Privacy Policy


SLAMIT Privacy Policy
Version: 1.0
Effective date: 26 October 2025
Applies to: slamit.io (the “Website”) and the SLAMIT mobile/desktop apps (the “App”)

1) Who we are

Business/Trading Name: SLAMIT
Legal Entity: SLAM Sport
ABN: 49 658 632 958
Registered Address: Suite 14.01, Level 14, 111 Pacific Hwy, North Sydney NSW 2060
Contact Email (privacy): admin@slamit.io

SLAMIT is a competition-, community- and rewards-based sports platform. We are 18+ only and do not offer gambling. Any references to “we”, “us” or “our” are to SLAM Sport. “You” and “your” means a user, member or visitor.

We comply with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). For users in the EEA/UK, we process personal data in line with the GDPR. For users in California, we provide disclosures and rights under the CCPA/CPRA.


2) Scope

This Policy explains how we collect, use, disclose and protect information when you use the Website or App, interact with our social pages, marketing communications, events and partner activations, or otherwise engage with us.


3) Information we collect

We may collect the following categories of information. The exact items collected depend on how you interact with us and the features you use.

  • Account & Identity
    Name, display name/handle, date of birth (18+ verification), country, address, email, phone, profile photo/avatar, social login IDs.
  • Membership & Competition
    • League/team preferences, tipping entries and history, leaderboards, rewards/redemptions, referrals, in-app interactions, user-generated content (posts, comments).
  • Marketing & Communications
    • Email/SMS subscription status, campaign interactions (opens, clicks), preferences; push-notification tokens.
  • Payments & Commercial
    Subscription status, plan, invoices, amount paid, payment method type, last four digits, expiry month/year, transaction IDs, fraud checks. Card numbers are not stored by SLAMIT (handled by PCI-compliant processors).
  • Device & Technical
    Device type, OS, app version, browser, IP address, language, time zone, mobile network, crash logs, diagnostics, performance metrics, in-app permissions (camera/mic/photo library if you grant access).
  • Usage & Analytics
    • Page views, session duration, events, attribution, referring URLs, approximate location (derived from IP), cookie identifiers, ad IDs, pixels/SDK events.
  • Location
    • Approximate location via IP; precise location only if you explicitly allow it in your device settings (e.g., to surface local venues).
  • Support & Safety
    • Support tickets, call/chat/email transcripts, reports of misconduct, verification documents where legally required.
  • Partner & Promotional
    • Information shared or generated through partner activations (e.g., events, offers, sponsorships) including your eligibility, redemptions and participation.
  • Sensitive information: We do not seek health, biometric or other sensitive data. Do not provide such data. If you volunteer it, we will handle it only with your consent and as permitted by law.

4) How we collect information

  • Directly from you when you register, enter competitions, redeem rewards, submit content, contact support, or opt into marketing.
  • Automatically via cookies, SDKs and similar technologies when you browse or use the App.
  • From third parties such as social login providers (Google/Apple/Facebook), payment processors, analytics/advertising partners, anti-fraud vendors, and commercial/charity partners where lawful and appropriate.

5) Purposes of use (and legal bases)

We use your information for:

  1. Account creation and administration (contract; legitimate interests; APP 6).
  2. Providing the service (competitions, leaderboards, rewards, content, partner offers) (contract; legitimate interests).
  3. Payments and billing via PCI-compliant processors; fraud prevention and chargeback handling (contract; legal obligation; legitimate interests).
  4. Safety, integrity and enforcement including detecting abuse, cheating, or policy violations (legitimate interests; legal obligation).
  5. Customer support and communications (contract; legitimate interests; consent for certain channels).
  6. Marketing (email/SMS/push/ads) with controls to opt out at any time (consent or legitimate interests, as required).
  7. Analytics, research and product improvement (legitimate interests; consent where required).
  8. Personalisation (content, offers, recommendations) (legitimate interests; consent where required).
  9. Legal and regulatory compliance including responding to lawful requests (legal obligation).
  10. Mergers, acquisitions and corporate transactions (legitimate interests).

Where consent is the basis (e.g., certain cookies, precise location, SMS marketing), you can withdraw it at any time via settings or by contacting us.


