BV1Football.com — Privacy Policy Supplement

This document is an addendum to the Best Version 1 LLC Privacy Policy available at bestversion1.com/privacy ("Master Privacy Policy"). It supplements, but does not replace, the Master Privacy Policy. By registering for or using BV1Football.com, you agree to the data practices described in both the Master Privacy Policy and this Supplement. In the event of a conflict between the Master Privacy Policy and this Supplement with respect to the BV1Football.com platform and its users, this Supplement controls.

1. Scope and Relationship to Master Privacy Policy

1.1 This Privacy Policy Supplement ("Privacy Supplement") describes how Best Version 1 LLC collects, uses, stores, shares, and protects personal data in connection with the BV1Football.com platform and all related services (collectively, the "BV1Football Services"), including player development reports, the AI Coach, personalized coach videos, post-match reflections, voice notes, pre-match notifications, parent and player dashboards, development history, and the messaging center.

1.2 The Master Privacy Policy published at bestversion1.com/privacy is incorporated into this Privacy Supplement by reference. Where this Privacy Supplement provides more specific or more protective rules than the Master Privacy Policy, this Privacy Supplement governs.

1.3 BV1Football.com is operated by Best Version 1 LLC, a Florida limited liability company headquartered in Miami, Florida, United States. Best Version 1 LLC is the data controller for all personal data processed through the BV1Football Services.

1.4 We take the privacy of children seriously. This Privacy Supplement is written in plain English so that parents, legal guardians, and young players can understand how we handle personal data. Technical and legal terms are explained where used.

1.5 This Privacy Supplement applies to all users of the BV1Football Services, including:

(a) Parents and legal guardians who hold a Parent Account;

(b) Minor athletes whose personal data is processed through a Player Account;

(c) Adult players (18+) who hold their own account;

(d) BV1 coaching staff to the extent their use of the platform involves personal data of parents and players.

2. Data Controller

2.1 The data controller responsible for your personal data processed through the BV1Football Services is:

Best Version 1 LLC Miami, Florida, United States of America Email: team@bestversion1.com

2.2 "Data controller" means the company that decides why and how personal data is used. Best Version 1 LLC makes those decisions for all personal data processed through BV1Football.com.

2.3 Where third-party service providers process data on our behalf (see Section 12), they act as data processors under our written instructions. They are not independent data controllers for the data they process on our behalf.

3. Categories of Personal Data We Collect

We collect the following categories of personal data through the BV1Football Services:

3.1 Registration and Account Data Information you provide when you create a Parent Account or Player Account, including:

Full name (parent/guardian and player);

Email address (parent/guardian);

Date of birth or age range (player — used to apply age-appropriate protections);

Country and region of residence;

Username and password (hashed);

Payment and billing information (processed by our payment processor; we do not store full card details ourselves).

3.2 Player Profile Data Information relating to the player's football development profile, including:

Player's preferred position(s) and playing style;

Club and team affiliation;

Physical attributes where voluntarily provided (height, dominant foot, etc.);

Assigned BV1 coach and coaching group;

Development goals and aspirations as entered by the player or parent.

3.3 Development Report Data Data generated by or associated with Development Reports, including:

Skills assessments (technical, tactical, physical, mental attributes);

Coach observations and written feedback;

Development scores and ratings over time;

Progress trends across reporting periods.

3.4 Match Data and Training Data Data submitted in connection with matches and training sessions, including:

Match results and performance notes;

Post-Match Reflection responses (text and voice — see also Sections 3.7 and 10); "I'm Ready" pre-match confirmation timestamps;

Training session attendance and engagement records.

3.5 Coach Video Data Data relating to personalized coach videos, including:

Video files of coach messages addressed to the player;

Metadata about when videos were recorded, delivered, and viewed;

Where player footage is incorporated: video and/or image data featuring the player.

3.6 AI Coach Interaction Data Data generated through a player's or parent's interactions with the AI Coach feature, including:

Questions and prompts submitted to the AI Coach;

AI Coach responses and recommendations provided;

Conversation history within the BV1Football Services;

Ratings or feedback provided on AI Coach responses.

3.7 Voice Note Data Audio recordings submitted as part of Post-Match Reflections or other platform features. This is audio data but is not used for biometric voice identification. Voice Notes are stored for 90 days and then automatically deleted (see Section 10 and the Retention Schedule at Section 11).

