1. Data Controller
The controller responsible for processing personal data is:
Privacy requests may be sent to the contact email listed above.
2. Personal Data We Collect
Depending on how a user interacts with ODA, we may process the following information:
Account information
- Display name, player name, email address and country
- Password in encrypted or hashed form
- Account ID, profile information, creation date and status
Tournament information
- Tournament registrations, category, match results and placements
- Wins, runner-up finishes, semi-final finishes
- Ranking points and prize money won
- Season Ranking and Order of Merit history
- Disqualification or restriction status and tournament platform used
Payment information
- Entry-fee payment status, payment reference and transaction ID
- Payment provider, payment date, amount paid
- Refund information, tournament credit
- Billing or transaction information supplied by the payment provider
Prize payout information
- PayPal email address or Revolut details
- Bank or payout account information where required
- Payout amount, status and transaction reference
- Tax or identity information where legally required
Support and reporting information
- Messages sent to ODA, support requests and player reports
- Screenshots, screen recordings and evidence of suspected cheating
- Communication with tournament administrators
- Appeal or complaint information
Technical information
- IP address, device type, browser and login records
- Session data, security logs and website activity
- Error logs and cookie/analytics information where enabled
Fair Play information
- Match reports, camera-related reports and scoring disputes
- Suspected cheating reports, sandbagging reviews
- Category eligibility reviews and disciplinary decisions
- Supporting evidence
ODA does not intentionally collect unnecessary sensitive personal data. Players should not send sensitive information unless it is specifically required for a legal, payment, security or dispute-related purpose.
3. Public Player Information
Certain player information is displayed publicly because it is necessary to operate tournaments and rankings.
Public information may include:
- Player or display name
- Tournament registrations, results, wins, runner-up and semi-final finishes
- Ranking position, ranking points and number of tournaments played
- Prize money won and completed tournament history
- Season Ranking and Order of Merit positions
- Public disciplinary status where appropriate and lawful
Real names are not required to be displayed publicly unless the player uses their real name as their chosen player or display name. Private contact information must never be displayed publicly.
Do not publicly display:
- Email addresses, PayPal email addresses
- Bank details, Revolut details, home addresses
- Payment references, IP addresses
- Private support messages, identity documents
4. Why We Use Personal Data
ODA processes personal data for the following purposes:
- Creating and managing player accounts
- Registering players for tournaments and confirming participation
- Processing entry-fee payments and handling refunds or tournament credits
- Operating tournament cards and join links
- Managing rankings and results, publishing player names and tournament placements
- Calculating Season Prize Pools and the Order of Merit
- Paying tournament and season prizes and preventing duplicate payments
- Providing customer support and investigating cheating or rule violations
- Enforcing Tournament Rules, protecting players and the platform
- Preventing fraud and abuse, maintaining security logs
- Meeting tax, accounting and legal obligations
- Improving the website, fixing technical errors and sending essential communications
5. Legal Bases
We process personal data where one or more of the following legal bases apply:
Performance of a contract
Article 6(1)(b) GDPR: information necessary to manage your requested account, competition registration, membership billing, verified prize payment or trophy delivery. Information that is not necessary for the service is not made mandatory merely by including it in a form.
Legal obligations
Article 6(1)(c) GDPR: records required by applicable accounting, taxation or other specific legal duties, including lawful requests from competent authorities. Not every security or integrity activity is a legal obligation; the applicable purpose and legal basis must be identified.
Legitimate interests
Article 6(1)(f) GDPR: proportionate security, fraud prevention, competition integrity, dispute investigation and transparent sporting records, after balancing those interests against the affected person's rights. You may object on grounds relating to your particular situation; ODA must assess the objection rather than treat every historical record as automatically exempt.
Consent
Article 6(1)(a) GDPR: optional activities that require your consent, such as applicable marketing or non-essential tracking. Consent must be specific and withdrawable; accepting competition rules is not consent to unrelated marketing.
Legal claims
Processing necessary to establish, exercise or defend legal claims. Where processing is based on consent, the user may withdraw that consent at any time. Withdrawal does not affect processing that occurred before withdrawal.
6. Player Names, Results & Rankings
ODA is a competitive tournament platform. Player names, results and rankings may therefore be published on the website and within ODA community channels.
- Tournament participant lists, winners and finalists
- Season Ranking and Order of Merit tables
- Tournament history, prize winners and ranking records
This publication is necessary to provide transparent tournament results and rankings. Players should choose a public display name they are comfortable sharing. Where technically possible, users may request a change to their future display name. Historical tournament records may continue to show the name used when the event took place where this is necessary to preserve accurate sporting records.
7. Payment Processing
Payments may be processed through external payment providers such as:
- PayPal
- Revolut
- Card payment providers
- Other payment services clearly shown at checkout
The provider identified in your actual checkout processes the payment under its own privacy notice. ODA receives the transaction information needed to verify payment, administer renewals, resolve payment issues and keep financial records; it does not need your online-banking password or full card credentials. Matchplay PayPal references, billing status and paid-through dates are private account information.
ODA may receive:
- Payer name and email address
- Payment status, amount and currency
- Transaction reference and refund status
This information is used to confirm tournament entry, prevent duplicate payments, process refunds and maintain financial records.
8. Prize Payouts
To pay tournament or season prizes, ODA may request payout information. This may include:
- PayPal email address or Revolut account details
- Bank details where necessary
- Account-holder name, payout reference and country
- Additional information required by law or the payment provider
Users are responsible for providing accurate payout information. ODA may retain payout records where required for accounting, tax, fraud prevention or legal purposes.
