Terms and conditions

These terms govern the use of STRIKER PÁDEL, accounts and profiles, social interactions, matches and tournaments, sports integrity and the prevention of fraud and cyberattacks. The conditions of each event or transaction that the user accepts before participating or purchasing form part of the contract, without prejudice to their legal rights.

This English version is a translation provided for reference. If there is any discrepancy, the Spanish version prevails.

1 Operator identity and contact channels

1.1. The application called STRIKER PÁDEL is operated by Luis Fernando Magaña Hernández, with an address for service and notices at Diego Cuentas 632, Col. Jardines de Guadalupe, C.P. 44740, Guadalajara, Jalisco, México, and RFC (tax ID) MAHL970413KZ9. In this document it is referred to as the Operator. STRIKER PÁDEL is the name of the platform and does not replace the legal identification of the service provider.

1.2. The service channels are soporte@strikerpadel.com, hours Monday to Friday, 10:00 a.m. to 5:00 p.m., Central Mexico time (Guadalajara, Jalisco), privacy channel privacidad@strikerpadel.com and incident channel seguridad@strikerpadel.com. In-app reports complement these means. Users may contact us by email without signing in, even if they have lost access to their account.

1.3. Notices will be sent to the account email or through an accessible in-app mechanism, depending on their nature. Passwords, private messaging keys, recovery codes or administrative infrastructure keys will never be requested through a message from a supposed organizer.

2 Acceptance and related documents

2.1. Before creating an account or entering into a transaction, the user will have access to this complete version and may keep it. Acceptance must be made through an identifiable affirmative action. Mere browsing, silence or a pre-checked box does not replace the acceptance required to contract or give specific consent.

2.2. Using additional features may require accepting tournament rules, club conditions or the particular conditions of a transaction, identified before participating. No organizer may impose, after payment or registration, material conditions that were not validly disclosed and accepted.

2.3. The privacy notice explains how data is processed. Accepting these terms does not amount to consent to optional advertising, transfers requiring specific consent, processing of sensitive data or commercial exploitation of one's image. Such authorizations will be collected separately when necessary.

2.4. Mandatory law prevails. Particular documents may detail an event but may not reduce non-waivable rights or authorize conduct prohibited by these terms. Discrepancies will be resolved according to the information provided to the user and the applicable legal rules of interpretation.

3 Nature and scope of the service

3.1. STRIKER PÁDEL is a sports and social platform to create profiles, publish content, meet players, communicate, call matches, organize and participate in tournaments, view rankings and use streaming services and digital benefits. Each transaction is governed by the information, price and conditions shown before it is confirmed.

3.2. Each event must identify its organizer, venue, party responsible for collecting payments where applicable and party responsible for the sports service. When the Operator is also the organizer, seller, recipient of funds or provider of a specific service, it must state so expressly and assume the obligations legally corresponding to that role.

3.3. The platform is not a sports federation, betting house, financial institution, insurer or emergency service merely by providing sports tools. An internal "official tournament" designation or a badge does not by itself prove federation affiliation, solvency, insurance or a payment guarantee.

4 Age, capacity and participation of minors

4.1. People aged eighteen or over with sufficient legal capacity may register and contract by themselves. People under eighteen may participate in STRIKER PÁDEL and in matches or tournaments compatible with their age and category, with the prior, express and verifiable authorization of their mother, father, guardian or adult legal representative with the power to grant it. Authorization from an adult without such powers does not replace the necessary legal representation.

4.2. The minor's registration and profile must state their real age and be linked to the responsible representative, who accepts these terms within the scope of their powers, authorizes the corresponding features and participation and provides a means of contact. It is forbidden to register a false age, use an adult's identity to circumvent restrictions or claim to represent a minor without the power to do so.

4.3. The authorization must identify the minor, the representative, their capacity and the scope of what is authorized, whether account use, event registration or sports participation. The Operator and the organizer may proportionally verify identity, legal age, powers and validity of the authorization through a secure procedure, without publishing personal documents or collecting excessive data. A general authorization does not replace the specific authorization an activity requires by law or under its disclosed conditions.

4.4. The representative must guide and supervise the minor's use of the app and participation, review the event conditions and expressly authorize payments made under their responsibility. Organizing events, administration, receiving funds and independently contracting financial obligations are reserved for adults with sufficient powers. Not all of the minor's conduct or debts are automatically attributed to the representative beyond what they validly authorized or what the law provides.

4.5. The organizer and the venue will verify the authorization before admitting the minor and will respect age categories, safety measures, supervision and applicable protocols. They may require accompaniment when justified by age, activity or the disclosed rules. An adult other than the representative may accompany the minor with valid authorization from the representative, without thereby acquiring general powers of representation. A complete medical history is not required indiscriminately.

4.6. The best interests of the minor and their opinion, according to their age and maturity, will be taken into account. Their data, image, location and communications will receive reinforced protection. Authorization to play or use the account does not amount to consent to advertising, commercial exploitation of their image or unrestricted disclosure of personal information; the corresponding authorizations will be collected separately. The Operator and the organizer must maintain visibility and contact restrictions appropriate to the risk.

