Privacy Policy

Introduction

Welcome to TimeOut. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our basketball community matchmaking platform.

By using TimeOut, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our platform.

Information We Collect

Information You Provide to Us

We collect information that you voluntarily provide when using our platform:

• Account Registration: Name, email address, phone number, password, location preferences, basketball skill level, and preferred playing times
• Profile Information: Profile photo, bio, playing style description, preferred positions, and other optional information you choose to share
• Anonymous Participation: When joining sessions without an account, we collect your name and phone number
• Manager Information: Club details, team information, logo, verification documents, and contact information
• User-Generated Content: Photos, videos, reviews, ratings, comments, and other content you post to the platform
• Communications: Messages sent through our platform, support inquiries, and feedback

Information Collected Automatically

When you access our platform, we automatically collect certain information:

• Usage Information: Session participation history, browsing behavior, feature usage, and interaction with other users
• Device Information: IP address, browser type, operating system, device identifiers, and mobile network information
• Location Information: Approximate location based on IP address and precise location if you grant permission through your device settings
• Cookies and Similar Technologies: We use cookies, web beacons, and similar tracking technologies to enhance your experience
• Real-time Data: Session capacity updates, waitlist positions, and participation status changes

Information from Third-Party Services

• WhatsApp Integration: Phone number verification and message delivery status through Twilio
• Email Services: Email delivery and engagement metrics through Resend
• Mapping Services: Location data and directions through our mapping provider

How We Use Your Information

We use the collected information for the following purposes:

Service Delivery

• Facilitate session joining, waitlist management, and automatic promotion
• Enable court discovery and location-based features
• Manage club memberships and team organization
• Process and display user-generated content
• Provide real-time updates on session capacity and waitlist positions

Communication

• Send session confirmations, waitlist updates, and status changes
• Deliver notifications through email and WhatsApp based on your preferences
• Respond to your inquiries and provide customer support
• Send administrative information, policy updates, and security alerts

Platform Improvement

• Analyze usage patterns to improve features and user experience
• Monitor platform performance and troubleshoot technical issues
• Conduct research and develop new features
• Generate aggregate statistics and analytics

Safety and Security

• Verify user identity and prevent fraud
• Enforce our Terms of Service and Community Guidelines
• Detect and prevent abuse, spam, and malicious activity
• Protect the rights and safety of our users

Information Sharing and Disclosure

Information Visible to Other Users

• Players: Can see participant names (without phone numbers) in sessions they join
• Managers: Can see full participant information including phone numbers for their sessions
• Public Profile Information: Name, profile photo, skill level, and activity statistics are visible to all users
• Club Information: Club memberships, hosted sessions, and content are publicly visible

Service Providers

We share information with third-party service providers who perform services on our behalf:

• Twilio: For WhatsApp notifications and SMS delivery
• Resend: For email communications
• Cloudflare: For hosting, storage, and content delivery
• Mapping Services: For court locations and directions

These providers are bound by confidentiality agreements and may only use your information to provide services to us.

Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Valid legal processes (court orders, subpoenas, warrants)
• Requests from law enforcement or government authorities
• Protection of our rights, property, or safety
• Prevention of fraud or security threats
• Compliance with applicable laws and regulations

Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the successor entity. We will notify you of any such change and provide choices regarding your information.

With Your Consent

We may share your information with third parties when you give us explicit consent to do so.

Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy:

• Active Accounts: Information is retained while your account is active
• Anonymous Participation: Phone numbers and names are retained for session management and may be deleted after session completion
• Historical Data: Session participation history is retained for analytics and user statistics
• Legal Requirements: Some information may be retained longer to comply with legal obligations
• Account Deletion: Upon request, we will delete your account and associated data, subject to legal retention requirements

Your Rights and Choices

Account Management

• Access and Update: You can access and update your account information through your profile settings
• Account Deletion: You can request deletion of your account and personal data
• Data Export: You can request a copy of your personal data in a portable format

Communication Preferences

• Choose your preferred notification channels (email, WhatsApp, or both)
• Control notification frequency and types
• Opt out of promotional communications while still receiving essential service notifications
• Unsubscribe from emails using the link provided in each message

Privacy Settings

• Control profile visibility and what information is displayed
• Manage who can see your activity and participation history
• Set location sharing preferences

Cookies and Tracking

• Configure your browser to refuse cookies or alert you when cookies are being sent
• Note that some features may not function properly without cookies

Location Services

• Control location permissions through your device settings
• Opt out of location-based features (though this may limit functionality)

Data Security

We implement appropriate technical and organizational measures to protect your information:

• Encryption: Data is encrypted in transit using SSL/TLS and at rest in our databases
• Access Controls: Strict access controls limit who can view and process personal information
• Authentication: Secure authentication mechanisms protect account access
• Regular Audits: We conduct regular security audits and assessments
• Incident Response: We have procedures in place to respond to security incidents

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Children's Privacy

TimeOut is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will take steps to delete that information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

International Data Transfers

Our platform is operated in Malaysia and primarily serves users in Kuala Lumpur. Your information may be transferred to and processed in countries other than your own, which may have different data protection laws.

By using our platform, you consent to the transfer of your information to Malaysia and other countries where we operate.

Third-Party Links

Our platform may contain links to third-party websites, services, or applications. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you through email or prominent notice on our platform
• Obtain your consent if required by applicable law

Your continued use of our platform after changes become effective constitutes acceptance of the updated policy.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Malaysian Data Protection

TimeOut complies with the Personal Data Protection Act 2010 (PDPA) of Malaysia. You have rights under Malaysian law regarding your personal data, including:

• Right to access your personal data
• Right to correct inaccurate personal data
• Right to withdraw consent for data processing
• Right to request deletion of your personal data
• Right to limit processing of your personal data

To exercise these rights or for questions about Malaysian data protection, please contact our Data Protection Officer at the email address provided above.