Privacy Notice · PlayTown (dikendalikan oleh / operated by PlayTown Ventures Sdn Bhd · Reg. No. 202501023878 / 1625291-U)
Versi privacy-v1.1 · Berkuat kuasa / Effective 14 Oktober 2026 · Menggantikan / Supersedes privacy-v1.0 (2 Okt 2026)
Bahasa MalaysiaPlayTown ialah perkhidmatan yang dikendalikan oleh PlayTown Ventures Sdn Bhd (No. Pendaftaran 202501023878 / 1625291-U) ("PlayTown", "kami"). Kami ialah pengawal data (data controller) bagi data peribadi anda di bawah Akta Perlindungan Data Peribadi 2010 (PDPA).
| Data | Bila dikumpul |
|---|---|
| Alamat email | Semasa pendaftaran akaun |
| Nama & nombor telefon | Kemudian, dalam borang akaun |
| Baki wallet & sejarah transaksi | Semasa guna wallet / tebus kod perk |
| Rekod persetujuan (consent) | Semasa pendaftaran / checkout |
| Tetapan opt-in pemasaran (boolean) | Pilihan anda |
| Data analitik laman web: halaman yang dilawati, lokasi anggaran (negara/wilayah), jenis peranti/pelayar, dan pengecam cookie Google Analytics | Hanya jika anda terima cookie analitik (lihat Seksyen 8) |
Kami tidak mengumpul NRIC/kad pengenalan, data biometrik atau wajah, atau nombor kad bayaran. Untuk kanak-kanak, kami hanya simpan bilangan (head-count) — tiada data yang boleh mengenal pasti mana-mana kanak-kanak.
Kami memproses data anda untuk: mencipta dan mengurus akaun anda; mengendalikan wallet dan penebusan kod perk pelabur; menghantar email transaksi (cth. pengesahan, reset password); menyokong anda; — hanya jika anda opt-in — menghantar kemas kini pemasaran; dan — hanya jika anda terima cookie analitik — memahami dan menambah baik cara laman web kami digunakan melalui analitik. Asas sah kami ialah persetujuan anda dan keperluan untuk melaksanakan perkhidmatan yang anda minta.
| Pemproses | Peranan | Lokasi |
|---|---|---|
| Supabase | Pangkalan data, Auth & Storage | AWS Singapura (ap-southeast-1) |
| AWS | Backup disulitkan | Singapura (ap-southeast-1) |
| Resend | Email transaksi | Luar Malaysia (berkemungkinan Amerika Syarikat) |
| Vercel | Hosting aplikasi | Luar Malaysia (berkemungkinan Amerika Syarikat) |
| Google (Google Analytics) | Analitik laman web (hanya jika cookie analitik diterima) | Luar Malaysia (Amerika Syarikat) |
| Fiuu / Razer | Gateway bayaran (hanya bila ciri berbayar dibuka; data kad disimpan di Fiuu, tidak pernah dalam pangkalan data kami) | Malaysia |
| MyStartr | Platform ECF tempat pelaburan dibuat (sumber kod perk pelabur) | Malaysia |
Pangkalan data utama dan backup anda disimpan di Singapura (AWS). Email dan hosting mungkin diproses di luar Malaysia (berkemungkinan Amerika Syarikat). Jika anda terima cookie analitik, data penggunaan terhad juga dihantar kepada Google di Amerika Syarikat. Ini bermakna data anda dipindahkan ke luar Malaysia. Dengan bersetuju dengan notis ni, anda bersetuju dengan pemindahan rentas sempadan ni. Kami memastikan pemproses kami mengenakan perlindungan yang munasabah ke atas data anda.
Kami simpan data anda selagi akaun anda aktif dan selagi perlu untuk tujuan di atas, atau seperti dikehendaki undang-undang. Rekod wallet dan persetujuan disimpan sebagai rekod transaksi. Backup yang disulitkan disimpan di Singapura dan dikitar mengikut jadual backup kami.
Anda berhak untuk: mengakses data anda; membetulkan data yang tidak tepat; menarik balik persetujuan; menghalang pemprosesan untuk pemasaran langsung; dan membuat aduan. Untuk melaksanakan mana-mana hak ni, hubungi DPO kami, Ong Zhong-Ken, di info@playtown.my. Anda juga boleh mengadu kepada Pesuruhjaya Perlindungan Data Peribadi Malaysia.
Kami guna cookies sesi penting untuk log masuk dan keselamatan — ini sentiasa aktif kerana tapak tak berfungsi tanpanya.
