Information and Copy
You may request information about whether and how we process your data.
Personal Data Protection
Privacy Policy
This Policy explains how GoalLineExpert collects, uses, retains and protects the personal data of visitors and registered Users.
Last updated: 11 July 2026
We use personal data only where necessary to provide the Service, manage accounts and subscriptions, maintain security, communicate with Users, comply with legal obligations and protect our legitimate interests.
1
Personal Data Controller
The controller of personal data processed through GoalLineExpert is:
- GOALLINEEXPERT
- privacy@goallineexpert.com
- https://goallineexpert.com
2
Scope of This Policy
This Policy applies to personal data processed through the GoalLineExpert website, User accounts, Premium services, contact forms, service emails, the referral programme and connected Telegram functionality.
It does not govern independent processing carried out by external websites and services that maintain their own privacy policies.
3
Personal Data We May Collect
| Category | Examples | Main Purpose |
|---|---|---|
| Account Data | Username, email address, account identifier and registration date. | Creating and managing the account. |
| Authentication Data | Hashed password, verification codes and account recovery tokens. | Login, email verification and security. |
| Subscription Data | Selected plan, status, access period and payment history. | Providing and managing Premium access. |
| Payment Data | Transaction identifier, amount, currency, status and information supplied by the payment provider. | Payment verification, accounting and fraud prevention. |
| Telegram Data | Telegram username, chat ID, user ID and connection status. | Connecting an account and providing selected Telegram services. |
| Referral Data | Referral code, referring User, cookie identifier and referral status. | Managing the referral programme and rewards. |
| Technical Data | IP address, request time, session, browser and device information, diagnostic and security logs. | Security, rate limiting, diagnostics and abuse prevention. |
| Communications | Messages, enquiries, support replies and service correspondence. | Responding to enquiries and providing User support. |
We do not store your password as readable text. It is processed using one-way hashing.
4
Where Personal Data Comes From
- Directly from you when registering, paying or contacting us.
- Automatically from your browser and our server when you use the website.
- From PayPal or another selected payment provider when processing a payment.
- From Telegram when you voluntarily connect your account.
- From a referral cookie or link when you visit through a referral.
5
Purposes and Legal Bases
| Purpose | Legal Basis |
|---|---|
| Registration, login, account management and provision of the Service. | Performance of a contract or steps taken before entering into a contract. |
| Premium subscriptions, payments and support. | Performance of a contract and compliance with legal obligations. |
| Prevention of fraud, abuse and automated registrations. | Legitimate interests in protecting the Platform and Users. |
| Sending verification codes, account notices and important service information. | Performance of a contract and legitimate interests. |
| Marketing communications where the User has expressly opted in. | Consent, which may be withdrawn at any time. |
| Accounting, tax reporting and responding to lawful requests. | Compliance with a legal obligation. |
6
Registration and Authentication
When registering, we process a username, email address and password. The password is hashed before storage and is not retained in readable form.
To verify an account, we may create temporary codes and tokens with limited validity. Similar tokens may be used for account recovery.
Service emails are sent through a selected email or SMTP provider.
7
Payments and PayPal
Premium payments may be processed by PayPal or another external payment provider. The payment provider processes information necessary to complete and verify the transaction under its own privacy policy.
GoalLineExpert may receive and retain an order or transaction identifier, amount, currency, status, date and other information necessary to activate the Service, maintain accounting records and resolve disputes.
GoalLineExpert does not request or store your complete payment-card details where payment is made directly through PayPal.
8
Connecting Telegram
When you voluntarily connect your account to Telegram, we may process your Telegram username, user ID, chat ID and connection-status information.
This data is used to identify the connected account, provide authorised access to channels or bots, send selected notifications and manage access according to the subscription plan.
Telegram also processes personal data as an independent service provider under its own terms and privacy policy.
9
Security, IP Addresses and Cloudflare Turnstile
To protect registration and other sensitive actions, we may process IP addresses, timestamps, request counts, failed attempts and other technical signals.
We use Cloudflare Turnstile to distinguish genuine Users from automated requests. During verification, the browser receives a challenge and the server sends the resulting token to Cloudflare for validation.
- Password hashing.
- CSRF protection for forms.
- Rate limiting for excessive requests and attempts.
- Temporary verification codes and tokens.
- Technical logs for detecting errors and abuse.
No technical system can guarantee absolute security. We apply reasonable technical and organisational measures appropriate to the nature of the Service and identified risks.
10
Cookies and Local Storage
GoalLineExpert uses cookies and similar technologies where necessary for login, session maintenance, language selection, security, referral functionality and remembering User settings.
A detailed list of the cookies used, their purposes and durations will be published in a separate Cookie Policy.
11
Recipients and Service Providers
We may disclose limited personal data to service providers where necessary to operate the Platform.
- Hosting, server and infrastructure providers.
- Cloudflare for form and infrastructure protection.
- PayPal or another payment provider.
- SMTP or email-delivery provider.
- Telegram for voluntarily connected services.
- Professional advisers, accountants or legal representatives where necessary.
- Competent authorities where disclosure is required by law.
We do not sell personal data or provide it to sportsbooks for their direct marketing.
12
International Data Transfers
Some providers may process data outside the European Economic Area. Where applicable, transfers should rely on a recognised safeguard, such as an adequacy decision, standard contractual clauses or another valid legal mechanism.
13
Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, unless a longer period is required or permitted by law.
When determining the retention period, we consider:
- The duration of the account and contractual relationship.
- The need to provide and demonstrate the purchased Service.
- Accounting, tax and other legal requirements.
- Limitation periods for bringing or defending legal claims.
- The need to prevent fraud, abuse and attacks.
- The sensitivity and volume of the relevant data.
Temporary verification codes and tokens are created with limited validity. Certain accounting and payment records may be retained after account closure where necessary to comply with a legal obligation.
14
Your Data Protection Rights
Subject to applicable law, you may exercise the following rights:
Correcting Inaccurate Data
You may request completion or correction of inaccurate information.
Right to Be Forgotten
You may request deletion where there is no legal basis to continue processing.
Temporary Restriction
In certain circumstances, you may request restriction of processing.
Receiving Provided Data
Where applicable, you may receive data you provided in a structured format.
Objecting to Processing
You may object to processing based on legitimate interests or direct marketing.
Withdrawing Consent
You may withdraw consent at any time without affecting prior lawful processing.
Complaint to a Supervisory Authority
You may lodge a complaint with the Bulgarian CPDP or another competent supervisory authority.
To exercise a right, contact privacy@goallineexpert.com. We may request information to verify identity and prevent unauthorised access.
Commission for Personal Data Protection
Address: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria. Official information and complaint procedures are available through the CPDP website.
15
Minors
GoalLineExpert is intended only for persons over 18 years of age. We do not knowingly seek to collect personal data from minors.
If we learn that a minor has created an account or supplied personal data contrary to our rules, we may restrict the account and delete the data unless retention is required by law.
16
Changes to This Policy
We may update this Policy when the Service, providers, technology or applicable law changes.
The current version will be published on this page with a revised last-updated date.
Privacy Contact
GOALLINEEXPERT
This Policy describes the categories of processing identified as of its publication date. It should be updated when new systems, marketing pixels, analytics tools or external providers are introduced.