Privacy Policy

1. Personal Data We Collect

When you register and use your account:

• Your mobile phone number, which is your sign-in, and the one-time codes sent to verify it.
• Your password, which we store only in a protected (hashed) form that cannot be read.
• Your full name, date of birth and gender.
• An email address, if you choose to give one.
• A profile photo, if you choose to add one. It is stored at a web address that is not published anywhere, but anyone who is given that address can view the photo.
• Your bowling profile (bowling style, hand, ball weight and how often you bowl), if you choose to fill it in.
• Delivery addresses you save, including the recipient’s name and phone number and the map location of the address.

When you pay and use our services:

• Your Credits top-ups, payments at the centre, membership purchases and renewals, points collected and used, and Rewards obtained and used.
• The payment method you chose and the references from the payment provider. We do not receive or store your full card or bank account details.
• Invoices issued for your purchases, which show your name and phone number.

From your device:

• Your phone model, operating system and app version, and the address (IP address) your device connects from, to keep your account secure and to show you where you are signed in.
• A notification token, so we can send you notifications.
• Your location, only if you allow it and only while you are placing a pin for a delivery address. We do not track your location in the background.
• Your camera or photos, only if you allow it and only to choose a profile photo.
• Technical error reports if the App fails, with emails and phone numbers removed.
• How you use the App, such as when you open it, how long you use it, your app version and phone model, to understand what works and improve your experience. This does not include your name, phone number or account.

2. How We Use Your Personal Data

We use your personal data to:

• Create and manage your account and verify your identity when you sign in or pay.
• Run your Credits, membership, points and Rewards, and process your payments and top-ups.
• Issue invoices and keep the financial records the law requires.
• Send you notifications about payments, your account, your membership, points and Rewards.
• Send you news, offers and event information, which you can switch off in the App.
• Choose which members an announcement or offer is meant for, using details such as membership status, points, age, birth month, gender, spending and bowling profile.
• Provide customer service and resolve disputes about payments or your account.
• Keep the App and your account secure, and detect and prevent fraud and misuse.
• Fix problems and improve the App and our services.
• Comply with the law and with requests from authorities that the law requires us to answer.

3. Who We Share Your Personal Data With

We do not sell your personal data. We share it only with the service providers who help us run the App, and only as much as each needs:

• Our payment provider, which receives your name, phone number and email address, if given, to process your top-ups.
• Our messaging providers, who receive your phone number to send your one-time codes by SMS or messaging app.
• Notification services (Apple and Google), which deliver notifications to your device.
• Google, which receives the map location or the address search text you enter, to find and show addresses. It does not receive your name or phone number.
• Google, which processes how the App is used for us, to help us improve it. It does not receive your name or phone number, and it is not used for advertising.
• Our hosting, storage, security and error-reporting providers, who store and protect the App’s data and records on our behalf.

We may also disclose personal data where the law requires it, to authorities with the power to ask for it, or to protect the rights and safety of our customers, staff and business.

Our staff can see members’ personal data only as far as their role needs it. Access is set per role, and staff viewing a deleted member’s kept details is recorded.

4. Data Stored Outside Malaysia

Some of our service providers store or process data in other countries, such as Singapore. Where your personal data is transferred outside Malaysia, we take steps to ensure it is protected in line with this Privacy Policy and the law.

5. Notifications and Marketing

Notifications about payments and the security of your account cannot be switched off, as they are part of the service. You can switch off every other kind, including news and offers, in the App’s notification settings. Switched-off kinds are still listed in the App, but are not sent to your device.

We do not send marketing by email or SMS.

6. How Long We Keep Your Personal Data

We keep your personal data while your account is open, and for as long as we need it for the purposes in this Privacy Policy or as the law requires.

• The addresses your devices connected from are kept for six (6) months after they were last used.
• One-time codes expire after five (5) minutes and are then removed.
• Records of the requests made to our systems, used to keep the service running and to look into problems, are kept for up to thirty (30) days and then deleted. They can include your phone number when you sign in, the addresses you save (with the recipient’s name and phone number and the map location) and the details of your other requests, but never your password or one-time codes.
• Invoices and financial records are kept for the period required by Malaysian tax and accounting law.

7. Deleting Your Account

You can ask for your account to be deleted at any time in the App, or on our website without the App. Your account is deleted thirty (30) days after you ask, and you can change your mind by signing in before then.

When your account is deleted, we delete your profile details, photo, addresses, devices, notification settings and sign-in, and your remaining Credits, points, Rewards and membership are forfeited. Records of past transactions stay in our accounts, but no longer show your name or phone number.

We keep only what we must:

• Your name and phone number, locked and seen only by authorised staff, for seven (7) years, to resolve payment disputes and meet legal requirements.
• Invoices and payment records, as the law requires.
• Anonymous details that no longer identify you (such as gender, year of birth and membership dates), for statistics.
• A protected fingerprint of your phone number, which cannot be turned back into the number, for twelve (12) months, so a new account on the same number can be recognised, for example so a new-member offer is not given twice.

Records of requests made before your account was deleted are not changed by the deletion; they are deleted as usual within thirty (30) days.

Personal data that our payment provider received for your payments is held by it under its own privacy policy.

8. Your Rights

Under the Personal Data Protection Act 2010, you may:

• Ask for access to the personal data we hold about you.
• Correct your personal data. You can change your name, date of birth, gender, email, phone number, photo, bowling profile and addresses in the App yourself.
• Withdraw your consent to us handling your personal data, or limit how we use it, including switching off news and offers.
• Ask for your account and personal data to be deleted, as described above.

To ask for access or for anything you cannot do in the App, email us at [email protected]. We may need to confirm your identity first, and we will reply within the time the law sets. If you withdraw consent to data we need to run your account, we may no longer be able to provide the App to you.

9. Security

We protect your personal data with measures such as encrypted connections, protected passwords, one-time codes at sign-in, a payment code that changes every thirty (30) seconds, and staff access limited by role. No system is completely secure, so please keep your password and your phone safe and tell us at once if you think someone else has used your account.

10. Children

You must be at least thirteen (13) years old to register for the App. If you are under eighteen (18), you may use the App only with the consent of your parent or guardian, who is responsible for your use of the App. We do not knowingly collect personal data from children under thirteen (13); if we learn that we have, we will delete it.

11. Our Website

Our website does not ask you to sign in and does not use advertising or analytics cookies. If you choose a language or a light or dark look, it is remembered in your browser. When you ask for your account to be deleted on the website, we use your phone number and password only to confirm the account is yours.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will tell you about material changes through the App or another appropriate channel before they take effect.

13. Contact Us

For questions, requests or complaints about your personal data, contact us at:

• Email: [email protected]
• Post: Pyramid Bowl Sdn Bhd (Sunway Megalanes), Lot F1.22, Level 1, Sunway Pyramid Shopping Centre, Jalan PJS 11/15, Bandar Sunway, 47500 Subang Jaya, Selangor, Malaysia