Kami juga menawarkan cookie Google Analytics (Google Analytics 4, ID pengukuran G-HQRYP804JX) yang pilihan dan opt-in. Tiada apa-apa daripada Google dimuatkan dan tiada cookie analitik ditetapkan sehingga anda klik "Terima" pada banner cookie kami. Jika anda menolak atau tidak membuat pilihan, tiada cookie analitik dan tiada data analitik dikumpul. Kami menggunakan Google Consent Mode v2: hanya analytics_storage diberikan; penyimpanan pengiklanan/personalisasi iklan kekal ditolak dan Google signals DIMATIKAN. Analitik ni tidak digunakan untuk mengenal pasti anda secara peribadi. Kami menghormati isyarat "Do Not Track" dan Global Privacy Control — jika hadir, Google Analytics tidak dimuatkan langsung. Anda boleh menukar atau menarik balik pilihan anda bila-bila masa melalui pautan "Tetapan Cookie" di footer; menarik balik akan memadam cookie _ga. Jika diterima, Google mengumpul halaman yang dilawati, lokasi anggaran (negara/wilayah), jenis peranti/pelayar, dan pengecam cookie GA, dan memprosesnya di luar Malaysia (Amerika Syarikat).
Kami mungkin kemas kini notis ni. Versi dikawal — perubahan penting akan diberi versi baru dan meminta persetujuan semula anda. Versi ni (v1.1) menggantikan v1.0; versi sebelumnya dikekalkan dalam sejarah.
Soalan privasi: info@playtown.my (DPO: Ong Zhong-Ken).
PlayTown Ventures Sdn Bhd (202501023878 / 1625291-U) · Notis Privasi versi privacy-v1.1 · 14 Okt 2026 · menggantikan privacy-v1.0 (2 Okt 2026)
PlayTown is a service operated by PlayTown Ventures Sdn Bhd (Registration No. 202501023878 / 1625291-U) ("PlayTown", "we", "us"). We are the data controller for your personal data under the Personal Data Protection Act 2010 (PDPA).
| Data | When collected |
|---|---|
| Email address | At account signup |
| Name & phone number | Later, in the account form |
| Wallet balances & transaction history | When you use the wallet / redeem a perk code |
| Consent records | At signup / checkout |
| Marketing opt-in setting (boolean) | Your choice |
| Website analytics data: pages visited, approximate location (country/region), device/browser type, and a Google Analytics cookie identifier | Only if you accept analytics cookies (see Section 8) |
We do not collect NRIC/ID numbers, biometric or face data, or payment card numbers. For children, we store only head-count numbers — no data that identifies any child.
We process your data to: create and manage your account; operate the wallet and investor perk-code redemption; send transactional email (e.g. confirmations, password resets); support you; — only if you opt in — send marketing updates; and — only if you accept analytics cookies — understand and improve how our website is used through analytics. Our lawful basis is your consent and the necessity of performing the service you request.
| Processor | Role | Location |
|---|---|---|
| Supabase | Database, Auth & Storage | AWS Singapore (ap-southeast-1) |
| AWS | Encrypted backups | Singapore (ap-southeast-1) |
| Resend | Transactional email | Outside Malaysia (likely United States) |
| Vercel | App hosting | Outside Malaysia (likely United States) |
| Google (Google Analytics) | Website analytics (only if analytics cookies accepted) | Outside Malaysia (United States) |
| Fiuu / Razer | Payment gateway (only when paid features open; card data lives at Fiuu, never in our database) | Malaysia |
| MyStartr | ECF platform where investments are made (source of investor perk codes) | Malaysia |
Your primary database and backups are stored in Singapore (AWS). Email and hosting may be processed outside Malaysia (likely the United States). If you accept analytics cookies, limited usage data is also sent to Google in the United States. This means your data is transferred outside Malaysia. By agreeing to this notice, you consent to these cross-border transfers. We require our processors to apply reasonable protections to your data.
We keep your data while your account is active and as long as needed for the purposes above, or as required by law. Wallet and consent records are kept as transaction records. Encrypted backups are stored in Singapore and rotated on our backup schedule.
You have the right to: access your data; correct inaccurate data; withdraw consent; prevent processing for direct marketing; and complain. To exercise any of these, contact our DPO, Ong Zhong-Ken, at info@playtown.my. You may also complain to the Malaysian Personal Data Protection Commissioner.
We use essential session cookies for login and security — these are always on because the site doesn't work without them.
We also offer Google Analytics cookies (Google Analytics 4, measurement ID G-HQRYP804JX), which are optional and opt-in. Nothing from Google loads and no analytics cookies are set until you click "Accept" on our cookie banner. If you decline or make no choice, there are no analytics cookies and no analytics data collected. We use Google Consent Mode v2: only analytics_storage is granted; advertising/ad-personalisation storage stays denied and Google signals are OFF. This analytics is not used to identify you personally. We honour "Do Not Track" and Global Privacy Control signals — where present, Google Analytics never loads. You can change or withdraw your choice anytime via the "Cookie settings" link in the footer; withdrawing deletes the _ga cookies. If accepted, Google collects the pages you visit, approximate location (country/region), device/browser type, and a GA cookie identifier, and processes these outside Malaysia (United States).
We may update this notice. Versions are controlled — material changes get a new version and re-prompt for your consent. This version (v1.1) supersedes v1.0; the previous version is retained in history.
Privacy questions: info@playtown.my (DPO: Ong Zhong-Ken).
PlayTown Ventures Sdn Bhd (202501023878 / 1625291-U) · Privacy Notice version privacy-v1.1 · 14 Oct 2026 · supersedes privacy-v1.0 (2 Oct 2026)