Sports Prima

Who is responsible for your data

Sports Prima Sdn Bhd, trading as Sports Prima is the data user responsible for your personal data. You can reach us here:

• Phone: 0127119183

What we collect

We collect only what we need to run your bookings and your account:

• Your name, mobile number and email address, and the password you choose (stored in a form nobody, including us, can read back).
• Your date of birth and IC or passport number, when you give them, for example to receive a student, OKU or other member rate, which we check against your card.
• An emergency contact, if you give one.
• For a child, the details their parent or guardian gives us, and who that guardian is.
• Your bookings, payments, receipts and refunds, credit and any promo codes you use.
• For payments made online, the payment reference and method from our payment provider. Your card or bank details go to the provider, not to us.
• Records of the emails we send you.
• Technical details needed to keep your account secure: a sign-in cookie, and the internet address a request comes from (used for security limits). We use no advertising or tracking cookies.

Why we use it

• To create and run your account, take and manage your bookings, and recognise you at the counter.
• To take payments, issue receipts, invoices and refunds, and keep the financial records the law requires.
• To give you a member rate you qualify for.
• To keep your credit balance.
• To send you messages about your bookings and payments: confirmations, reminders, receipts, changes and cancellations.
• For your safety and others’: emergency contacts, age checks and a guardian for children.
• To protect the service from misuse, fraud and attacks, and to meet our legal obligations.

Marketing

We do not send you marketing messages unless you separately agree to receive them, and you can stop them at any time. Messages about your own bookings and payments are part of the service.

What you must give us

Your name, mobile number and email address are needed to create an account and book online. Your date of birth and IC number are needed only where a rate or rule depends on them. Without the required details we cannot take an online booking, but you can still book at the counter.

Who else handles your data

We never sell your personal data. It is handled for us, under contract and only to provide the service, by:

• Rutterby, which provides our booking software and runs it for us;
• cloud providers that host the database, the website and its backups (Neon, Vercel and Cloudflare);
• our email provider (Resend);
• our payment provider (HitPay), for payments made online.

Data stored outside Malaysia

Some of these providers store or process data outside Malaysia, mainly in Singapore. We use them only with safeguards that protect your data to a standard at least as high as the PDPA requires.

We disclose personal data to the police, a court or another authority only where the law requires us to.

How long we keep it

We keep your account details for as long as your account is in use. Records of payments, receipts, invoices and refunds are kept for seven years, as Malaysian tax law requires. Backup copies are deleted on a rolling schedule; monthly archives are kept for seven years for the same reason.

If you ask us to close your account, we delete or anonymise what the law does not require us to keep.

Keeping it safe

Your data is sent over encrypted connections, passwords are never stored in readable form, and our staff see only what their role needs. Each business on Rutterby has its own separate database. If a breach ever puts your data at risk, we will tell you and the Personal Data Protection Commissioner as the law requires.

Your rights

You can ask us for a copy of the personal data we hold about you, ask us to correct it, and withdraw your consent or ask us to limit how we use it. You can change some details yourself in the Me tab. We reply to a request within 21 days.

Withdrawing consent may mean we can no longer keep your account. To make a request, contact us using the details above.

Children

A child’s account is managed by their parent or guardian, who gives their details and agrees on their behalf.

Changes and complaints

We will update this notice when how we use personal data changes, and tell you of any significant change.

If you are not satisfied with how we handle your personal data, please contact us first. You may also complain to the Personal Data Protection Commissioner (Jabatan Perlindungan Data Peribadi, www.pdp.gov.my).