4.7. The representative may withdraw or limit the authorization through the support or privacy channel. New participation and features covered by the withdrawal will stop once the request is verified and processed, with any necessary immediate protective measures; pending registrations, payments and data will be resolved according to the law and the validly accepted conditions. No authorization implies a waiver of the minor's rights or exempts the Operator, organizer or venue from their own negligence or breaches.

4.8. Anyone representing an entity, club or organizer must have sufficient powers. Approval of a profile does not cure a lack of representation or authorize binding third parties who have not consented.

5 Registration and account information

5.1. The user will provide truthful information on material aspects for identification, contact, eligibility and transactions. They may use a public sports name where allowed, as long as it does not impersonate another person or mislead about their powers, certifications or affiliation with a club.

5.2. The email must be under the user's control. The user will keep the data needed for notices and transactions up to date. A self-declared sports level, an estimated availability or a photograph does not constitute certification of identity or skill by the Operator.

5.3. Accounts obtained through identity theft, third-party contact data, false documents or abusive automation are prohibited. Multiple accounts may not be used to evade sanctions, duplicate registrations, manipulate popularity, obtain repeated benefits or alter rankings. The legitimacy of related accounts will be assessed on the facts and not only on a shared IP address.

5.4. A good-faith error must be correctable through the available means. Detecting incorrect data, a rejected request or a network retry does not by itself prove fraudulent intent.

6 Credentials, sessions and recovery

6.1. The user will protect their password and device, avoid sharing access codes and report signs of compromise without undue delay. Using a unique password and any additional factors available is recommended. These precautions do not shift to the user responsibility for defects attributable to the Operator.

6.2. Selling, assigning, lending accounts to impersonate identities or using stolen accounts is not allowed. Club employees and collaborators will use individual access with differentiated permissions; they will not share an administrative password. People with administrative powers must use multi-factor authentication and keep their recovery means under their exclusive control.

6.3. Account recovery may require verifying control of the email or other elements provided through a legitimate channel. Checks proportional to the risk will be applied. Staff must not request the private key of conversations to recover an account.

6.4. In the event of a possible compromise, the Operator may require re-authentication, revoke sessions or permissions, suspend sensitive operations and apply additional verifications. Account closure will be accompanied by the appropriate access-denial measures. The user may not reuse sessions or tokens to circumvent a revocation or suspension.

7 Profiles, visibility and privacy

7.1. The profile screen must indicate which information is visible to other users. Sports data and content published as public may be viewed by the public enabled for that feature. A home address, identity document, financial data or other information intended to remain private should not be published in a bio.

7.2. The login email, credentials, administrative data and other information identified as private does not become public by accepting these terms. Obtaining, disclosing or selling other users' private data without authorization or legal basis is prohibited.

7.3. An authenticated account, a known URL or a profile identifier does not authorize editing another account. Accidental access to someone else's information must be reported and not exploited to copy it, disclose it or keep exploring.

7.4. Encryption in transit or at rest does not mean that every profile is secret or end-to-end encrypted. The modalities and limitations will be explained in the privacy notice and the current security information.

8 Community conduct and protection of people

8.1. Threats, persistent harassment, extortion, sexual harassment, unlawful discrimination, incitement to violence, dissemination of intimate images without consent, exploitation of people and any unlawful content are prohibited. Risks to people's safety and the protection of minors will be handled with priority.

8.2. Campaigns of false reports, fabrication of evidence, bought reviews, follower manipulation or the use of fictitious identities to fraudulently harm or favor someone are not allowed. A good-faith complaint, criticism, consumer dispute, communication to an authority or investigation will not be considered malicious conduct merely because it is uncomfortable for the Operator.

8.3. Friendship, follow, invitation or messaging features will not be used to send spam, insist after a block, harass, create networks of disposable accounts or extract contact information. A block is not a court order and does not remove content already legitimately received or published as public.

8.4. In emergencies, physical risk or a possible crime in progress, the competent authorities and services must be contacted. Internal channels do not replace those means or guarantee real-time emergency response.

9 Posts, images and third-party rights

9.1. The user retains the rights that correspond to them over their content and declares they have the necessary authorizations to publish it. By uploading it, they grant the Operator a non-exclusive license limited to hosting, processing, displaying and distributing it to the chosen recipients and making the technical adaptations needed to operate the requested feature.

9.2. The license does not authorize selling the user's personal image, using their conversations for advertising or turning their content into a commercial endorsement of the Operator. An identifiable promotional use of their image or testimony that requires additional authorization will be requested separately.

9.3. The license ends for future uses when the content is removed, except for the time technically needed for deletion, limited backups, legitimately shared content that cannot be removed from other people's devices and retention strictly necessary by law or dispute. No irrevocable and perpetual license to exploit any content is established.

9.4. Recordings of people in private spaces, personal documents or images of minors may not be published without the applicable authorizations and safeguards. Clubs and organizers must disclose the photography and streaming conditions. Registering for an event is not presumed to authorize any commercial use of one's image.

10 Prohibition of malware and cyberattacks

10.1. Introducing, hosting, linking, distributing or executing viruses, trojans, ransomware, spyware, credential-stealing programs, backdoors, deliberately malicious files or instructions intended to compromise the platform, its providers, staff or other people's devices is prohibited.

