Draft — pending legal review. This document is a working draft and has not yet been reviewed by legal counsel. It is not an operative legal document.

Privacy Policy

FTBL360 Privacy Policy


Own your journey

Global Revolution Pty Ltd (ABN 42 167 766 878) trading as FTBL360
Version 1.0 · Effective 28 September 2026
This policy applies to ftbl360.com, the FTBL360 apps and all FTBL360 communications.

Contents

The short version
1. Who we are and what this policy covers
2. Our role, and the role of your club or organiser
3. The personal information we collect
4. How we collect it
5. Children and young people
6. How we use personal information
7. Ratings of coaches, managers and clubs
8. Automated decisions
9. Who we share personal information with
10. Storing information overseas
11. Cookies and analytics
12. Using FTBL360 outside Australia
13. Marketing
14. Keeping information secure
15. How long we keep information
16. Your choices and rights
17. Questions and complaints
18. Changes to this policy
19. Contact us

The short version

FTBL360 provides the platform and tools that football organisations use to manage and deliver the game. This includes competitions, draws and fixtures, team sheets, results, records, player profiles, coaching tools and club communications.
In providing these services, we handle information about players, coaches, referees, officials, volunteers, parents, guardians and others in the football community. Many players are children and young people, so privacy, safety and the responsible handling of personal information are especially important to us.
This summary covers the key points. It does not replace the full policy that follows. If anything in this summary differs from the full policy, the full policy applies.
What you need to know
  • We collect what we need to run football. This includes who you are, your role, your team and club, your matches, and the settings and preferences you choose.
  • Children come first. Profiles for players under 16 are controlled by a parent or guardian. Players aged 16 and 17 have restricted profiles that they can help manage. Parents and guardians can see who has viewed their child's profile.
  • We never sell personal information. We do not show targeted advertising to anyone under 18.
  • Football organisations also have responsibilities. Clubs, associations and competition organisers use FTBL360 to run their activities, and they decide some of what is collected and how it is used. Their own privacy policies may also apply.
  • Safeguarding is never paywalled. Safety features, safeguarding tools and privacy controls are included in every FTBL360 plan, including free accounts.
  • You stay in control. You can ask to access, correct, download or delete your personal information.
For privacy enquiries or requests, contact privacy@ftbl360.com.
For young players
  • Your football journey belongs to you. FTBL360 keeps a record of your teams, matches, minutes played and achievements. Your football history can stay with you when you move between clubs.
  • Your privacy changes as you get older. If you are under 16, your parent or guardian controls who can see your profile. At 16 and 17, you have more control. At 18, you take full control of your account and profile.
  • Team messages and coaching notes are different. Coaches can message you about your team, training and matches. Private coaching notes about you are seen only by authorised coaches and are never part of your public profile.
  • If something makes you feel unsafe, tell a parent, your coach or your club, or contact us. You will not get in trouble for asking. You can also talk to Kids Helpline any time on 1800 55 1800.
1. Who we are and what this policy covers

FTBL360 is operated by Global Revolution Pty Ltd (ABN 42 167 766 878), based in Sydney, Australia ("FTBL360", "we", "us" or "our").
This policy explains how we collect, use, hold, disclose and protect personal information, how you can access or correct it, and how to make a privacy complaint.
We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where FTBL360 operates in other countries, we also comply with the local privacy laws that apply (see section 12).
This policy applies to everyone who uses, takes part in or interacts with FTBL360, including:
  • players, and parents and guardians of players
  • head coaches, assistant coaches and team managers
  • club, academy, association and federation officials, and competition organisers
  • referees, match officials, volunteers and event staff
  • scouts, spectators and supporters
  • sponsors, partners and people who contact us
It covers ftbl360.com, FTBL360 web and mobile applications, public results and competition pages, and emails, SMS messages and push notifications sent by or through FTBL360.
"Personal information" means information or an opinion about an identified individual, or an individual who is reasonably identifiable. This includes names, contact details, dates of birth, photographs, player and match records, and opinions such as ratings.
Features introduced in stages. FTBL360 is being introduced in stages, so some features described in this policy may not yet be available to you. We do not collect information for a feature until it is available. When a feature launches, the protections this policy describes for it apply from its first day.

