Terms of Service

Dugoli & Dugoli Stadium — Android & iOS

Effective date: 8 June 2026 · Last updated: 13 June 2026

Operator: Dugoli · Contact: Dugoli.contact@gmail.com

1. Agreement

These Terms of Service (“Terms”) govern your use of the Dugoli mobile application (for players) and the Dugoli Stadium mobile application (for stadium owners), together with related services operated by Dugoli.

By signing in, browsing as a guest (where available), or otherwise using either app, you agree to these Terms and our Privacy Policy. If you do not agree, do not use the apps.

2. Our apps

Dugoli operates two separate products:

Dugoli — helps players discover football stadiums, check availability, make bookings, follow leagues, and use player features.
Dugoli Stadium — helps stadium owners list venues, manage bookings and schedules, run leagues, and operate their business in the app.

Dugoli is a technology platform that connects players and stadium owners. Unless we state otherwise, Dugoli is not the operator of the physical stadium, pitch, or on-site services.

3. Accounts & sign-in

Dugoli (player)

Sign-in through phone number + password, and optionally Google (Firebase Authentication).
Sign-up and forgot-password use Telegram Share Contact verification via @Dugoli_bot to confirm you own your Iraqi mobile number.

Dugoli Stadium (owner)

Sign-in through phone number + password only. Google sign-in is not offered.
Sign-up and forgot-password use Telegram Share Contact verification via @DugoliStadium_Bot.
New owners may submit a sign-up request reviewed by Dugoli before a login is provisioned.

General

Passwords must be at least 8 characters. You are responsible for keeping your password confidential.
Registration and password-reset attempts are rate-limited to protect against abuse (5 attempts, then a 20-minute lockout per phone).
Player and owner accounts are separate products. The same Iraqi phone number may be used for both, with separate passwords.
You are responsible for activity under your account. Notify us if you suspect unauthorised access.
Guest mode: some features may be available without signing in. Guest access does not create a full account and may limit bookings, profile, and support features.

4. Dugoli — Player terms

Bookings

Bookings depend on stadium availability and owner confirmation rules shown in the app.
Prices are displayed in IQD before you commit. Payment is made directly to the stadium owner outside the app (e.g. cash, FIB, or FastPay), unless we clearly state otherwise.
Cancellation requests must be made through the app. Refunds follow owner acceptance and policies shown in the app.
You may provide a contact phone number for a specific booking.

Leagues & voting

League brackets, scores, nominees, and voting depend on data entered by organisers and owners. Dugoli displays this information but does not guarantee its accuracy or fairness of on-field outcomes.

Reports & reviews

Stadium reports must be submitted honestly and only when the app allows (e.g. after an eligible finished booking).
Reviews and ratings must reflect genuine experience. False or abusive reports may lead to account action.

Account deletion

You may delete your player account in Profile → Delete account. Phone sign-in requires password confirmation. Deletion is processed on our servers promptly.

5. Dugoli Stadium — Owner terms

You agree to list stadiums accurately (location, facilities, photos, pricing, and availability).
You must honour confirmed bookings made through the app unless cancelled under the policies you accept in the app.
You are responsible for slot availability, prices shown in the app, league information you publish, and compliance with local laws.
You must respond fairly to player reports, cancellations, and support messages related to your venues.
Temporary closures, refunds, and disputes with players should be handled through in-app tools and support where possible.

Account deletion

You may request account deletion in Profile → Delete account. Your account stays active until Dugoli approves the request (e.g. after open bookings are resolved). Rejection includes a reason shown in the app.

6. Acceptable use

You agree not to:

Harass, threaten, or abuse other users, stadium staff, or Dugoli support
Post false listings, fake bookings, or misleading league or payment information
Spam, scrape, reverse engineer, or interfere with app security
Attempt to access another user’s account or our systems without permission
Circumvent rate limits, phone blocks, or authentication controls
Use the apps for unlawful purposes or in violation of applicable law in Iraq and the Kurdistan Region

7. Suspension & termination

Dugoli may restrict, suspend, or permanently disable accounts or phone numbers that violate these Terms, our policies, or applicable law.