10.2. Phishing, fake login pages, fake APKs or updates, deceptive QR codes, support impersonation, session hijacking, denial of service, sabotage, unauthorized interception of communications and the sale of unlawfully obtained access are also prohibited.

10.3. Authorization to use the application does not allow altering its infrastructure. Security testing requires written authorization from the competent owner, a defined scope and respect for third-party rights. The technical availability of a resource does not imply permission to attack it.

10.4. The Operator may isolate files, pause downloads, revoke compromised sessions, block provided technical indicators, preserve evidence and request measures from providers or authorities. These powers will be exercised in a necessary and proportionate manner and do not authorize computer retaliation against the alleged attacker.

11 Manipulation of data, interfaces and permissions

11.1. Using the app, its APIs, external clients, scripts, real-time channels or automated tools to circumvent access controls, access other people's records, change owners, forge protected fields, delete information without authorization or grant privileges not granted is prohibited.

11.2. Exploiting SQL injection, insecure RPC functions, privileged functions, views, excessive permissions, real-time subscriptions, predictable identifiers or file misconfigurations is not allowed. The prohibition includes using exposed secret keys, stolen tokens or credentials obtained outside a legitimate procedure.

11.3. Exploiting duplicates, race conditions, request replays, negative values, out-of-range amounts or illegitimate changes of date or status to create non-existent payments, prizes, registrations, spots or points is prohibited. A response fabricated on the device may not be presented as authorization.

11.4. A server rejection of an operation does not grant the right to repeat it abusively or to look for a route to bypass its validation. The Operator must maintain adequate technical controls; this clause does not replace its obligation to fix vulnerabilities.

12 Automation, scraping and falsified data

12.1. Mass collection of private information, circumventing limits by rotating accounts or IPs, rebuilding contact directories, selling user databases or using private messages and data to train models without authorization and legal basis is not allowed.

12.2. Authorized integrations will respect the scope of permissions, volume and purposes granted. Interoperability, accessibility and uses permitted by law will be maintained. This clause is not intended to prohibit every legitimate tool or any copy of one's own data.

12.3. A user may not falsify booking documents, receipts, payer identity, attendance, ratings, results, court availability, sponsors, prizes or a partner's consent. Self-declared facts must be identified as such when there is no sufficient verification.

13 Attachments and links

13.1. Files must respect formats, size, rights and content rules. Disguising executables, manipulating file extensions or types, using compressed or multimedia files to exhaust resources, or including links intended to deceive or steal credentials is prohibited.

13.2. The Operator may apply technical checks, reject formats and quarantine suspicious files. It is not guaranteed that an antivirus or validation will detect every threat. Attachments in public channels do not become confidential because encrypted messaging exists in another feature.

13.3. The replacement, removal or unavailability of a file will be reported when it affects a relevant operation and it is possible to do so without aggravating an incident. Downloads outside authorized channels must not be required as a condition to confirm a registration or receive a prize.

14 Private messaging and limits of encryption

14.1. Only features expressly identified as end-to-end encrypted use that modality. In them, content is encrypted on the sender's device and decrypted with the keys of the authorized devices according to the current implementation. The use of TLS alone will not be presented as end-to-end encryption.

14.2. Encryption does not prevent the recipient from copying, capturing or disclosing what they receive, nor does it protect against a compromised device, a session left open to another person or an undetected impersonation. Verifying the available fingerprints or identity indicators through an independent channel before sharing sensitive information is recommended.

14.3. The Operator undertakes to protect private keys through secure device mechanisms, authenticate key exchange, detect improper modifications and replays and manage the revocation or replacement of devices. The security specifications explain the scope of encryption, identity verification, attachment handling and backup and recovery conditions. The user may consult them before using messaging.

14.4. The metadata needed to deliver messages, operate accounts, limit abuse and meet legal obligations is processed according to the privacy notice. The content of private conversations and their keys will not be used for advertising or included in debugging logs. Notifications will respect the user's privacy and preview preferences.

14.5. Recovering access to the account and recovering messaging keys are different procedures. Losing the device or the recovery means may prevent recovering previous messages, depending on the chosen backup conditions. The Operator will not request private keys to resolve reports. The user should verify notices of key or device changes before sharing sensitive information.

14.6. Message reports may voluntarily include a selection of content and context that the reporter is entitled to provide. This does not authorize the Operator to read all conversations or to promise to decrypt content it technically has no access to. Official requests will be handled regarding the information that legally and technically corresponds.

15 Organizers and proof of authority

15.1. Only those who obtain the corresponding permissions may create tournaments. Approval will be specific and revocable for justified reasons. It does not grant global administrator powers or access to other users' credentials, conversations or private information.

15.2. The organizer will declare their contact identity, representation where applicable, club authorization and right to use the venue. The Operator may request relevant checks proportional to the risk, avoiding excessive documentation. Fictitious verifications will not be charged, nor will a verification badge be shown that does not correspond to a real procedure.

15.3. The organizer is responsible for the truthfulness of what they publish and for the obligations they assume regarding the event, its payments and the delivery of prizes. Approval of an account is not a guarantee of solvency. If the Operator takes part in the organization or payment collection, this will not be hidden behind the status of intermediary.

15.4. Transferring permissions, lending organizer access, creating events on behalf of a club without authority or presenting a third party as sponsor, referee, federation or guarantor without their consent is prohibited.

