PRIVACY POLICY

Last updated: 16th March 2026 | Version: 2.0 (US Edition)

XO Sports Pty Ltd (“XO Sports”, “we”, “us”, or “our”) is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use the XO Sports mobile application and related services (collectively, the “Services”).

This policy applies to users worldwide, including users in Australia and the United States. Specific rights for California residents and other US state residents are set out in Sections 10 and 11 below. For questions, contact us at privacy@xosports.ai.

This Privacy Policy applies to personal information collected through the XO Sports mobile application, any XO Sports website that links to this Privacy Policy, and any related services, communications, or support interactions provided by XO Sports. (collectively, the “Services”).

This Privacy Policy does not apply to information collected by third-party services that may interact with the Services, including the Apple App Store, Google Play Store, payment processors, analytics providers, or other third-party platforms that operate under their own privacy policies.

XO Sports does not accept bets, facilitate gambling, or have any affiliation with any bookmaker or wagering operator. All data, predictions, and analytics are provided for informational and entertainment purposes only.

1. INFORMATION WE COLLECT

Information You Provide Directly

We collect information you voluntarily provide when you:

Subscribe to a plan (subscription and payment data — processed by Apple or Google; XO Sports does not store your full payment card information).

Contact our support team (communications, enquiry details, messages, or information you provide when requesting assistance).

Participate in feedback, surveys, or promotions.

Information We Collect Automatically

When you use the Services, we automatically collect:

Device Data: Device type, model, operating system version, IP address, browser type.

Usage Data: Features accessed, prediction pages viewed, session duration, and interaction timestamps.

Location Data: General geographic location inferred from your IP address or device settings. XO Sports does not collect precise geolocation data (such as GPS coordinates) unless you explicitly enable a feature that requires that functionality.

Crash and Performance Data: Error reports and analytics to maintain app stability.

Cookies and Tracking Technologies

We and our service providers use cookies, web beacons, pixel tags, mobile software development kits (SDKs), device identifiers, and similar tracking technologies to collect information about your activity on our Services. These technologies help us authenticate users, remember preferences, analyze usage, and support our analytics tools (including Mixpanel, AppsFlyer, Firebase, and Qonversion).

When you first open the XO Sports app on an Apple device, you may see an App Tracking Transparency prompt asking whether you allow XO Sports to track your activity across other companies’ apps and websites. If you decline, we will not link your activity with third-party data for advertising purposes. Core app features and essential analytics will continue to operate.

Do Not Track: Some browsers transmit Do Not Track (DNT) signals. At this time, XO Sports does not alter its data collection practices in response to DNT signals. We will update this policy if we change this approach.

2. HOW WE USE YOUR INFORMATION

We use your information to:

Operate, maintain, and improve the XO Sports platform and Services.

Authenticate your account and manage your subscription.

Send service notices, updates, and support communications.

Deliver relevant content and marketing communications where you have opted in to receive them. You may opt out of marketing communications at any time by using the unsubscribe link in those communications or contacting us.

Analyze usage trends and performance to improve the functionality, accuracy, reliability, and usability of our analytics systems and prediction models used within the Services.

Comply with legal obligations, including applicable US state privacy law obligations.

Detect, investigate, and prevent fraud, abuse, or violations of our Terms of Service.

We do not sell, rent, or lease your personal information to third parties for their own marketing purposes. We will not use your personal information for purposes that are materially different from those described in this Privacy Policy without providing appropriate notice and, where required, obtaining your consent.

3. WHEN WE SHARE YOUR INFORMATION

XO Sports shares limited personal information only in the following circumstances:

Service Providers: We share data with trusted vendors who assist us in operating the Services, including cloud hosting, analytics (Mixpanel, AppsFlyer, Firebase, Qonversion), and customer support. These providers process personal information only on our behalf and are contractually bound to protect the confidentiality and security of that information and use it only for the services they provide to us.

Apple and Google: We share usage and purchase information with Apple (App Store) and Google (Play Store) as part of managing in-app subscriptions and purchases, in accordance with their respective privacy policies. Apple and Google may independently process information in accordance with their own privacy policies.

