Security and Privacy Policy

Last Updated: April 7, 2025

At Celestial Wave Digital, the developer of AL Shamela Sports (com.cwd.al_shamela), we are committed to protecting the security and privacy of our users. This Security and Privacy Policy outlines how we collect, use, store, and protect user data, as well as the measures we take to ensure a secure experience within our application. This policy applies to all users of the AL Shamela Sports app and complies with applicable data protection laws and Google Play's Developer Program Policies.

1. User Authentication

To access the AL Shamela Sports app, users must authenticate themselves using secure login credentials. These credentials are encrypted using industry-standard algorithms (e.g., AES-256) and stored securely to prevent unauthorized access.

2. Data Collection and Use

We collect and process the following types of user data to provide and improve our services:

• Personal Information: Name, email address, and other information provided during account creation or app usage.
• Usage Data: Information about how you interact with the app, such as features used, session duration, and preferences.
• Device Information: Device type, operating system, and unique device identifiers to ensure compatibility and security.
• Transaction Data: Details such as prices, quantities, taxes, and transport-related information (if applicable) for in-app purchases or services.

How We Use Data:

• To provide and personalize the app's features and services.
• To process transactions and deliver requested services.
• To improve app performance, troubleshoot issues, and enhance user experience.
• To communicate with users about updates, promotions, or account-related matters (with user consent where required).

We do not collect or process data beyond what is necessary for these purposes.

3. Data Protection

We prioritize the security of your data:

• Data at Rest: All sensitive data, including personal and transaction information, is encrypted using robust encryption standards (e.g., AES-256).
• Data in Transit: Data transmitted between your device and our servers is protected using secure protocols (e.g., HTTPS/TLS 1.3).
• Secure Storage: User data is stored on servers with strict access controls and regular security monitoring.

4. Data Sharing

We do not sell, trade, or share your personal data with third parties, except in the following cases:

• Service Providers: We may share data with trusted third-party providers (e.g., payment processors or analytics services) who assist in delivering our services. These providers are contractually obligated to protect your data and use it only for the specified purpose.
• Legal Requirements: We may disclose data if required by law or to protect the rights, safety, or property of Celestial Wave Digital or our users.
• Aggregated Data: We may share anonymized, aggregated data for analytics or research purposes, ensuring no individual user can be identified.

5. Access Controls

The AL Shamela Sports app implements role-based access controls to ensure that only authenticated and authorized users can access specific features or data. Unauthorized access attempts are monitored and blocked.

6. Updates and Patches

We regularly release updates to address security vulnerabilities, improve functionality, and ensure compatibility. Users are encouraged to keep the app updated to the latest version to benefit from these enhancements.

7. User Privacy

Your privacy is our priority:

• Minimal Data Collection: We collect only the data necessary to provide and improve our services.
• User Control: You can manage your account settings, opt out of non-essential communications, or request data deletion (subject to legal obligations) by contacting us at support@cwavedigital.com.
• No Third-Party Sales: Your personal data is never sold or shared with third parties for marketing purposes.

This Privacy Policy is accessible within the AL Shamela Sports app and via our website at https://www.alshamelasports.com/privacy-policy.

8. Security Audits

We conduct regular security audits and penetration testing to identify and address potential vulnerabilities in the AL Shamela Sports app. These audits are performed by qualified cybersecurity professionals to maintain a secure environment.

9. Incident Response

In the unlikely event of a security breach, our incident response team will:

• Investigate and contain the issue promptly.
• Notify affected users in accordance with applicable laws.
• Take steps to mitigate risks and prevent future incidents.

Users will be informed via in-app notifications or email about any significant incidents and the actions we are taking.

10. User Responsibilities

To help us maintain a secure environment, we encourage users to:

• Use strong, unique passwords and avoid reusing passwords across platforms.
• Refrain from sharing login credentials with others.
• Report any suspicious activity to support@celestialwavedigital.com.

We provide resources on best security practices within the app and via email communications.

Supported Versions

Below are the versions of AL Shamela Sports currently supported with security updates:

Older versions may not receive security updates, so please update to the latest version.

Reporting a Vulnerability

If you discover a security vulnerability in the AL Shamela Sports app, please report it to us immediately at security@cwavedigital.com. Include the following details:

• A description of the vulnerability.
• Steps to reproduce the issue.
• Your contact information for follow-up.

What to Expect:

• Acknowledgment: We will confirm receipt of your report within 48 hours.
• Investigation: Our security team will investigate and prioritize the issue, typically providing an update within 7 business days.
• Resolution: If the vulnerability is confirmed, we will work to address it promptly and inform you of the fix. If the report is declined (e.g., due to being out of scope), we will explain why.

We appreciate your help in keeping AL Shamela Sports secure.

Contact Us

For questions about this Security and Privacy Policy or to exercise your data rights, please contact:
Celestial Wave Digital
Email: contact@cwavedigital.com
Website: www.celestialwavedigital.com
Address: Immeuble Rayhan, 3éme étage, Bureau N°2, Sousse, Tunisia