16 Mandatory event information

16.1. Before opening registration, the following must be published in an understandable way: the name of the event and of the organizer, contact means, club and venue address, time zone, date, time or how it will be assigned, modality, category, permitted levels, eligibility requirements, number of teams and number of players per team.

16.2. The competition format, draw or seeding criteria, byes, tiebreakers, arrival tolerance, substitution rules, result validation procedure, prizes offered, justified restrictions, cancellation policy and any amount will be detailed. If a piece of information is not yet confirmed, it must be indicated as pending; it may not be stated as a guaranteed booking or prize.

16.3. Every fee will identify the currency, total, additional charges, recipient and receipt. Advertising an event with hidden mandatory charges as free is prohibited. No organizer may present an external payment as held, insured or guaranteed by STRIKER PÁDEL without express and valid coverage.

16.4. Category and modality requirements must be objective and compatible with the law and applicable sports inclusion. Later material changes will follow the change and cancellation rules and will not be used to arbitrarily exclude a participant.

17 Ghost tournaments and matches

17.1. For contractual purposes, a ghost event is a deliberately non-existent or substantially simulated call used to obtain money, data, access, benefits or the appearance of activity. It includes inventing a venue or booking, charging for non-existent spots, announcing prizes without the intention or reasonable possibility of delivering them, fabricating participants, simulating matches or publishing results of matches that were not played to gain advantages.

17.2. It is also prohibited to duplicate the same spot to sell it several times, impersonate an organizer or club, divert payments to undisclosed accounts, build decoy events for phishing or maintain a call known to be unfeasible while hiding that fact from those who will register or pay.

17.3. A legitimate cancellation, low attendance, operational error or force majeure is not automatically classified as fraud. The information provided, the diligence of the person responsible, the destination of funds and the notice and remedy measures will be examined.

17.4. Given reasonable indications, the Operator may suspend new registrations and promotion of the event, ask the venue for confirmation through an independent contact, request evidence of the booking or authorization and warn affected people in objective language. The event's badge or status must reflect the review without presenting a mere report as guilt.

17.5. Evidence may include venue confirmation, original rules and posts, bookings, payment provider receipts where they exist, registration records and result sheets. Continuous geolocation, biometric recognition or access to complete conversations will not be required as a general condition for presuming good faith.

18 Registrations, partners, spots and waiting list

18.1. An intention sent from the device does not by itself constitute a confirmed registration. The corresponding server status will be required and, where appropriate, the partner's acceptance and reliable payment confirmation. A notification failure does not authorize reselling a spot that had already been validly confirmed.

18.2. Registering a partner without their consent, accepting on their behalf, altering identities to circumvent levels, reserving multiple spots to resell them or using automation to prevent others from registering is prohibited. The invitation and its acceptance must be identifiable.

18.3. Spots will be allocated according to a published allocation criterion, including when a spot is reserved and how long it may remain pending. Simultaneous operations must not generate confirmations beyond capacity. The waiting list and the release of spots will be managed without hidden preferences.

18.4. Partner changes, substitutions, withdrawals and cancellations will be processed through the authorized procedure and recorded when they affect the integrity of the event. The fact that a participant cannot unilaterally modify a confirmed record does not remove their right to request corrections or cancellation according to the conditions and the law.

19 Dates, notifications and relevant changes

19.1. The publication will state the venue's time zone and applicable schedule. The organizer will check dates and avoid retroactive changes that hide breaches or alter registration priority. Times shown in the device's time zone must be distinguishable from the venue's time.

19.2. Changes of venue, date, modality, fee, category, prizes or rules that materially affect participation must be communicated in a timely manner. When they substantially change what was contracted or announced, the participant will have the corresponding options of acceptance, cancellation or refund, and silence will not be presumed to be acceptance of a detrimental change.

19.3. Notifications complement the registration information. Their delivery may depend on device permissions, connectivity or providers. Those responsible will keep a consultable record and a reasonable means of contact for critical incidents. This provision does not exempt the Operator or organizer from properly sending the notices they are responsible for.

20 Draws, results and correction of errors

20.1. Draws will be generated according to the disclosed format, seeding, order or drawing. They may only be modified by authorized staff, for a verifiable sports or operational reason and by recording the previous state, reason, person responsible and effects. A draw will not be changed to secretly favor participants or related people.

20.2. Results must correspond to matches actually played, byes, withdrawals or documented sports decisions. Collusion, buying results, fictitious acceptance of scores, impersonation of players and the use of false screenshots or receipts are prohibited.

20.3. The system will distinguish pending, confirmed and corrected results. The organizer will explain how a participant can express disagreement. Technical validation of a numeric field does not certify that the match took place or replace sports evidence.

20.4. A finished tournament will not be edited arbitrarily. Any later correction requires a documented review, competent authority, verifiable reason, preservation of the original data and communication of its impact on draws, rankings, prizes and registrations. During a dispute, the disputed effects may be provisionally suspended to avoid further harm, without deleting evidence or sanctioning people in advance.

21 Rankings, points and prizes

21.1. The scoring formula, eligibility and scope of the ranking must be consultable. Points may not be assigned by a decision fabricated by the client or by unauthorized server edits. Internal rankings must be distinguished from any external ranking.