3.8 Behavioral and Engagement Data Data relating to how users interact with the BV1Football Services, including:

Login timestamps and session duration;

Features accessed and content viewed; "I'm Ready" button confirmation records and timestamps;

Notification open rates and engagement.

3.9 Device and Technical Data Technical data collected automatically when you access the BV1Football Services, including:

IP address;

Device type, operating system, and browser;

App version (if using a mobile application);

Cookies and similar tracking technologies (as described in the Master Privacy Policy's cookie notice).

3.10 Communication Data Records of your communications with BV1, including emails sent to team@bestversion1.com, messages sent through the platform's messaging center, and support tickets.

4. Children's Data — COPPA (United States)

4.1 Our Commitment to Children's Privacy The BV1Football Services are designed for use by minor athletes. We take our obligations under the US Children's Online Privacy Protection Act (COPPA), 15 U.S.C. §§ 6501–6506, and its implementing regulations (16 C.F.R. Part 312) very seriously. This section explains how we handle the personal data of children under 13 years of age in the United States.

4.2 Verifiable Parental Consent for Under-13 Users We do not knowingly collect personal information from children under 13 without first obtaining verifiable parental consent. Before a Player Account can be created for a child under 13, we require the parent or legal guardian to:

(a) Review this Privacy Supplement and the BV1Football.com Terms of Use Supplement;

(b) Confirm that they are the parent or legal guardian of the child;

(c) Provide consent to our collection, use, and disclosure of the child's personal information as described in this document.

We may use one or more of the following COPPA-approved methods to verify parental identity and consent:

Email-plus-additional-step consent (initial consent by email followed by confirmation by secondary method);

Credit or debit card verification;

Knowledge-based challenge questions;

Such other methods as may be approved by the US Federal Trade Commission from time to time.

4.3 What We Collect from Under-13 Users We collect only the minimum personal data necessary to provide the BV1Football Services to under-13 players. This includes registration data, player profile data, development data, and the other categories described in Section 3, all subject to parental consent and the limitations described in this section.

4.4 How We Use Under-13 Data Personal data collected from children under 13 is used solely to provide, maintain, and improve the BV1Football Services for that specific child, and for internal operational purposes. We do not:

(a) Use the personal data of under-13 users for marketing or advertising purposes;

(b) Disclose the personal data of under-13 users to third parties for commercial purposes;

(c) Allow under-13 users to make personal information publicly available within the platform.

4.5 Parental Rights Regarding Under-13 Data Parents and legal guardians of children under 13 have the right at any time to:

(a) Review the personal information we have collected about their child by submitting a request to team@bestversion1.com;

(b) Correct inaccurate personal information about their child;

(c) Request deletion of their child's personal information — we will delete the data within 30 days of receiving a verified deletion request (subject to any legal retention obligations);

(d) Refuse further collection of their child's personal information, and request that we deactivate the child's Player Account.

To exercise any of these rights, please contact us at team@bestversion1.com. We will ask you to verify your identity and your relationship to the child before processing your request.

4.6 If We Learn We Have Collected Data Without Consent If we become aware that we have inadvertently collected personal data from a child under 13 without verifiable parental consent, we will take prompt steps to delete that data from our systems and deactivate the relevant account.

4.7 No Marketing to Children We do not market to children. No personal data collected from users of the BV1Football Services is used for behavioural advertising, targeted marketing to minors, or the sale of personal data of minors.

5. Children's Data — GDPR Article 8 (European Union/EEA)

5.1 Age of Digital Consent in the EU/EEA Under GDPR Article 8, where consent is the legal basis for processing personal data and the user is a child, the processing of a child's personal data based on consent is lawful only if the child is at least 16 years of age (or a lower age where permitted by EU member state law, with a minimum of 13). For children under 16, consent must be given or authorised by the holder of parental responsibility.

5.2 BV1Football's Approach BV1Football.com applies the default GDPR Article 8 threshold of 16 across all EU/EEA users to ensure consistent and protective standards across jurisdictions. This means:

Where the legal basis for processing is consent, and the player is under 16 and located in the

EU/EEA, we require the parent or legal guardian to provide or authorise that consent;

We collect the player's age during registration and apply the appropriate consent and processing safeguards based on that information.

