1. Who We Are
This Privacy Policy explains how fntsycino.com (“we”, “us”, “our”), Kungsgatan 44, 111 35 Stockholm, Sweden, collects, uses, shares and protects personal data when you visit our website, register an account or participate in our fantasy contests. We are the data controller for the processing described in this policy. You can contact our data protection team at privacy@fntsycino.com or by post at the address above.
This policy should be read together with our GDPR, CCPA & Cookies Policy, which sets out your specific rights as a resident of the European Economic Area, the United Kingdom or California, and describes the cookies and similar technologies we use.
2. Personal Data We Collect
We collect only the data we need to operate a safe, fair and legally compliant platform.
- Registration data: full name, username, email address, date of birth, postal address, country of residence, phone number and password (stored only in hashed form).
- Verification data: results of electronic identity checks and, where required, images of identity documents, proof of address and a selfie used to match your document.
- Financial data: payment method type, the last four digits of a card, transaction history, deposit and withdrawal records. Full card numbers are processed by our payment service providers and are never stored on our servers.
- Gameplay data: contests entered, lineups, draft picks, trades, league memberships, results and offer participation.
- Player protection data: limits you set, cooling-off and self-exclusion periods, and records of interactions with our support team about safer play.
- Technical data: IP address, approximate location derived from IP, device type, operating system, browser, language settings, log data and security events.
- Communications: messages you send us through the contact form, email or phone, and your marketing preferences.
3. How We Use Your Data
- To create and manage your account and provide contests, leagues and subscriptions you request.
- To verify your identity and age, confirm your location and prevent minors from accessing the platform.
- To process payments, settle contests and keep accurate financial records.
- To detect and prevent fraud, multiple accounts, collusion, money laundering and other prohibited conduct.
- To apply responsible gaming tools and identify patterns that may indicate harm so we can offer support.
- To respond to enquiries and provide customer support.
- To improve the platform through aggregated analytics and product testing.
- To send service messages and, where you have agreed, marketing about new features and offers. You can withdraw marketing consent at any time.
4. Legal Bases for Processing
Under the EU General Data Protection Regulation (GDPR) we rely on the following legal bases: performance of a contract when we provide the services you have signed up for; legal obligation for age and identity verification, anti-money-laundering checks, tax records and responsible gaming requirements; legitimate interests for fraud prevention, platform security, fair play monitoring and product improvement, balanced against your rights; and consent for marketing communications and non-essential cookies.
5. Identity and Age Verification
Participation is strictly limited to adults aged 18 or over. Before you can enter a contest, make a deposit or claim an offer, we verify your identity and age. We first attempt electronic verification by comparing your name, date of birth and address with reliable independent data sources such as credit reference agencies, population registers and electoral data, where lawful. If electronic verification does not succeed, we ask you to upload a valid government-issued photo ID and a recent proof of address, and we may ask for a live selfie to confirm that the document belongs to you.
Verification is carried out by carefully selected specialist providers acting on our instructions under data processing agreements. We may repeat verification at any time, for example when you request a withdrawal, change key account details or when we have reason to believe an account may be held by a minor or by someone other than the registered person. Accounts that cannot be verified are restricted, and any account found to belong to a person under 18 is closed immediately, with any deposits returned in line with applicable law.
6. Sharing Your Data
We do not sell your personal data. We share data only where necessary with:
- Identity verification, payment and fraud prevention providers.
- Hosting, data storage, email and customer support technology providers.
- Licensed sports data partners, limited to the minimum needed to deliver live scoring; they do not receive your contact details.
- Professional advisers such as auditors and lawyers under confidentiality obligations.
- Regulators, law enforcement, courts and tax authorities where required by law or to protect the rights and safety of our members.
- A successor organisation in the event of a merger or sale, subject to this policy.
All service providers are bound by contracts requiring them to process data only on our instructions and to protect it appropriately.
7. International Transfers
We primarily store and process data within the European Economic Area. Where a provider processes data outside the EEA, we ensure an adequate level of protection through an adequacy decision of the European Commission or Standard Contractual Clauses, supplemented by additional technical and organisational measures where needed.
8. Data Security
We apply security measures appropriate to the sensitivity of the data we hold, including encryption of data in transit using current TLS standards and encryption at rest for databases and document storage, hashing of passwords with modern algorithms, optional two-step verification for accounts, role-based access controls with the principle of least privilege, logging and monitoring of administrative access, regular vulnerability testing and staff training on data protection and confidentiality. Identity documents are held in a segregated, access-restricted environment. No system is entirely free of risk, and if a personal data breach occurs that is likely to result in a high risk to you, we will inform you and the relevant supervisory authority without undue delay.
9. Data Retention
We keep personal data only for as long as necessary for the purposes described or as required by law:
- Account and gameplay data: for the life of your account and up to five years after closure, to handle disputes and meet regulatory requirements.
- Verification and anti-money-laundering records: five years after the end of the business relationship, or longer where legally required.
- Financial and transaction records: seven years to meet accounting and tax obligations.
- Self-exclusion records: for the duration of the exclusion and for as long as needed afterwards to ensure it is respected.
- Support communications: three years from the last contact.
- Marketing preferences: until you withdraw consent, plus a suppression record so we do not contact you again.
- Technical logs: typically up to twelve months.
When retention periods end, data is securely deleted or irreversibly anonymised.
10. Your Rights
Depending on where you live, you have rights to access, correct, delete, restrict or object to the processing of your personal data, to data portability and to withdraw consent. California residents have additional rights under the CCPA. Full details and instructions are in our GDPR, CCPA & Cookies Policy. You also have the right to lodge a complaint with a supervisory authority; in Sweden this is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten).
11. Children
Our services are not directed to anyone under 18 and we do not knowingly collect data from minors except as necessary to identify and block an attempted registration. If you believe a minor has provided us with personal data, please contact privacy@fntsycino.com and we will act promptly.
12. Changes to This Policy
We may update this policy to reflect changes in our services or legal requirements. The “Last updated” date at the top and bottom of this page shows when it was last revised. Where changes are significant, we will notify registered members by email or in-app message before they take effect.