Privacy Policy

We collect what the app needs to work: your account details, your player profile, your matches, your location when you use a feature that needs it, your messages, and a small amount of technical information from your device.

Some things we specifically do not do:

• We never ask your date of birth. You tell us an age band, not a birthday, and that band is never shown on your profile.
• We never see your card details. Payments are made by ordinary bank transfer outside the app. We receive the proof image you choose to upload and, only if you ask for a refund, the bank account details you give us to pay it back.
• We run no advertising trackers and do not track you across other apps or websites. No ad identifiers, no Firebase Analytics, no Amplitude, no Mixpanel, no Segment. The only third-party diagnostics tool in the app is Sentry, which receives crash reports and basic app-usage events such as taps and screen views. We use it to keep the app reliable and to improve it, never for advertising.
• We do not sell personal data, and we do not show personalized advertising to anyone under 18.
• We never record audio and we never scan your photo library. We see a photo only when you deliberately pick or take one.

MatchUp is operated by MATCHUP TECHNOLOGIES SDN. BHD., based in Malaysia, who is the data controller (the “data user” under the Malaysia Personal Data Protection Act 2010). Contact details are at the end of this page.

This policy covers the MatchUp mobile app for iOS and Android and the MatchUp web console used by clubs and organizers. It does not cover third-party services you separately choose to use, such as your bank, Google, or Apple.

Account and identity. Email address, phone number, username, display name, and your password — which is stored only as a salted hash and is never readable by us. One-time verification codes sent to your email or phone. If you sign in with Google or Apple, the identity token and the basic profile information that provider returns.

Profile. Profile photo, bio, gender, sports you play, self-rated skill level, your per-sport rating, and your win/loss record. Your age band — one of Under 13, 13–15, 16–17, or 18+. We do not collect a date of birth from anyone, and we do not collect any government identity document.

Location. GPS coordinates and accuracy, only while you are using a feature that needs them: finding players and events nearby, browsing venues, or verifying that both players were present at a match. We ask through your device’s permission prompt and you can withdraw it at any time in your device settings.

Matches and gameplay. Scores, winners, rating changes, timestamps, opponents, tournament participation, brackets and seedings, achievements, and any evidence you submit when disputing a result.

Social and messages. Your connections with other players, the clubs you follow, direct and group message content, club posts and replies, compliments and endorsements, your block list, and your online status.

Payments. Which tier or event you are paying for, the amount in MYR, a payment reference, and the proof-of-transfer image you upload. If you ask for a refund, we also collect your reason, any document you attach, and the bank name, account number and account holder name you give us so the refund can be paid into that account. We keep these with the refund record as a payment record, as described under “How long we keep it”. We hold no card number and no CVV, and we use no card processor.

Device and technical. Push notification token, a device identifier derived from your device model and OS build, a random identifier the app creates on your device for guest play, platform and app version, and when you last signed in.

IP addresses. We store the IP address your device uses when you sign in or try to, when we start a sign-in session for you, when we send you a one-time code or a link to verify your email, reset your password or delete your account, and when you make a consent decision. With sign-ins, sign-in sessions and consent decisions we also store the browser or app user-agent. We use these to keep accounts secure and to prevent fraud and abuse, and on consent records as evidence of the decision. How long each is kept is set out under “How long we keep it”.

Diagnostics and app usage. Through Sentry, the app sends crash reports, error traces, performance samples, and basic app-usage events: app launches and sessions, the screens you open, the buttons you tap, and counts of how voice scoring is used, never any audio or words you spoke. Reports carry your device’s model, operating system and name, and the addresses of the app’s requests to our servers, which can include internal record IDs. Older versions of the app may also include search terms you type and location coordinates when you use a nearby feature; newer versions remove search terms and location coordinates before sending. Reports are not tagged with your account, and email addresses and phone numbers are stripped before they are sent. We use this to keep the app reliable and to improve it, never for advertising. Young players whose accounts are restricted are excluded, as described under “Young players and guardians”.

• To create, authenticate and secure your account.
• To show your player profile to other players and clubs.
• To match you with opponents and compute ratings and leaderboards.
• To find players, events and venues near you, and to confirm both players were present at a match.
• To run tournaments — seeding, brackets, results and standings.
• To let you message other players and take part in clubs.
• To verify manual bank-transfer payments and update payment status.
• To send you notifications about your matches, tournaments and messages.
• To diagnose crashes and keep the service reliable.
• To understand how MatchUp is used so we can improve it — for example, counting active players, matches played and event bookings.
• To prevent fraud and abuse, and to meet legal obligations.

Where Malaysian law applies we rely principally on your consent and on the necessity of providing the service you asked for. Where the EU or UK GDPR applies, our bases are performance of a contract, consent (for location, camera and notifications), legitimate interests (security, crash reporting, improving the service, abuse prevention), and legal obligation.

MatchUp is used by juniors, and the app changes shape by age band. You declare a band at signup; we never ask for a birth date, and your band is never shown on your public profile or inferable from it.

Under 18. An account declared under 18 requires a guardian’s recorded approval before it becomes active. We ask you for a guardian’s email address or phone number, send them a request, and record their decision. Until a guardian approves, the account stays in a pending state and the data collected is limited to what the request itself needs.

