Privacy Policy

1.1 Who we are. This policy is issued by Elite College Fantasy Football LLC, doing business as ECFFB (“ECFFB,” “we,” “us,” or “our”), 1680 Campbell Ln., Suite 109 #1088, Bowling Green, KY 42104. You can reach us about privacy at privacy@elitecollegefantasyfootball.com.

1.2 What it covers. This policy explains what personal information we collect, why, who we share it with, how long we keep it, and what choices you have. It covers our website at https://www.elitecollegefantasyfootball.com/ (the “Website”), the ECFFB app (the “APP”), the ECFFB College Football Faceoff Bracket Challenge Contest (the “Promotion”), the Mini-Challenges tab (the Ultimate Bracket Challenge Fan Vote, the College Football Bracket Battle, and the American Service Champions Challenge), and the advertising, sponsored content, and opt-in offers from third-party sponsors and advertising partners (“Brand Partners”) that appear on the Website and APP. It does not cover other companies’ websites or apps, including Brand Partner sites, that we link to.

1.3 Related documents. The Promotion is governed by the Official Rules, and use of the Website and APP is governed by our Terms of Use. If this policy and the Official Rules say different things about how we handle winner information or Brand Partner sharing for the Promotion, we will follow whichever is more protective of you.

1.4 Who this is for. ECFFB is for adults. You must be at least 18 years old to create an account. See Section 11.

2.1 Information you give us.

2.2 Information collected automatically. When you use the Website or APP we collect technical information such as your IP address, device and browser type, operating system, app version, pages or screens viewed, actions taken, dates and times, and error logs. We also record which Brand Partner advertisements are shown to you and whether you tap them. We use your IP address to estimate your general location, such as your state, to check residency rules, apply legal limits on Brand Partner content, and prevent fraud. We do not collect your precise location.

2.3 Information from other sources. We receive official game schedules and results from our sports data provider. That data does not contain personal information about you. If a service provider helps us verify identity or detect fraud, it may give us a result such as whether an ID appears valid. If you choose Zelle, the Zelle network shows us the name enrolled with your Zelle email address or mobile number so we can confirm it matches your verified name before we send payment. If you choose ACH, our bank may tell us whether the account details are valid. We do not buy personal information about you from Brand Partners or data brokers.

2.4 Sensitive information. Some of what we collect is sensitive: government identification, taxpayer identification numbers, bank account numbers, account login credentials, and information about military or emergency services service. We collect it only for the purposes in Section 3. We never use it to choose advertising and never share it with a Brand Partner. We do not collect biometric templates or use facial recognition on ID photos, and we do not collect health information, information about your race or ethnicity, religious beliefs, sexual orientation, or immigration status.

2.5 Optional information and the selection lock. Choosing a school and a service cohort is voluntary. If you do not choose, you can still enter the main Promotion, but you will not be counted in that Mini-Challenge. Under the Official Rules, you make these choices at registration (or, if you already have an account, the first time the APP asks), and they cannot be added or changed afterward. If you ask us to delete a school or cohort choice, you will no longer be counted in that Mini-Challenge. Opting in to any marketing, including Brand Partner marketing, is also voluntary.

3.1 We use personal information to:

• create and manage your account and authenticate you;
• run the Promotion and the Mini-Challenges, including accepting brackets, scoring, ranking, building the leaderboards, and compiling aggregate school and cohort tallies;
• verify age, residency, identity, and eligibility, and apply the one-account, two-bracket, and one-prize-per-person limits;
• notify and pay winners by paper check, ACH direct deposit, or Zelle, confirm that the payee name matches the winner’s verified name, collect tax forms, and meet tax reporting and state filing duties;
• detect and prevent fraud, duplicate accounts, automated entries, payment fraud, and abuse, including false advertising activity;
• send transactional messages, such as account notices, entry confirmations, bracket lock reminders, and prize notices;
• send ECFFB marketing messages only if you have separately agreed to receive them;
• show Brand Partner advertising and sponsored content, chosen based on the screen you are viewing and information in your ECFFB account (your age, state, and school selection), and apply the age and legal limits in Section 4.3;
• send you Brand Partner offers, and share your contact information with Brand Partners you choose, only if you have opted in as described in Section 4.3;
• give Brand Partners aggregate reports about how their advertising performed, such as the number of views and taps, that do not identify you;
• operate, secure, troubleshoot, and improve the Website and APP, using usage data in aggregate or de-identified form where practical;
• obtain prize-risk coverage, bonding, and regulatory filings for the Promotion; and
• comply with law, respond to lawful requests, and protect our rights and the rights of others.

