AFC Privacy Policy Agreement

1. Introduction

The African Freefire Community (“AFC”, “we”, “our”, or “us”) operates a competitive esports and community platform serving players across Africa. This Privacy Policy explains how AFC collects, uses, stores, protects, and shares information when users access the AFC website, participate in tournaments, engage with the AFC metrics system, or use any AFC-integrated services.

By creating an account or participating in AFC activities, you agree to the practices described in this Policy.

2. Information We Collect

We collect data required to operate tournaments, maintain competitive integrity, enhance user experience, and secure the platform. This includes:

2.1 Identity & Profile Data

• Name (optional)
• Username / IGN
• Freefire UID
• Discord ID (for OAuth and verification)
• Email address
• Profile information you provide

2.2 Device & Technical Data

• Device type
• Operating system
• Browser type
• Device identifiers
• Advertising identifiers
• IP address
• Location data (coarse and device-based)
• Session activity
• Device fingerprinting data (anti-cheat and fraud prevention)

2.3 Gameplay & Performance Data

Collected automatically when you participate in AFC tournaments/scrims:

• Kills, damage, placements
• Team participation
• Tournament rankings
• Metrics and tier progression
• Ban or blacklist information

2.4 Payment & Transaction Data

• Payment card or wallet information (processed through third-party processors)
• Purchase history
• Prize payout records
• Financial verifications (if required)

2.5 Behavioural & Interaction Data

• Clickstream data
• Time on page
• Session analytics
• Engagement with website features
• Device behaviour signals used for anti-cheat and fraud prevention

3. How We Use Your Information

AFC processes collected data for the following business-critical purposes:

3.1 Security, Integrity & Anti-Cheat

• Detect cheating, fraud, smurfing, multi-accounting, impersonation
• Enforce bans, penalties, and blacklist decisions
• Protect tournament fairness
• Monitor suspicious device or location activity

3.2 Tournament Operations

• Verify player identity and eligibility
• Rank players and calculate metrics
• Manage leaderboards, rewards, and qualifications
• Maintain historical competition records

3.3 Platform Analytics & Personalisation

• Improve user experience
• Personalize tournaments, recommendations, and content
• Conduct performance analytics
• Monitor website usage and engagement

3.4 Marketing & Communications

• Send tournament updates, notifications, newsletters
• Deliver sponsor or partner announcements
• Discord-linked communications

(Users may opt out of marketing.)

3.5 Payments & Financial Processing

• Manage tournament prize payouts
• Handle user purchases
• Verify financial transactions for compliance

3.6 Legal & Compliance

• Respond to lawful requests
• Maintain audit trails
• Protect AFC’s legal, financial, and operational interests

4. Third-Party Data Processors

Your data may be shared with trusted third parties who support AFC operations. These partners process data strictly under AFC’s instructions.

These include:

• AWS – hosting and infrastructure
• Discord – identity verification and communication
• Analytics providers (Google Analytics, Mixpanel, or equivalent)
• Payment processors (e.g., Stripe, Paystack, Flutterwave)
• Anti-cheat or security providers
• Email service providers
• Development partners under NDA

AFC does not sell user data.

5. Data Retention

To preserve competitive integrity, prevent abuse, and maintain historical records, AFC retains certain data long-term.

5.1 Retention Schedule

• Account Data: retained for as long as the account remains active, and up to 10 years after inactivity.
• Tournament Data: retained indefinitely.
• Metrics, Rankings & Historical Performance: retained indefinitely.
• Ban / Blacklist Records: retained indefinitely.
• Device & Location Logs: retained for 5–7 years.
• Payment & Financial Data: retained for up to 7 years (standard financial compliance).

6. User Rights

AFC respects user rights while balancing the operational needs of esports integrity. Users may request:

• Access to their personal data
• Correction of inaccurate data
• Opt-out from marketing communications
• Opt-out from non-essential analytics tracking

Users cannot request deletion of:

• Tournament performance data
• Metrics, rankings, and historical records
• Ban or blacklist information
• Device or fraud-prevention identifiers
• Data tied to prize winnings or financial records
• Anti-cheat data

These categories are exempt from deletion to preserve competitive fairness and security.

7. Children’s Privacy

Participation in AFC requires users to be at least 13 years old, aligning with global online service standards and Discord’s minimum age requirement.

We do not knowingly collect information from anyone under 13.

Accounts found to be underage will be disabled.

8. Cookies & Tracking Technologies

AFC uses cookies and tracking tools for functionality, analytics, and security.

8.1 Mandatory Cookies (cannot opt-out)

• Functional site operations
• Authentication
• Anti-cheat and device fingerprinting
• Security monitoring
• Session management

8.2 Optional Cookies (opt-out allowed)

• Marketing cookies
• Analytics not tied to security or anti-cheat
• UX testing cookies
• Advertising identifiers

Users can manage preferences in their browser settings and AFC cookie banner.

9. Data Security Measures

We implement industry-standard security protocols, including:

• End-to-end encrypted data storage
• Strict access controls limited to developers and core management
• Two-factor authentication for admin access
• Audit logs for data exports
• No storage of personal data on staff devices
• Routine security reviews
• Automated threat monitoring

10. Cross-Border Data Transfers

By using AFC, you acknowledge that your data may be processed in Nigeria and other countries where we operate or maintain cloud infrastructure (including AWS regions).

We use reasonable technical and contractual safeguards to protect data regardless of location.

11. Data Breach Policy

AFC maintains a structured incident response protocol. In the event of a breach involving user data, AFC will:

1. Contain the breach and secure systems
2. Conduct a full investigation
3. Notify high-risk affected users
4. Provide disclosure within 72 hours when legally required
5. Document all findings and remediation steps
6. Apply sanctions for internal violations or misuse

12. Legal Basis for Processing

Depending on your region, AFC processes data based on:

• Contractual necessity (running tournaments, verifying eligibility)
• Legitimate interest (site security, anti-cheat, analytics)
• Consent (marketing, optional cookies)
• Legal obligations (financial records, fraud investigations)

13. Changes to This Policy

AFC may update this Privacy Policy periodically. Material changes will be communicated through the website, Discord, or email notifications.

Continued use of AFC services constitutes acceptance of changes.

14. Contact Information

For data queries, complaints, or access requests, contact:

African Freefire Community (AFC)

Email: info@africanfreefirecommunity.com

Discord: Official AFC Server