ReadyPlay Sport

Privacy Policy

1. ABOUT READYPLAY AND THIS POLICY

1.1 Effective date

This policy takes effect on the 1st of September, 2026 and replaces all earlier versions.

1.2 Who we are

ReadyPlay Pty Ltd ABN 84 114 776 192 (ReadyPlay, we, us, or our) operates a digital platform that connects players, teams, and sporting venues. Our app allows users to create and join sporting events, share updates, and connect socially through posts, comments, and messaging.

1.3 Our commitment

We are committed to protecting your privacy and handling your personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles, and the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act.

This policy explains what personal information we collect, why we collect it, who we share it with, how you can access and correct it, and how you can complain if you think we have got it wrong.

2. INFORMATION WE COLLECT

We collect personal information to provide, improve, and personalise your ReadyPlay experience.

2.1 Information you provide

When you use ReadyPlay, you may provide us with:

(a) account information, being your name, email address, phone number, date of birth,

username, password, and profile photo;

(b) sporting interests and activity data, being your chosen sports, venues you attend, and

events you create or join;

(c) content you share, being posts, photos, comments, messages, and other user-

generated content; and

(d) payment details, being billing information for paid events or premium features. These

are processed securely through third-party providers such as Stripe, Apple Pay, or Google Pay, and we do not store your full payment card details.

2.2 Health information

Health information is sensitive information under the Privacy Act. We collect it only with your consent, and only where it is reasonably necessary for what we do.

Where you accept our Participant Waiver or register for an event, we may ask you to disclose a pre-existing medical condition, injury, disability, or health concern that could affect your

ability to participate safely. You are not obliged to give us that information, but if you do not, we may not be able to let you take part in a particular event.

We use health information only to assess safe participation, to respond to a medical emergency during an event, and to comply with our legal obligations. We do not use it for marketing, recommendations, or analytics. We disclose it only to the people who need it to keep you safe, being event staff, first aid providers, and emergency services.

2.3 Information we collect automatically

When you use ReadyPlay, we may automatically collect:

(a) usage data, being app interactions, posts viewed, and engagement metrics;

(b) device information, being device type, operating system, app version, and unique

device identifiers; and

(c) location data. With your explicit opt-in consent, given through your device’s location

permissions prompt, we may collect approximate or precise location information to suggest nearby venues and events. You can withdraw this consent at any time through your device settings.

2.4 Information from third parties

We may receive information from:

(a) venues and event organisers using ReadyPlay to host events; and

(b) third-party integrations, such as social media or payment gateways, if you actively

choose to link them to your ReadyPlay account. Linking a third-party account constitutes your consent to receive information from that service.

2.5 Dealing with us anonymously

You have the option of dealing with us anonymously or under a pseudonym where it is lawful and practicable. In most cases it is not practicable, because ReadyPlay is a social platform where other participants and organisers need to know who they are playing with. You can use a username rather than your full name on your public profile.

3. HOW WE USE YOUR INFORMATION

We use personal information for the following purposes:

(a) to create and manage your account;

(b) to enable you to create, join, and participate in sporting events;

(c) to display and share content on the social feed, in accordance with your privacy

settings;

(d) to recommend players, teams, or venues based on your interests. You can turn

recommendations off in your profile settings;

(e) to communicate with you about updates, events, and app changes. Marketing

communications require your opt-in consent;

(f) to keep the platform safe, prevent fraud, and enforce our Terms and Conditions of Use;

(g) to comply with our legal obligations; and

(h) to improve our products, features, and user experience through aggregated analytics.

We will only use or disclose your personal information for a purpose other than the one we collected it for where you would reasonably expect it, where you have consented, or where the law permits or requires it.

4. AUTOMATED DECISIONS

We use computer programs that rely on your personal information to make, or substantially help make, some decisions about you. The decisions concerned are:

(a) recommending players, teams, venues, and events to you, and deciding what appears in

your feed;

(b) recording late cancellations and no-shows against your account, and applying the

escalating restrictions set out in our Terms and Conditions of Use; and

(c) flagging content or conduct for review under our safety and moderation processes.

The kinds of personal information used in those programs are your account information, your activity and attendance history, your sporting interests, your usage data, and your device information.

A decision to restrict or suspend your account is reviewed by a person before it becomes final, and you can appeal it under our Terms and Conditions of Use.

This clause is provided to meet the automated decision transparency requirements that commence on 10 December 2026 under the Privacy Act.

5. SHARING YOUR INFORMATION

We share your information only as necessary to operate the ReadyPlay platform:

(a) public posts. Content you share to your feed may be visible to other users depending on

your privacy settings;

(b) venues and organisers. Event organisers may see your profile and participation details

for the events you join;

(c) service providers, being third-party vendors such as cloud storage, payment processors,

and analytics providers who assist us in operating ReadyPlay. These providers are contractually required to handle your data in accordance with this policy and applicable law; and

(d) legal and safety requirements. We may share information when required by law,

regulation, or legal process, or to protect our rights, our users, or the public.

We do not sell or rent your personal information to third parties.

6. DIRECT MARKETING

We will only send you marketing communications if you have opted in. Every marketing message includes a simple way to opt out, and we will action an opt-out request promptly and at no cost to you.

You can also ask us to stop marketing to you, and ask us to tell you where we obtained your information, by contacting us at the address in clause 17.

Service-related messages, such as event reminders, security alerts, and changes to our terms, are not marketing. You cannot opt out of those while your account is active.