3.2 No automated decisions with legal effect. Winners are determined by published scoring rules and reviewed by authorized ECFFB personnel. We do not use profiling to make decisions that have legal or similarly significant effects on you. Choosing which advertisement to show does not affect your entries or any prize.

4.1 Service providers. We share information with companies that work for us under written terms that limit their use of it, such as hosting and cloud providers, app developers, email and text delivery providers, customer support tools, and identity and fraud-prevention providers.

4.1A Banks and payment networks. To pay a prize, we share the payment details you choose, your name, and the prize amount with our bank and the payment network needed to complete the payment: the U.S. Postal Service and our bank for a paper check, the ACH network for direct deposit, or the Zelle network, operated by Early Warning Services, LLC, and the participating banks for a Zelle payment. These parties handle the information under their own terms and the laws that apply to them. We do not share your payment details for any other purpose.

4.2 Prize-risk, bonding and compliance providers. We may share winner and entry information with SCA Promotions or another prize-indemnity, bonding, or promotion-compliance provider, only as needed to obtain and maintain coverage, post any required bond or trust account, make required filings, confirm a payout, or process a claim.

4.3 Brand Partners.

Without your opt-in. Brand Partners receive only aggregate or de-identified reports, such as how many users saw or tapped an advertisement. When you tap a Brand Partner advertisement and leave our Website or APP, the link may tell the Brand Partner that the visit came from ECFFB, but not who you are. What happens on the Brand Partner’s site is governed by its own privacy policy.

Offers we send for a Brand Partner. If you agree to receive Brand Partner offers, we send them ourselves. The Brand Partner does not receive your contact information.

Sharing with a Brand Partner you choose. If you separately agree, for a specific Brand Partner named on the consent screen, we share with that Brand Partner your name, email address, state, and, if you also gave express written consent to its text messages, your phone number, together with a confirmation of whether you are 21 or older. We do not give it your date of birth, school or cohort selection, brackets, prize verification information, identity documents, tax or payment information (including bank and Zelle details), or military or emergency services information. After we share it, the Brand Partner’s own privacy policy governs its use. We require Brand Partners to use the information only to market their own products and services to you and to honor your requests to stop.

Age and legal limits. Advertising, offers, and marketing for sports wagering, gambling, casino or casino-style games, alcohol, tobacco or vaping products, cannabis, or any other product that may lawfully be offered only to adults over 18 are shown or sent only to users whose account information shows they are at least 21 (or any higher age that applies), and only where the product may lawfully be advertised to that user. We do not share information about users under 21 with Brand Partners that offer those products. None of this content appears in prize notices or other transactional messages.

Withdrawing. You can withdraw any Brand Partner choice at any time in the APP settings, through the unsubscribe method in any message, or by emailing privacy@elitecollegefantasyfootball.com. When you withdraw, we stop sending that Brand Partner’s offers and stop sharing your information with that Brand Partner, and we tell the Brand Partner of your withdrawal. Because a Brand Partner that has already received your information sends its own messages, you should also use the unsubscribe method in its messages.

4.4 Government agencies. We may give information to state regulators and tax authorities when the law requires it. For example, New York and Florida require winners lists that may include each winner’s name, address, prize description, prize value, and delivery date, and we report prizes to tax authorities when required.

4.5 What is public. Usernames, bracket status, rankings, and scores may appear on the leaderboards, including the separate Grand Prize and Consolation leaderboards. Winners of the College Football Bracket Battle and the American Service Champions Challenge may be shown in the APP by username, without prize amounts. After winners are verified, we publish a winners list with each winner’s first name, last initial, city, and state. School and service tallies are shown only as totals, not tied to your name. Where the law allows, and with your consent where required, we may use a winner’s name or likeness for publicity for ECFFB and the Promotion as described in the Official Rules. We do not let a Brand Partner use a winner’s name or likeness to advertise its own products without the winner’s separate written consent.