2. Our role, and the role of your club or organisation

FTBL360 provides the platform and tools that clubs, associations, federations and competition organisers (together, Organisations) use to manage football competitions, tournaments, teams and related activities.
Who is responsible for your personal information depends on how and why it is collected and used.
When an Organisation uses FTBL360
When an Organisation runs a club, competition or tournament on FTBL360, the Organisation decides:
  • what registration, eligibility, compliance, team and match information it requires
  • the purposes for which that information is used
We handle that information on the Organisation's behalf, following its instructions and our agreement with it. The Organisation is responsible for having a lawful basis to collect the information, for giving you any required notices, and for obtaining any required consents, including from parents and guardians. Its own privacy policy may also apply, and you can contact it directly about how it handles your information.
When you use FTBL360 directly
When you use FTBL360 as an individual, we are responsible for personal information associated with:
  • your FTBL360 account
  • your persistent player profile
  • your privacy settings and communication preferences
  • services we provide directly to you
We are also responsible for information we handle to operate FTBL360 itself, such as security, billing, audit and technical records.
Information that appears in both places
Some information created through an Organisation's activities also appears on your persistent player profile, for example your appearances, results or team history. The Organisation is responsible for the accuracy of the records it creates. We are responsible for how that information is displayed and shared on your profile, in line with your privacy settings. We use it this way under our agreement with each Organisation.
Protections that always apply
Whichever party is responsible, the privacy, security and child-safety protections in this policy apply to all personal information held on the FTBL360 platform. They do not cover information after an Organisation has exported it or holds it outside FTBL360. The Organisation's own policies govern that information.
When this policy and an Organisation's policy both apply
Each policy governs the information that party is responsible for. An Organisation's policy cannot reduce the protections this policy gives to information held on the FTBL360 platform.
Not sure who to contact?
Contact us. We will tell you who is responsible for the information. Where appropriate, we will pass your request to the Organisation or work with it to respond.

3. The personal information we collect

We collect only what is reasonably necessary to provide FTBL360 and run football. What we collect depends on your role and the features your Organisation uses.
Account and identity
Relates to: all account holders.
Name, preferred name, email, mobile number, password (stored only in hashed form), date of birth, gender category for competition purposes, and language and account settings.
Roles and relationships
Relates to: all account holders.
Your roles (for example Player, Head Coach, Team Manager, Referee or Organiser), your clubs, teams and competitions, and parent/guardian–child links.
Player profile
Relates to: players.
Profile photo, position, squad number, age group, club and team history, registrations, match appearances, goals and statistics, awards, game-time records, and the profile settings the player selects.
Parent and guardian
Relates to: parents and guardians.
Name and contact details, relationship to the player, consents and permission settings, and emergency contact details.
Match-day and competition records
Relates to: players, team staff and officials.
Team sheets and line-ups, attendance status (Present, No Show, Injured, Late Arrival, Left Early, Unavailable), interchange and game-time data, results, cards and discipline, incident and match official reports, eligibility status, and fixture changes.
Safeguarding and compliance
Relates to: coaches, managers, officials and volunteers.
Working With Children Check or equivalent status and expiry, safeguarding and first aid accreditation status, coaching and refereeing qualifications, and protected complaint case records. Where a check number is needed to verify a credential, we use it only for that verification.
Health information (sensitive)
Relates to: players, and others where relevant.
Injury status recorded on match day, and medical or emergency information where an Organisation requires it for player safety.
Photos, video and recordings
Relates to: players, staff and spectators.
Profile photos, match and event media, and recordings, subject to the consent rules in section 5.
Communications
Relates to: all users.
Messages sent through FTBL360, notifications, support requests and feedback.
Ratings and feedback
Relates to: players, parents, and the people and clubs rated.
Ratings and comments about coaches, managers and clubs, and the records used to verify one vote per person.
Payments
Relates to: people who pay or are paid.
Registration and event fees, forfeit fees, referee payments, transaction history and payout details. Card details are handled by our payment provider, and we do not store full card numbers.
Technical and usage
Relates to: all users and visitors.
Device and browser type, IP address, approximate location derived from your IP address, pages and features used, crash logs, cookie identifiers, and audit logs of actions taken on the platform.
Location
Relates to: users who turn it on.
Venue check-in and precise device location, only if you turn it on for a feature that needs it. Precise location is off by default for anyone under 18.
Sensitive information
Health information, and safeguarding records that reveal criminal record information, are "sensitive information" under the Privacy Act. We collect sensitive information only in two situations:
  • with consent, which for a child comes from a parent or guardian
  • where the law allows it without consent, for example where collection is necessary to lessen or prevent a serious threat to someone's life, health or safety, and it is unreasonable or impracticable to obtain consent first
Only people who need sensitive information for player welfare or safeguarding can see it. When a player is recorded as injured, anyone outside the player's own team staff and the Organisation officials who need to know sees only that the player is unavailable. Sensitive information is never used for marketing.
If you don't give us information
You can browse public results and fixture pages without an account and without identifying yourself. To take part in a competition, coach, officiate or manage a team, we need to know who you are, because eligibility, safeguarding and results all depend on it. If you do not provide required information, you or your child may not be able to register or take part.

