This Privacy Policy explains how PR0TOCOL collects, uses, discloses, and protects your personal data when you use our website and platform. We handle your personal data in accordance with the Malaysian Personal Data Protection Act 2010 ("PDPA").
Depending on how you use our services, we may collect:
| Category | Examples |
|---|---|
| Identity & contact | Name, email address, phone number, gender, age, last 4 digits of IC |
| Account | Member number (PTC-XXXX), login credentials, Google account email/name (if you use Google Sign-In) |
| Event & performance | Event registrations, time slots, race results, rankings |
| Payment (future) | Where paid events are introduced: transaction records. Card details are handled by the payment provider, not stored by us. Events are currently free of charge. |
| Technical | IP address, device/browser information, and cookies/usage data |
By providing your data and using our services, you consent to the processing described in this Policy. Where required by law, we will obtain your consent and you may withdraw it at any time (note that withdrawing certain consents may prevent you from registering for or participating in events).
PR0TOCOL is a competitive platform. Your name, category, race times, and ranking may be displayed publicly on our leaderboards, athlete index, and broadcast/results displays. Please do not register if you do not wish for this competitive information to be shown.
We may share your data with:
We do not sell your personal data.
We use cookies and similar technologies to keep you logged in, remember preferences, and understand how the platform is used. You can control cookies through your browser settings, though some features may not work without them.
We keep your personal data for as long as your account is active and as needed to provide our services, maintain event and results records, and comply with legal, accounting, or reporting requirements. You may request deletion of your account, subject to records we are required to retain.
We take reasonable technical and organisational measures to protect your data, including encrypted storage of passwords and secure handling of credentials. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Our platform is hosted on infrastructure (such as Cloudflare and Google services) that may process or store data on servers located outside Malaysia. Where data is transferred abroad, we take steps to ensure it remains protected in line with the PDPA.
Subject to the PDPA, you have the right to:
To exercise these rights, email jen@protocolracing.com. We may need to verify your identity before acting on a request.
Where participants are under 18, we collect and process their data only with the consent of a parent or legal guardian. If you believe we have collected a child's data without proper consent, please contact us and we will take appropriate action.
We may update this Policy from time to time. The "Last updated" date above reflects the latest version. Significant changes will be communicated where appropriate.
For any questions or requests regarding your personal data, contact:
PR0TOCOL — GOCLOUD GLOBAL SDN BHD
Email: jen@protocolracing.com