Privacy Policy

Last updated: 10 July 2026

SportaGo ("SportaGo", "we", "us") operates the sportago.app platform for organizing and joining racquet-sport tournaments. This policy explains what personal data we collect, why, and the choices you have. It is written to comply with the Malaysian Personal Data Protection Act 2010 (PDPA). This document is provided in English, which is its authoritative version.

1. Data we collect

Account data — your name, email address and a password (stored in hashed form by our authentication provider), or your basic Google profile (name, email, avatar) if you sign in with Google.
Player profile — country, phone number, gender, date of birth, profile photo, and optionally your national ID or passport number (collected so organizers can verify identity and eligibility at check-in) and your DUPR ID and ratings.
Registration data — the tournaments and categories you enter, partner and team details, t-shirt sizes, and answers to any additional questions the organizer configures.
Payment data — payment status and history for your registrations. Online payments (card / FPX) are processed by licensed third-party payment providers; we never see or store your full card details. If you pay an organizer by bank transfer, the receipt you upload is stored and shared with that organizer.
Competition data— draws, schedules, scores and results of matches you play, which are displayed publicly on the tournament's pages.
Media — matches at some tournaments are live-streamed and recorded; if you play in one, your likeness may appear in the stream and recording (see section 4).
Community content — posts, comments and likes you publish on tournament pages, and messages you send to our support.
Technical data — session cookies to keep you signed in, preference cookies (language, tournament country filter), and your approximate country derived from your IP address by our hosting provider on your first visit. We do not run third-party advertising or tracking cookies.

2. How we use your data

To operate your account, registrations and payments.
To run competitions: your name (and team name) appears in public participant lists, draws, schedules, results and — where the organizer or platform enables it — public player ratings and your public player profile page.
To share registration details (including contact and, where provided, identity data) with the organizer of a tournament you enter, who needs them to run the event.
To send transactional email (payment receipts, support replies). We do not send marketing email without your consent.
To provide support, prevent abuse and keep the platform secure.

3. Who processes your data

We use a small number of service providers to run SportaGo: database and authentication hosting (Supabase, hosted in the Singapore region), web hosting and content delivery (Vercel), licensed online payment providers, cloud storage for images and match recordings, streaming infrastructure, and Google (only if you choose Google sign-in). Each provider processes data only as needed to provide its service. We do not sell your personal data.

4. Live streaming and recordings

Organizers may enable live streaming on selected courts. By participating in a tournament that streams matches, you consent to your name, gameplay and likeness appearing in the live stream and in recordings that may remain publicly viewable on the tournament's pages afterwards. If you have concerns about appearing in a stream, contact the organizer before playing.

5. Retention

We keep your data while your account is active. Competition results are part of the public tournament record and are retained with the tournament. Billing and invoice records are retained as required for tax and accounting purposes. You may ask us to delete your account and associated personal data (section 6); data we are legally required to keep is retained for the required period only.

6. Your rights

Under the PDPA you may request access to, correction of, or deletion of your personal data, and withdraw consent to processing that is based on consent. Most profile data can be edited directly in your dashboard. For anything else, contact support@sportago.app — we respond to verified requests within a reasonable period.

7. Children

Players under 18 may only use SportaGo with the consent and supervision of a parent or guardian, who is responsible for the account and any registrations made through it.

8. Security

Data is encrypted in transit, access is restricted by row-level security in our database, and payment card data never touches our systems. No online service can guarantee absolute security, but we design for least access and audit sensitive actions.

9. Changes and contact

We may update this policy as the product evolves; material changes will be announced on the site. Questions and requests: support@sportago.app.

Last updated: 10 July 2026

1. Data we collect

Account data — your name, email address and a password (stored in hashed form by our authentication provider), or your basic Google profile (name, email, avatar) if you sign in with Google.

Player profile — country, phone number, gender, date of birth, profile photo, and optionally your national ID or passport number (collected so organizers can verify identity and eligibility at check-in) and your DUPR ID and ratings.

Registration data — the tournaments and categories you enter, partner and team details, t-shirt sizes, and answers to any additional questions the organizer configures.

Payment data — payment status and history for your registrations. Online payments (card / FPX) are processed by licensed third-party payment providers; we never see or store your full card details. If you pay an organizer by bank transfer, the receipt you upload is stored and shared with that organizer.

Competition data— draws, schedules, scores and results of matches you play, which are displayed publicly on the tournament's pages.

Media — matches at some tournaments are live-streamed and recorded; if you play in one, your likeness may appear in the stream and recording (see section 4).

Community content — posts, comments and likes you publish on tournament pages, and messages you send to our support.

Technical data — session cookies to keep you signed in, preference cookies (language, tournament country filter), and your approximate country derived from your IP address by our hosting provider on your first visit. We do not run third-party advertising or tracking cookies.

2. How we use your data

To operate your account, registrations and payments.

To run competitions: your name (and team name) appears in public participant lists, draws, schedules, results and — where the organizer or platform enables it — public player ratings and your public player profile page.

To share registration details (including contact and, where provided, identity data) with the organizer of a tournament you enter, who needs them to run the event.

To send transactional email (payment receipts, support replies). We do not send marketing email without your consent.

To provide support, prevent abuse and keep the platform secure.

3. Who processes your data

4. Live streaming and recordings

5. Retention

6. Your rights