4. How we collect it
  • From you, when you create an account, complete a profile, register, send a message, give a rating, make a payment or contact us.
  • From a parent or guardian, who provides and manages information for a child under 16.
  • From Organisations, for example when a club or organiser imports a team sheet, registers entrants, records compliance status or enters results.
  • From other users acting in their role, for example a coach recording attendance or game time, a team manager submitting a team sheet, a referee submitting a match report, or a parent or player giving a rating.
  • From service providers, such as a payment processor confirming a payment, or a verification service an Organisation uses.
  • Automatically, through cookies, logs and similar technology when you use FTBL360 (see section 11).
When we collect your information from someone other than you, such as your club, we take reasonable steps to make sure you know about it, including through the Organisation, your account and this policy.
Information about other people. If you give us personal information about someone else, for example when you register a child or import a team sheet, you must have that person's permission or the authority to provide it, and you should tell them about this policy.
If we receive personal information we did not ask for and do not need, we destroy or de-identify it where it is lawful and reasonable to do so.

5. Children and young people

Most FTBL360 players are children. We design every feature with their safety and best interests in mind, and we apply stronger protections by default. Profile control works like this:
Under 16
Who controls the profile: a parent or guardian. They give consents, set who can view the profile, and approve changes to visibility.
Default settings: the most private setting. The profile is visible only to the player's own team staff and to Organisation officials who need it. It cannot be found in public searches.
16 and 17
Who controls the profile: the player, within limits. The player can choose from restricted settings, and some protections cannot be switched off.
Default settings: restricted. The profile cannot be found in public searches unless the player turns on one of the options available to them.
18 and over
Who controls the profile: the player.
Default settings: standard settings, which the player can change at any time.
Profiles and team sheets are different. A player profile holds the player's football history. A team sheet is a match record. To run the match, team sheets showing player names and squad numbers are shared with the opposing team, match officials and the Organisation, whatever the player's profile settings.
In addition:
  • Guardian visibility. Parents and guardians of under-16 players can see a log of who has viewed their child's profile.
  • Consent from a parent or guardian. Where consent is needed for a child under 16, including for health information, photos, video and recordings, we seek it from a parent or guardian. Players aged 16 and 17 can generally give consent themselves, but an Organisation's rules may also require consent from a parent or guardian. Consent to record a minor is obtained before any match or training recording is used.
  • Family safety and court orders. If a court order, family violence order or other safety concern affects a parent's or guardian's contact with a child, tell your Organisation or us. We can restrict that person's access to the child's profile, fixtures and communications on FTBL360. We may ask for a copy of the order.
  • Communication safeguards. Adults can contact young players on FTBL360 only through their role, for example team messages from a coach. Protections on messaging with young players cannot be switched off. Tactical or private coaching material is not shared with parents unless a coach deliberately marks it as suitable for parents. Private coach notes are not shown to players or parents in the app, but you can still request access to your information under section 16.
  • No selling, no advertising profiling. We never sell a child's information, never show targeted advertising to anyone under 18, and do not send marketing to anyone under 18.
  • Precise location is off by default for anyone under 18.
  • Safeguarding checks. FTBL360 records whether adults in youth-division roles hold current Working With Children Check, safeguarding and first aid credentials. If a required credential has expired or the person is barred, the platform blocks them from youth-division roles until the issue is resolved.
  • Protected complaints. If you raise a safeguarding concern through the protected complaint process, we keep your identity confidential. We share it only with the people who need it to handle the concern, or where the law requires.
  • Growing up. When a player turns 16, and again at 18, more control of the profile passes to them. We tell the player and their guardian before each change happens.
FTBL360 and the social media minimum age
Australian law requires age-restricted social media platforms to take reasonable steps to stop people under 16 from having accounts. FTBL360 is a sports administration platform. Organisations use it to run competitions, and players, parents, coaches, managers and officials use it to take part. It is not designed as a social media service.
Every feature available to under-16 accounts is designed so that it does not operate as social media. Under-16 accounts have no public feed, no algorithmic content recommendations, no likes, followers or public comments, and no content that disappears. They are used for football: registration, team sheets, fixtures, results, game time, team messages and the player's own football record.
If any FTBL360 feature, such as community or media features we introduce later, would make FTBL360 an age-restricted social media platform, we will not make that feature available to anyone under 16. Any age check information we collect for this purpose will be used only for that purpose and destroyed once the check is done, as the law requires. We will not require government-issued ID as the only way to confirm age.
We will update this section to reflect Australia's Children's Online Privacy Code once it is registered, and we will meet or exceed it.