Temporary suspension — time-limited; you may sign in again after the suspension ends.
Phone block — prevents registration and sign-in on blocked numbers in both apps.
Permanent disablement — you may not sign in or create a new account with the same identity while the ban remains in effect.

We may act on reports, suspicious activity, payment disputes, or safety concerns. Where required, we will provide notice through the app or email. Contact Dugoli.contact@gmail.com if you believe action was taken in error.

8. Disclaimers & liability

The apps are provided “as is” and “as available.” We do not guarantee uninterrupted or error-free service.
Dugoli is not responsible for the condition of physical venues, conduct of players or owners on site, or off-app payment disputes — though we may help facilitate support.
To the fullest extent permitted by law, Dugoli is not liable for indirect, incidental, or consequential damages arising from your use of the apps.
Nothing in these Terms limits rights you may have under mandatory consumer protection law.

9. Changes to these terms

We may update these Terms from time to time. Material changes may be noted in the app. Continued use after the effective date of an update means you accept the revised Terms.

10. Contact

Questions about these Terms: Dugoli.contact@gmail.com. Privacy and data requests: see our User Data & Account Deletion page.

← Dugoli

User Data & Account Deletion

Dugoli & Dugoli Stadium — Android & iOS

Effective date: 8 June 2026 · Last updated: 13 June 2026

Operator: Dugoli · Privacy contact: Dugoli.contact@gmail.com

This page explains how users of Dugoli (player app) and Dugoli Stadium (stadium owner app) can delete their account and associated personal data.

Our mobile apps

Dugoli — for players: book stadiums, join leagues. Sign-in: phone + password; optional Google.
Dugoli Stadium — for stadium owners: manage venues and bookings. Sign-in: phone + password; Telegram verification for registration and password reset (Google sign-in is not offered).

Player and owner accounts are separate products. The same Iraqi phone number may be used for both a player account and an owner account (different passwords).

Your privacy rights

Depending on where you live, you may have the right to:

Delete your account and personal data we hold about you
Access a copy of the personal data we hold about you
Correct inaccurate profile information (in the app or by contacting us)
Withdraw consent for optional features such as push notifications (in device or app settings)
Object to certain processing — contact us to discuss your request

To exercise any of these rights, use the in-app options below or email Dugoli.contact@gmail.com. We respond to verified requests within 30 days.

How to delete your account

Dugoli (player) — instant in-app deletion

Open Dugoli and sign in.
Go to Profile.
Tap Delete account (above Log out).
Read the confirmation dialog.
If you signed up with phone + password, enter your password to confirm. Google sign-in users confirm without a password.
Tap Yes, delete my account.

Your account is archived and removed from active use on our servers. You are signed out locally and from your sign-in provider session in the app.

Player tip: Deletion is permanent for that player profile. You may register again later with the same phone or social account and go through onboarding as a new profile.

Dugoli Stadium (owner) — deletion request (admin approval)

Owner accounts affect live stadium listings and player bookings. Deletion requires review:

Open Dugoli Stadium and sign in.
Go to Profile.
Tap Delete account.
Enter a reason for your request and confirm.
Your request is sent to Dugoli administrators. Your account remains active until approved.
You see the status in the app. If rejected, you receive an explanation. If approved, your account is archived and you are signed out.

Owner note: We may delay approval until upcoming confirmed bookings on your stadiums are finished or transferred. We will explain any delay in the app or by email.

Contact support in the app

If the delete button is unavailable or you need help: Profile → Contact Support, choose topic Account, ask for account deletion and confirm your sign-in phone or email.

