Privacy Policy

What we collect

• Your account: your name, email address and nationality, which you give us when you sign up.
• Your registrations: which sessions, leagues and events you registered for, what you paid and whether it went through.
• For team captains: a WhatsApp number, so organizers can reach the team.
• For guests an organizer adds to a session: the name the organizer typed in.
• Notes organizers may write about a player (for example a position or level). These are never shown to you or other players.
• A record of what organizers do in the app (who, what and when), so we can look into mistakes or misuse. The app itself doesn't record IP addresses or devices, but the services that run it (such as Cloudflare and Supabase) keep standard technical logs that include them.

We don't see or store your card or bank details. Payments are handled by ToyyibPay; we only receive the amount, the status and a payment reference. We don't use advertising or analytics cookies. The only cookies are the ones that keep you signed in.

Why we use it

To run the club: confirm your spot, take payments, contact team captains, see who is playing, and keep the club's accounts. Your nationality helps organizers understand who plays at Boundless; it is not shown to other players. We don't sell your information or use it for advertising.

Who can see it

• Organizers (admins and staff) can see player names, emails and nationality, the registration lists, and team captains' WhatsApp numbers. Only admins see payments and revenue.
• Other players see your name only where a list shows it, such as a session's participant list in the club's WhatsApp group when an organizer shares it.
• The services that run the app, listed below.

Photos and videos

We take photos and videos at our sessions, leagues and events, and we may publish them on this website, in the app (as notices to signed-in members), on our YouTube channel and on our Instagram. By taking part in a session or event you may appear in them.

• If you would rather not appear, tell an organizer at the session, or contact us at the address above. We will take the photo or video down, or edit you out of it, as soon as we can.
• We don't put your name on a photo or video unless you have agreed to it.
• On this website, a YouTube video shows a preview image from YouTube; the YouTube player itself is only loaded when you press play. YouTube and Instagram handle your data under their own privacy policies.

Who we share it with

• Supabase — our database and sign-in codes (servers in Singapore).
• Cloudflare — runs the website and the app.
• Resend — sends the sign-in code emails.
• ToyyibPay — takes payments.
• YouTube (Google) and Instagram — where we publish videos and photos.

These services handle your information only to provide what we use them for. Most of them run outside Malaysia, so your information may be processed in other countries.

How long we keep it

• Your account details: until you ask us to delete your account.
• A team captain's WhatsApp number: 14 days after the league or event ends.
• A guest's name: 30 days after the session, then it becomes just “Guest”.
• Registrations that were never paid for and expired or were cancelled: 30 days.
• The record of what organizers viewed: 1 year. Other records of what organizers did (for example edits and refunds): 7 years, with our accounts.
• Payment and accounting records (registrations, payments, deposits, match fees): 7 years after the event, as our accounts require.
• Photos and videos we have published: until you ask us to remove you, or we take them down.

Your choices

• Change your name any time in Profile. Nationality can be corrected by an organizer.
• Delete your account in Profile → “Delete my account”. This removes your name, email, nationality and any team WhatsApp number and signs you out. Past payments stay in our accounts under “Deleted user”, without your name or email. You can sign up again later with the same email. If you still have an upcoming registration, a team deposit that hasn't been returned, or an unpaid match fee, contact an organizer first.

To ask what we hold about you, to have something corrected or removed, or to withdraw your consent, contact us at message us on Instagram.

Changes

If we change this page we'll update the date above. You can always sign in at the app to see and manage your own details.