5.3 Legal Bases for Processing We rely on the following legal bases under GDPR Article 6 for processing the personal data of EU/EEA users. Where processing involves a child under 16, parental consent is required for consent-based processing:

Processing Activity Legal Basis (GDPR Art. 6) Notes

Creating and maintaining Art. 6(1)(b) — Contract Necessary to provide the accounts performance BV1Football Services

Producing Development Art. 6(1)(b) — Contract Core service delivery Reports performance AI Coach interactions Art. 6(1)(b) — Contract Core service delivery performance

Delivering Coach Videos Art. 6(1)(b) — Contract Core service delivery performance

Processing Voice Notes Art. 6(1)(a) — Consent Explicit opt-in via reflection submission

Sending marketing notifications Art. 6(1)(a) — Consent Explicit opt-in required; opt-out available at any time

Sending transactional/service Art. 6(1)(b) — Contract Necessary for account notifications performance management

Platform analytics and service Art. 6(1)(f) — Legitimate Balanced against user rights; improvement interests anonymised where possible

Fraud prevention and security Art. 6(1)(f) — Legitimate Necessary to protect platform interests integrity

Compliance with legal Art. 6(1)(c) — Legal obligation Where required by applicable obligations law

5.4 Special Category Data We do not intentionally collect special category data (as defined in GDPR Article 9) about players. Where a player voluntarily discloses health information (for example, in a Post-Match Reflection mentioning an injury), we treat such information with heightened care and use it only for the direct coaching support of that player. Parents may request deletion of any such information at any time.

5.5 Legitimate Interests Assessment Where we rely on legitimate interests (Art. 6(1)(f)) as a legal basis for processing, we have conducted an assessment and determined that our interests do not override the interests, rights, and freedoms of our users, particularly children. We apply additional safeguards, including data minimisation and purpose limitation, to all legitimate-interest processing activities. Where the processing involves children, we apply heightened scrutiny before relying on this basis.

6. Lawful Basis Summary Table

The following table summarises the primary lawful basis for each main processing activity across all users (not limited to EU/EEA):

Processing Activity Primary Lawful Basis Additional Basis

Account registration Contract —

Player profile management Contract —

Development Report Contract — generation

AI Coach interactions Contract — Coach Video delivery Contract —

Post-Match Reflection storage Contract Consent (voice notes)

Voice Note processing Consent —

Pre-match push notifications Contract / Consent Consent required for marketing-type pushes

WhatsApp / SMS notifications Consent —

Marketing communications Consent —

Platform usage analytics Legitimate interests —

Security and fraud prevention Legitimate interests Legal obligation

Compliance with legal requests Legal obligation —

Billing and payment processing Contract Legal obligation

7. AI Coach Data Processing and Automated Decision-Making

7.1 How the AI Coach Processes Data The AI Coach uses data from the player's profile, development history, match data, and post-match reflections to generate personalised coaching suggestions, motivational messages, and training guidance. The AI Coach is powered by a third-party artificial intelligence model, which processes this data under our instructions as a data processor (see Section 12).

7.2 Article 22 Notice — Automated Decision-Making In accordance with GDPR Article 22, we inform EU/EEA users that:

(a) The AI Coach does produce automated outputs (coaching suggestions, development recommendations) based on the player's data;

(b) However, no decision produced by the AI Coach produces legal effects or similarly significant effects on the player without human review. The AI Coach is a coaching support tool, not a decision-making authority;

(c) AI Coach outputs are not used to make automated decisions about player selection, academic standing, access to services, or any other decision with legal or similarly significant effect;

(d) Human review is always available. If you wish to have any AI Coach content reviewed by a qualified human BV1 coach, you may request this at any time by contacting your assigned coach or emailing team@bestversion1.com.

7.3 Profiling The AI Coach engages in a form of profiling (GDPR Article 4(4)) in that it analyses player data to generate personalised outputs. This profiling is limited to the coaching and development context and is carried out for the sole purpose of improving the player's development experience on the platform.

7.4 No Profiling for Advertising We do not use AI Coach data or any player profiling for advertising, marketing profiling, or commercial data analytics beyond the improvement of the BV1Football Services.

