Privacy Policy
This policy explains what personal data SPARRTA! collects, why, who we share it with and the choices you have. By using the Service you agree to the handling of your data as described here.
1. Who we are
SPARRTA! (the website at sparrta.com and its sub-domains, and the SPARRTA PLAY mobile app — together, the “Service”) is operated by SHARKSPEEDZ EMPIRE ENTERPRISE (SSM 202603238089), 169, Jalan Andalas 2, Taman Andalas, 71700 Mantin, Negeri Sembilan, Malaysia (“we”, “us”). We are the data user responsible for your personal data under Malaysia’s Personal Data Protection Act 2010 (“PDPA”).
For any privacy question or request, contact us at hello@sparrta.com.
2. Personal data we collect
Account data you give us: name, username, email address, password (stored only as a one-way hash), phone number, gender, date of birth, state and district, favourite sports, profile photo and bio. Partners (venues) also provide a business name, registration number and business location.
Sign in with Google or Apple: if you choose it, we receive your name, email address and a unique account identifier from Google or Apple. We never receive your Google or Apple password.
Activity on the Service: meetups you post or join, bookings, event registrations, Ultimate Team membership and team records, scores, missions, badges, XP, followers and following, feedback and ratings, and your Sport Card settings.
Messages and uploads: private and group chat messages, including photos and voice messages you send, team logos, gallery photos and card backgrounds.
Payments and wallet: payment amounts, status and references for bookings, event fees and coin top-ups; your SPARRTA wallet and coin balances and history; refund requests; and, if you request a payout, your bank name, account type, account holder name and account number. Card and online-banking details are entered on the payment provider’s page (CHIP) — we do not receive or store them.
Location you choose to share: the state/district on your profile and venue or meetup locations you pin on a map. We do not track your device’s GPS location.
Device and technical data: IP address, browser or device type, app version, log-in times, a push-notification token if you allow notifications, and error reports when something crashes.
3. How we use your data
- To create and run your account, and to sign you in securely.
- To provide the features you use: meetups, bookings, events, teams, chat, the Store, missions and badges, payouts and refunds.
- To show your public profile and Sport Card to other users (see section 4).
- To process payments, keep wallet and coin records, and handle refunds and payouts.
- To send you service messages — email verification, password resets, booking and payment updates, and in-app and push notifications about activity involving you.
- To keep the Service safe: preventing fraud, abuse and spam, enforcing our Terms, and investigating reports.
- To fix errors, measure how the Service is used and improve it.
- To meet legal, tax and accounting obligations.
We do not sell your personal data, and we do not use it for third-party advertising.
4. What other users can see
Your name or username, profile photo, rank, badges, event achievements, favourite sports, state/district and follower counts are visible to other users on your profile and Sport Card. Your date of birth, gender, email and phone number are shown on your Sport Card only if you choose to display them in the card settings.
Meetups you post, events you join, team information and anything you write in group chats can be seen by the other participants of those activities. Venues and organisers see the booking or registration details they need to serve you (for example your name and contact number).
6. How long we keep data
We keep your data while your account is active. If you delete your account, we delete or anonymise your personal data within 30 days, except records we must keep longer by law — such as payment, wallet and payout records, which we keep for up to 7 years for tax and accounting purposes. Messages you sent may remain visible to the people you sent them to.
7. Your rights
Under the PDPA you may ask us to:
- give you access to the personal data we hold about you;
- correct data that is inaccurate or out of date (most of it you can edit yourself in My Account);
- delete your account and personal data;
- stop sending you non-essential messages, and withdraw consent you have given.
Email hello@sparrta.com from the address on your account. We reply within 21 days. You can switch off push notifications at any time in your phone settings.
8. Security
Passwords are stored as one-way hashes, all traffic is encrypted (HTTPS), uploaded photos and voice messages are stored under random, unguessable file names, and access to personal data is limited to staff who need it. No system is perfectly secure — please keep your password private and tell us straight away if you think your account has been misused.
9. Children
You must be at least 13 years old to use the Service. If you are under 18, you may use it only with the consent of a parent or guardian, who is responsible for your use. We do not knowingly collect data from children under 13; if you believe a child under 13 has an account, contact us and we will delete it.
10. Changes to this policy
We may update this policy as the Service changes. We will change the “Last updated” date above and, for important changes, tell you in the app or by email before they take effect.
11. Contact us
SHARKSPEEDZ EMPIRE ENTERPRISE (202603238089)
169, Jalan Andalas 2, Taman Andalas, 71700 Mantin, Negeri Sembilan, Malaysia
Email: hello@sparrta.com
This policy is available in English. In case of any inconsistency between versions in other languages, the English version applies.