Who we are
ArenaLeague (arenaleague.org) is a platform on which organisers run competitions and community spaces, and on
which students and other participants register for them. It is operated by Gillside Solutions,
7 Temasek Boulevard #12-07 Suntec Tower One, Singapore 038987 (“we”, “us”). We handle personal data in line with Singapore’s Personal Data Protection Act
2012 (PDPA). This policy covers arenaleague.org, the signed-in dashboard, and the Arena Space sites hosted at
<name>.arenaleague.org.
Students, young people and parental consent
ArenaLeague serves schools and students, and many participants are under 18. If you are under 18, please read
this policy with a parent or guardian before you register.
-
An organiser who registers students under 18, or who invites them to register, is responsible for obtaining
consent from a parent or guardian where the law or the school requires it, before the student’s data is
entered.
-
A parent or guardian may ask us at any time what we hold about their child, ask us to correct it, or withdraw
consent and ask us to delete it (see “Contact us” below).
- We do not use students’ data for advertising, and we do not sell it.
What we collect
- Your account. You sign in through Simjot (“Sign in with Simjot”). Simjot confirms who you are
and passes us your e-mail address and, where you have them, your display name and Simjot handle. We never
receive your password or the one-time codes Simjot sends you.
- Competition registration. Your full name, e-mail address, school or institution, year group,
country, and — if you choose to tell us — how you heard about the competition.
- Taking part. Your entries, scores, results and rankings in the competitions you join, and the
certificates issued to you.
- Messages to us. Your name, e-mail address, organisation, the competition you are asking about
and your message, when you use our contact or organiser-access forms.
- Technical data. When your browser loads a page, our hosting providers receive your IP address
and basic request information (such as the page requested and your browser type).
Browser storage and other providers
We store in your browser only what the site needs to work — the token that keeps you signed in. We do not use
advertising cookies. Some features rely on other providers, who receive your IP address when they do:
- Cloudflare Turnstile checks that a real person is sending our forms.
- Simjot runs the sign-in screen you reach from our sign-in button; that screen is covered by
Simjot’s own privacy policy.
How we use your data
- to run competitions: register you, record your results, publish leaderboards and issue certificates;
- to share your registration and results with the organiser of the competition you entered;
- to create and manage your account;
- to reply to messages you send us;
- to keep the site secure and prevent spam, cheating and misuse;
- to meet our legal obligations.
Leaderboards and results may be shown publicly on a competition’s site, as the organiser sets them. By
registering you consent to this use; you can withdraw your consent at any time by contacting us, and we will
tell you what that means for your entry.
Who we share it with
- the organiser of each competition or space you join;
-
our service providers, who process data on our behalf: Amazon Web Services (hosting, in
Frankfurt, Germany), Cloudflare (the network edge and form checks) and Simjot (sign-in);
- authorities, where the law requires it.
Because our hosting is in Germany, your data is transferred outside Singapore. We require our providers to
protect it to a standard comparable to the PDPA.
How long we keep it
We keep your data while your account is active or while a competition you took part in keeps its results, and
for as long as the law requires after that. When you ask us to delete your account, we remove your profile and
contact details; results may be kept in anonymised form.
Your rights
You — or, for a student under 18, a parent or guardian — may ask for access to the personal data we hold, ask us
to correct it, withdraw consent, or ask us to delete it. We will reply within 30 days.
Contact us
Please use our contact page and say that your message is about personal data. We will
reply by e-mail.