Privacy Policy

Sportify Events Sdn Bhd ("Sportify", "we") respects your privacy. This notice explains how we collect, use, disclose and protect your personal data in accordance with the Personal Data Protection Act 2010 of Malaysia and its seven data protection principles.

1. Personal data we collect

• Identity: full name, MyKad or passport number, nationality, gender and date of birth (derived from your IC), religion (only for category eligibility).
• Contact: email, phone number, address and emergency contact.
• Event data: registrations, categories, bib numbers, T-shirt size, race kit collection records, finish times and certificates.
• Transaction data: orders, payment status (card details are handled solely by our payment partner), points and vouchers.
• Device data: push notification token, app version and crash logs.

2. Purposes of processing

• To create and manage your account and verify eligibility for event categories.
• To process registrations, payments, e-receipts and race kit collection.
• To arrange compulsory personal accident insurance with our insurer.
• To award points, issue vouchers and generate digital certificates.
• To send event invitations and service notifications (you may opt out of marketing at any time in Settings).

3. Disclosure

We may disclose your personal data to event organisers, authorised event crew (for race kit verification), our insurer, payment gateway, timing partners and cloud hosting providers, strictly for the purposes above. Event sponsors only receive aggregated, non-identifiable reports. We do not sell your personal data.

4. Security & retention

Your data is encrypted in transit and at rest, and access is restricted by role. We retain personal data for as long as your account is active and up to 7 years thereafter for legal and accounting purposes.

5. Your rights

Under the PDPA you may request access to and correction of your personal data, withdraw consent, and limit processing for direct marketing. Requests can be made through Edit Profile or by contacting our Data Protection Officer. A reasonable fee may apply for data access requests as permitted by law.

6. Cross-border transfer

Data may be stored on servers located outside Malaysia (e.g. Singapore) that provide a comparable level of protection.

7. Contact our Data Protection Officer

Sportify Events Sdn Bhd, Level 12, Menara Sportify, Jalan Sultan Ismail, 50250 Kuala Lumpur · dpo@sportify.com.my · +603-2788 1234

In the event of any inconsistency between the English and Bahasa Melayu versions, the Bahasa Melayu version shall prevail.