Privacy notice

This English version is a translation provided for reference. If there is any discrepancy, the Spanish version prevails.

This notice covers the features of STRIKER PÁDEL: sports and social profiles, posts, messaging, location and maps, clubs, matches, tournaments, rankings, challenges, live streams, memberships and monetization.

1. Identity and address of the controller

The controller of the personal data collected through STRIKER PÁDEL (the "Platform") is Luis Fernando Magaña Hernández, with address at Diego Cuentas 632, Col. Jardines de Guadalupe, C.P. 44740, Guadalajara, Jalisco, México (hereinafter "STRIKER" or the "Controller").

For questions, requests or privacy matters, you can contact the responsible area at: privacidad@strikerpadel.com.

2. Personal data we may process

Depending on the features you use, STRIKER may process the following categories:

• Identification and contact: name or alias, username, email, phone number, profile photo and access data.

• Profile and sports activity: declared level, playing position or modality if enabled, results, match history, statistics, challenges, tournaments, scores, badges, ranking and sports validations.

• Content and social activity: posts, photos, videos, stories, comments, reactions, followers, lists, messages and reports you create or share.

• Location: approximate or precise device location, only when you enable the corresponding permission and use features such as nearby clubs, maps, tournaments or local activity. You can disable the permission from your device; some features will stop being available.

• Technical and usage data: IP address, device identifiers, operating system, language, access logs, usage events, diagnostics, cookies or similar technologies on the web and data needed for security and fraud prevention.

• Transaction and membership data: plan purchased, payment history, renewals, purchases, donations, virtual coin balance and related movements. Full card or payment method data is processed by payment providers; STRIKER does not store it unless expressly disclosed and there is a legitimate need.

• Tax and payout data: RFC (tax ID), name or business name, tax address, tax regime and certificates or bank details needed to validate and make withdrawals or payments to monetizing users, when this feature is enabled.

• Communications and support: messages sent to the support team, requests, comments, reports and evidence you provide.

Sensitive personal data. As a general rule STRIKER does not intend to request sensitive personal data. If in the future it incorporates health, injury, biometric or other data that is legally sensitive, this will be specifically disclosed, express written consent will be requested when the law requires it, and additional controls will be enabled. Avoid including medical information in posts or messages.

3. Purposes of processing

Purposes necessary to provide the service:

• Create, authenticate and manage your account; maintain your profile and preferences.

• Display profiles, posts, sports activity, matches, results, rankings, tournaments and statistics according to the visibility settings you choose.

• Enable social features: follow accounts, publish content, comment, react, send messages and report content or conduct.

• Show nearby clubs, courts, events and tournaments, and provide map and location-based discovery features when you grant permission.

• Manage challenges, sports participation, result validation and recognition of authorized organizers.

• Manage memberships, payments, virtual coins, donations, monetization, withdrawals and applicable accounting or tax obligations.

• Protect the Platform and prevent fraud, abuse, impersonation, unauthorized access and conduct contrary to the rules.

• Provide support, operational notifications, service changes and essential communications.

• Comply with legal obligations and respond to valid requests from authorities.

Secondary (optional) purposes:

• Send advertising, promotions, news, campaigns, surveys and commercial communications from STRIKER or its partners.

• Personalize recommendations of content, clubs, events, brands, products or services through analysis of preferences and activity.

• Produce aggregate statistics for research, product improvement and usage analysis.

You can object to secondary purposes or withdraw your consent at any time without affecting the use of essential features. To do so, write to privacidad@strikerpadel.com or use the preference controls available on the Platform.

4. Visibility of profiles and content

STRIKER is a platform with social features. Information you publish in public spaces or mark as visible to others may be viewed, shared, captured or reproduced by other users, depending on the available tools and their own actions. This may include username, photo, bio, results, statistics, posts, comments, activity at clubs and tournament participation.

Before publishing, review the audience and available privacy settings. Do not publish third parties' personal data without authorization. Private messages will not be shown publicly as part of the profile, although they may be processed in a limited way to deliver the service, protect users, investigate reports and comply with legal obligations.

Live streams may show your image, voice, username, visual location or that of other people present. If you take part in or appear in a stream, keep in mind that the content may be viewed or recorded by third parties.