Under 13. These accounts have no social surface at all. No messaging, no friend connections, no photo upload, no free-text profile, and no push notifications. Profile images are chosen from a fixed set of preset avatars rather than uploaded. We do not store precise location for an under-13 player.

Payments. Once a guardian has approved the account, a player aged 13 to 17 pays an entry fee like anyone else: by bank transfer, then by uploading their own proof of payment, and they can ask for a refund in the same way. An account under 13 cannot upload a proof of payment; a fee for a player under 13 is paid by their guardian outside the app.

Advertising and diagnostics. We show no personalized or targeted advertising to anyone under 18, and no player’s data, at any age, is passed to an advertising service. The app keeps Sentry, our diagnostics service, switched off for an account under 13, for an under-18 account a guardian has not yet approved, and for one whose guardian has withdrawn approval. On the first launch of such an account on a new device, Sentry is switched off as soon as the account’s status is confirmed.

Guardian rights. A guardian may withdraw approval at any time, which restricts the account, and may ask us to delete it. Guardian approval links expire 24 hours after they are sent. Where a request is never approved, we delete the pending record within 30 days.

Other players. Your public profile, online status, club posts, and the messages you send are visible to other users according to your settings. Match results are shared with your opponents, and appear in tournament brackets and standings.

Service providers acting for us. Cloud hosting and database providers, an email delivery provider, an image storage provider, a maps provider, a push-notification provider, and the diagnostics service (Sentry) described above. They process data only on our instructions.

Clubs and organizers. When you enter an event, the organizer sees what running the event requires — your name, profile, entry and results. Organizers and advertisers never receive raw player data or contact lists.

We do not sell personal data.

We keep your personal data for as long as your account is active. When you delete your account we erase it as described in the next section, with three deliberate exceptions that both app stores permit only when they are disclosed — so we are disclosing them here:

• Payment records, including refund requests and the bank details you gave us for a refund, are retained after deletion for tax and accounting purposes, for as long as Malaysian law requires us to keep them. Images uploaded as proof of payment are kept for up to one year from upload.
• Consent records are retained in full, including the IP address and user-agent captured at the time, as evidence that consent was given or refused and of exactly which wording you were shown. These records are append-only: a withdrawal adds a new entry rather than erasing the old one, because deleting the old one would destroy the proof that consent ever existed.
• Match results, ratings and standings are retained against an anonymised identity. These are shared records — deleting them would rewrite your opponents’ match history and corrupt tournament results they took part in. After deletion you appear in those records only as a deleted player.

Security records that carry an IP address follow their own clocks, whether or not you delete your account. Sign-in attempts are deleted after 30 days. Sign-in session records are deleted after they expire, and each expires no later than 180 days after it is issued. One-time codes are deleted once they are used or expire, except a password-reset code sent to you by our support team. That code, and links to verify your email, reset your password or delete your account, have no fixed period yet; for a player account they are erased when the account is deleted.

You can delete your account from inside the app, or from our public account-deletion page without signing in. We send a confirmation link to your registered email address; the deletion runs once you confirm it.

Deletion is real erasure, not deactivation. We remove your profile and photo, your contact details, the content of your messages, your stored GPS data, your device tokens, your login credentials, and your connections with other players. Your account record is replaced with a tombstone so the shared records described above stay consistent.

A player under 18 can delete their account in the app in the same way as anyone else, including while a guardian's approval is still pending, and a guardian may also ask us to delete it.

Under the Malaysia PDPA — and, where they apply, the EU or UK GDPR — you may ask us to give you access to your personal data, correct it, delete it, limit how we use it, or stop using it for a particular purpose. You may withdraw any consent at any time; withdrawal always succeeds and is never placed behind a payment, a survey or a support queue.

Most of these controls are in the app under Settings. For anything else, contact us using the details below. We will respond within the period the applicable law requires.

Passwords are stored only as salted hashes. Authentication tokens are held in your device’s secure keystore. Payment proof images are stored in authenticated storage and are readable only through short-lived signed links issued to an administrator reviewing them. Traffic between the app and our servers is encrypted in transit.

Our servers and database are hosted in Singapore. Some service providers may process limited data in other countries; where they do, we rely on their contractual data-protection commitments.

If you unlock the app with Face ID or a fingerprint, that check happens entirely on your device. We never receive biometric data.

If we make a material change we will update the effective date above and, where the change affects how we use data you have already given us, tell you in the app before it takes effect.

For any question about this document, or to exercise a data-protection right, contact the operator of MatchUp:

• MATCHUP TECHNOLOGIES SDN. BHD.
• Company no. 202601035405 (1697500-V)
• NO. 17-1, 1ST FLOOR, JALAN RADIN BAGUS 9, BANDAR BARU SRI PETALING, 57000 Kuala Lumpur, Wilayah Persekutuan Kuala Lumpur, Malaysia
• support@match-up.ai

In Malaysia, you may also complain to the Personal Data Protection Department (Jabatan Perlindungan Data Peribadi, JPDP).