6. How we use personal information

We use personal information for the purposes we collected it for, for related purposes you would reasonably expect, where you consent, or where the law allows.
Running competitions and events
Registering teams and players, generating draws and fixtures, checking eligibility, managing team sheets, recording results, standings, discipline, forfeits and walkovers, and producing print packs and public results pages.
Player profiles and history
Keeping a persistent record of each player's teams, matches, minutes and achievements that stays with them across clubs and seasons.
Coaching and team management
Supporting line-ups, tactics, set plays, player instructions, equal game time calculations, match-day squad status and team administration.
Safety and safeguarding
Enforcing age-based controls, checking compliance credentials for youth roles, managing incidents and protected complaints, and responding to emergencies.
Communications
Sending fixture updates, team messages, notifications, and service and security messages, and responding to your enquiries.
Ratings
Collecting and processing ratings of coaches, managers and clubs to identify patterns that help parents make informed choices (see section 7).
Payments
Processing fees, refunds, forfeit fees and referee payments.
Running and improving FTBL360
Security, fraud prevention, troubleshooting, audit logs, analytics and developing new features. Where we can, we use de-identified or aggregated data for this, and we do not try to re-identify anyone from it.
Marketing (adults only)
Telling adult users about FTBL360 features, offers and partner opportunities, only in line with section 13.
Legal
Meeting our legal obligations, enforcing our Terms of Use, and establishing, exercising or defending legal claims.

7. Ratings of coaches, managers and clubs

Past and present players and parents can rate coaches, team managers and clubs. The purpose is to surface patterns that help families choose safe, positive football environments. It is not to produce a single score or to single out a bad day.
  • One vote per person. Only people with a verified relationship with the coach, manager or club can give a rating, and each person gets one rating per subject.
  • Fairness controls. We use safeguards that reduce the effect of isolated or coordinated negative ratings, so results reflect consistent patterns rather than a single dispute.
  • Not anonymous to us. Other users see ratings only in aggregate. We keep the identity of each rater to verify eligibility and prevent abuse. We do not show a rater's identity to the person rated, unless the law requires us to disclose it.
  • Fair process for the person rated. Coaches, managers and clubs can see their aggregated results and raise concerns about a rating. We remove ratings that we reasonably consider to be abusive or defamatory, that identify a child, or that break our Terms of Use.
  • Safeguarding concerns are different. A rating is not the way to report a safety concern. Use the protected complaint process in the app, contact your club or association, or contact the police or child protection authorities if a child is at risk.
8. Automated decisions