Business Transfers: If XO Sports is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction and will remain subject to protections consistent with this Privacy Policy until any new policy becomes effective. We will notify you via email and/or a prominent notice in the app before your data is transferred and becomes subject to a different privacy policy.

Legal Requirements: We may disclose your information where required by law, court order, or to protect the rights, property, or safety of XO Sports, our users, or the public.

With Your Consent: We may share your information for any other purpose with your express consent.

California Notice: XO Sports does not “sell” or “share” personal information as those terms are defined under the California Consumer Privacy Act (CCPA) or California Privacy Rights Act (CPRA). We do not use or disclose sensitive personal information for purposes other than those permitted by the CPRA.

4. DATA RETENTION

We retain your personal information for as long as necessary to provide the Services, fulfil the purposes described in this policy, or as required by law. Retention periods are determined based on the nature of the information, the purposes for which it was collected, operational needs, legal obligations, dispute resolution requirements, and fraud prevention considerations.

If you request deletion of your account, your personal information will be deleted from our active systems within 90 days of your request, except where we are required by law to retain it longer. Data retained for legal compliance will be isolated from active processing and deleted as soon as legally permissible. Note: Apple and Google independently retain records of transactions in accordance with their own policies. Deleted information may remain in secure backup systems for a limited period of time until those systems are overwritten or cycled in accordance with our backup retention practices.

5. HOW WE PROTECT YOUR DATA

XO Sports implements reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, or destruction, including:

Encrypted data transmission (HTTPS/TLS/SSL).

Access controls, authentication management, and role-based data access.

Regular security monitoring and audits.

While we take all reasonable precautions, no method of electronic transmission or storage is 100% secure. You use the Services at your own risk, and we encourage you to access the Services within a secure network environment and to maintain a strong, confidential password. If we become aware of a security incident involving personal information, we will investigate the matter and provide any notifications required under applicable law.

6. CHILDREN AND MINORS

XO Sports is designed for users aged 21 years and over in the United States and 18 years and over in Australia. We do not knowingly collect personal information from minors below these age thresholds.

If we become aware that we have collected data from a person below the applicable age threshold, we will promptly deactivate the account and delete all associated personal data. If you become aware of any such data collection, please contact us at app.admin@xosports.ai.

XO Sports complies with the Children’s Online Privacy Protection Act (COPPA), 15 U.S.C. §§ 6501–6506, and applicable state laws. The Services are not directed to children and we do not knowingly collect personal information from children under the age of 13.

7. TRACKING PREFERENCES

XO Sports respects your tracking preferences. When you first install or open the XO Sports app on an Apple device, you may see a system prompt requesting permission to track your activity across other companies’ apps and websites in accordance with Apple’s App Tracking Transparency (ATT) framework. You may decline this request without affecting your access to core app features.

You can change your tracking preferences at any time in your device Settings under Privacy > Tracking.

Digital Advertising Alliance (DAA) Opt-Out: You may opt out of interest-based advertising delivered by DAA member companies by visiting www.aboutads.info (browser) or www.youradchoices.com/appchoices (mobile app).

8. INTERNATIONAL DATA TRANSFERS

XO Sports is headquartered in Australia. By using the Services, you acknowledge that your personal information may be transferred to and processed in Australia or other countries where XO Sports or its service providers operate. These countries may have different data protection laws than those in your jurisdiction.

We implement reasonable safeguards designed to protect personal information regardless of where data is processed, and we ensure that appropriate contractual protections are in place for transfers from the United States to Australia. California residents may have additional rights under CPRA regarding cross-border transfers — see Section 10.

9. LINKS TO THIRD-PARTY SITES

The Services may contain links to third-party websites or services. This Privacy Policy does not apply to those sites. We encourage you to review the privacy policies of any third-party sites you visit. XO Sports is not responsible for the privacy practices or content of third-party websites or services, which operate independently from XO Sports.

10. CALIFORNIA RESIDENTS — CCPA/CPRA RIGHTS

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Categories of Personal Information Collected

In the past 12 months, XO Sports has collected the following categories of personal information:

Identifiers: Name, email address, IP address, account username.

