identity document on our servers; uploaded birth certificates are accessible only to the super admin while under review.
• Access control: role-based access (club admins, coaches, officials) limits who can view player, club and tournament data; guardians can only manage their own children's profiles.
• Data minimisation: we collect only what the Portal needs to function.
• No security system is impenetrable — we review our practices regularly and take reasonable steps to protect your information, but we cannot guarantee absolute security.

6. Retention

We keep account, membership and payment records while they are needed to operate the Portal and to meet legal obligations (including record-keeping requirements). Online age-verification documents are held by our verification provider (Didit) under its own data-retention settings; we retain only the verification outcome on our side. You may request deletion of your data as described below; some records may be retained where the law requires it.

7. Your rights

• Access: request a copy of the personal information we hold about you.
• Correction: update or correct inaccurate information (most details can be edited directly in the Portal).
• Deletion: request removal of your account and personal information.
• Withdraw consent where processing is based on consent.
• Complaints: for individuals in Australia, you may complain to the Office of the Australian Information Commissioner (oaic.gov.au) if you are not satisfied with our response.

To exercise any of these rights, contact us at privacy@revorsports.com and we will respond within a reasonable time. Documents held by Didit for online verification can be deleted on request, and uploaded birth certificates are deleted when your account is removed.

8. Children's privacy

Juniors (under 16) are registered by a parent or guardian, who manages the child's profile, memberships and entries through their own account. Parents/guardians may exercise all of the rights above on behalf of their child. If you believe a child's information was provided without parental consent, contact us and we will remove it.

9. Cookies and analytics

The Portal uses only essential session cookies required to keep you logged in. We do not use advertising or third-party tracking cookies on the Portal.

10. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest version. Significant changes will be notified through the Portal or by email.

11. Contact

Questions about this Privacy Policy or your personal information: privacy@revorsports.com