Privacy Policy · 隐私政策

Last updated: 25 September 2026 · 最后更新：2026 年 9 月 25 日

This policy explains how PICKER SPORTS N TRADE (SSM 202503053836, IP0605772-V), operator of The Pickleball Arena @ Gunung Rapat (“TPA”, “we”), handles personal data when you use tpagp.com, our counter, our coaching bookings and our member accounts, in line with Malaysia’s Personal Data Protection Act 2010 (PDPA).

1. What we collect

• Account details — name, e-mail address, mobile number and a password (stored only as a one-way hash).
• Sign in with Google — if you choose it, Google shares your name, e-mail address, whether the e-mail is verified and a Google account ID. We do not receive your Google password and do not access your Gmail, contacts or any other Google data.
• Bookings and purchases — court bookings, coaching packages, session passes, sessions booked, payments and prepaid credit.
• Payments — online payments are processed by HitPay (DuitNow). We receive the payment reference and status only; we never see or store your bank or card details.
• Technical data — your browser stores a sign-in token and your language choice on your device; our servers keep standard access logs for security.

2. Why we use it

• To create and run your member account, passes and bookings.
• To let coaches confirm, reschedule or cancel sessions with you.
• To take payment, issue receipts and keep accounting records required by law.
• To contact you about your bookings by WhatsApp, e-mail or phone.
• To keep our systems secure and prevent fraud.

We do not sell your personal data and we do not use it for third-party advertising.

3. Who we share it with

• Your coach — your name, phone number and booking details for the sessions you book with them.
• Partner booking pages — when you book a TPA coach through a partner site such as honolulu.asia, only your name, phone number and booking time pass between the two systems.
• Service providers — HitPay (payments), Google (sign-in), our hosting provider and messaging services (WhatsApp, Telegram, e-mail), only as needed to provide the service.
• Authorities — when required by law.

4. How long we keep it

Account and booking data is kept while your account is active. Payment and accounting records are kept for 7 years as required by Malaysian law. You can ask us to close your account at any time; we then delete or anonymise what we are not required to keep.

5. Your rights

Under the PDPA you may ask to access or correct your personal data, withdraw consent, or close your account. Contact us at [email protected] or WhatsApp 012-746 2872. You can remove TPA’s access to your Google account at any time in your Google Account settings (Security → Third-party connections).

6. Security

Passwords are hashed, connections use HTTPS, and staff access is limited to what each role needs. No system is perfectly secure; if we become aware of a breach that affects you, we will tell you.

7. Changes

We may update this policy; the date at the top shows the latest version.

---

中文摘要

• 我们收集：姓名、email、手机号码、密码（只存加密后的哈希）；选择「用 Google 登录」时，Google 只提供你的姓名、email、email 是否已验证和 Google 账号编号，我们拿不到你的 Google 密码、Gmail 或联系人。
• 预约与付款：订场、教练课包、课时卡、预约和付款记录。线上付款由 HitPay（DuitNow）处理，我们看不到也不保存你的银行或卡资料。
• 用途：管理会员账号和预约、让教练联络你、收款开单、保障系统安全。我们不出售个人资料，也不用于第三方广告。
• 分享对象：你预约的教练（姓名、电话、预约资料）；合作预约网站（如 honolulu.asia，只传姓名、电话和时间）；HitPay、Google、主机与通讯服务商；法律要求时的政府机关。
• 保存期限：账号有效期间保存；付款与会计记录依法保存 7 年。你可以随时要求关闭账号。
• 你的权利：可要求查阅、更正、撤回同意或关闭账号 — email [email protected] 或 WhatsApp 012-746 2872。