1. How this schedule works
1.1This schedule sets out how long KBN keeps each kind of personal data and how it is removed. It supports the Privacy notice. Periods run from the event stated. "Automatic" means the software deletes the data on schedule; "on request or review" means KBN staff delete it following a request or a periodic review.
1.2At the end of a period, data is deleted or anonymised. Copies in backups are overwritten as the backup cycle rolls forward (see the last row). Data may be kept longer where it is needed for a pending complaint, appeal, disciplinary or legal matter, or where the law requires, and only for as long as that lasts.
↑ Contents2. Schedule
| Data | Retention period | How it ends |
|---|---|---|
| Rejected ranking applications and their uploaded files | 365 days after rejection (setting set by KBN) | Automatic (daily job) |
| Applications in progress (drafts) never submitted | 12 months after last activity [to be confirmed] | On request or review |
| Identity documents and portraits of licensed athletes | While the licence is active and for 12 months after it expires or is withdrawn [to be confirmed] | On request or review |
| Licence and certificate register (numbers, dates, status, issuer) | Life of the licence plus 6 years | On request or review |
| Verified sporting record (name, country, division, results, points, ranking history) | Kept permanently as the historical record of the sport | Retained; see "Your rights" in the Privacy notice |
| Rejected or unverified bout claims | With the application; deleted with rejected applications | Automatic for rejected applications |
| Medical records, medical suspensions, weigh-ins, weight logs | While licensed and for 2 years after the last entry [to be confirmed] | On request or review |
| Anti-doping tests, whereabouts and sanctions | Whereabouts: 18 months; tests and sanctions: as required by the applicable anti-doping rules (commonly 10 years) [to be confirmed] | On request or review |
| Parental consent forms | Until the athlete turns 18 plus 6 years [to be confirmed] | On request or review |
| Fan accounts and preferences | Until you delete the account, or 3 years after last login | On request or review |
| KBNGram posts, comments, messages and profile | Until you delete them or your account; stories are hidden after 24 hours unless added to a highlight | By you, or on request |
| KBNGram verification ID documents | Until a decision is made on the application | Automatic on decision |
| Reports, moderation and disciplinary files | 6 years after the case is closed | On request or review |
| Invoices, orders, tickets and payment records | 6 years after the end of the financial year (tax and accounting law) | On request or review |
| Bout agreements and e-signature evidence | 6 years after the agreement ends | On request or review |
| E-mail campaign send and open records | Until you unsubscribe or 2 years after sending, whichever is sooner [to be confirmed] | On request or review |
| Push notification subscriptions | Until you switch notifications off or the subscription expires | Automatic |
| Newsletter sign-ups never confirmed | 30 days after the sign-up | Automatic daily clean-up |
| Newsletter subscription and consent records | While you are subscribed; after you unsubscribe the address and consent history are kept for 3 years to prove consent, then deleted | Automatic daily clean-up |
| Newsletter delivery, open and click records | 2 years after sending | Automatic daily clean-up |
| Login history and security alerts | 12 months | Automatic daily clean-up |
| ID-check results (status, document type and country, name/date-of-birth match) | With the application; provider images (only if kept) 90 days after the HQ decision | Automatic daily clean-up for images; otherwise as for the application |
| Contact and report form messages | 2 years after the message | Automatic daily clean-up |
| Sponsor ad statistics (daily totals, no personal data) | 6 years (accounting) | On review |
| Audit log (who did what and when, including login IP addresses) | 6 years | On request or review (no automatic deletion yet) |
| AI usage log (feature, user, token counts) | 2 years [to be confirmed] | On request or review |
| Server and error logs | 14 days [to be confirmed] | Automatic log rotation |
| Session data and cookies | See the Cookie policy | Automatic expiry |
| Backups | Every nightly backup for 14 days; after that the backup system keeps a thinning set (weekly for 8 weeks, monthly for 4 months, yearly for 2 years) [to be confirmed] | Automatic clean-up job |
3. Anonymised data
3.1We may keep anonymised statistics (for example the number of licensed athletes per country) indefinitely. Anonymised data does not identify anyone and is not personal data.
↑ Contents4. Questions
4.1Ask holdingkbn@gmail.com if you want to know how long we will keep a particular item, or to ask for earlier deletion (see Data subject requests).
↑ ContentsQuestions about this document: holdingkbn@gmail.com. Where this document is translated, the English version prevails to the extent permitted by law. Version 2.0, last updated 28 September 2026. Printed copies may be out of date; the version at worldkbn.com/legal/data-retention applies.