21.2. Fabricating matches, repeating fictitious events, agreeing on losses, using related accounts or exploiting errors to obtain undue points or benefits is prohibited. Corrections must be able to recalculate the derived effects without imposing arbitrary losses on users who acted legitimately.

21.3. Each prize offered will identify who is obliged to deliver it, its nature, requirements, delivery date or procedure and, where applicable, the disclosed tax obligations. Cash or in-kind prizes are not presumed to be guaranteed by the platform if that guarantee was not expressly offered by whoever is obliged to fulfill it.

21.4. Fake prizes, unauthorized raffles and hidden charges to attract participants are prohibited. Promotions subject to special permits or requirements must meet them before being published. These terms do not authorize betting or games of chance.

22 Payments, receipts and external transactions

22.1. Before confirming a purchase, paid registration or subscription, the user receives information on the total price, currency, charges, provider, payment recipient, payment method, cancellation conditions and receipt. No transaction will be considered authorized merely by browsing, downloading the app or general acceptance of these terms.

22.2. Payment status is confirmed through the provider and the authorized server systems. A screenshot or a message from the client does not replace that confirmation. Tampered receipts, third-party identifiers, fake payment notifications, stolen cards and replays intended to generate duplicate balances or benefits are prohibited.

22.3. Transactions with third parties outside the app must identify the party responsible and may not be advertised as covered by non-existent protection. This does not remove the legal responsibilities arising from the Operator's actual involvement, its advertising or an omission attributable to it.

22.4. A good-faith chargeback or bank claim will not be presumed to be fraud. Collusion and the deliberate obtaining of a double refund may be investigated, respecting dispute mechanisms, evidence and applicable rights. No additional amounts will be charged without valid authorization.

23 Cancellations, refunds and events not held

23.1. Before contracting or charging, the following will be disclosed: who handles cancellation and refunds, the applicable cases, operational deadlines, contact method and relationship with the payment provider's conditions. A general "no refunds" policy will not be used to exclude legal rights or retain amounts for services not provided when a refund is due.

23.2. If an event is cancelled or what was offered is not materially provided, the person responsible will communicate the situation and the solution options. A new date, a coupon or a credit will not replace a legally due refund without the valid acceptance of the person affected. Charges may only be retained when there is a lawful, clear and proportionate basis.

23.3. In a suspected ghost event, the original charge, recipient, amount and committed service will be identified separately. Money received by each responsible party will be subject to their legal and contractual obligations. The Operator will not promise to reverse an external transfer it does not control, nor will it declare that it is never liable if it took part in the payment collection or the breach.

23.4. Contractual service deadlines do not shorten the statute of limitations or legal claim periods. Subscriptions identify duration, frequency, amount, renewal and an accessible cancellation mechanism before charging. Renewals require the legally necessary authorizations; cancellation stops future charges as of the date disclosed, without removing refunds due by law. Particular conditions may not make a right impracticable.

24 STRIKER Coins and virtual benefits

24.1. Reward STRIKER Coins are virtual units for internal benefits subject to published rules, with no monetary value, withdrawal right or guaranteed conversion to money. They are not deposits, investments, bank accounts or financial instruments and do not earn interest.

24.2. Falsifying rewards, altering transaction ledgers, using negative values or retries to create balance, duplicating gifts or redeeming benefits that do not correspond is prohibited. Errors will be reviewed with a verifiable history. Valid benefits will not be arbitrarily withdrawn to cover failures attributable to the Operator.

24.3. Coins are not resold or transferred outside the authorized mechanisms. No one may offer to convert them into money, sell balances of unlawful origin or demand external transfers to unlock them. Any purchase or benefit subject to a price requires specific information and authorization; displaying a balance does not authorize charges or guarantee the existence of a right to collect from the Operator.

25 Streams and recordings

25.1. Only those with the corresponding permissions and using the enabled means may broadcast. The broadcaster must have the rights, venue and personal authorizations and conditions needed to stream. Disseminating private information, minors without safeguards or unlawful content is not authorized because it is a sports event.

25.2. Viewers, chat and gifts are governed by the community rules. It is prohibited to pass off a recording as a live broadcast to induce payments or benefits, falsify commercial audience figures or announce non-existent prizes or coverage. A rebroadcast or recording must be identified when appropriate.

25.3. Broadcast conditions identify technical requirements, recording availability, retention and audience. The user must respect viewing authorizations and not attempt to access restricted streams or copy material in violation of rights. Ending a broadcast does not guarantee the removal of copies that other people have kept, legitimately or not.

25.4. Stream keys are private credentials. Publishing, selling or using them without permission is prohibited. In the event of abuse, a broadcast may be suspended and evidence preserved in accordance with people's rights and legal requirements.

26 Sports safety, accidents and venue responsibility

26.1. Playing padel involves physical risks inherent to a sports activity. Each participant must assess their condition and follow reasonable safety instructions. Seeking professional guidance when relevant is recommended. Complete medical histories will not be required as a general condition for using a sports social network. Voluntary participation or the authorization of a minor's representative does not constitute a waiver of claims for damages legally attributable to another person.

