Privacy Policy

Last updated: 7 September 2026

SportaGo ("SportaGo", "we", "us") operates the sportago.app platform for organizing and joining racquet-sport tournaments. This policy explains what personal data we collect, why, and the choices you have. It is written to comply with the Malaysian Personal Data Protection Act 2010 (PDPA). This document is provided in English, which is its authoritative version.

1. Data we collect

Account data — your name, email address and a password (stored in hashed form by our authentication provider), or your basic Google profile (name, email, avatar) if you sign in with Google.
Player profile — country, phone number, gender, date of birth, profile photo, and optionally your national ID or passport number (collected so organizers can verify identity and eligibility at check-in) and your DUPR ID and ratings.
Registration data — the tournaments and categories you enter, partner and team details, t-shirt sizes, and answers to any additional questions the organizer configures.
Membership data — whether you hold a SportaGo membership, your plan, renewal and cancellation dates, your billing country and the receipts and refunds of your subscription. Card details are never seen or stored by us.
Payment data — payment status and history for your registrations. Online payments (card / FPX) are processed by licensed third-party payment providers; we never see or store your full card details. If you pay an organizer by bank transfer, the receipt you upload is stored and shared with that organizer.
Competition data— draws, schedules, scores and results of matches you play, which are displayed publicly on the tournament's pages.
Media — matches at some tournaments are live-streamed and recorded; if you play in one, your likeness may appear in the stream and recording (see section 4).
Community content — posts, comments and likes you publish on tournament pages, and messages you send to our support.
Technical data — session cookies to keep you signed in, preference cookies (language, tournament country filter), and your approximate country derived from your IP address by our hosting provider on your first visit. We do not run third-party advertising or tracking cookies.

2. How we use your data

To operate your account, registrations and payments.
To run competitions: your name (and team name) appears in public participant lists, draws, schedules, results and — where the organizer or platform enables it — public player ratings and your public player profile page.
To share registration details (including contact and, where provided, identity data) with the organizer of a tournament you enter, who needs them to run the event.
To send transactional email (payment receipts, support replies). We do not send marketing email without your consent.
To provide support, prevent abuse and keep the platform secure.

3. Who processes your data

We use a small number of service providers to run SportaGo: database and authentication hosting (Supabase, hosted in the Singapore region), web hosting and content delivery (Vercel), licensed online payment providers, cloud storage for images and match recordings, streaming infrastructure, and Google (only if you choose Google sign-in). Each provider processes data only as needed to provide its service. We do not sell your personal data.

4. Live streaming and recordings

Organizers may enable live streaming on selected courts. By participating in a tournament that streams matches, you consent to your name, gameplay and likeness appearing in the live stream and in recordings that may remain publicly viewable on the tournament's pages afterwards. If you have concerns about appearing in a stream, contact the organizer before playing.

5. Retention

We keep your data while your account is active. Competition results are part of the public tournament record and are retained with the tournament. Billing and invoice records are retained as required for tax and accounting purposes. You may ask us to delete your account and associated personal data (section 6); data we are legally required to keep is retained for the required period only.

Membership and billing after deletion.When your account is deleted, your profile is anonymised within 30 days of the deletion starting (your request, or the later date you chose) at the latest: your contact details, date of birth and identity numbers are removed, while your name stays on tournament results and in organizers' records as tournament history. Your subscription records are kept in an anonymised form: a random billing reference replaces your identity and the amounts, dates and receipts stay for tax, accounting and refund purposes. Clearing those records with our licensed online payment provider can continue after the 30 days, under that reference, and the provider keeps its own records under its own retention rules. If a refund, dispute or reimbursement of yours is still unresolved at that time, an encrypted copy of your contact details (name, email address and phone number) is kept until outstanding settlement issues are resolved and any applicable refund-stability period has elapsed, so that we can reach you if a refund reverses, and is then deleted.

6. Your rights

Under the PDPA you may request access to, correction of, or deletion of your personal data, and withdraw consent to processing that is based on consent. Most profile data can be edited directly in your dashboard. For anything else, contact support@sportago.app — we respond to verified requests within a reasonable period.

7. Children

Players under 18 may only use SportaGo with the consent and supervision of a parent or guardian, who is responsible for the account and any registrations made through it.

8. Security

Data is encrypted in transit, access is restricted by row-level security in our database, and payment card data never touches our systems. No online service can guarantee absolute security, but we design for least access and audit sensitive actions.

9. Changes and contact

We may update this policy as the product evolves; material changes will be announced on the site. Questions and requests: support@sportago.app.

Last updated: 7 September 2026

1. Data we collect

Account data — your name, email address and a password (stored in hashed form by our authentication provider), or your basic Google profile (name, email, avatar) if you sign in with Google.

Player profile — country, phone number, gender, date of birth, profile photo, and optionally your national ID or passport number (collected so organizers can verify identity and eligibility at check-in) and your DUPR ID and ratings.

Registration data — the tournaments and categories you enter, partner and team details, t-shirt sizes, and answers to any additional questions the organizer configures.

Membership data — whether you hold a SportaGo membership, your plan, renewal and cancellation dates, your billing country and the receipts and refunds of your subscription. Card details are never seen or stored by us.

Payment data — payment status and history for your registrations. Online payments (card / FPX) are processed by licensed third-party payment providers; we never see or store your full card details. If you pay an organizer by bank transfer, the receipt you upload is stored and shared with that organizer.

Competition data— draws, schedules, scores and results of matches you play, which are displayed publicly on the tournament's pages.

Media — matches at some tournaments are live-streamed and recorded; if you play in one, your likeness may appear in the stream and recording (see section 4).

Community content — posts, comments and likes you publish on tournament pages, and messages you send to our support.

Technical data — session cookies to keep you signed in, preference cookies (language, tournament country filter), and your approximate country derived from your IP address by our hosting provider on your first visit. We do not run third-party advertising or tracking cookies.

2. How we use your data

To operate your account, registrations and payments.

To run competitions: your name (and team name) appears in public participant lists, draws, schedules, results and — where the organizer or platform enables it — public player ratings and your public player profile page.

To share registration details (including contact and, where provided, identity data) with the organizer of a tournament you enter, who needs them to run the event.

To send transactional email (payment receipts, support replies). We do not send marketing email without your consent.

To provide support, prevent abuse and keep the platform secure.

3. Who processes your data

4. Live streaming and recordings

5. Retention

6. Your rights