8. Video Data

8.1 Storage and Retention Coach Videos (including any player footage incorporated within them) are stored on BV1's secure hosting infrastructure for the duration of the active subscription period plus two (2) years following the end of the subscription ("video retention period"). After the video retention period, videos are permanently deleted.

8.2 Access Control Coach Videos are accessible only within the relevant Player Account's dashboard. They are not publicly accessible, indexed, or distributed outside the platform.

8.3 Player Footage Where player footage (match clips, training clips) has been uploaded to the platform for analysis purposes, that footage is stored with the same retention period as Coach Videos (subscription + 2 years) unless the parent requests earlier deletion.

8.4 Parental Rights over Video Data The Parent Account holder may request deletion of Coach Videos or player footage at any time by contacting team@bestversion1.com. Deletion requests will be processed within 30 days. Note that deletion of footage used as the basis for a Development Report will not retroactively alter that report; the report itself is subject to the separate report retention period.

8.5 No Biometric Use Video data featuring a player is not used for facial recognition, biometric identification, or any purpose beyond the coaching and development services described in this Privacy Supplement.

9. Voice Notes

9.1 Collection and Storage Voice Notes are audio recordings submitted voluntarily by or on behalf of a player as part of Post-Match Reflections. They are stored on BV1's secure servers in an encrypted format.

9.2 Default Retention Period Voice Notes are automatically and permanently deleted after 90 days from the date of submission, unless the Parent Account holder requests earlier deletion.

9.3 Early Deletion Parents may request deletion of any specific Voice Note or all Voice Notes associated with a Player Account at any time by contacting team@bestversion1.com. We will process deletion requests within 14 days.

9.4 No Biometric Processing Voice Notes are not analysed for biometric voice characteristics, speaker recognition, or identity verification. They are used solely for the coaching review purposes described in Section 3.7 and the Terms of Use Supplement.

9.5 Coach Access BV1 coaching staff may listen to Voice Notes as part of their coaching review process. This access is strictly limited to the assigned coach(es) for the relevant Player Account.

9.6 Third-Party Processing Voice Notes may be processed by our hosting provider and (where voice-to-text transcription is used to assist coaches) by a third-party transcription service. All such processors are bound by data processing agreements (see Section 12).

10. Data Retention Schedule

The following table sets out how long we retain each category of personal data. Retention periods run from the end of the active subscription unless otherwise stated.

Data Category Retention Period Notes

Player profile data (name, Active subscription + 2 years Deleted 2 years after DOB, position, etc.) subscription ends

Development Reports Active subscription + 3 years Retained to support long-term development tracking

Coach Videos Active subscription + 2 years Includes any player footage within videos

AI Coach conversation history Active subscription + 1 year Anonymised analytics may be retained longer

Post-Match Reflection (text) Active subscription + 2 years Part of development record

Voice Notes 90 days from submission Auto-deleted; earlier deletion on request

Account registration data Active account + 3 years Required for legal/billing compliance

Payment and billing records 7 years Legal and tax compliance

Notification logs 12 months Used for deliverability and consent records

Behavioral/engagement data Active subscription + 1 year Anonymised after subscription end

Device/technical data (IP logs, 12 months Security and fraud prevention access logs)

Support correspondence 3 years from last contact Customer service continuity

Note: Where a legal obligation requires us to retain data for a longer period (for example, financial records for tax compliance), we will retain the data for the legally required period and then delete it. Where a parent or data subject requests deletion before the end of a retention period, we will assess the request against any applicable legal retention obligations and inform you of the outcome (see Section 14).

11. How We Use Your Personal Data

11.1 We use the personal data collected through the BV1Football Services for the following purposes:

(a) To create and manage your account and Player Account(s);

(b) To provide, operate, and improve the BV1Football Services, including Development

Reports, AI Coach, Coach Videos, and Post-Match Reflections;

(c) To personalise the player's development experience and content;

(d) To communicate with you about your account, upcoming matches, new content, and platform updates;

(e) To send pre-match and development notifications (where you have opted in to the relevant channel);

(f) To process payments and manage your Subscription;

(g) To monitor and improve the quality and safety of the BV1Football Services;

(h) To detect and prevent fraud, abuse, and security threats;

(i) To comply with applicable legal obligations;

(j) To respond to your communications and support requests.