FTBL360 uses computer programs to make or support some decisions. We explain them here because some can significantly affect your participation.
Safeguarding credential checks
What it does: blocks a person from youth-division roles when a required safeguarding credential has expired or the person is barred.
Information it uses: role, credential type, status and expiry.
Human involvement: the block is automatic. The Organisation or FTBL360 reviews it, and the block lifts when a current credential is recorded.
Eligibility flags
What it does: flags players whose eligibility needs checking, for example age group, registration, suspension or roster lock.
Information it uses: date of birth, registrations, discipline records and team sheets.
Human involvement: flags only. Organisation officials make eligibility decisions.
Draws, fixtures and schedules
What it does: generates draws, fixtures and schedules.
Information it uses: team entries, divisions, availability and venue constraints.
Human involvement: organisers review and publish them. Changes are tracked as new draw and schedule versions.
Equal game time
What it does: calculates equal game time and suggests interchanges.
Information it uses: squad list, match-day attendance status and minutes played.
Human involvement: suggestions only. The coach decides.
Results and standings
What it does: calculates results, standings, tie-breaks and progression.
Information it uses: final results, and discipline and forfeit records.
Human involvement: calculated using the Organisation's ruleset. Results are confirmed by the result authority the Organisation sets.
Ratings integrity
What it does: detects patterns in ratings and prevents duplicate votes.
Information it uses: ratings and rater verification records.
Human involvement: pattern outputs are reviewed before any action is taken.
If you think a decision is wrong
If you think an automated decision about you is wrong, contact your Organisation or us, and a person will review it.

9. Who we share personal information with
We do not sell personal information. We share it only as described below.
  • Organisations you are part of. Your club, association, federation or competition organiser can see the information it needs to run its football, based on its roles and permissions. If you join a new club, it can see the football history on your profile, in line with your settings.
  • Other users, according to role and settings. For example, your team staff see your team sheet and attendance, referees see team sheets for their match, and opponents see line-ups once they are published. What others can see of a player profile depends on the player's age and privacy settings (see section 5).
  • The public. Public results pages show team names, fixtures, results and standings. Player names or photos appear publicly only where the player's age and settings allow it.
  • Service providers that help us run FTBL360, such as hosting, database, email, notification, payment, analytics and customer support providers. They may use the information only to provide services to us, and they must protect it.
  • Professional advisers, such as our lawyers, accountants, auditors and insurers, where they need it to advise or protect us.
  • Commercial partners and sponsors, only with your consent, and never for anyone under 18.
  • Authorities. Police, child protection agencies, courts, regulators or others where the law requires or authorises it, or where we reasonably believe it is necessary to lessen or prevent a serious threat to someone's life, health or safety.
  • A buyer or successor, if FTBL360 or part of it is sold or restructured, on the condition that this policy continues to protect your information.
De-identified information. We may use and share information that has been de-identified or aggregated so that it does not identify anyone, for example participation statistics or competition trends. This information is not personal information, and we do not try to re-identify anyone from it.
Other websites and services. FTBL360 may link to websites and services run by others, such as a club website or a payment page. Their own privacy policies apply, and we are not responsible for how they handle your information.

10. Storing information overseas

FTBL360 is hosted on Fly.io, and our primary production data is stored in Australia. We use trusted service providers to help us run FTBL360, including for email delivery, notifications, payments, analytics and error monitoring. Some of these providers store or process personal information overseas, including in the United States.
Before we disclose personal information to an overseas recipient, we take reasonable steps to ensure it handles that information consistently with the Australian Privacy Principles, including through contract terms. You can ask privacy@ftbl360.com for a current list of our key service providers and where they store information.

11. Cookies and analytics

We use cookies and similar technology to keep you signed in, remember your settings, keep FTBL360 secure and understand how it is used.
  • Essential cookies are needed for sign-in, security and core features. They cannot be switched off.
  • Preference cookies remember choices such as your language and your selected club or competition.
  • Analytics cookies help us understand usage and fix problems. You can refuse them, and we do not use them to build advertising profiles.
We do not use advertising or cross-site tracking cookies. If we introduce them for adult users in future, we will update this policy first, and we will never use them for anyone under 18. You can block or delete cookies in your browser settings, but some features may not work properly if you do.

12. Using FTBL360 outside Australia

FTBL360 is launching first in Australia and New Zealand. If you are in New Zealand, we also handle your information in line with the Privacy Act 2020 (NZ), and you can complain to the New Zealand Office of the Privacy Commissioner.
As FTBL360 expands to other countries, we will comply with the local privacy laws that apply and publish any country-specific terms as a supplement to this policy.

