Privacy notice

Who we are

MCG is run by Strategeist Sdn. Bhd. (registration number 1581041-P) ("we"). We decide how your personal data is used, as the data user under the PDPA.

What we collect

Email address

To sign you in with the password you choose and to send you notices about your registrations and matches. We keep only a one-way hash of your password, never the password itself. If you continue with Google, Google gives us your name, email address and account ID. We never see your Google password.

Your Cyber ID profile

Your display name, username, state, main game, the games you play with their in-game names and player IDs, and your teams.

Eligibility details

Your date of birth, nationality and, only if you choose to give it, your full legal name. We use them to check you can enter a tournament and to match you to your ID at check-in. We don't ask for your MyKad number, and we never copy or photograph your ID.

Event records

Your tournament registrations, check-in records (including that staff saw your ID), match results, disputes, penalties, and what you agreed to in this notice and the terms, with the version and time.

Technical data

Our service providers log requests (IP address, device and browser, time) to keep the service secure. To stop abuse, we count some actions using only a one-way code made from your account ID or IP address, never the ID or the address itself. Error reports carry no name or email address.

Why we use it

To run MCG: your Cyber ID and sign-in, teams, tournament registration, check-in, brackets, results and rankings.

To keep competition fair: eligibility checks (age, nationality), one playing spot per player in each game, disputes and penalties.

To keep the service secure and to fix problems.

To email you notices about your registrations and matches. News and offers only if you said yes, and you can turn them off any time.

What is public

Your Cyber ID page and the tournament pages can be seen by anyone, without signing in. They show your display name, username, Cyber ID number, main game, your games with their in-game names, your teams, your results and rankings, the month you joined and whether staff have verified you. Your state is shown only once you are 18.

Your email address, date of birth, nationality, legal name and player IDs are never public.

Who else sees your data

MCG officials see only what their job needs, and only for the event they work at. Check-in staff see your legal name, your age and whether you are under 18. Tournament directors see the private details of players registered in their tournaments. Staff accounts need two-step sign-in, and every time staff open private details, it is logged.

We do not sell your data. The app has no advertising or analytics cookies.

Service providers and transfers

Supabase

Our database and sign-in (email and password). Your data is stored in Singapore.

Vercel

Hosts the app, in Singapore and on its global network. Vercel is a company in the United States.

Resend

Sends our event notices by email once we turn email on, so it receives your email address. It never signs you in. It is in the United States.

Google

Signs you in when you continue with Google, under its own privacy policy. Google is in the United States.

They act only on our instructions and must protect your data. Your data is handled outside Malaysia only so that these providers can run the app.

On your device

The app keeps your sign-in session, your language and your theme, and copies of the public pages you've opened so they work without a connection. Those copies hold nothing private. Signing out ends the session on the device.

How long we keep it

We keep your Cyber ID and its private details while your account is open. If you ask us to close it, we delete or anonymise your private details, except what we must keep: results and rankings stay as part of the competition's record, and the log of staff actions and your consent records are kept to show the event was run fairly, and for as long as the law requires.

Your rights

You can ask for a copy of your personal data, ask us to correct it, or withdraw your consent (which ends your Cyber ID), by writing to admin@cybergames.my. You can correct most profile details yourself in the app. We reply within 21 days, as the PDPA requires.

You can also complain to the Personal Data Protection Commissioner (Jabatan Perlindungan Data Peribadi, JPDP).

Players under 18

You must be at least 13 to create a Cyber ID, and you confirm it when you sign up. We don't ask for your parent or guardian's details, and there is no guardian form. Your state stays hidden on your Cyber ID until you are 18.

What you must give

To create a Cyber ID you must give your email address, display name, username, state, date of birth, nationality and a main game. Without them we can't check that you can play. Your legal name is optional. News and offers by email are optional.

Changes to this notice

If we change this notice in a way that matters, the app asks you to read and agree to the new version before you continue. The version is shown at the top.

Language

This notice is given in English and Bahasa Melayu. If the two texts differ, the English text prevails.

Contact

Strategeist Sdn. Bhd. Privacy questions and requests: admin@cybergames.my.