9. Camera & Match Monitoring
ODA tournaments may require players to use a camera. The camera is used to:
- Show the dartboard and verify thrown darts
- Support score verification
- Investigate active reports and protect tournament integrity
ODA may spectate matches where technically possible. ODA does not guarantee continuous recording or monitoring of every match.
Video or image evidence may be processed when:
- A player submits a report
- An administrator reviews a dispute
- Cheating or misconduct is suspected
- Evidence is required to enforce tournament rules
10. Fair Play Reports
Players may submit evidence concerning suspected cheating, false scoring or misconduct. Reports may contain:
- Player names and match details
- Screenshots, video recordings and messages
- Scores and tournament information
This information is used only for:
- Reviewing the report and making tournament decisions
- Enforcing rules and handling appeals
- Preventing repeated abuse
- Defending legal claims
Access must be limited to authorised ODA administrators and service providers who need the information.
11. Service Providers & Recipients
ODA may share personal data with service providers where necessary to operate the platform. These may include:
- Website hosting, database and authentication providers
- Payment, email and customer-support providers
- Analytics and security providers
- Tournament platforms such as DartCounter or Nakka – N01 Online
- Professional advisers, accountants and legal advisers
- Government or regulatory authorities where legally required
Recipients receive only information needed for their role. Base44 supplies this application's hosting and platform services; PayPal handles the PayPal payments used for Matchplay. Gameplay and community providers receive information when you use their services. Trophy suppliers and carriers receive necessary delivery details when ODA arranges a confirmed award. The operator must verify and maintain the complete recipient and processing-location information; this notice does not imply that every example provider listed above is connected.
12. International Data Transfers
Some service providers may process information outside Austria or outside the European Economic Area. Where required, ODA will use appropriate safeguards, such as:
- An adequacy decision
- Standard Contractual Clauses
- Other legally recognised transfer safeguards
The actual processing countries, recipients and applicable safeguards still require operator verification. Do not infer an EEA-only hosting location or a particular transfer mechanism from this general description. Contact ODA for information about the safeguards applicable to your data and, where required, how to obtain a copy.
13. Data Retention
ODA retains personal data only for as long as necessary for the relevant purpose or legal requirement.
Account data
Stored while the account remains active and for a reasonable period after closure where required for disputes, fraud prevention or legal obligations.
Tournament results and rankings
Accurate results may be retained as sporting history where there is a continuing lawful purpose. ODA considers whether display-name changes, restricted publication or anonymisation can preserve the record with less impact on the individual. A historical result does not justify indefinite retention of unrelated private evidence or addresses.
Payment and payout records
Retained for the period required by Austrian accounting, tax and legal obligations.
Support requests
Retained for as long as necessary to resolve the request and handle related disputes.
Fair Play reports and disciplinary information
Retained for as long as necessary to investigate the incident, enforce restrictions, prevent repeated abuse or defend claims.
Technical and security logs
Retained for a limited security period unless longer retention is required for an investigation. Specific retention periods will be added once ODA’s accounting, hosting, analytics and support systems have been confirmed.
14. Cookies & Analytics
ODA may use essential cookies required for:
- Login, account security and session management
- Payment flow, user preferences and website functionality
Non-essential analytics or marketing cookies must not be activated before the required consent has been obtained. If analytics, advertising or tracking tools are added, a separate Cookie Policy and consent settings will be created.
15. Data Security
ODA uses appropriate organisational and technical measures to protect personal data. These may include:
- Access controls and secure authentication
- Password hashing and encrypted connections
- Administrator permissions and database security rules
- Backups, security logging and limited access to payment/payout information
No internet service can guarantee absolute security. Users must keep their login information confidential and notify ODA if they suspect unauthorised account access.
16. User Rights
Subject to applicable law, users may have the right to:
- Request access to their personal data
- Request correction of inaccurate data
- Request deletion of data
- Request restriction of processing
- Object to certain processing
- Request data portability
- Withdraw consent
- Submit a complaint to a data-protection authority
ODA assesses each request against the actual purpose and legal basis. A legal retention requirement may prevent immediate erasure of specific financial records, but does not justify retaining every account field. Restrictions, historical interests and legal claims require a reasoned assessment. Responses follow GDPR deadlines, normally within one month, with any lawful extension and its reasons communicated to you.
ODA may request information needed to verify the identity of the requester.
17. Complaints
Users may submit a complaint to the competent supervisory authority. For an Austrian controller, the relevant authority is generally:
18. Children & Age Requirements
Paid ODA competitions and Matchplay membership are intended for people aged at least 18, or a higher applicable age of majority. Parental consent alone does not override this admission rule. If ODA becomes aware of an underage account or participation, it reviews the matter, restricts inappropriate access and assesses the data that must be deleted or lawfully retained. Any separate future service intended for minors would require a specifically disclosed framework covering:
- Parent or guardian consent
- Age verification
- Additional payout information and safeguards
ODA does not collect more information from minors than necessary. The age rules on the Privacy Policy, Terms of Service and Tournament Rules must be consistent.
19. Account Deletion
Users may request account deletion through account settings, support or the privacy contact email.
Deleting an account does not necessarily remove:
- Completed tournament results and rankings
- Financial records and disciplinary records
- Information required for legal obligations
- Records required to prevent fraud or repeated abuse
Where appropriate, account data may be anonymised instead of completely deleted.
20. Changes to This Privacy Policy
ODA may update this Privacy Policy when:
- New features are introduced or new providers are used
- Payment methods change
- Legal requirements change
- Data-processing activities change
The updated date must appear at the top of the page. Material changes should be communicated to registered users where appropriate.
21. Contact
For privacy questions or requests, contact: