Consent to the Collection and Processing of Personal Data

Person giving consent and Operator

1.1I, the data subject identified through my account details or separately verifiable consent, or their legal representative, consent to DF League processing data for dronefootball.kz and league activities within the scope below, under Kazakhstan’s Law No. 94-V of 21 May 2013 on Personal Data and their Protection. Contact alikhan.ryspay@gmail.com.
1.2Actively checking the box and submitting the onboarding form expresses the account holder’s consent. The system records acceptance time and version 1.0. Consent for another person requires legal authority and a method that allows it to be verified.

2.1For accounts: first and last name, email, language, email verification, WorkOS ID, account status, acceptance time and document version; for security: session/token identifiers and hashes, expiry, encrypted provider session, OAuth state, MFA information where applicable, action and change audit records.
2.2For teams and participation, as supplied: school or club, region, city, team, logo, organization and roster roles, coach/representative associations, optional contact email/phone, participant first and last name, birth date, nickname, season, application, roster snapshots and results.
2.3Legal-representative name and authority basis, consent kind and duration, grant/withdrawal dates and recording person; invitation email, role, token hash, expiry and response; ownership-transfer records and service notifications; correspondence and materials I submit. Where separately authorized for publication, name/nickname, team association and photos/videos within that permission.
2.4See the Privacy Policy for categories, sources and retention criteria. This consent does not require identity documents, health information or other excessive data that the site does not collect.

Creating accounts, authenticating sign-in and managing profiles and access.
Registering teams, rosters and applications; checking age categories, consents and authority.
Moderation, event administration, results and rankings; public display within separately authorized scope.
Service invitations and emails, enquiries, security and evidence of actions.

4.1For these purposes, I consent to automated and manual collection, recording, organization, accumulation, storage, correction, use, access restriction, anonymization, blocking and destruction. Disclosure is limited to recipients needed for these purposes and to the extent the law permits.
4.2Staff, authorized representatives within their own organization/team, organizers, hosting/technical providers and the configured SMTP provider may have task-related access. Service emails contain the recipient address, message and one-time link.
4.3Distribution to the public, including a name or nickname, team association and photos/videos visible to an indefinite audience, must stay within separate publication consent.

5.1To enable sign-in, I consent to transferring my email, first and last name, account and sign-in identifiers and technical authentication information to WorkOS in the United States of America. Passwords entered at WorkOS and its session are processed by that service. Transfers must meet Kazakhstan’s legal protection and consent requirements.
5.2I am informed that loading Google Fonts through fonts.googleapis.com and fonts.gstatic.com sends Google an IP address and technical request information independently of cookie choices. See recipients.
5.3This consent does not waive Article 12(2)’s requirement for database storage in Kazakhstan or certify the location of production hosting.

6.1When acting for a child, I confirm that I am their legal representative or properly supply valid consent from that representative. A separate consent must identify the child, representative, authority, scope and duration of processing and allow receipt of consent to be evidenced.
6.2Data about anyone under 18 requires legal-representative consent. For children under 14, an adult acts through their own account; users aged 14–17 need prior representative consent for an individual account. Being a teacher, captain or coach does not itself confer legal-representative status.
6.3An adult’s account checkbox does not evidence consent for every child on a team. Participation, public-name and image permissions are handled separately for each child.

7.1Only where I provide separately verifiable publication consent, I authorize, within its scope, my name/nickname, team association and identifiable photos or video to appear on DF League team, results, news and media pages. A child’s legal representative must give that permission for the child.
7.2Permission covers competition reporting and the league archive, not blanket advertising, image sales or unrelated uses. Participation consent and the account checkbox do not replace separate publication permission. Refusing publication does not by itself prevent competition participation.
7.3To stop publication, email the relevant material link to our contact address. Copies and search indexes may exist online; we will take legally required steps for publications we control.

8.1Consent runs from confirmation until the stated purposes are met or consent is withdrawn, subject to mandatory legal retention. A shorter period in a separate representative consent governs that consent. See retention criteria.
8.2Withdraw by emailing alikhan.ryspay@gmail.com with the account email, scope of withdrawal and your authority if acting as a representative. We answer general requests within 10 working days, or sooner where a shorter legal deadline applies; special statutory deadlines are not extended.
8.3Withdrawal does not invalidate earlier lawful processing. We will explain any restriction where withdrawal conflicts with law or an obligation remains unfulfilled. Other processing must stop and data without a lawful basis must be deleted or anonymized; services requiring that information may become unavailable.

9.1I have had the opportunity to read the Terms of Use, Privacy Policy and this document, including my rights and contact procedure. The checkbox is not preselected. Consent covers only the stated scope; separate representative verification and publication permissions remain required.
9.2Version 1.0, effective 2026-10-17. Operator: DF League, dronefootball.kz; alikhan.ryspay@gmail.com.