Email (without the app)

Email Dugoli.contact@gmail.com with subject Account deletion request. Include:

Which app: Dugoli (player) or Dugoli Stadium (owner)
Your full name
Your Iraqi mobile number (and, for Dugoli players who use Google, the email on that Google account)
Sign-in method: phone, Google (Dugoli player only), or Telegram verification (Dugoli Stadium owner registration / reset)
Optional: reason for your request

We verify that you own the account before deleting data. We will email you when the request is completed.

What we delete

When your deletion is processed, we delete or anonymize personal data linked to your account, including:

Profile information (display name, phone, email, profile photo)
Google identity links stored on our servers (Dugoli player accounts that use Google sign-in)
Telegram identity links stored on our servers (Dugoli Stadium owner verification)
Language, city, and in-app preferences
Push notification device tokens
Support messages and tickets you submitted through the app
Active login sessions (you are signed out everywhere)

Dugoli (player) — additionally removed where applicable

Booking history, favourites, and league participation tied to your profile
Phone numbers entered only for specific bookings
In-app notifications linked to your user ID

Dugoli Stadium (owner) — additionally removed where applicable

Stadium listings, photos, pricing, and schedules you published
Booking and league management records for your venues
Owner dashboard data and operational settings

What we may keep

Information we are legally required to retain (e.g. fraud prevention, safety, or accounting)
Anonymized or aggregated statistics that cannot identify you
Minimal audit records that a deletion request was received and processed (not your full profile)
Data in backups for a limited time until those backups rotate — deleted data is not restored to active systems

We do not sell your personal data.

Third-party sign-in (Google & Telegram)

Deleting your Dugoli account removes data we store. It does not delete your Google or Telegram account.

Google (Dugoli player only): Google Account → Security → Third-party apps with account access — remove Dugoli.
Telegram (Dugoli Stadium owners): you may block or stop our verification bot (@DugoliStadium_Bot) in Telegram settings. Players may use @Dugoli_bot for OTP where enabled.

We never receive or store your Google or Telegram passwords.

Request a copy of your data

Email Dugoli.contact@gmail.com with subject Data access request and the same details as the email deletion option above. We provide a readable export where technically feasible.

Children

Our services are not directed at children under 13 (or the minimum age in your country). If you believe a child provided personal data without parental consent, contact us and we will delete it.

App store requirements

Both Dugoli apps support in-app account deletion as described above (instant for players; request workflow for owners). This page satisfies Google Play and Apple App Store requirements for public account and data deletion instructions.

Questions & complaints

Privacy or data requests: Dugoli.contact@gmail.com. If you are not satisfied with our response, you may have the right to contact your local data protection authority.

← Dugoli

Privacy Policy

Dugoli & Dugoli Stadium — Android & iOS (production)

Effective date: 8 June 2026 · Last updated: 13 June 2026

Operator: Dugoli · Contact: Dugoli.contact@gmail.com

Apps covered: Dugoli (players) · Dugoli Stadium (stadium owners)

1. General information

This Privacy Policy explains how Dugoli (“we,” “us,” or “our”) collects, uses, stores, and protects personal information when you use our mobile applications on Google Play and the Apple App Store in Iraq and the Kurdistan Region.

We operate two separate apps:

Dugoli — for players who search stadiums, book time slots, follow leagues, and manage match activity.
Dugoli Stadium — for stadium owners who list venues, manage bookings, run leagues, and use owner tools.

Each app has its own account. Player and owner profiles are separate products. The same Iraqi mobile phone number may be used for both a player account and an owner account (two separate logins and passwords).

By using either app, you agree to this Privacy Policy. We do not sell your personal information for third-party advertising. Our services are not directed to children under 13 (or under 16 where local law requires parental consent).

2. How you sign in (both apps)

2.1 Sign in (daily access)

Dugoli (player):

Phone number + password — primary method after your account is verified.
Google Sign-In (optional) — through Firebase Authentication. We receive your name and email when the provider shares them. We never receive your Google password.

Dugoli Stadium (owner):

Phone number + password only. Google sign-in is not offered in the owner app.

