DREAM442

Legal

Privacy Policy

Last updated: 8 June 2026

1. Who We Are

Dream442 Ltd ("Dream442", "we", "us", "our") operates the fantasy football platform at www.dream442.co.uk and www.dream442.com. We are the data controller responsible for your personal data. If you have any questions about this policy, please contact us.

2. What Data We Collect

We collect the following categories of personal data:

Account data

  • ·First and last name
  • ·Email address
  • ·Date of birth
  • ·Password (stored as a secure hash — never in plain text)

Profile data

  • ·Phone number (optional)
  • ·Country of residence
  • ·Identity document (passport or driving licence) — uploaded for prize verification only

Game data

  • ·Squad selections and entry submissions
  • ·Match entries, points, and scores
  • ·Tiebreaker numbers

Technical data

  • ·IP address
  • ·Browser type and version
  • ·Device type
  • ·Pages visited and time spent on the platform

3. How We Use Your Data

To provide the platform

Contract

Creating and managing your account, processing entries, calculating points and displaying scores.

Age and identity verification

Legal obligation / Contract

Confirming you are 18+ and verifying your identity before paying out prizes.

Prize payments

Contract

Processing and paying prize winnings to verified winners.

Communications

Contract / Legitimate interest

Sending account confirmation, entry receipts, match reminders, and prize notifications.

Security and fraud prevention

Legitimate interest

Detecting and preventing fraudulent activity, multiple accounts, and rule violations.

Platform improvement

Legitimate interest

Analysing usage patterns to improve the product (using anonymised data where possible).

4. Identity Documents

Identity documents (passport or driving licence) are collected solely for the purpose of verifying your age and identity before prize payouts. We take the following steps to protect this data:

  • ·Documents are stored in an encrypted, access-controlled storage system (Supabase Storage).
  • ·Access is restricted to authorised Dream442 staff only.
  • ·Documents are not shared with third parties except where required by law.
  • ·Documents are retained for no longer than 12 months after your account is closed, or as required by applicable law.

5. Who We Share Your Data With

We do not sell your personal data. We may share data with:

  • ·Supabase — our database and authentication provider (data stored in the EU).
  • ·Vercel — our website hosting provider.
  • ·Cloudflare — for bot protection (Turnstile). Cloudflare does not receive personal data beyond anonymised signals.
  • ·Sponsors — only anonymised, aggregated statistics (e.g. total users, entries per match). No individual personal data is shared with sponsors.
  • ·Law enforcement or regulatory authorities — where required by law.

6. Data Retention

  • ·Account data: retained for the lifetime of your account plus 2 years after closure.
  • ·Game/entry data: retained for 5 years for prize dispute resolution purposes.
  • ·Identity documents: retained for up to 12 months after account closure.
  • ·Technical/log data: retained for up to 90 days.

7. Your Rights

Under UK GDPR, you have the following rights:

AccessRequest a copy of the personal data we hold about you.
RectificationAsk us to correct inaccurate or incomplete data.
ErasureRequest deletion of your data (subject to legal obligations).
RestrictionAsk us to restrict how we process your data in certain circumstances.
PortabilityReceive your data in a structured, machine-readable format.
ObjectionObject to processing based on legitimate interests.

To exercise any of these rights, please contact us. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

Dream442 uses only essential cookies required for the platform to function:

  • ·Authentication cookies — to keep you logged in securely.
  • ·Session cookies — to maintain your browsing session.

We do not use advertising cookies, tracking pixels, or third-party analytics that identify individuals.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include encrypted storage, HTTPS-only connections, and access controls. No system is 100% secure — in the event of a data breach we will notify you and the ICO as required by law.

10. Children

Dream442 is strictly for users aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via a notice on the platform. The date of the most recent update is always shown at the top of this page.

12. Contact

For any privacy-related queries, requests, or complaints, please contact us or write to us at Dream442 Ltd, United Kingdom.

Terms & ConditionsContact Us

🔞 18+ only · Dream442 is free to play · Play responsibly