11.2 We do not use personal data collected through the BV1Football Services for:

Behavioural advertising or targeted advertising to any user;

The sale, rent, or trade of personal data to third parties for commercial purposes;

Political profiling;

Automated decisions with legal or similarly significant effects (see Section 7).

12. Third-Party Data Processors

We share personal data with third-party service providers who assist us in operating the BV1Football Services. All such providers act as data processors under written data processing agreements (DPAs) that bind them to process data only on our documented instructions and in compliance with applicable data protection law. The categories of third-party processors we use are as follows:

Processor Category Purpose Types of Data Shared

Cloud hosting provider Storing all platform data and All data categories serving the application

AI model provider Powering the AI Coach feature AI Coach interaction data, player profile data Push notification service Delivering push notifications to Device tokens, notification devices content

WhatsApp Business API Delivering WhatsApp Phone numbers, notification provider notifications content

Video content delivery Storing and delivering Coach Video files, associated network (CDN) Videos and player footage metadata

Payment processor Processing subscription Payment card data, billing payments details

Email service provider Sending transactional and Email addresses, name, email account emails content

Analytics provider Aggregated platform usage Anonymised/pseudonymised analytics usage data

12.1 We do not sell personal data to any third party. We do not share personal data with third parties for their independent marketing purposes.

12.2 We may disclose personal data to law enforcement, regulators, or courts where required by applicable law, a valid legal process, or to protect the legal rights, safety, or property of Best Version 1 LLC, our users, or the public.

12.3 In the event of a merger, acquisition, or sale of all or part of our business, personal data may be transferred as part of the transaction. We will notify affected users in advance of such a transfer and ensure that the acquirer provides at least equivalent privacy protections.

13. Cross-Border Data Transfers

13.1 Best Version 1 LLC is based in Miami, Florida, United States. If you are located outside the United States, your personal data will be transferred to and processed in the United States.

13.2 EU/EEA Transfers — Safeguards The transfer of personal data from the EU/EEA to the United States is subject to the safeguards required by GDPR Chapter V. We use the following mechanisms to ensure that your data is protected to EU standards:

(a) EU-U.S. Data Privacy Framework (DPF): Where our US service providers are certified under the EU-U.S. Data Privacy Framework administered by the US Department of Commerce, we rely on their DPF certification as the transfer mechanism;

(b) Standard Contractual Clauses (SCCs): Where DPF certification is not available or is not relied upon, we use the European Commission's Standard Contractual Clauses (including Module 2 for controller-to-processor transfers) to govern transfers;

(c) Transfer Impact Assessments: Where required, we conduct and document transfer impact assessments to verify that the SCCs provide sufficient protection in practice.

13.3 UK Transfers Transfers of personal data from the United Kingdom to the United States are governed by the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU SCCs, as applicable.

13.4 Other Jurisdictions For transfers from other jurisdictions, we apply equivalent or greater protections in accordance with applicable local law. You may contact us at team@bestversion1.com to request information about the specific transfer mechanisms applicable to your data.

14. Your Rights as a Data Subject

14.1 Rights Available to All Users Subject to applicable law, you have the following rights in relation to your personal data:

(a) Right of Access: You have the right to request a copy of the personal data we hold about you (and/or your child) and information about how we process it;

(b) Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data;

(c) Right to Erasure ("Right to be Forgotten"): You have the right to request that we delete your (or your child's) personal data, subject to any legal retention obligations;

(d) Right to Data Portability: You have the right to request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider;

(e) Right to Restriction of Processing: You have the right to request that we restrict processing of your data in certain circumstances (for example, while we resolve an accuracy dispute);

(f) Right to Object: You have the right to object to processing based on legitimate interests

(Art. 6(1)(f)) and to processing for direct marketing purposes;

(g) Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

14.2 Exercising Your Rights — Free of Charge You may exercise any of the above rights free of charge by contacting us at team@bestversion1.com. We will respond to your request within 30 days. In complex cases, we may extend this period by a further 60 days, in which case we will notify you within the initial 30-day period.

14.3 Parental Rights on Behalf of Minor Players All rights listed in Section 14.1 may be exercised by a parent or legal guardian on behalf of their minor child. When you submit a request on behalf of your child, we will ask you to verify your identity and your relationship to the child before processing the request.

