
We never sell, rent, or trade your personal information with third-party brokers or advertisers.
Authentication is powered by Google SSO; we never store passwords, keeping your account safeguarded.
You have full authority to request complete deletion or export of your account data anytime.
Built from the ground up to respect global data protection, minimisation, and consent frameworks.
Yalla Sport is a digital sports platform delivering live fixtures, football statistics, editorial news, and match insights. Our infrastructure is architected around data minimisation — gathering only what is strictly required to deliver a tailored, lightning-fast experience.
The following ledger details all categories of data processed across Yalla Sport, alongside their specific purpose and storage mechanism:
| Data Type | Components | Operational Purpose | Security & Storage |
|---|---|---|---|
| Google Profile | Name, email address, avatar URL | Account creation, predictions management, comment identity | Encrypted in DB |
| Session Token | Secure cryptographic session tokens | Keep you signed in securely without storing passwords | HTTPS Secure Cookie |
| Favourites | Saved favourite teams and competitions | Customise matchday programme and highlights for your teams | Cloud & local storage |
| Predictions | Match score predictions and leaderboard score | Calculate leaderboard rank and prediction statistics | Platform Account |
| Preferences | Theme (dark/light), locale (AR/EN), timezone | Render kick-off times accurately for your local city and preferences | First-party cookies |
| Technical Logs | Anonymised IP snippet, security & error logs | DDoS protection, rate limiting, and spam defense | Auto-purged periodically |
To ensure paramount security and eliminate credential theft risks, Yalla Sport leverages industry-standard OAuth 2.0 via Google Identity Services. When you authenticate:
We utilise essential first-party cookies and browser localStorage to ensure core platform features function seamlessly, including remembering your theme, timezone, and language. For complete details, consult our dedicated Cookie Policy.
Match schedules, live scores, lineups, and statistical events are aggregated from licensed official sports data providers. These data streams are strictly operational and contain zero user-identifying data.
For video highlights and licensed playback streams, we strictly honour geo-licensing restrictions and distribution rights established by official broadcasters.
We partner exclusively with trusted, industry-leading infrastructure providers adhering to stringent digital security and encryption protocols:
| Provider / Service | Operational Role | Privacy Safeguards |
|---|---|---|
| Google Identity Services | Authentication & SSO | We authenticate securely via Google; we never request or hold passwords. |
| API-Sports (API-Football) | Live Sports Data Provider | Delivers scores, rosters, and statistics via secure server-to-server connections. |
| Upstash Redis | Caching & Rate Limiting | Ultra-fast caching for real-time fixtures and rate-limiting anti-abuse protection. |
| Hosting & Infrastructure | Cloud Infrastructure | Enterprise-grade hosting and encrypted PostgreSQL database storage. |
You possess absolute control and autonomy over your data residing on Yalla Sport:
Request a complete, machine-readable export of all records associated with your profile.
Request total deletion of your profile, favourites, predictions, and history permanently.
Update and correct any profile details or preferences instantly in your settings.
Toggle match alerts and browser web-push notifications on or off at will.
We enforce enterprise-grade security protocols across all layers, including full HTTPS/TLS 1.3 encryption in transit, strict database isolation, and intelligent firewall defenses (Cloudflare / WAF).
We retain account records for as long as your profile remains active. Upon an erasure request, data is deleted immediately from production environments and purged from rolling operational backups within 30 days.
Yalla Sport is a sports information portal designed for general audiences and does not knowingly collect personal information from children under 13. If we discover inadvertent receipt of such data without parental consent, we will purge it immediately.
If you have inquiries regarding this Privacy Policy or wish to exercise your statutory rights, please reach out to our team directly via our verified email or through the integrated Report Center: