POPIA Compliance & Information Governance

PlayerXI is responsible for the lawful collection, use, storage, protection and management of personal information processed through the platform, and maintains appropriate measures, procedures and records to support compliance with applicable data-protection requirements.

PlayerXI collects information necessary to operate its football talent-discovery platform, including, where applicable: account and authentication information, player profile information, football-related information and statistics, player-submitted videos and content, parent or guardian information required to manage a minor's account, verification information, and security, technical and audit information.

PlayerXI applies data-minimisation principles and does not collect personal information unnecessarily.

Personal information is processed for legitimate PlayerXI purposes, including account management, football talent discovery, player profiles and search, platform-based communication, scout/club/organisation verification, guardian-managed minor accounts, trial and opportunity management, safety and moderation, fraud and abuse prevention, platform security, and legal and regulatory compliance.

PlayerXI does not sell personal information.

PlayerXI applies additional safeguards when processing information relating to players under 18. Minor accounts are subject to guardian management and appropriate restrictions. The parent or legal guardian manages the minor's participation, provides required permissions, controls applicable profile visibility, receives and manages requests concerning the minor, handles communications concerning the minor through PlayerXI, and may exercise applicable privacy rights on behalf of the minor.

Scouts, clubs and organisations do not communicate directly with minor players through PlayerXI — every contact request or trial invitation for a minor player is routed to their verified guardian's account, not the minor's own account.

PlayerXI does not disclose a minor's personal contact information to scouts, clubs, organisations or other users, and processes children's personal information in accordance with the requirements applicable to children under POPIA.

PlayerXI provides communication through its own platform. User contact information is not exchanged between users — PlayerXI does not provide users with another user's telephone number, personal email address, home address, or other personal contact details.

For adult players, permitted communication takes place through PlayerXI. For minor players, requests and communications are handled through the parent or legal guardian.

PlayerXI may display appropriate football-related information according to the platform's access and visibility controls, such as name, age group, position, playing level, region, football attributes, match statistics, and approved videos. PlayerXI does not make private information available merely because a user has access to the platform.

PlayerXI processes personal information only where permitted under POPIA — depending on the circumstances, this may rely on consent, performance of a contract, legal obligations, legitimate interests where permitted, protection of rights, or another lawful basis recognised by applicable law. Where consent is required, PlayerXI obtains and records consent appropriately and provides mechanisms for withdrawal where applicable.

PlayerXI takes reasonable measures to maintain accurate, relevant and up-to-date personal information. Users and guardians may request correction of inaccurate information. Where football statistics have not been independently verified, PlayerXI identifies them as self-reported.

PlayerXI implements reasonable technical and organisational measures to protect personal information against loss, damage, unauthorised access, disclosure, alteration, or destruction — including appropriate authentication, access controls, secure storage, password hashing, audit logging, administrative restrictions, backups and security monitoring.

Access to personal information is limited according to the purpose for which access is required. Users can only access information made available to them through PlayerXI's permission and visibility controls. Administrative access is restricted to authorised persons performing legitimate PlayerXI functions.

PlayerXI retains personal information only for as long as reasonably necessary for the purpose for which it was collected, legitimate operational requirements, safety, security, dispute resolution or applicable legal obligations. When personal information is no longer required, PlayerXI deletes, destroys or de-identifies it where appropriate. Users can request deletion of their own account — see the account deletion option in the app menu, or the Privacy Policy for full detail on what account deletion actually does.

Subject to applicable law, data subjects and authorised guardians may request access to personal information, request correction of inaccurate information, request deletion where applicable, withdraw consent where processing is based on consent, and exercise other rights provided by POPIA. PlayerXI may verify identity and authority before processing a request.

PlayerXI may use service providers necessary to operate the platform. Where a service provider processes personal information on behalf of PlayerXI, appropriate safeguards and contractual requirements apply. PlayerXI considers applicable requirements when personal information is processed or transferred outside South Africa.

PlayerXI maintains procedures for identifying, containing, investigating and responding to personal-information security incidents. Where required by law, PlayerXI will notify the Information Regulator and affected data subjects within the applicable requirements.

PlayerXI may process information necessary to investigate reports, protect users and minors, prevent abuse, detect fraud, enforce platform rules, maintain security, and investigate suspected unlawful activity — subject at all times to applicable privacy requirements.

PlayerXI incorporates privacy and safety considerations into the design of its platform, including data minimisation, private-by-default protections for minors, guardian-controlled minor accounts, access and visibility controls, server-side authorisation, platform-only communication, no exchange of personal contact details, verification controls, reporting and blocking mechanisms, audit records, and secure deletion processes.

PlayerXI maintains appropriate records relating to its processing of personal information — including consent and permission records, guardian-management records, verification records, access/correction/deletion requests, security records, and third-party processing arrangements — as required by applicable law.

PlayerXI complies with applicable requirements under PAIA and POPIA and maintains the documentation and procedures required by applicable law, and cooperates with lawful requests from the Information Regulator and other competent authorities.

PlayerXI reviews its information-governance practices when its services, technology, processing activities or applicable legal requirements change. Where a change affects users' privacy rights or how personal information is processed, PlayerXI updates the relevant privacy information accordingly.

Privacy-related requests, questions and concerns may be submitted to privacy@playerxi.co.za. PlayerXI maintains appropriate procedures for receiving, assessing and responding to privacy-related requests.

This page operates together with PlayerXI's Terms of Service, Privacy Policy, and Cookie Policy, and should be interpreted consistently with applicable South African law.