Privacy policy

1. Who is responsible

This policy covers the PIVO app (iOS, Android) and the website pivoplay.com. PIVO is the controller of your personal data. We process data under Law on Personal Data Protection No. 91/2025/QH15 and Decree 356/2025/ND-CP. Contact for personal data: ilamaster.info@gmail.com.

2. Data we collect

From sign-in: your sign-in account ID; your phone number if you sign in with a phone number; your email and name if you sign in with Google or Apple and allow sharing.

Profile you enter at the start: full name (optional), display name, gender, birth year, city, survey answers and the skill quiz. Your birth year is never shown to other people; we use it to confirm the minimum age of 16.

Activity: matches you create or join (court, time, description, fee note typed by the creator), scores, confirmations or rejections with a reason, the point-by-point log, your rating and rating history, and any rating you declare from another source.

Safety: reports you send and the list of people you block.

Technical: IP address and request logs on our servers for security and abuse prevention; your device's push token when notifications are enabled.

PIVO does not currently collect location, photos or contacts, shows no ads and uses no behavioural analytics. When a feature needs location, camera, photos or notifications, the app asks for permission at that moment and we update this policy before turning it on. Location data is sensitive personal data under Vietnamese law; you can refuse and still use the app (pick a city manually).

The website sets one necessary cookie (NEXT_LOCALE) to remember your language; when you delete your account on the web, Google's sign-in service keeps your session in the browser storage. There are no advertising or analytics cookies.

3. Purposes and legal basis

Running your account, matching, confirming results and calculating ratings: based on your consent when you sign in or create an account, and to provide the service you asked for.

Safety and abuse prevention (reports, blocks, security logs): to protect users and as the law requires.

We do not sell personal data, do not use it for advertising and show no ads. We ask you again before using data for a new purpose.

4. Who sees your data

Players in the same match see your display name, rating and phone number; phone numbers and contact options are shown only between participants of the same match. No one else sees your birth year, gender, email, full name or survey answers.

We give data to a competent state authority only when the law requires it.

5. Processors and transfers abroad

Google LLC (Firebase Authentication): sign-in and SMS verification codes. Google processes phone numbers, emails, account IDs and IP addresses on servers in the United States and keeps phone numbers to prevent abuse. After an account is deleted, Google removes the sign-in data from its live and backup systems within 180 days.

Vultr (PIVO's servers and database): the servers may be located outside Vietnam. Apple (if you use Sign in with Apple). Resend (email, when the email feature is enabled, for example verification codes for court owners).

Storing and processing data abroad as described is a transfer of personal data abroad. PIVO carries out the dossier and impact-assessment duties of the Law on Personal Data Protection 2025 and signs data protection agreements with its processors.

6. Retention

We keep account data while your account is active. When you delete your account: at once your name and phone number stop being shown and your sign-in sessions are revoked; for 30 days you can restore the account; after 30 days we delete your profile, survey, skill quiz, declared ratings, block list, phone number, email and sign-in account.

Verified match results (scores, confirmations, ratings and rating history) are kept so other players' results and ratings don't change. They no longer carry your name, phone number or email but are still linked to a random internal ID, so people who played with you may be able to infer that it was you. Safety reports may be kept longer to prevent abuse.

PIVO's database backups are kept for 14 days. Server logs (with IP addresses) are kept for as long as security needs.

7. Your rights

You have the right to know, to agree or disagree and to withdraw consent, to view and correct, to request a copy, to delete, restrict or object to the processing of your data, to complain, to sue and to claim damages under the Law on Personal Data Protection 2025.

Delete your account in the app. For other requests, or if you want deletion at once instead of after 30 days, email ilamaster.info@gmail.com from your account email or tell us the phone number linked to the account. The app has no screen to view or export data yet, so those requests are handled by email. We reply within 2 working days and finish within the legal time (view or correct: 10 days; delete: 20 days; one extension with notice).

You can also complain to the competent state authority for personal data protection (the Ministry of Public Security).

8. Security

Data is encrypted in transit. Access to the database is restricted. If a data breach happens, we notify the competent authority within 72 hours of detection and affected people as the law requires.

9. Children

PIVO is for people aged 16 and over. We do not knowingly collect data of people under 16. If a parent or guardian finds that a child under 16 has an account, contact ilamaster.info@gmail.com; we will delete the account and its data.

For people aged 16 to under 18: PIVO does not show your birth year and shows your phone number only to participants of the same match; we encourage you to talk to a parent or guardian. See also the Child safety page.

10. Changes to this policy

We will update this policy before adding any feature that collects new data (such as location or notifications). The version and date are at the top of the page; for important changes we tell you in the app and ask for your consent again.