01What we collect
- Account details: your email address, and your name and profile photo if you sign in with Google.
- Profile details you give us: name, username, photo, banner, bio, area and state.
- Player details: date of birth, preferred position, dominant foot and, if you choose to give it, your phone number.
- Activity: teams you join, games you register for, match results, statistics, badges and rankings.
- Payments: the amount, status and the payment provider’s reference number. We never see or store your card or bank login details.
- Wallet: your credit balance and a record of every reload, payment and refund.
- QR transfer receipts: if you pay by DuitNow QR, the screenshot you upload. Depending on your bank, it may show your name, bank, part of your account number and the transfer time.
- Records we need to run the service safely: when you accepted these terms, security logs, and a verification check that you are not a bot.
02Why we use it
- To create your account and player profile, and to keep you signed in.
- To let you find, join and pay for games, and to manage teams.
- To run your wallet, and to check QR transfer receipts against the payments we receive before confirming them.
- To calculate statistics, badges and rankings.
- To place you in the right age category (the reason we ask for your date of birth).
- To let organisers of games you join contact you, if you gave a phone number.
- To prevent fraud, abuse and spam, and to meet legal obligations.
03What other people can see
Your name, username, photo, area, bio, teams, statistics, badges and ranking are public — that is how teammates and opponents find you. Your email address, date of birth and phone number are never shown publicly. Your phone number is shared only with organisers of games you join.
04Who we share it with
We do not sell your personal data. We share it only with service providers who help us run SukanLabs, and only as much as they need:
- Supabase — our database, sign-in and file storage.
- Vercel — hosting for the app.
- CHIP — processing payments.
- Cloudflare Turnstile — checking that sign-ups and logins come from real people.
- Google — only if you choose to sign in with Google.
05Transfers outside Malaysia
Our database is hosted in Singapore, and some of the providers above process data in other countries. By using SukanLabs you agree to your personal data being transferred to and stored in those places. We use providers that protect data to a standard comparable to the PDPA.
06How long we keep it
We keep your data while your account is open. If you close your account, we remove or anonymise your profile, keeping only what we must for legal, accounting or dispute purposes — for example, payment records, wallet transactions and QR transfer receipts, which we keep for as long as accounting law requires.
07Players under 18
You must be at least 12 to use SukanLabs. If you are under 18, a parent or guardian must agree to this notice on your behalf.
08Your rights
Some information — your name, date of birth, area and state — is required to take part in games. Without it we cannot register you for games or teams.
- Access the personal data we hold about you — download a copy any time from Settings → Download my data.
- Correct data that is wrong — most of it you can edit yourself in Edit Profile.
- Withdraw consent or ask us to stop processing your data, and close your account.
- Choose not to give optional data such as your phone number.
09Security
Access to your data is restricted at the database level so each person can see only what they are allowed to. Data is encrypted in transit, and online payments are handled entirely by our payment provider. QR transfer receipts are stored privately: only you and the SukanLabs admins who check payments can see them.
10Contact us
For questions, requests to access or correct your data, or complaints, contact us using the details below. We aim to respond within 21 days.
Contact details
Contact details will be published here before launch.