5. Location and device permissions

Location will be used for features you request, such as finding nearby clubs, viewing tournaments or discovering sports activity in your area. STRIKER will request the operating system permission before accessing precise location. It is not necessary to enable it to create an account or use features that do not depend on it.

You can manage or revoke the permission from your device settings. The Platform may keep locations associated with events or posts if you choose to share them; delete or edit that content when the feature allows it.

6. Transfers and providers

STRIKER may share personal data with providers that support the operation of the Platform, under instructions and confidentiality and security measures, for example:

• Hosting, database, file storage, infrastructure and content delivery services.

• Authentication, email, SMS, notification, analytics, monitoring and support providers.

• Payment processors, financial institutions and verification providers to manage charges, refunds and withdrawals.

• Clubs, tournament organizers or authorized administrators, to the extent necessary to manage registrations, validate results or provide a feature you request.

• Competent authorities, when there is a legal obligation or valid request.

Some providers may process information from other countries. STRIKER identifies each provider, reviews their processing conditions, establishes appropriate contracts and documents the corresponding transfers in accordance with applicable law. Personal data will not be sold to third parties.

7. Retention and deletion

We will keep data for as long as necessary to fulfill the purposes described, maintain your account, provide the services, resolve disputes, prevent fraud and comply with legal, tax or contractual obligations. When data is no longer necessary, it will be deleted or subjected to a blocking procedure and subsequent erasure where appropriate.

If you request deletion of your account, we will deactivate or delete the information according to the applicable deadlines and obligations. We may keep certain records for the necessary legal period, for example payment receipts, security logs or information related to disputes. Content that other users have shared, captured or republished outside STRIKER may not be removable from our systems.

8. Information security

STRIKER implements reasonable administrative, technical and physical measures to protect data against damage, loss, alteration, destruction, use, access or unauthorized processing. These measures may include role-based access controls, authentication, encryption in transit, backups, monitoring and incident management.

No system is completely infallible. If a breach occurs that significantly affects your property or moral rights, STRIKER will make the corresponding communications in accordance with applicable law.

9. ARCO rights and withdrawal of consent

You can exercise the rights of Access, Rectification, Cancellation and Objection (ARCO), as well as withdraw consent where applicable, by sending a request to privacidad@strikerpadel.com with the subject "Solicitud de privacidad STRIKER".

The request must include: (i) the data subject's name and a means to receive a reply; (ii) documents proving identity and, where applicable, representation; (iii) a clear description of the data regarding which the right is to be exercised; (iv) the right to be exercised or specific request; and (v) any elements that help locate the information.

STRIKER may request additional information when necessary to prove identity or clarify the request. The reply will be issued within the deadlines set by current legislation. Cancellation or objection may be subject to legal exceptions, retention obligations or third-party rights.

You can also limit promotional communications through the unsubscribe link included in them, when available, or by writing to the email above.

10. Cookies and similar technologies

On the website, STRIKER may use cookies, SDKs, pixels or other technologies to maintain sessions, remember preferences, protect the account, measure performance and, if enabled, personalize content or advertising. You can manage cookies from your browser and permissions from your device. Blocking certain technologies may affect how some features work.

11. Minors

STRIKER PÁDEL is intended for people aged 16 or older; accounts of people under 16 are not allowed. If we detect an account belonging to someone under that age, we will deactivate it and delete its data.

If the Platform allows underage users, a mother, father or guardian authorization flow, reinforced privacy controls, contact restrictions and specific measures for streams, location and public content apply.

12. Changes to the privacy notice

STRIKER may update this notice due to legal, technical or operational changes. The current version will be available at https://strikerpadel.com/privacidad and in the STRIKER PÁDEL app, under Settings → Help & support → Privacy notice and, when changes are relevant, they will be communicated through the app, email or another reasonable means. The date of the last update appears at the beginning of the document.

13. Authority and legal framework

This notice is interpreted in accordance with the Federal Law on the Protection of Personal Data Held by Private Parties and other applicable Mexican provisions. Data subjects may go before the competent personal data protection authority according to the current institutional framework.

Official legal reference: Chamber of Deputies, Federal Law on the Protection of Personal Data Held by Private Parties: https://www.diputados.gob.mx/LeyesBiblio/pdf/LFPDPPP.pdf. Publication of the new law: Official Gazette of the Federation (DOF), March 20, 2025.