Privacy Policy

1. Data Controller

The entity responsible for processing your personal data under this Privacy Policy is:

• Company: Itbaf S.A.
• Address: 141 Socrates St, 3rd Floor, Office A, Polanco IV Section, Miguel Hidalgo Borough, Mexico City, Zip Code 11550, Mexico.
• Contact Email: soporte@itbaf.com

2. Data Collection and Purposes

We restrict our data processing activities to the absolute minimum required to deliver our physics-based VR penalty shootout experience, maintain global competitive leaderboards, offer customer support, and ensure platform security. The types of data collected are categorized as follows:

• Registration Data (Mandatory): Username (First and Last Name). This is the only strictly mandatory element required to create your account, execute user login, track personal progress, and display your profile on competitive in-game leaderboards.
• Platform Identifiers (Mandatory): Oculus ID and Profile ID. As the game is published on the Meta Store, the platform automatically provides these identifiers, which are strictly processed to synchronize your progress and support the competitive ranking ecosystem.
• Additional Contact Data (Optional): Phone Number and Email Address. These fields are entirely optional. We will only process this information if you choose to provide it explicitly to receive technical assistance, submit feedback, or facilitate account recovery.
• Gameplay Statistics and Telemetry: We collect and process metrics related to your in-game activity, including high scores, game progression logs, total playtime, and technical device data (such as operating system version, hardware configurations, unique device identifiers, and anonymized crash reports).
• Website Interactions: If you visit our official platform or support sites, we automatically collect basic browser specifications, truncated IP addresses, time zone data, and standard electronic interaction logs to improve web performance and security.

3. Web Analytics and Cookies

Our official support websites utilize Google Analytics (provided by Google Ireland Limited, Dublin, Ireland) to analyze visitor interactions and prevent fraudulent behavior.

• IP Anonymization: We employ the IP masking function (anonymizeIP). Your full IP address is truncated and shortened within member states of the European Union or the European Economic Area before any technical transfer to servers located in the United States.
• Retention and Opt-Out: Analytics data tied to cookies is automatically deleted after 14 months. You can reject or disable cookies via your browser settings or permanently opt-out by installing the official Google Analytics Opt-out Browser Add-on at: tools.google.com/dlpage/gaoptout.

4. Fraud Prevention and Infraction Detection

To detect, investigate, and prevent cheating, malicious exploits, or violations of our terms of service and applicable laws, we may process specific hardware and gameplay integrity metrics. These data streams are retained only for the minimum duration strictly necessary to complete safety evaluations. In the event that a clear policy infraction is identified, relevant logs will be preserved longer to establish, execute, or defend potential legal claims.

5. Data Storage, Data Transfer, and Security

All personal datasets are stored within secure server environments protected by active firewalls, strict access control protocols, and enterprise antivirus suites. Data transfers strictly adhere to legal standards, and data may be processed in infrastructure hosted by Itbaf S.A. or its authorized third-party vendors. Such authorized third-party vendors will exclusively process platform identifiers, technical device data, and anonymized telemetry for the sole purpose of providing cloud storage, game performance optimization, and database support.

We retain your personal data only as long as necessary to fulfill the specific purposes outlined in Section 2. However, due to statutory legal and financial regulations, Itbaf S.A. is legally obligated to archive data associated with commercial and legal transactions for a period of up to ten (10) years.

6. Age Restrictions and Child Safety

In accordance with Meta's strict platform safety guidelines, Fútbol Guru VR does not intentionally or knowingly collect personal data from users who do not meet the minimum age requirements of their respective regions (typically under 13 or 10 years of age) without explicit and verifiable parental consent. If we detect unauthorized data collection from a minor, the information will be deleted immediately.

7. Your Legal Rights (GDPR & LATAM Regulations)

Regardless of your country of residence, you hold comprehensive legal rights over your personal data. You may exercise these rights at any time by contacting our Data Protection team at soporte@itbaf.com:

• Right of Access & Portability: Request a comprehensive copy of all personal information and metrics we hold regarding your profile.
• Right to Rectification & Deletion: Demand the immediate correction of inaccurate data or the complete erasure of your platform records.
• Right to Object & Restrict Processing: Object to automated data evaluations or restrict the scope of active tracking and leaderboard syncing.

To limit the use or disclosure of your personal data, as well as to exercise your rights of Access, Rectification, Cancellation, or Opposition (ARCO Rights), the user must submit a written request via email to soporte@itbaf.com. This request must mandatorily contain:

• The full name of the data owner and their Username or platform ID (Oculus ID / Profile ID).
• Valid official documents proving the identity of the owner (or, if applicable, legal representation).
• A clear and precise description of the personal data regarding which you seek to exercise any of the aforementioned rights or limit their use.

The timeframe to respond regarding the status of your request will be a maximum of twenty (20) business days from the date of receipt. If applicable, the measures will become effective within fifteen (15) business days following the date the response is communicated. The response will be delivered to the user electronically to the same email address from which the request was sent.

Important Technical Notice: If you exercise your right to object or request the deletion of your mandatory Username, Oculus ID, or Profile ID, you will no longer be able to log in, synchronize your progress, or participate in the competitive leaderboards and scoring challenges of Fútbol Guru VR.

8. Notification Procedure for Policy Changes

This privacy policy may undergo modifications, updates, or changes resulting from new legal requirements or our own operational needs. Any updates or changes to this Privacy Policy will be notified to users by publishing the updated document on our official website or through direct alerts and notices within the platform and environment of the game "Fútbol Guru VR".