Privacy Policy

1. Introduction

Selampandai ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

Important: We operate in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

2. Information We Collect

2.1 Information You Provide Directly

2.2 Information Collected Automatically

When you use our platform:

• Browser type and version
• IP address
• Pages visited and time spent
• Referral source
• Device information
• Approximate location (if geolocation enabled)

3. How We Use Your Information

3.1 Primary Uses

We use your personal data to:

• Create and maintain your account (CID)
• Process event registrations, including multi-slot sessions
• Manage family/child accounts linked to your profile
• Manage tournament check-ins
• Calculate and display your rankings
• Send you event confirmations and reminders
• Pre-fill your first name, last name, and phone number during registration when an event requires them
• Display your public profile and achievements
• Store and display podium results with your name
• Generate leaderboards and rankings across seasons

3.2 Secondary Uses

• Improve our platform and services
• Troubleshoot and debug issues
• Analyze usage patterns and trends
• Detect fraud or abuse
• Comply with legal obligations
• Respond to your support requests

3.3 What We Do NOT Do

• ❌ We do NOT sell your personal data to third parties
• ❌ We do NOT share your email with other players
• ❌ We do NOT send marketing emails unless you opt in
• ❌ We do NOT track you across other websites
• ❌ We do NOT use your data for purposes other than stated

4. Who We Share Your Data With

4.1 Event Organizers

Your information IS shared with:

• Tournament organizers (for event management)
• Other registered players in the same event (for bracket/results)
• Visible information: display name, CID, registration status, check-in status
• First name, last name, and phone number only with the organizer of an event that has enabled contact collection

Your information is NOT shared:

• Email address (private)
• First name, last name, and phone number with other players (only shared with the event organizer when collection is enabled)
• Location data (country, state, division used for filtering and rankings only)

4.2 Third-Party Services

We use the following services, which may access your data:

5. Data Storage & Security

5.1 Where Your Data is Stored

• Database: Hosted on Neon PostgreSQL (cloud)
• Website: Hosted via Vercel
• Backups: Encrypted automatic daily backups

5.2 How We Protect Your Data

• ✅ HTTPS encryption (secure connection)
• ✅ Database encryption at rest
• ✅ Password hashing (we never see your Google password)
• ✅ Access controls (only authorized staff and event organizers for data they have collected)
• ✅ Rate limiting on sensitive actions to prevent abuse
• ✅ Input validation and content sanitization on user-submitted data
• ✅ Regular security backups
• ✅ No sensitive data in logs

5.3 Data Retention

• Account data: Kept as long as you have an active account
• Historical results: Kept permanently (for ranking records)
• Deleted account data: Removed within 30 days of deletion request
• Backups: Kept for 30 days (old backups deleted)

6. Your Rights Under PDPA

6.1 Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the right to:

1. Access - Request a copy of your personal data
2. Correct - Update or correct inaccurate data
3. Delete - Request deletion of your account and data
4. Withdraw Consent - Stop us from using your data for certain purposes
5. Opt Out - Unsubscribe from promotional emails

6.2 How to Exercise Your Rights

To access, correct, or delete your data:

1. Log into your account and edit your profile (for basic info)
2. Email us: selampandaiofficial@gmail.com (with "Data Request" in subject)
3. Include: Your CID, specific data you want to access/modify/delete
4. Response time: 30 days (as per PDPA requirement)

To withdraw consent for future communications:

• Unsubscribe link in any email we send
• Email: selampandaiofficial@gmail.com

7. Children's Privacy

• Our platform is intended for users 13+
• We do not knowingly collect data from children under 13
• If we discover we have collected data from a child under 13, we will delete it immediately
• Parents/guardians who believe their child has provided data should contact us immediately

8. Changes to This Privacy Policy

We may update this policy occasionally. When we do:

• We will update the "Last Updated" date
• Material changes will be announced on the platform
• Continued use of the platform = acceptance of new policy

9. Contact Us

Data Protection Officer / Privacy Inquiries:

Email: selampandaiofficial@gmail.com

Mailing Address:

Response Time: We aim to respond within 30 days

10. Your Responsibility

You agree to:

• Keep your account credentials secure
• Not share your account with others
• Inform us of any unauthorized access
• Comply with all applicable laws when using the platform

11. Disclaimer

This Privacy Policy is provided in English. If there is any conflict between the English version and any translation, the English version shall prevail.

This policy is effective as of September 3, 2026.