26.2. The individual or legal entity operating the club, establishment or rented court will be responsible, according to the law and the obligations it assumes, for the safety, maintenance, upkeep and suitability of the facilities and equipment it provides. This responsibility covers accidents and damages attributable to defects, lack of maintenance, unsafe conditions, failures of prevention or actions of its staff within the scope legally corresponding to it, including the surface, glass, fences, posts, lighting, access and elements under its control.

26.3. Before confirming the booking, the organizer must identify the venue provider and document the rental conditions and its commitments regarding safety and incident response. A venue that joins as a provider by accepting these conditions or a specific agreement will expressly assume the obligations set out in this clause towards whomever applicable. If it is not a party to that agreement, its obligations will derive from the law and the rental contract it has entered into; a player's acceptance does not allow a transfer of responsibility to be imposed on it unilaterally.

26.4. The venue manager must comply with the permits and civil protection, safety and accessibility measures required of it; warn of relevant risks, prevent the use of dangerous facilities and handle or channel incidents according to its obligations and capabilities. The organizer must reasonably check the conditions offered, report known risks and suspend or move the activity when a danger justifies it. An event may not continue in manifestly unsafe conditions because a digital acceptance exists.

26.5. When STRIKER PÁDEL acts exclusively as a communication, booking or digital management platform, that involvement does not by itself make it the owner, material operator or custodian of the court or a provider of medical care. Responsibility for the material conditions of the property lies with those who legally or contractually must answer for them. If the Operator organizes, controls, provides or assumes additional obligations, it will be liable according to its actual involvement; this clause does not exclude damages attributable to its own acts or omissions.

26.6. Each person will be liable for the damages legally attributable to them. Assigning obligations to the venue does not release the organizer, the Operator, participants or other responsible parties from their own negligence, breach or unlawful conduct, nor does it prevent concurrent or joint and several liability when the law provides it. The civil liability of a provider is not transferred to the player or an unrelated third party, nor is the exercise of rights conditioned on suing only the club.

26.7. Insurance, assistance or first-aid conditions must identify the provider, coverage, validity, limits and applicable procedure when they exist. The club or organizer will not advertise a non-existent or expired policy. Renting, registering or using STRIKER PÁDEL does not by itself imply taking out accident insurance. The existence or absence of insurance does not remove the corresponding liability or authorize delaying urgent care.

26.8. In the event of an accident, the person's safety and contacting the competent emergency services will take priority. The venue and the organizer must facilitate the identification of the provider, the incident contact and, where applicable, their insurer, and lawfully cooperate in preserving relevant evidence. An internal report does not replace medical care and is not a requirement to make a claim. Obligations of remedy, medical expenses and compensation will be determined according to the facts, valid contracts, coverage and applicable law, with reinforced protection for minors and health data.

27 Reports of fraud, abuse and incidents

27.1. Reports may be submitted through the enabled features or the channels in clause 1. It is recommended to indicate the event or account identifier, facts, dates with time zone, harm, relevant receipts and a secure means of reply. Private keys, passwords or active access codes will not be requested.

27.2. The information reasonably available will be provided. The absence of a screenshot, a blocked account or a disability does not automatically invalidate a claim. An alternative will be offered to those who cannot access the app.

27.3. Threats to people, possible charges for non-existent events, compromised access, exposure of private data and malicious files will be prioritized. A report does not by itself prove guilt. Information both supporting and contradicting the allegation will be reviewed.

27.4. The Operator will acknowledge receipt within three business days and communicate a reasoned decision or update within fifteen business days. If it needs more time, it will explain the reason and an estimated date. These deadlines are not an emergency service and do not replace stricter response or notification obligations imposed by law. Legal claims do not depend on exhausting this procedure.

28 Preventive measures and contractual sanctions

28.1. Depending on severity, risk, evidence and recurrence, warnings, activity limits, content removal, suspension of an event, suspension of organizer permissions or of the account and termination of access may be applied. Urgent measures may be taken before hearing the person when necessary to protect others or the infrastructure.

28.2. As soon as reasonable, the general reason, scope, effects and means of review will be communicated, unless disclosing specific details would aggravate a risk, expose third-party data or contravene a legal obligation. Restrictions must be reviewed when their basis disappears.

28.3. Automatic sanctions will not be imposed based solely on a shared IP, an automated system without adequate review or the filing of a complaint. Restoring access will not be conditioned on withdrawing legitimate reports or waiving rights.

28.4. When there are amounts paid or valid benefits, their consequences will be assessed separately. Suspension on suspicion does not authorize appropriating funds, deleting evidence or denying a refund that is due. Arbitrary contractual fines or automatic debits as punishment are not applied.

29 Review and sports disputes

29.1. The affected person may request a review at soporte@strikerpadel.com or the Help & support form in the app, explaining the disputed points. It is recommended to do so within fifteen business days to facilitate the operational review; the deadline does not extinguish legal actions or rights.

29.2. Relevant decisions by a person with a conflict of interest will be reviewed, when possible, by someone else. The correction or confirmation and its effect on draws, points, prizes and participants will be recorded.

29.3. The platform may facilitate communication but does not replace authorities, courts, consumer protection mechanisms or competent sports bodies. The internal review is not mandatory arbitration and does not condition access to legal remedies.