7. ACCESS, CORRECTION AND YOUR CONTROLS

7.1 Access and correction

You can access and update most of your account information at any time in the app. You can also ask us for a copy of the personal information we hold about you, or ask us to correct it, by contacting us at the address in clause 17. We will respond within 30 days. If we refuse access or correction, we will tell you why in writing and explain how to complain.

7.2 Your controls

You can:

(a) choose whether your posts are public or visible only to followers;

(b) manage location sharing and notification preferences through your device settings;

(c) opt out of personalised recommendations in your profile settings;

(d) withdraw consent for marketing communications at any time via the app or by

contacting us; and

(e) request deletion of your account and data through the in-app account deletion feature,

at Settings then Account then Delete Account, or by contacting us.

8. DATA STORAGE AND SECURITY

We store data on secure servers located in Australia.

We implement reasonable administrative, technical, and physical safeguards to protect your information, including encryption in transit and at rest, access controls, and regular security reviews.

While we take reasonable steps to protect your data, no online system is entirely immune to risk. We encourage you to use strong passwords and keep your login credentials confidential.

9. OVERSEAS DISCLOSURE

We are likely to disclose personal information to overseas recipients. The country in which those recipients are currently located is the United States, where our cloud infrastructure providers operate.

Before disclosing personal information overseas, we take reasonable steps to ensure the recipient does not breach the Australian Privacy Principles, including through contractual obligations and security assessments.

If we add a new country to this list, we will update this policy and tell you in accordance with clause 16.

10. DATA BREACH NOTIFICATION

If we suspect a data breach involving your personal information, we will:

(a) promptly assess the breach and take steps to contain it;

(b) where the breach is an eligible data breach under Part IIIC of the Privacy Act 1988 (Cth),

notify affected individuals and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme; and

(c) provide you with information about the breach and recommendations for steps you can

take to protect yourself.

11. COOKIES AND TRACKING TECHNOLOGIES

When you visit our website or use the ReadyPlay app, we and our service providers may use cookies, pixels, and similar technologies to collect information about your browsing or app usage behaviour. Cookies help us:

(a) recognise you when you return to ReadyPlay;

(b) keep you signed in;

(c) understand usage patterns; and

(d) improve functionality and personalise your experience.

You can manage or disable cookies through your browser or device settings, though some features of ReadyPlay may not function properly if you do so.

We do not use cookies to collect sensitive information, and we do not allow third parties to track you across unrelated websites for targeted advertising without your consent.

12. THIRD-PARTY INTEGRATIONS AND LINKS

ReadyPlay may contain links to, or integrate with, third-party services. These may include:

(a) mapping and location services, for example the Google Maps API, to show nearby

venues;

(b) payment gateways, for example Stripe, Apple Pay, or Google Pay, for payments;

(c) analytics tools, for example Firebase or Google Analytics, to understand usage trends;

and

(d) social media logins, for example Facebook, Apple, or Google, for account creation or

sharing.

When you interact with these services, their own privacy policies apply. ReadyPlay is not responsible for the privacy, security, or content of any third-party sites or services that are not operated by us. We encourage you to review their privacy policies before interacting with them.

13. DATA RETENTION

We retain your personal information only for as long as reasonably necessary to:

(a) provide ReadyPlay services;

(b) comply with our legal obligations; and

(c) resolve disputes and enforce agreements.

When your account is deleted or becomes inactive, we will:

(d) delete or de-identify your personal information within 30 days of account deletion,

unless we are required by law to retain it for a longer period;

(e) keep anonymised or aggregated data, such as usage statistics, that cannot identify you;

and

(f) securely destroy backup copies of your data within 90 days of account deletion.

We may need to keep records relating to an injury, incident, or claim for longer, because a claim can be brought years after the event. Where we do, we keep only what is necessary for that purpose and we keep it secure.

14. CHILDREN AND YOUNG PEOPLE

ReadyPlay is not intended for users under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that a user is under 16, we will take steps to delete their account and associated data.

If you believe a child under 16 has provided us with personal information, please contact us at the address in clause 17.

Where a user is 16 or 17, we may collect personal information from a parent or guardian who gives consent for that user to participate in events. We use that information only to verify the consent and to contact the parent or guardian in an emergency.

15. INTERNATIONAL USERS

If you access ReadyPlay from outside Australia, your information will be transferred to, stored, and processed in Australia, and potentially in the United States for cloud infrastructure. By using ReadyPlay, you consent to this transfer and processing. We take reasonable steps to

ensure your data is treated securely and in accordance with this policy, regardless of where it is processed.

If you are located in the European Economic Area or the United Kingdom, we may rely on your consent, the performance of our contract with you, or our legitimate interests as the legal basis for processing your personal information. You may have additional rights under those laws, including the right to access, correct, delete, or port your data, and the right to object to processing. Contact us to exercise those rights.

16. CHANGES TO THIS POLICY

We may update this policy from time to time. The latest version will always be available in the app and on our website, with the effective date clearly stated.

Where changes are material, we will notify you via the app or by email before they take effect.

17. CONTACT AND COMPLAINTS

17.1 Contact us

If you have any questions, concerns, or requests about this policy, please contact our Privacy Officer at:

readyplaysport@gmail.com

ReadyPlay Pty Ltd ABN 84 114 776 192

98 Pittwater Road, Manly NSW 2095

17.2 Complaints

We take all privacy complaints seriously. Upon receiving a complaint, we will:

(a) acknowledge your complaint within 5 business days;

(b) investigate the matter and respond to you within 30 days; and

(c) work with you to reach a fair resolution.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner at www.oaic.gov.au or on 1300 363 992.