2.2 Sign up & forgot password (phone verification)

To prove you own your Iraqi mobile number at registration or password reset, you complete Telegram Share Contact verification:

Dugoli (player): Telegram bot @Dugoli_bot
Dugoli Stadium (owner): Telegram bot @DugoliStadium_Bot

The app opens Telegram; you tap Start, then Share phone number. We compare the shared number with the number you entered in the app. We store your Telegram chat ID to deliver verification and support messages related to authentication. We do not read your private Telegram chats.

2.3 Password & abuse protection

Passwords must be at least 8 characters (maximum 30). Passwords are stored hashed on our servers — we cannot see your plain-text password.
Registration and forgot-password flows are limited to 5 attempts per phone number, then locked for 20 minutes to reduce spam and automated attacks.
Repeated failed sign-in attempts may temporarily lock your account until the lockout expires or support clears it.

2.4 Owner sign-up without immediate login

New stadium owners may submit a sign-up request in Dugoli Stadium after Telegram verification. A Dugoli administrator reviews the request and creates the owner login. Until provisioning is complete, you cannot sign in with a password.

Dugoli — Player app

Privacy details for people who book stadiums and use player features.

3. Information we collect — Dugoli (Player)

3.1 Account & profile

Name, Iraqi mobile phone number, and password (hashed on our servers)
Name and email from Google when you use social sign-in
Authentication identifiers (Google ID, Telegram chat ID) to link your account securely
Language and city/area preferences from onboarding or Profile
Notification preferences and in-app settings

3.2 Booking & activity

Stadium, date, time slot, booking status (pending, confirmed, cancelled)
Payment method label you choose (cash, FIB, or FastPay) — selection only; we do not process payment in the app
Contact phone for a booking when you provide it so the owner can reach you
League participation, favourites, ratings, and reports you submit

3.3 Automatic & optional data

Device type, operating system, app version, and general connectivity information
Secure session token stored in your device’s protected storage (iOS Keychain / Android Keystore)
Location — only when you tap Directions (while using the app). We do not track location in the background.
Push notification token if you enable notifications (Firebase Cloud Messaging)
Cached images and configuration for faster loading
Server logs (IP address, timestamps, security events) for fraud prevention and troubleshooting

4. How we use information — Dugoli (Player)

Operate sign-in, search, bookings, leagues, favourites, and directions.
Verify phone ownership via Telegram during sign-up and password reset.
Share booking details with the stadium owner (name, contact phone for that booking, slot, payment status).
Send booking updates and optional push notifications.
Provide in-app support and improve the service.
Prevent fraud, spam, abuse, and enforce our Terms of Service.

5. Payments — Dugoli (Player)

Dugoli is not a payment processor. After the owner accepts your slot, you pay the stadium owner outside the app (cash at the venue or bank/wallet transfer). The owner confirms receipt in Dugoli Stadium. We do not collect or store bank card numbers, wallet PINs, or similar payment credentials.

6. App permissions — Dugoli (Player)

Internet — connect to Dugoli services
Location (while in use) — driving directions when you request them
Notifications (optional) — booking updates and announcements

Dugoli Stadium — Owner app

Privacy details for stadium owners and operators.

7. Information we collect — Dugoli Stadium

7.1 Account & profile

Name, Iraqi mobile phone number, and password (hashed)
Telegram chat ID from Share Contact verification
Language and city preferences
Optional contact phone in payout or profile settings

7.2 Stadium & business data

Stadium name, address, area, field type, description, pricing, hours, photos, availability slots
Location coordinates when you place your stadium pin on the map
Verification document image for admin review before listing goes live
League names, teams, fixtures, scores, sponsor images, and related settings
Booking records including player name and phone shared for each reservation
Payment confirmation actions when players pay you outside the app

7.3 Automatic data

Device and app information, secure session tokens, dashboard statistics
Push notification token if enabled (Firebase Cloud Messaging)
Server logs for security and support

