PRIVACY POLICY

Privacy Policy

Effective Date: [04 July 2025]  Last Updated: [04 July 2025]

1. Who We Are

WonderFox PLT (Reg. No. LLP002539-LGN, “WonderFox,” “we,” “us,” “our”) operates atmothership.com (the “Site”) and offers court bookings and related services via the embedded Playbypoint widget (the “Booking Platform”).

(We monitor our data volumes and will formally appoint a DPO if we later cross the statutory thresholds.)

2. Personal Data We Collect

Identification

  • Name

  • (Optional) NRIC / Passport number for event security

  • Contact Information

    • E-mail address

    • Phone number

    • Mailing address

  • Booking & Payment Details

    • Playbypoint user ID

    • Court reservations, timestamps

    • Club-credit balances

    • Masked card tokens (we never store full card numbers)

  • Device & Usage Data

    • IP address

    • Browser type and version

    • Pages viewed, session logs, cookies

  • Marketing Preferences

    • Newsletter opt-ins and topic choices

We do not knowingly collect data for children under 13 without parental consent.

3. How & Why We Use Your Data

Process bookings and send confirmations
(PDPA General Principle – contract fulfilment)

  1. Provide customer support and respond to enquiries
    (Legitimate interest)

  2. Manage cancellations and club-credit refunds
    (Contract fulfilment)

  3. Send promotions, event news, and marketing e-mails
    (Notice & Choice Principle – your explicit consent; you may withdraw at any time)

  4. Improve our website, facilities, and services through analytics
    (Legitimate interest)

  5. Comply with legal obligations (tax, safety, PDPA requirements)
    (Legal obligation)

4. Disclosure to Third Parties

We share Personal Data only under the Disclosure Principle:

  1. Playbypoint (booking processor)

  2. Payment gateway (card processing)

  3. IT / security vendors (hosting, email, analytics)

  4. Professional advisers (auditors, lawyers)

  5. Authorities when compelled by law

5. Cross-Border Transfers

Your data may reside on servers outside Malaysia (e.g., Playbypoint’s data centre). Under the amended PDPA, cross-border transfers are allowed if the destination offers “equivalent or stronger” protection, or with your explicit consent and contractual safeguards.
We ensure any overseas recipient signs a transfer agreement or is located in a jurisdiction recognised for comparable protection.

6. Security Measures

Consistent with the Security Principle, we employ:

  • TLS-encrypted data in transit

  • Segregated cloud databases

  • Role-based access

7. Data Retention

Under the Retention Principle we keep:

  • Booking & payment records – 7 years for tax/audit

  • Marketing consents – until you withdraw

  • Analytics logs – 18 months, then aggregated or deleted

When data is no longer needed we securely delete or anonymise it.

8. Data Accuracy

We rely on you to keep information current (the Data Integrity Principle). Update details via your Playbypoint profile or by emailing us.

9. Your Rights Under PDPA

Access – Request a copy of the personal data we hold about you.

How: Whatsapp us at +60187686895 with the correct details (a statutory fee of up to RM 10 may apply).

  1. Correction – Ask us to correct inaccurate or incomplete data.

    How: Whatsapp us at +60187686895.

  2. Withdraw Consent – Opt out of marketing communications at any time.

    How: Click “unsubscribe” in any marketing email.

  3. Data Portability – Receive your data in a portable format, or have it sent to another controller (effective 1 June 2025).

    How: Whatsapp us at +60187686895 with the request; we will comply where technically feasible.

  4. Complain – Lodge a complaint with the Personal Data Protection Commissioner (PDPC) or the courts if you believe your rights are breached.

    How: Contact Jabatan Perlindungan Data Peribadi Malaysia.

We respond within 21 days

10. Cookies & Tracking

We use first-party cookies and Google Analytics to:

  • maintain login sessions

  • measure traffic & performance

  • personalise content

You can disable cookies in your browser; some features may not work.

11. Third-Party Links

Our Policy covers only WonderFox. External sites (e.g., social media) operate under their own privacy rules.

12. Changes to This Policy

We may update this Policy from time to time. Material changes will be posted on the Site and, where required, we will seek renewed consent. The “Last Updated” date shows the latest version.

13. Contact Us

Questions, requests, or complaints?

WonderFox PLT
Phone: +6018-7686895
Address: 554, Batu 3 1/4, Jalan Ipoh, Kuala Lumpur