Privacy

What we collect

  • When you visit this site we log the technical envelope of your request: IP address, device and browser user agent, referring page, requested path and timestamp. If you e-mail us we keep your address and the content of the message. We do not run an account system here: there is no password, no wallet and no profile to log into. Access logs are retained for ninety days and then rotated out. E-mail correspondence is retained for twelve months and then purged, except where a legal claim is live or where the reader has asked us to keep the thread longer. We do not run cookies that build an advertising profile and we do not expose log data to third-party analytics.

International transfers

  • Hosting and CDN are provided by Cloudflare, which operates data centres on several continents. Your request may therefore be routed through infrastructure outside the Republic of South Africa. All transfers happen under contractual safeguards that we review annually to keep POPIA cross-border obligations met. The CDN edge location nearest to you serves the response, which usually means Johannesburg, Cape Town or Lagos for SA readers. From there a background copy of the request may reach a European analytics region for aggregate traffic counts. We do not pass personally identifying log fields across that boundary and we do not match the two sets back together after the fact.

How we use

  • We use access logs to keep the site online and to spot abuse: scraping, denial of service and the like. We use e-mail content only to answer you. We never sell your details, we do not run behavioural retargeting, and we do not share raw log data with the operator or with other affiliate sites. We also use logs when a reader reports a bug: the duty editor can see whether the page returned a 500 at the time of your visit without reading anything about who you are. Internal use only; no third-party vendor sees the live log stream.

Changes

  • If this notice changes we post the new wording here and update the dated line beneath the main heading. Significant changes (a new processor, a new data category, a new purpose) are flagged in the editorial sidebar for thirty days so returning readers can see what moved before they continue. Where the change is cosmetic (grammar, formatting, a clearer heading) the dated line still appears but we do not re-trigger the sidebar notice. If the operator at the end of our outbound link changes its own privacy terms, we do not have to re-trigger ours either; your relationship with the operator is covered by its policy from the moment of click.

Security

  • Traffic to this site runs over TLS. Our editorial inbox is restricted to named staff; messages are retained no longer than needed. Operational logs are kept on access-controlled infrastructure, rotated routinely, and purged on the retention schedule described in the retention section. We rotate access tokens quarterly, keep the inbox and the content management system on separate credentials, and store nothing material on contributor laptops after a story closes. Suspected incidents trigger a thirty-six-hour review window; a public post-mortem is published if the incident is confirmed and affected reader data.

Third parties

  • Our outbound CTA links point to SuperSportBet via /visit/. The click leaves our control at that boundary; the operator then applies its own privacy notice. We also use Cloudflare as a hosting partner. We do not embed third-party analytics scripts on page loads for readers in South Africa. We do not run Google Analytics, Facebook Pixel or similar on page loads. If we ever want to measure a specific editorial campaign we would use a short-lived first-party counter instead and tell you in the sidebar during the campaign window. Cloudflare receives request headers to serve the response and does not get our editorial e-mail traffic.

Your rights

  • Under POPIA you may ask us to confirm what we hold about you, to correct it, or to delete it. Send the request to privacy at super-sport-bet.com with enough detail to find your record. We reply within thirty days or earlier. If you disagree with our answer you may escalate to the Information Regulator of South Africa. We also publish a plain-language explainer of your POPIA rights on this page so you do not have to read the statute to understand them. The Information Regulator contact details are listed on the «complaints» page so a reader can escalate without hunting for them. We charge no fee for the first standard subject-access request per year.