Privacy Policy

Sesigo Hive (Pty) Ltd("Sesigo Hive", "we", "us") is the data controller responsible for your personal information collected through this platform, in accordance with the Botswana Data Protection Act, 2018 (Act No. 32 of 2018).

Our designated Data Protection Officer (DPO) can be reached at admin@sesigohive.co.bw.

We collect the following categories of personal data, depending on your role on the platform:

We process your personal data under the following lawful bases as defined in Part III of the Botswana DPA:

• ·Consent (s.7) — You provided explicit consent at registration by accepting this policy. You may withdraw consent at any time (see Section 8).
• ·Contractual necessity (s.8(b)) — Processing is necessary to provide the league management services you registered for.
• ·Legitimate interests (s.8(f)) — Platform security, fraud prevention, audit logging, and analytics to improve the service.
• ·Legal obligation (s.8(c)) — Compliance with Botswana sports regulation, Botswana Football Association (BFA) requirements, and FIFA Connect data standards.

• ·Authenticating your account and maintaining session security
• ·Reviewing and approving/rejecting role applications (admin workflow)
• ·Displaying team rosters, fixtures, standings, and results on the public platform
• ·Assigning referees to fixtures and tracking officiating records
• ·Generating match reports compatible with FIFA Connect / Transfer Matching System (TMS)
• ·Sending administrative notifications (password resets, account status changes)
• ·Compiling anonymised analytics on platform usage and popular content
• ·Maintaining audit logs of admin actions as required by sports governance bodies

We do not sell your data, use it for targeted advertising, or share it with third parties outside the scope described in Section 5.

Your data may be shared with the following parties for the purposes described:

• ·Botswana Football Association (BFA) — Player registration data, club affiliation, and match results may be reported to the BFA as required by league regulations.
• ·FIFA Connect / TMS — Where a FIFA Connect ID is assigned to a player or club, that data (name, date of birth, nationality, club affiliation, transfer status) is shared with FIFA's global registration system. FIFA's own privacy framework governs this data once transferred. See FIFA Privacy Notice.
• ·Hosting infrastructure — Your data is stored on servers located in or accessible from Botswana. No cross-border transfers occur beyond the FIFA data sharing described above.
• ·Law enforcement — We may disclose data if required by a valid court order or statutory obligation under Botswana law.

• ·Active accounts — Retained for the duration of your account plus 2 years after closure, for audit and dispute resolution purposes.
• ·Rejected/withdrawn applications — Deleted after 90 days.
• ·Password reset tokens — Automatically expire after 1 hour and are purged from the database.
• ·Session tokens — Expire after 8 hours and are invalidated on logout.
• ·Analytics data — Retained in aggregated, anonymised form for up to 2 years. Raw session data is deleted after 30 days.
• ·Match records & audit logs — Retained indefinitely as part of the official league record.

We implement the following technical and organisational measures (DPA s.19):

• ·Passwords hashed with bcrypt (cost factor 12) — never stored in plain text
• ·Session tokens stored in httpOnly, Secure cookies — inaccessible to JavaScript
• ·All admin actions recorded in an immutable audit log
• ·Role-based access control — users only access data relevant to their role
• ·Password reset tokens are single-use and expire after 1 hour
• ·Account lockout after 5 failed login attempts (30-second cooldown)

As a data subject under the Botswana Data Protection Act 2018, you have the following rights:

• ·Right of access (s.21) — Request a copy of all personal data we hold about you. Use the data export feature in your account settings or email admin@sesigohive.co.bw.
• ·Right to rectification (s.23) — Correct inaccurate or incomplete data via your profile settings or by contacting us.
• ·Right to erasure (s.22) — Request deletion of your account and personal data. Submit a request via your account settings or email admin@sesigohive.co.bw. Note: match records and audit logs form part of the official league record and may be retained in anonymised form.
• ·Right to data portability (s.21(2)) — Receive your personal data in a machine-readable JSON format. Use the export feature in your account settings.
• ·Right to withdraw consent (s.7(3)) — Withdraw your consent at any time by requesting account deletion. Withdrawal does not affect the lawfulness of processing before withdrawal.
• ·Right to object (s.24) — Object to processing based on legitimate interests. Contact admin@sesigohive.co.bw with your objection.

We will respond to all data subject requests within 21 days as required by s.21(3) of the DPA.

If you believe we have not handled your personal data in accordance with the Botswana Data Protection Act, you have the right to lodge a complaint with the Information Commissioner of Botswana:

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the platform after changes constitutes acceptance of the updated policy. For material changes, we will notify active users via the platform.