30 Digital evidence and auditing

30.1. To operate and handle disputes, the accepted versions of terms and event rules, dates, transaction identifiers, authorization records and relevant changes, notification records and legitimately provided evidence may be kept. Processing must be proportionate and comply with the privacy notice and the law.

30.2. Altering or destroying evidence to obstruct an investigation or harm another person is prohibited. The Operator will seek to preserve integrity, traceability and limited access to the necessary records. Absolute or irrefutable evidentiary value will not be attributed to a unilateral log.

30.3. An IP address, username or device fingerprint may contribute to an investigation but does not by itself identify the author of an act. Evidence will be assessed with its context, authenticity and applicable rules. Technical preservation does not guarantee that an authority will admit a document or rule in a particular way.

30.4. Specific preservation for a dispute must be delimited, reviewed and kept for the legally necessary time. It does not authorize keeping all private messages indefinitely or publicly disclosing files or data of alleged wrongdoers.

31 Security breaches and cooperation

31.1. In the event of a breach, the Operator will take the reasonable containment, assessment, recovery and correction actions that apply. It will inform affected people and authorities when legally required and through the appropriate means. An intrusion by a third party does not extinguish the data controller's own obligations.

31.2. A user who detects exposure or accidental access must report it to the security channel, limit themselves to the minimum evidence and refrain from persisting in the access, extracting third-party data, modifying records, extorting or disclosing sensitive information. No general testing authorization or automatic financial reward is offered.

31.3. A good-faith investigation carried out within a written authorization and its scope will be assessed according to those terms and the law. Responsible reporting of a finding should not be treated as abuse merely because it reveals a defect. This does not prevent investigating conduct that materially exceeded the authorization or affected third-party rights.

31.4. Requests from competent authorities will be handled with review of their scope and basis, without indiscriminately handing over databases or material unrelated to the request. There is no promise to decrypt conversations for which the Operator does not have keys.

32 Reservation of actions and remedy of damages

32.1. The Operator, the organizer and affected people retain the civil, commercial, administrative or criminal actions legally available in the event of fraud, unlawful access, malware, impersonation, disclosure of secrets, damage to data or other conduct. The type of action, jurisdiction and liability will depend on the facts and the applicable law.

32.2. Contractual breach may give rise to the measures provided and to the remedy of damages that are proven and legally attributable. This document does not create a crime, a prison sentence, a public fine or an automatic presumption of guilt.

32.3. Investigation, recovery and defense costs may only be claimed to the extent that they are reasonable, proven, causally linked and recoverable under the law or a valid ruling or agreement. Unlimited payment of fees or of all the Operator's costs is not imposed on any user.

32.4. When a professional organizer generates a third-party claim due to its proven breach, the corresponding legal remedy or contribution may be required from it, with notice and a reasonable opportunity to participate in handling it. Facts attributable to the Operator will not be covered in this way, nor will consumer rights be reduced.

33 The Operator's own obligations

33.1. The Operator undertakes to provide clear information about its involvement, maintain security measures appropriate to the risk, limit permissions, protect the data under its responsibility and handle reports with the required diligence. Reviews and verifications will be described accurately, without turning them into guarantees of solvency or the absolute absence of fraud.

33.2. The absolute absence of errors, intrusions or interruptions is not guaranteed. That technical limitation is not a general exemption, does not authorize keeping known defects untreated and does not remove the obligation to remedy harm when legally appropriate.

33.3. Responsibilities will be determined by the service assumed, the conduct, causation and the applicable legal rules. No waiver of non-waivable rights or automatic liability limit of zero is agreed because access is free.

34 Availability, maintenance and force majeure

34.1. There may be maintenance, updates or failures of connectivity and providers. Relevant disruptions will be reported when reasonable and continuity measures appropriate to the service will be put in place. An external dependency does not automatically exempt from every obligation assumed.

34.2. Only cases that meet the legal requirements will be considered force majeure or acts of God. An ordinary lack of funds, a booking that was never obtained or an avoidable organizational deficiency will not be treated as force majeure by mere declaration of the person responsible.

34.3. The corresponding effects, alternatives and restitution obligations will be communicated. This clause will not be used to improperly retain payments for services not provided or to delete the evidence of a disputed event.

35 Processing of personal data

35.1. The privacy notice is available at https://strikerpadel.com/privacidad and in the STRIKER PÁDEL app, under Settings → Help & support → Privacy notice. It identifies the controller, data categories, purposes, means to exercise rights, transfers and processing conditions. This contract does not replace that notice or any specific consent that is legally necessary.

35.2. Event verification and fraud prevention will be carried out with relevant data and retention limits. This clause does not authorize selling private information, publishing lists of alleged fraudsters, indiscriminate surveillance or using sensitive data for incompatible purposes.

35.3. Requests for access, rectification, cancellation and objection and other applicable requests will be handled through privacidad@strikerpadel.com, with proportional identity verification and within the legal deadlines. Delivering one's own data must not include conversations, data or secrets of other people to which there is no right of access.

35.4. Information about minors, health, biometrics or identity documents that exceptionally must be processed will require a specific assessment and the corresponding legal bases and safeguards. It is not requested as a general requirement for every sports account.

36 Account closure and deletion

36.1. The user may request the closure of their account through the available feature or the support channel. The identification procedure, pending operations, effects on content and conversations and any retentions with a legitimate basis will be explained. Closure will not be conditioned on illegitimate waivers.