6) Cookies, SDKs and tracking technologies

We use cookies/pixels/SDKs for authentication, remembering preferences, analytics, performance, and marketing/retargeting. This may include (without limitation):

  • Analytics: Google Analytics (including Signals), Firebase Analytics.
  • Advertising/Attribution: Meta Pixel, TikTok Pixel, Google Ads/Marketing Platform, mobile ad IDs.
  • Product & UX: Crash reporting, diagnostics, A/B testing, session analytics tools.

You can manage cookies in your browser, mobile OS settings (e.g., reset ad ID/limit ad tracking), and our in-product settings where available. Some features may not function without certain cookies.


7) Payments

We use reputable, PCI-DSS-compliant processors (e.g., Stripe, PayPal). They process your payment details. We receive transaction metadata (e.g., status, last four digits) but do not store full card numbers.


8) Sharing and disclosure

We may share your information with:

  1. Service providers/Processors
    Hosting (e.g., AWS/Google Cloud), analytics, customer support, email/SMS, push notifications, security/fraud, payment processing, engineering and professional services—only as needed to provide our services and under appropriate safeguards.
  2. Commercial & community partners (data-sharing clause)
    Trusted partners to enable experiences, rewards, events, sponsorships and co-branded activations (e.g., sporting clubs, venues/pubs, media partners, travel/experience providers, charity initiatives like Tour d’Horse), only for permitted purposes, subject to applicable law and your choices.
  3. Social login & integrations
    If you choose to connect accounts (Google/Apple/Facebook), the provider may receive limited data to authenticate you. Review their policies.
  4. Advertising partners
    For measurement and ad personalisation where permitted (see Section 13 and your rights to opt out).
  5. Legal, safety, and compliance
    To comply with laws, enforce terms, protect rights, safety, and integrity, or in response to lawful requests.
  6. Corporate transactions
    In connection with any merger, sale, financing or acquisition, subject to confidentiality and your rights.

We do not sell your personal information for money. Under California law, some targeted advertising and data sharing can be considered a “sale” or “sharing”; see Section 15 for your opt-out rights.


9) International transfers

We may transfer, store and process information outside your country of residence (including Australia, the EEA/UK and the United States). Where required, we implement appropriate safeguards (e.g., Standard Contractual Clauses). By using the services, you understand your data may be processed in these locations. You can contact us for details of safeguards.


10) Data retention

We keep personal information only as long as necessary for the purposes described, including:

  • Account & membership data: for the life of the account and up to 7 years after closure (tax/audit/legal).
  • Competition/tipping history & rewards: for service integrity and audit for up to 7 years.
  • Marketing records: until you unsubscribe + up to 2 years thereafter for proof of consent/suppression.
  • Analytics/telemetry: typically 24–36 months, aggregated thereafter.
  • Support tickets: 3–7 years depending on issue and legal requirements.

We may retain and use anonymised or aggregated information indefinitely.


11) Security
We use administrative, technical and organisational measures appropriate to the risk, including encryption in transit, access controls, logging/monitoring, secure development practices and vendor diligence. No system is 100% secure. If we become aware of a data breach likely to cause serious harm, we will notify affected individuals and relevant regulators in accordance with law.


12) Your choices & controls

  • Account settings: update profile, preferences, and notification choices in the App/Website.
  • Marketing: unsubscribe via email footer, reply STOP to SMS, disable push in device settings.
  • Cookies: use browser controls and our in-product cookie settings (where available).
  • Permissions: control camera/mic/photos/location in device OS settings.
  • Targeted ads: opt out via in-app settings and the “Do Not Sell/Share” options (see Section 15).

13) Personalisation, advertising & profiling

We may use your interactions (e.g., teams you follow, competitions entered, rewards redeemed) to personalise content and offers. Where permitted, we may work with advertising partners to show relevant ads and measure performance using cookies, SDKs and identifiers. You can opt out of interest-based ads through in-app controls, platform settings and industry tools (availability varies by region). Opting out won’t stop ads, but they may be less relevant.


14) Your rights

Australia (APPs)
You may request access to and correction of your personal information. You may also complain about our handling of your information (see Section 17).

