Introduction
The Ghana Premier League ("GPL", "we", "us", or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at gpl.com.gh and use our services.
This policy is prepared in accordance with the Ghana Data Protection Act, 2012 (Act 843) and, where applicable, the EU General Data Protection Regulation (GDPR) for users accessing our services from the European Union.
The GPL website is operated by MG Digital Media Ltd on behalf of the Ghana Football Association and Ghana Premiership Football Company Limited.
Information We Collect
Personal Information You Provide
When you create a myGPL account, purchase tickets, or interact with our services, we may collect:
- Account Information: Name, email address, phone number, username, and password (managed through mgPass)
- Profile Information: Profile picture, favourite team, communication preferences
- Transaction Information: Billing address, payment details (processed securely by third-party payment providers)
- Communication Data: Messages, feedback, and support requests you send to us
Information Collected Automatically
When you access our website, we automatically collect:
- Device Information: IP address, browser type, operating system, device identifiers
- Usage Data: Pages visited, time spent on pages, click patterns, search queries
- Location Data: Approximate location based on IP address (country/region level)
Information from Third Parties
We may receive information from:
- mgPass (MG Digital): Authentication and single sign-on data when you log in
- adesa+ Streaming: Viewing history and preferences for personalised recommendations
- mgTix: Ticket purchase history and event attendance
- Social Media: Profile information when you connect social accounts
How We Use Your Information
We use your personal data to:
- Provide Our Services: Create and manage your account, process transactions, deliver content
- Personalise Your Experience: Recommend content, remember preferences, show relevant fixtures and news
- Communicate With You: Send match updates, newsletters, service announcements (with your consent)
- Improve Our Services: Analyse usage patterns, conduct research, develop new features
- Ensure Security: Detect fraud, protect against abuse, enforce our terms
- Comply With Legal Obligations: Meet regulatory requirements under Act 843 and other applicable laws
Legal Basis for Processing (GDPR Users)
For users in the EU/EEA, we process your data based on:
- Contract Performance: To provide services you've requested
- Legitimate Interests: To improve our services and ensure security
- Consent: For marketing communications and non-essential cookies
- Legal Obligation: To comply with applicable laws
Data Sharing and Disclosure
We may share your information with:
Service Providers
- MG Digital Media Ltd: Website development, mgPass authentication, digital services
- Adesa Productions Limited: Streaming services, broadcast analytics
- DigitalOcean: Cloud hosting and media storage
- Payment Processors: Secure transaction processing
Affiliated Entities
- Ghana Football Association (GFA)
- Ghana Premiership Football Company Limited
- Media General Group
Legal Requirements
We may disclose information when required by law, court order, or to protect our rights and safety.
With Your Consent
We may share information with third parties when you explicitly consent.
We do not sell your personal data to third parties.
Data Retention
We retain your personal data for as long as necessary to:
- Maintain your account and provide services
- Comply with legal obligations
- Resolve disputes and enforce agreements
Account data is retained for the duration of your account plus 3 years after deletion. Transaction records are retained for 7 years as required by Ghanaian law.
Your Rights Under Act 843
Under the Ghana Data Protection Act, you have the right to:
- Access: Request a copy of your personal data
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your data (subject to legal retention requirements)
- Withdraw Consent: Withdraw consent for marketing communications at any time
- Object: Object to processing based on legitimate interests
- Data Portability: Receive your data in a structured, machine-readable format
To exercise these rights, contact us at [email protected].
Data Security
We implement appropriate technical and organisational measures to protect your data:
- Encrypted data transmission (HTTPS/TLS)
- Secure authentication through mgPass
- Regular security assessments
- Access controls and audit logging
- Secure cloud infrastructure
International Data Transfers
Your data may be processed outside Ghana, including:
- European Union: DigitalOcean infrastructure
- United States: Service providers
We ensure appropriate safeguards are in place for international transfers in compliance with Act 843.
Children's Privacy
Our services are not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us.
Changes to This Policy
We may update this policy periodically. We will notify you of material changes by:
- Posting the updated policy on our website
- Sending email notification to registered users
- Displaying a prominent notice on our homepage
Contact Us
For privacy-related enquiries or to exercise your rights:
Data Controller:
Ghana Football Association
GFA Secretariat, Accra, Ghana
Data Processor:
MG Digital Media Ltd
Email: [email protected]
Data Protection Commission (Ghana):
Website: dataprotection.org.gh
Regulatory Information
This policy complies with:
- Ghana Data Protection Act, 2012 (Act 843)
- EU General Data Protection Regulation (GDPR) where applicable
Registration with the Data Protection Commission: [Registration Number]