Commercial information: Subscription history and purchase records.

Internet or electronic network activity: App usage data, features accessed, crash reports.

Geolocation data: General location inferred from IP address.

Inferences: User preferences and interests derived from usage patterns.

Your California Privacy Rights

You have the right to:

Know: Request disclosure of the categories and specific pieces of personal information we have collected about you, subject to applicable legal limitations and verification requirements.

Delete: Request deletion of your personal information, subject to certain exceptions.

Correct: Request correction of inaccurate personal information.

Opt Out of Sale/Sharing: XO Sports does not sell or share personal information as defined under CCPA/CPRA. You may contact us to confirm this.

Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

Limit Use of Sensitive Personal Information: XO Sports does not collect sensitive personal information as defined under CPRA beyond what is permitted without restriction.

How to Submit a California Privacy Request

To submit a request, email us at privacy@xosports.ai with the subject line “California Privacy Request”. We will acknowledge your request within 10 business days and respond within 45 days (extendable by a further 45 days where reasonably necessary). We may need to verify your identity before processing your request and may request additional information reasonably necessary to confirm your identity.

Shine the Light (Civil Code §1798.83)

California residents may request information about whether XO Sports has disclosed personal information to third parties for their direct marketing purposes in the preceding calendar year. To make this request, email privacy@xosports.ai with “California Shine the Light Request” in the subject line.

11. OTHER US STATE PRIVACY RIGHTS

Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Oregon, Montana, Texas

Residents of certain states, including Virginia, Colorado, Connecticut, Oregon, Montana, and Texas have rights under their respective state privacy laws that are similar to California rights, including the rights to: access, correct, delete, and obtain a copy of your personal information; opt out of targeted advertising; and appeal our decisions regarding your privacy rights requests.

To exercise these rights, email privacy@xosports.ai with your state of residence and the right you wish to exercise. We will respond within the timeframe required by your state’s law. If you are unsatisfied with our response to your request, you may appeal by emailing us with “Privacy Appeal” in the subject line. We will review and respond to your appeal within the timeframe required by applicable law.

Nevada

Nevada residents may opt out of any future sale of their personal information by emailing privacy@xosports.ai with “Nevada Opt-Out Request” in the subject line. XO Sports does not currently sell personal information as defined under Nevada Revised Statutes Chapter 603A.

12. YOUR GENERAL PRIVACY RIGHTS (ALL USERS)

Regardless of your location, you may at any time request to exercise the following privacy controls, subject to applicable law and verification requirements:

Access or correct your personal information via the app settings or by contacting us.

Request deletion of your account and associated data.

Withdraw consent for marketing communications by using the unsubscribe link in any marketing email or contacting app.admin@xosports.ai.

Lodge a complaint with the relevant privacy authority in your jurisdiction (for Australian users: the Office of the Australian Information Commissioner at www.oaic.gov.au; for US users: your applicable state Attorney General’s office or privacy enforcement agency).

13. DIGITAL ADVERTISING AND COOKIE CONSENT

You may opt out of interest-based advertising delivered by participating companies through the Digital Advertising Alliance (DAA) by visiting:

Browser opt-out: www.aboutads.info

Mobile app opt-out: www.youradchoices.com/appchoices

Where required by applicable law, we will present a cookie consent banner on our website when cookies or similar technologies are used. You may update your cookie preferences at any time by accessing the cookie settings via our website footer.

14. UPDATES TO THIS POLICY

We may update this Privacy Policy from time to time. The updated policy will be posted at www.xosports.ai/privacy.. If we make material changes to how personal information is collected, used, or disclosed, we may provide additional notice through the Services or by other appropriate means. By continuing to use the Services after the updated Privacy Policy becomes effective, you acknowledge that you have reviewed and accepted the updated policy.

15. CONTACT US

For questions, privacy requests, or concerns about this Privacy Policy:

Privacy enquiries: privacy@xosports.ai

General support: app.admin@xosports.ai

DMCA notices: dmca@xosports.ai

Postal address: XO Sports Pty Ltd, Level 9, 168 Exhibition Street, Melbourne VIC 3000, Australia

Website: www.xosports.ai