4.6 Legal and safety. We may disclose information to respond to a subpoena, court order, or other legal process, to enforce our terms and rules, or to protect the safety, rights, or property of ECFFB, our users, or others.

4.7 Business changes. If ECFFB is involved in a merger, financing, sale of assets, or similar transaction, personal information may be transferred as part of it. We will require the new owner to honor this policy or give you notice of any change.

4.8 Aggregate information. We may share aggregate or de-identified information that cannot reasonably identify you, such as total entries by school.

4.9 Sale and targeted advertising. We do not sell personal information except as described in Section 4.3(c), and we do not share personal information for cross-context behavioral advertising. Some state laws, such as California’s, do not treat sharing that you direct as a sale. Other state laws may treat sharing with a Brand Partner as a sale if ECFFB receives payment. Either way, we share with a Brand Partner only after you opt in for that Brand Partner, and withdrawing under Section 4.3(e) works as your opt-out of any sale. We do not use third-party advertising networks, advertising cookies, or advertising tracking pixels on the Website or APP. If we ever plan to, we will update this policy and give you a way to opt out before we start.

5.1 We use cookies and similar technologies that are needed to keep you signed in, protect the Website and APP, remember your settings, measure basic performance, and count Brand Partner advertising views and taps for our own aggregate reporting. You can block or delete cookies in your browser settings, but parts of the Website or APP may not work without them.

5.2 We respond to the Global Privacy Control browser signal as a request to opt out of sale and targeted advertising. If we receive that signal from a browser that is signed in to your account, we will not share your information with any Brand Partner unless you confirm your opt-in on our consent screen after we receive the signal. Some browsers send a “Do Not Track” signal; because there is no common standard for it, we do not respond to it differently.

6.1 Account and Promotion notifications. If you allow notifications in your device settings, the APP may send push notifications about your account and the Promotion, such as bracket lock reminders, score updates, and prize notices. You can turn these off at any time in your device settings.

6.2 ECFFB marketing. Entering the Promotion does not require you to agree to marketing. We send marketing email, marketing push notifications, or text messages only if you separately agree on a consent screen in the APP or on the Website, and we will say so at the point where you agree. Allowing notifications in your device settings is not, by itself, agreement to marketing. Text messages require your express written consent, and message and data rates may apply.

6.3 Brand Partner marketing. Consent to Brand Partner marketing is separate from consent to ECFFB marketing and from acceptance of the Official Rules, and the boxes are not pre-checked. Each Brand Partner that may receive your information is named on the consent screen. Text messages from or for a Brand Partner require your separate express written consent naming that Brand Partner.

6.4 Withdrawing consent. You can withdraw any marketing consent at any time using the unsubscribe link in an email, the settings in the APP, replying STOP to a text, or emailing us. Withdrawing marketing consent does not affect your eligibility or any prize. We will still send transactional messages, such as prize notices and account notices.

7.1 We keep personal information only as long as needed for the purposes in this policy and to meet legal duties. Unless a longer period is required by law or needed to resolve a dispute, our retention periods are:

7.2 After the retention period, we delete the information or convert it to a form that cannot reasonably identify you.

8.1 Your rights. Subject to the exceptions in the law, you may:

• ask whether we process your personal information and get a copy of it, in a portable format where feasible;
• ask us to correct inaccurate information;
• ask us to delete your personal information;
• ask for details on the categories of recipients and sources of your information, and the Brand Partners we shared it with;
• opt out of the sale of personal information, targeted advertising, and profiling that has legal or similarly significant effects (we do not engage in targeted advertising or such profiling, and any Brand Partner sharing happens only with your opt-in); and
• not be treated differently for using your rights.

8.2 Rights apply to all U.S. users. Many states give residents these rights by law. We offer them to every U.S. user of the Website and APP whether or not the law of your state requires it.

