Effective from 22 September 2026
This policy explains what personal data we process when you use the virtualesport.com platform (the “Platform”), why we do it and what rights you have. It has been prepared in accordance with Regulation (EU) 2016/679 (GDPR) and the Bulgarian Personal Data Protection Act.
1. Who processes your data
The controller of your personal data is the organiser of Virtual Esport, who operates the Platform (“we”). For any question about personal data, write to us at virtualesport44@gmail.com or through the contact form.
2. What data we process
Player profile
email address and password (the password is stored only in protected (hashed) form from which it cannot be recovered);
nickname (gamertag), first and last name (optional);
discipline, role (driver or engineer), team, race number, country (shown as a flag);
profile picture, if you upload one.
Sign-in with Google
If you sign in with “Continue with Google”, Google gives us your name, email address and the address of your profile picture. We have no access to your Google password.
Taking part in tournaments
event registrations (selected league, car);
results, standings and statistics (points, positions, lap times, goals, cards, etc.);
requests to join a team and team manager roles.
EA SPORTS FC statistics
For the EA SPORTS FC (Pro Clubs) disciplines we automatically download public match data from Electronic Arts servers: EA gamertag, club, position and match statistics (goals, assists, rating, etc.). We link them to your profile when the gamertag in your profile matches the one in EA. You did not give us this data directly - its source is Electronic Arts.
Contact form
Name, email, subject and message. To protect against spam we keep a shortened cryptographic fingerprint (hash) of the IP address, not the address itself.
Broadcasts
Nickname, team, results and in-game image in Virtual Esport broadcasts and publications and, if you take part in a broadcast with a camera or microphone, your image and voice.
Data for paying out a prize
Only if you win a cash prize: full name, Bulgarian personal or foreigner number (for foreign persons - their tax number), address and bank account (IBAN). For a minor winner - also the parent’s details.
Technical data
Cookies needed for sign-in and for the site language (see the Cookie Policy). The hosting provider may keep standard technical logs (IP address, date and time of the request) for the security of the service.
3. Purposes and legal bases
Profile, sign-in, taking part in tournaments and public standings - performance of the contract with you under the Terms and Conditions (Art. 6(1)(b) GDPR). Public standings are an essential part of the “league” service.
EA statistics and linking them to your profile - our legitimate interest in keeping accurate and complete league statistics (Art. 6(1)(f)).
Archive of results after a profile is deleted - our legitimate interest in keeping the sporting history of the league.
Broadcasting matches and races and publications about them - performance of the contract (Art. 6(1)(b)) and our legitimate interest.
Service emails (email confirmation, new password, team notifications) - performance of the contract. We do not send marketing emails.
Replying to contact form messages - our legitimate interest in answering your enquiry.
Security and protection against spam and abuse - our legitimate interest.
Data for paying out prizes - legal obligation under the Bulgarian Personal Income Tax Act and Accountancy Act (Art. 6(1)(c)).
Loading the Twitch stream - your consent, given by pressing the load button.
Email, nickname, discipline and role, and for email registration also a password, are required to create a profile. Without them you cannot take part in tournaments.
4. What is public
The following are publicly visible on the Platform: nickname, first and last name (if you filled them in), profile picture, flag, team, number, role, results, standings and statistics, as well as your participation in upcoming events. Your email address is never shown publicly. Player profiles may be indexed by search engines.
If you do not want your real name to be visible, leave the name fields empty and use only a nickname.
5. Who receives the data
Hostinger - hosting of the Platform and its database;
Resend (USA) - sending service emails;
Google (USA) - only if you sign in with Google;
Twitch Interactive, Inc. (USA) - when you load the stream on the Platform and through the broadcasts on the Virtual Esport Twitch channel;
viewers of the broadcasts and followers of Virtual Esport on Facebook, Instagram and TikTok - nickname, team, results and in-game image from broadcasts and publications;
the managers of the team you apply to - your name or nickname and the request;
public authorities (e.g. the Bulgarian National Revenue Agency) where the law requires it.
We do not sell personal data and do not use it for advertising.
6. Transfers outside the EU
Resend, Google and Twitch process data in the USA. Transfers are based on the EU-US Data Privacy Framework (Commission Implementing Decision (EU) 2023/1795) and, where it does not apply, on the standard contractual clauses approved by the European Commission.
7. How long we keep the data
profile - until it is deleted; a profile with no sign-in for 24 months may be deleted or anonymised;
results and standings - as part of the league history; after a profile is deleted they may remain only with the nickname or anonymised;
contact form messages - up to 12 months after the last reply;
prize payout data - 10 years, as required by the Bulgarian Accountancy Act;
technical logs - according to the hosting provider’s retention periods.
8. Your rights
You have the right to:
access your data and receive a copy;
rectification - you can change most data yourself in your profile;
erasure (“right to be forgotten”);
restriction of processing;
data portability;
object to processing based on legitimate interest;
withdraw consent at any time, without affecting processing before the withdrawal.
To exercise your rights, write to us at virtualesport44@gmail.com. We reply within one month. You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria, www.cpdp.bg, kzld@cpdp.bg, or with the supervisory authority in your country of residence.
9. Minors
Persons aged 14 or over may register on their own. For persons under 14 a profile may be created only by a parent or guardian (Art. 25c of the Bulgarian Personal Data Protection Act). Persons aged 14 to 18 use the Platform with the knowledge and consent of a parent, and taking part in a tournament with a cash prize requires a parent’s express consent. The prize is paid through the parent. If we learn that a profile was created by a child under 14 without parental consent, we will delete it.
10. Security
Passwords are stored only in hashed form, the connection to the site is protected (HTTPS) and access to the administration is restricted by role.
11. Automated decisions
We do not take decisions based solely on automated processing that produce legal effects for you. The automatic linking of EA statistics to your profile can be corrected by an administrator at your request.
12. Changes
We may update this policy. In case of significant changes we will notify you on the Platform. The date from which the current version applies is shown at the top.