Back to Home
PDPA Compliant Version 2.0

Platform Privacy
Policy & Terms.

Last Updated: October 2026•Jurisdiction: Singapore (PDPA 2012)

Welcome to Chessmatic. We commit to protecting your personal data in accordance with the Singapore Personal Data Protection Act 2012 (PDPA). This policy outlines how we collect, use, disclose, and manage your data, incorporating regulations regarding user-uploaded photography, images, and real-identity verification assets.

01

Collection of Personal Data

We collect personal data required to provide seamless online chess multiplayer services, tournament management, and fair-play tracking. This includes:

Account InformationUsername, email address, password, country, and birth year.
Gameplay & Performance AnalyticsMove history, Elo ratings, timestamps, and anti-cheating telemetry metrics.
Photography and Visual MediaUser-uploaded profile pictures (avatars), photographic evidence uploaded for tournament identity verification, promotional event snapshots, and webcam captures if explicitly authorized during proctored competitive events.
Payment DataTransaction details through our third-party billing gateway operators.
02

Specific Rules for Photography & Images

When you upload photographs or grant camera permissions to Chessmatic, the following PDPA data protection mechanisms apply tightly:

Purpose Limitation

Profile images are used solely for user personalization. Identity-verification photos are utilized strictly to validate tournament eligibility and prevent multi-accounting. They are never repurposed for marketing without explicit, separate consent.

Biometric Data Clarification

Chessmatic does not extract geometric facial templates or utilize biometric processing algorithms unless explicitly stated for high-tier professional prize tournaments.

Public Exposure Control

Images uploaded as public avatars will be accessible to other network users. You can remove or replace your profile photograph at any point via your Account Settings dashboard.

Prohibited Content

Uploaded images must not contain explicit material, copyrighted works belonging to third parties, or metadata violating the privacy of other individuals.

03

Compliance with PDPA Core Obligations

3.1 Consent & Purpose Limitation Obligations

By creating an account or uploading photographs, you consent to the processing of your data for the defined functionalities. We do not sell or lease your identity documents or personal imagery to advertisers.

3.2 Access and Correction Obligations

You maintain the legal right to request access to your historical account data or update outdated information (such as changing a profile photo or legal name). Contact our Data Protection Officer for formalized queries.

3.3 Protection Obligation

We implement institutional firewalls, transport-layer encryption (SSL/TLS), and restricted admin panels to safeguard all user records, especially sensitive identity documents and verification photography.

3.4 Retention Limitation Obligation

Verification photography is destroyed safely within 30 days following tournament completion. Standard profile pictures and logs are retained for the active lifecycle of your account or until deletion is formally requested.

04

Data Protection Officer (DPO) Contact Info

For any data correction requests, withdrawals of consent regarding photography or marketing tracking, or queries concerning our PDPA practices, please reach out directly to our DPO unit:

Attention: Data Protection Officer, Chessmatic SG Team

dpo@chessmatic.com

Contact DPO
Confidential & Proprietary | Chessmatic © 2026 • Singapore PDPA Compliant