14.4 Identity Verification To protect the security of personal data, we will verify your identity before responding to data rights requests. This is to ensure that we do not disclose or delete data in response to a request from someone who is not entitled to make it.

14.5 Complaints If you are dissatisfied with how we have handled your personal data, you have the right to lodge a complaint with a data protection supervisory authority. Relevant authorities include:

EU/EEA users: The supervisory authority in your EU member state of habitual residence, place of work, or where the alleged infringement took place;

UK users: The Information Commissioner's Office (ICO) — ico.org.uk;

US users: The Federal Trade Commission (FTC) — ftc.gov.

We would always appreciate the opportunity to address your concerns directly before you contact a supervisory authority, and we encourage you to reach out to us first at team@bestversion1.com.

15. EU Supervisory Authority

15.1 EU and EEA users may lodge a complaint about BV1Football.com's data processing practices with the supervisory authority in the EU member state where they habitually reside, where they work, or where the alleged infringement occurred.

15.2 A list of EU supervisory authorities is available at: edpb.europa.eu/about-edpb/about-edpb/members_en

15.3 We are committed to cooperating with EU data protection authorities and to complying with advice given by such authorities with regard to personal data transferred from the EU.

16. UK Users — ICO

16.1 UK users who have concerns about how we handle their personal data may contact the Information Commissioner's Office (ICO), the UK's independent data protection regulator.

16.2 The ICO can be reached at:

Website: ico.org.uk

Helpline: 0303 123 1113 (within the UK)

Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire,

SK9 5AF

16.3 Best Version 1 LLC is committed to working constructively with the ICO and to upholding the standards of the UK GDPR and the Children's Code (Age-Appropriate Design Code).

17. Security

17.1 We implement appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

Encryption of data in transit (TLS/HTTPS) and encryption of sensitive data at rest;

Access controls limiting staff access to personal data on a need-to-know basis;

Secure password hashing (we do not store plain-text passwords);

Regular security reviews and vulnerability assessments;

Data processor due diligence and contractual security requirements.

17.2 While we take security seriously and implement industry-standard measures, no system is completely immune to security threats. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay in accordance with applicable law.

17.3 Breach Notification

For EU/EEA users: We will notify the relevant supervisory authority within 72 hours of becoming aware of a reportable breach and will notify affected individuals without undue delay where there is a high risk;

For UK users: We will notify the ICO within 72 hours and notify affected individuals as required;

For US users: We will comply with applicable US state data breach notification laws.

18. Cookies and Tracking Technologies

18.1 BV1Football.com uses cookies and similar tracking technologies to operate the platform, remember your preferences, and improve your experience. Our use of cookies is governed by the cookie notice within the Master Privacy Policy at bestversion1.com/privacy.

18.2 For users in the EU/EEA and UK, we obtain your consent before setting non-essential cookies (such as analytics or marketing cookies) in compliance with the EU ePrivacy Directive and UK PECR.

18.3 No cookies or tracking technologies are used to build behavioural advertising profiles of any user, and particularly not of minor users.

19. Changes to This Privacy Supplement

19.1 We may update this Privacy Supplement from time to time to reflect changes in our data practices, new features of the BV1Football Services, or changes in applicable law.

19.2 When we make material changes, we will notify you by email to the address associated with your Parent Account and/or by a prominent notice within the BV1Football Services. For EU and UK users, we will provide at least 30 days' advance notice of material changes.

19.3 The updated Privacy Supplement will be effective from the date stated at the top of the document. Your continued use of the BV1Football Services after the effective date constitutes your acknowledgment of the updated Privacy Supplement.

19.4 Where a change requires your fresh consent (for example, a new processing purpose based on consent), we will request that consent separately and will not rely on your continued use of the platform as consent to the new processing.

20. Contact and Data Protection Lead

For any questions, concerns, or requests relating to this Privacy Supplement, your personal data, or the exercise of your data subject rights, please contact us:

Best Version 1 LLC — Data Protection Lead Email: team@bestversion1.com Subject Line: "Privacy / Data Request — BV1Football" Website: bv1football.com

We aim to acknowledge all privacy enquiries within 5 business days and to resolve them within 30 days.

For urgent matters relating to a child's personal data or potential data breaches, please mark your email as URGENT in the subject line.

*This Privacy Supplement was last updated on 28 July 2026. Prior versions are available on request.*