8a. App permissions — Dugoli Stadium (Owner)

Internet — connect to Dugoli services
Camera — take photos for stadium listings and verification documents
Photo library — choose existing images for stadium and league content
Notifications (optional) — booking alerts and operational updates

8. How we use information — Dugoli Stadium

Operate owner sign-in, stadium listings, bookings, leagues, notifications, and dashboard.
Verify phone ownership via Telegram and review sign-up requests.
Review verification documents and approve listings.
Display your stadium to players on Dugoli and manage reservations.
Improve the platform and protect users from fraud or abuse.

9. Shared practices (both apps)

9.1 Sharing between players and owners

When a player books your stadium, the owner receives information needed to run that reservation (player name, phone number provided for the booking, date/time, and payment status). Your public listing is visible to players on Dugoli. Player reports may hide the reporter’s name where the app is designed that way.

9.2 Service providers

We use trusted providers that process data on our behalf, including:

Laravel Cloud — API hosting and account/booking data (HTTPS)
Cloud object storage — stadium, league, and verification images
Google Firebase Authentication — optional Google sign-in for the Dugoli player app only
Google Firebase Cloud Messaging — push notification delivery (both apps)
Telegram — phone verification during sign-up and password reset only
Pusher / websockets — live booking or league updates
Apple Maps / Google Maps — only when you open external map apps for directions

These providers may process data outside Iraq under contractual and technical safeguards.

9.3 Dugoli administrators

Authorized staff access records through internal admin tools only (not inside the mobile apps) for support, listing approval, fraud prevention, and safety. Sensitive actions are logged. Contact us immediately if you did not request a change to your account.

9.4 Retention & security

We keep information while your account is active and as required by law. When you delete your account (see Section 10), we delete or anonymize personal data within about 30 days, except where law requires retention. We use HTTPS encryption in transit, hashed passwords, secure session tokens, access controls, rate limiting on sensitive flows, and phone blocking for abuse. No method of transmission or storage is 100% secure — protect your device, password, and Telegram account (and Google account if you use player Google sign-in).

9.5 International transfers

We operate in Iraq; cloud, authentication, and messaging providers may process data in other countries with appropriate safeguards.

9.6 Changes

We may update this policy. Material changes may be noted in the app. Continued use after the effective date means acceptance of the updated policy.

10. Your rights & account deletion

Depending on your location, you may have rights to access, correct, delete, or restrict use of your personal data.

Dugoli (player)

In the app: Profile → Delete account → confirm (password required for phone sign-in).
Deletion is processed on our servers promptly; you are signed out everywhere.

Dugoli Stadium (owner)

In the app: Profile → Delete account → submit a deletion request with a reason.
Your account stays active until a Dugoli administrator approves the request (e.g. after open bookings are resolved). You receive the decision in the app.

Contact

Email Dugoli.contact@gmail.com with your app name (Dugoli or Dugoli Stadium), full name, and sign-in phone or email. See our separate User Data & Account Deletion policy for step-by-step instructions required by app stores.

Deleting your Dugoli account does not delete your Google or Telegram account — revoke app access in those services if you wish.

11. Store disclosure summary (Google Play & Apple)

Dugoli (Player)

Sign-in: Phone + password; optional Google; Telegram for sign-up & forgot password
Data collected: name, phone, email (if social), user IDs, booking activity, location when using directions, device/push token
Payments in app: No
Data sold: No · Encrypted in transit: Yes · Account deletion: Yes (in-app)

Dugoli Stadium (Owner)

Sign-in: Phone + password; Telegram for sign-up & forgot password (no Google sign-in)
Data collected: name, phone, stadium content, photos, location pin, booking/player contact data, device/push token
Payments in app: No
Data sold: No · Encrypted in transit: Yes · Account deletion: Yes (request + admin approval)

12. Contact

Dugoli — Email: Dugoli.contact@gmail.com