Privacy Policy for Road to Qatar Play

1. About this Policy
   1. The Supreme Committee for Delivery & Legacy (SC, we, us) is committed to protecting and respecting your privacy. SC was established in the State of Qatar by Amiri Decision No. (27) of 2011 as amended by Amiri Decision No. (3) of 2014 and No.69 of 2024, and its principal place of business is at Al Bidda Tower, P.O. Box 62022, Doha, State of Qatar.
   2. This Privacy Policy sets out the basis on which we will process any personal information that we may collect about you, including when you attend any of our events; visit our Platforms; or otherwise interact with us or use our services. “Events”, “Platforms”, and other terms are defined in Annex A.
   3. We may provide further privacy notices to you at the point we collect your personal data, highlighting any further information relating to our use of that personal data and, where applicable, providing you with the ability to opt in or out of selected uses. If you are a volunteer, a separate privacy notice will apply, available on the relevant programme website.
   4. There may be additional or separate privacy policies that apply to you when you use one or more of our Platforms or attend our Events. These will be provided when applicable.
2. The information that we collect about you
   1. We may collect and/or process information about you when you engage with us, particularly when using our Platforms.
   2. We may collect and/or process the following categories of information about you:
      1. Information that you provide to us ► Including information submitted through applications, registrations, contact forms, and optional profile photographs.
      2. Platform and communication usage ► Information automatically collected by our Platforms, including IP address, browser details, traffic logs, cookies (see Cookies Policy), and resource access details.
      3. Our correspondence ► Records of any communication you initiate with us.
      4. Your feedback ► Survey and poll responses used to improve our services.
   3. We may receive information about you from third parties who are legally entitled to disclose it.
   4. If registering an account on behalf of a third party, you confirm you have obtained their consent.
   5. We do not collect personal data from persons under the age of 18 without guardian consent.
3. What we do with your information
   1. The purposes and lawful bases for processing your personal data include:
      1. Communication & operations — Managing accounts, responding to queries, conducting Events. Lawful bases: contract performance, legitimate interests.
      2. Marketing — Providing updates and promotional content. Lawful bases: consent, legitimate interests.
      3. Research & development — Analysing preferences to improve offerings. Lawful bases: legitimate interests.
      4. Informing you of changes — Notifying you about updates. Lawful bases: legitimate interests.
      5. Personalised content — Ensuring relevant content on the Platforms. Lawful bases: legitimate interests.
      6. Re-organisation — Processing data during operational changes. Lawful bases: legitimate interests.
      7. Legal or regulatory obligations — Compliance, investigations, legal claims. Lawful bases: legal obligations, legitimate interests.
      8. Safety and security — Fraud prevention, threat response, public safety. Lawful bases: legal obligations, legitimate interests.
4. Leaderboard Data
   The app collects your game score and a user identifier (or username) for the purpose of displaying rankings on the global leaderboard.
5. Sharing with third parties
   1. We may share your personal information with:
      1. Service providers hosting or processing data on our behalf
      2. Contractors, agents, advisors
      3. Government agencies for security checks
      4. Local organising committees
      5. Successor organisations in case of operational transfer
   2. We may disclose data when legally required or for enforcement of agreements.
   3. Platforms may link to third-party sites with their own privacy policies.
6. Marketing
   1. We and selected affiliates may contact you with marketing communications where legally permitted.
   2. You may withdraw consent at any time.
7. Profiling and automated decision making
   1. We personalise advertisements and recommendations based on your data.
   2. Some solutions use AI, with appropriate oversight.
8. Storage and security
   1. Your personal data is stored on secure servers. You must keep passwords confidential.
   2. We apply reasonable safeguards to protect your data.
9. International transfer of your information
   1. Your information may be transferred to Qatar or other countries.
   2. Where required, we ensure appropriate safeguards for international transfers.
10. Retention and deletion of your information
    1. We retain personal data as long as needed for business or legal purposes.
    2. Retention varies depending on solution and user role.
11. Your rights
    1. You may withdraw consent at any time.
    2. Please notify us of updates to your personal data.
    3. You may request:
       1. A copy of your provided data
       2. Corrections to inaccuracies
       3. Deletion of unlawfully held data
       4. Withdrawal of consent
       5. Transfer of your data to a third party
       6. Objection to processing based on legitimate interests
       7. Restriction of processing during complaints
    4. Some restrictions apply for legal or public-interest reasons.
    5. You may lodge complaints with the applicable data protection authority.
12. Changes to this policy
    1. Any updates will be posted on the Platforms.
13. Contacting us
    1. If you have questions, contact privacy@sc.qa or visit www.sc.qa/privacy.

ANNEX A — Definitions

1. In this Privacy Policy:
   1. App — Any application used alongside our Platforms.
   2. Events — Events hosted or supported by SC.
   3. Platform — Any SC digital system, website, mobile app, API, or tool.