EEA/UK (GDPR)

Depending on circumstances, you have rights to access, rectify, erase, restrict, object, portability, and to withdraw consent at any time. Where we rely on legitimate interests, you may object and we will assess your request. We do not engage in automated decision-making producing legal or similarly significant effects without necessary safeguards.

California (CCPA/CPRA)

You have the right to know/access, correct, and delete certain personal information; to opt-out of sale/sharing (for cross-context behavioural advertising); to limit use of sensitive information (if collected); and to be free from discrimination for exercising your rights.

How to exercise your rights (all regions):
Email admin@slamit.io with “Privacy Request” and your region. We may take steps to verify your identity (and authority if acting as an agent). We will respond within the timeframes required by law.


15) California “Do Not Sell or Share” & Global Privacy Control

We provide mechanisms to opt-out of sale or sharing for cross-context behavioural advertising:

  • Use the “Do Not Sell or Share My Personal Information” link (where available), and/or
  • Enable a browser-based Global Privacy Control (GPC) signal (we honour valid GPC signals for the browser that sends them), and/or
  • Adjust in-app privacy settings.

16) Children
SLAMIT is for adults aged 18+. We do not knowingly collect personal information from minors. If you believe a minor has provided information, contact admin@slamit.io and we will take appropriate action.


17) Complaints & contact

Contact us: admin@slamit.io
We aim to respond promptly and resolve issues.

Australia: If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) for guidance on making a privacy complaint.

EEA/UK: You may also lodge a complaint with your local data protection authority. We are available to discuss concerns and will cooperate with regulators.


18) Third-party links & platforms

Our services may link to third-party sites, apps or services (e.g., partners, social platforms). Their privacy practices are governed by their own policies. Review them carefully.


19) Social logins & integrations

If you choose to register or sign in via Google/Apple/Facebook, the provider will authenticate you. We receive a unique ID and basic profile details (e.g., name, email) as permitted by your settings. Disconnect via your SLAMIT account or the social provider’s settings.


20) Partner activations and events

From time to time we run promotions or experiences with partners (e.g., sporting clubs, pubs/venues, media networks, travel/experience providers, charitable initiatives). Where we jointly process your data, we will make this clear and, where required, provide additional terms or obtain consent.


21) Changes to this Policy

We may update this Policy to reflect changes to our practices, technologies, legal requirements or business. We will post the updated version with a new “Effective date”. If changes are material, we will provide additional notice (e.g., email, in-app message). Your continued use after the effective date means you accept the updated Policy.


22) How to contact us

SLAM Sport (ABN 49 658 632 958)
Suite 14.01, Level 14, 111 Pacific Hwy, North Sydney NSW 2060
Email: admin@slamit.io (privacy enquiries, rights requests, complaints)


Annex A – Summary of CCPA Categories (illustrative)

  • Identifiers: name, email, phone, IP, device IDs.
  • Customer records: billing details (excluding full card numbers).
  • Protected classifications: not collected intentionally.
  • Commercial information: subscriptions, transactions, redemptions.
  • Internet/Network activity: browsing, app usage, interactions.
  • Geolocation: approximate; precise only with permission.
  • Sensory data: only where you submit audio/video/content.
  • Professional/employment/education: not routinely collected.
  • Inferences: profiles/preferences to personalise content/offers
  • Sensitive personal information: not sought; used/kept only as permitted and minimised.

Retention: as outlined in Section 10.
Sources: you, your devices, service providers, partners.
Business/commercial purposes: as outlined in Section 5.
Disclosures: service providers, partners, advertising/analytics (see Section 8).
Sale/Share: we do not sell for money; some advertising/analytics may be considered “selling/sharing”. Opt-out options provided (Section 15).


Annex B – Cookies & Tracking (illustrative)

  • Strictly Necessary: auth/session, security, load balancing.
  • Functional: preferences, performance.
  • Analytics: usage metrics, diagnostics (e.g., Google/Firebase).
  • Advertising: measurement, frequency capping, retargeting (e.g., Meta/TikTok/Google).

Manage preferences via browser/app settings and our in-product controls where available.


No Gambling Statement: SLAMIT is a skill-based competition and community platform. We do not offer wagering or accept bets. Participation does not involve staking money on outcomes.