13. Marketing

We send marketing only to adult users, and only where you have agreed or the law otherwise allows. Every marketing message includes an easy way to unsubscribe, and you can change your preferences in your account settings. You can also ask us where we got your information for marketing.
Service messages, such as fixture changes, safety notices and account security alerts, are not marketing and will still be sent.

14. Keeping information secure

We hold personal information electronically on secure cloud infrastructure operated by us and our service providers. We take reasonable steps to protect it from misuse, interference and loss, and from unauthorised access, change or disclosure. Our measures include:
  • encryption of data in transit and at rest
  • role-based permissions, so people see only what their role requires
  • multi-factor authentication for administrator and organiser accounts
  • audit logs recording who changed official records such as team sheets, results and eligibility decisions
  • limiting staff and contractor access to what their work requires, under confidentiality obligations
  • regular security reviews of our platform and providers
No system is perfectly secure. If a data breach is likely to cause serious harm, we will notify the affected people and the Office of the Australian Information Commissioner (OAIC) under the Notifiable Data Breaches scheme. If the breach affects people in New Zealand, we will also notify the New Zealand Privacy Commissioner as required by New Zealand law.

15. How long we keep information

We keep personal information only as long as we need it for the purposes in this policy, or for as long as the law requires. Then we delete or de-identify it.
  • Accounts and profiles are kept while your account is active. If you delete your account, we delete or de-identify your profile, subject to the points below.
  • Official competition records, such as results, standings, discipline and team sheets, form part of a competition's history, and the Organisation may need to keep them under its rules. Where a player has deleted their account, we de-identify these records where we can.
  • Safeguarding, incident and complaint records are kept for as long as the law requires or as needed to protect children, which can be many years.
  • Payment records are kept for at least the periods required by tax and financial laws.
  • Technical logs are kept for a limited period for security and troubleshooting.
16. Your choices and rights
  • Access. You can ask us for a copy of the personal information we hold about you.
  • Correction. You can update most details yourself in your account, or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading.
  • Download. You can download a copy of your player profile and football history. Your journey is yours.
  • Privacy settings. You can choose who can see your profile, within the limits in section 5.
  • Deletion. You can delete your account, or ask us to delete information, subject to section 15.
  • Withdrawing consent. You can withdraw consent you have given, for example for photos or marketing. Withdrawing consent does not affect anything done before you withdrew it.
Parents and guardians can exercise these rights for a child under 16. Players aged 16 and 17 can make requests themselves, and we may also involve a parent or guardian where that is in the young person's best interests.
To protect everyone's privacy, we will verify your identity before acting on a request. We will respond within 30 days, or within 20 working days if you are in New Zealand. If we need more time, we will tell you why and when to expect a response. If we refuse a request, we will tell you why and how to complain. We do not charge for making a request.
The law may sometimes allow or require us to refuse access or deletion, for example where giving access would unreasonably affect someone else's privacy or safety, or where we must keep a record. If this happens, we will explain why.

17. Questions and complaints

If you have a question or concern about how we handle personal information, contact our Privacy Officer (see section 19). Tell us what happened and how you would like it resolved. We will acknowledge your complaint promptly, investigate it, and respond in writing within 30 days. If a complaint is complex and we need more time, we will tell you why and when to expect our response.
If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at www.oaic.gov.au or on 1300 363 992. In New Zealand, contact the Office of the Privacy Commissioner at www.privacy.org.nz.
If you believe a child is in immediate danger, call 000 in Australia or 111 in New Zealand. Do not wait for a privacy complaint process.

18. Changes to this policy

We will update this policy as FTBL360 grows and as the law changes. We will publish each updated version on ftbl360.com with its effective date. If a change materially affects how we handle your information, we will tell you in the app or by email before it takes effect, and we will seek fresh consent where required.

19. Contact us

Privacy Officer
Global Revolution Pty Ltd (ABN 42 167 766 878) trading as FTBL360
Email: privacy@ftbl360.com
Post: Maroubra, NSW, Australia
Web: ftbl360.com
You can ask us for a copy of this policy in another format.

Please confirm