8.3 How to make a request. Email privacy@elitecollegefantasyfootball.com with the subject line “Privacy Request,” or write to ECFFB, Attn: Privacy, 1680 Campbell Ln., Suite 109 #1088, Bowling Green, KY 42104. Tell us which right you want to use. ECFFB operates online only, so email is our main method. Signing in to your account and using the privacy settings in the APP, where available, is the quickest way for account holders.

8.4 Verification. We may ask you to confirm your identity by signing in or answering questions that match information we hold. We will not ask for more than we need. If you ask for deletion of information that we must keep for a prize, tax, or state filing, we will explain what we kept and why.

8.5 Authorized agents. You can use an authorized agent. We may ask for written proof of permission and may still verify your identity with you directly.

8.6 Timing. We respond within 45 days. If we need more time, we may extend once by up to 45 more days and will tell you why.

8.7 Appeals. If we deny your request, you may appeal by replying to our response or emailing privacy@elitecollegefantasyfootball.com with the subject line “Privacy Appeal.” We will respond within 60 days and explain the decision in writing. If you are not satisfied, you may contact your state attorney general. For Kentucky residents, that is the Office of the Kentucky Attorney General.

9.1 California. California residents have the rights in Section 8, and also the right to know what we collected in the past 12 months. In that period we collected these categories: identifiers (name, email, username, phone number, IP address, device identifiers); personal records and government identifiers (date of birth, address, phone number, government ID, taxpayer identification number, and, for winners, bank account information or Zelle contact details); characteristics of protected classifications (age; and military or veteran status if you choose a military cohort); internet or app activity, including Brand Partner advertising views and taps; approximate geolocation derived from IP address; and inferences limited to fraud and security signals. We obtained them from you, your device, our service providers, and, for payment name checks, the Zelle network and our bank. We disclosed them for business purposes to service providers, banks and payment networks, prize-risk and compliance providers, and government agencies as described in Section 4. At your direction, we disclosed identifiers to Brand Partners you chose under Section 4.3(c). We did not sell or share personal information for cross-context behavioral advertising in the past 12 months. We use sensitive personal information only to provide the Promotion, verify eligibility, pay prizes, meet legal duties, and secure our systems, so the right to limit its use does not apply. If you opt in, we share your contact information with the Brand Partners you choose for their direct marketing. California residents may ask once a year, by emailing privacy@elitecollegefantasyfootball.com, for the names and addresses of those Brand Partners and the categories of information we shared with them.

9.2 Other states. Residents of states with comprehensive privacy laws, including Kentucky, Colorado, Connecticut, Indiana, Rhode Island, Texas, Virginia, and others, have the rights in Section 8 and the appeal process in Section 8.7.

9.3 Nevada. Nevada residents may opt out of the sale of certain information. You can do this by not opting in to Brand Partner sharing, by withdrawing under Section 4.3(e), or by sending a request to privacy@elitecollegefantasyfootball.com.

10.1 We use administrative, technical, and physical safeguards intended to protect personal information, such as encryption in transit, access controls, and limiting access to identity, tax, and payment documents to people who need them. We collect bank account numbers and Zelle contact details only through a secure method, never by regular email or text. No system is completely secure, and we cannot guarantee the security of your information. Use a strong, unique password and tell us right away if you think your account has been compromised.

10.2 If a data breach affects your personal information, we will notify you and the authorities as required by law.

11.1 The Website and APP are not for anyone under 18, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has given us personal information, email privacy@elitecollegefantasyfootball.com and we will delete it.

12.1 The Website and APP are operated from the United States for users in the United States. If you access them from elsewhere, your information will be handled in the United States, and the Promotion is open only to eligible U.S. residents.

13.1 We may update this policy. We will post the new version with an updated effective date, and if a change is material, we will notify you by email or in the APP before it takes effect. We plan to offer paid subscriptions to premium content in the future. Before we do, we will update this policy to describe any new information we collect and how payment information is handled. We will not share information with Brand Partners in a new way, or use third-party advertising technology, without first updating this policy and, where required, getting your consent. Changes will not reduce your rights for information already collected without your consent where the law requires it.

14.1