36.2. Data is deleted, blocked or de-identified according to its purpose, retention obligations and the privacy notice. Backups and retentions for claims have restricted access and justified duration. Deletion does not include screenshots, messages or copies that remain outside the Operator's legitimate control on recipients' devices.

36.3. Deleting an account does not automatically cancel valid claims or authorize retaining data without basis. If there are pending organized events, participants will be protected through authorized replacement, cancellation or follow-up of obligations, without keeping unnecessary administrative access.

37 Intellectual property and use of the application

37.1. The Operator and its licensors retain the rights that correspond to them over the application, brand and their own materials. A limited permission to use the legitimate version for the authorized purposes is granted, subject to these terms and the conditions of the applicable app stores.

37.2. Distributing altered versions that impersonate STRIKER PÁDEL, using its brand to suggest a guarantee not granted or removing security notices to deceive users is prohibited. Third-party rights and uses permitted by law will be respected.

37.3. Content claims must identify the material, the affected right and sufficient grounds. They will be reviewed proportionately, avoiding removing legitimate content because of manifestly abusive reports. Rectification or review will be facilitated when appropriate.

38 Changes to terms and features

38.1. New versions will be identified with a date and will remain available for consultation. Material contractual changes will be notified in advance and acceptance will be requested when necessary. They will not be applied retroactively to reduce acquired rights, change a transaction already entered into or excuse a prior breach.

38.2. A necessary technical security update may be implemented in a timely manner and communicated appropriately. It will not be used as a pretext to impose charges, data purposes or commercial conditions that were not consented to.

38.3. If a paid feature is modified or ends, the applicable obligations regarding services, cancellation and refunds will be met. Continued use will not replace express acceptance when the law or the nature of the change requires it.

39 Applicable law and means of complaint

39.1. Relationships subject to Mexican law are governed by the corresponding federal and local provisions. In commercial relationships between companies, any jurisdiction agreement must be validly entered into in writing and will not displace mandatory jurisdiction; in the absence of an agreement, the legal rules of jurisdiction will apply.

39.2. Consumers retain access to the authorities and courts that correspond to them, including PROFECO mechanisms when applicable. Personal data matters may be submitted to the current competent authority. No one is required to go to foreign courts or to mandatory private arbitration as a condition to exercise non-waivable rights.

39.3. Internal contact or conciliation are alternative means of resolution, not general requirements to sue or file a complaint. Legal statutes of limitations and the powers of the authorities are not reduced by these terms.

40 Final provisions and electronic acceptance

40.1. If a provision proves invalid, the others will remain in force as far as legally possible, without using that severability to preserve an unlawful imbalance. Failure to immediately exercise a power does not by itself amount to waiving it.

40.2. The assignment of the service or a change of controller will be communicated and will be subject to the applicable legal, contractual and privacy conditions. It does not authorize automatically transferring conversations or data for incompatible purposes.

40.3. The user must receive access to the accepted version. The Operator will keep reasonable evidence of the acceptance action, account identifier, version, date and mechanism used, in accordance with the privacy notice. A checkbox does not by itself prove a person's identity or make the contract irrefutable.

40.4. Acceptance is expressed through an initially unchecked box or an equivalent mechanism that shows: "I have read and accept the STRIKER PÁDEL Terms and conditions, version 1.2 of 04/11/2026, and I can keep a copy. I have had access to the Privacy notice". Optional authorizations and specific consents are presented separately.

40.5. Before confirming a registration, the participant must be able to consult and accept the specific rules of the event. The record will keep the version of the accepted rules and the express decision of each member of the pair where applicable.

41 Authorization, integrity and security commitments

41.1. The Operator undertakes to apply server-side access controls and to separate public from private information. A valid authentication does not grant access to other people's records. External applications, APIs, privileged functions, views and real-time channels will be subject to authorization according to their purpose and risk level.

41.2. Administration, organization, moderation and financial management powers are distinct and limited to authorized operations. Owner identifiers, roles, balances, payments, rankings and audit fields cannot be unilaterally modified by a user through their device, a profile change or direct requests.

41.3. The Operator undertakes to validate data, statuses and relationships; prevent duplicate effects in simultaneous operations; set limits against abuse; restrict administrative credentials; and manage software vulnerabilities and dependencies according to risk. Authorization of an operation is not based exclusively on information controlled by the client.

41.4. Private conversations and their files are governed by the privacy modality indicated before sending. The Operator undertakes to prevent access by non-participants, protect key exchange and apply recognized cryptographic techniques in features identified as encrypted. It will not hand over unprotected private keys to third parties or use account reset as authorization to disclose private history.

41.5. Changes to permissions, results, charges and other high-impact operations leave a record of actor, date, object and decision in protected logs in accordance with the privacy notice. The Operator limits access to and retention of them to legitimate purposes and applies measures to detect alterations. Auditing does not authorize unlimited surveillance or replace the legal assessment of evidence.

41.6. Controls reduce risks and support the investigation of incidents, but do not guarantee that a third party will never commit fraud or that every attack attempt will be detected. The obligations of the Operator, the organizer and the user are determined by their actual involvement, the accepted conditions and the applicable law.