- Home
- Legal
Privacy Policy
Driveclubofficial ("we", "us") operates the Driveclubofficial app and website at driveclubofficial.com. This notice explains what personal data we collect, why, how long we keep it and the rights you have under the Personal Data Protection Act 2010 (PDPA) of Malaysia. By creating an account you agree to this notice.
Notis Bahasa Malaysia. Notis ini menerangkan cara Driveclubofficial mengumpul, menggunakan, menyimpan dan memadam data peribadi anda selaras dengan Akta Perlindungan Data Peribadi 2010. Anda boleh meminta salinan penuh notis ini dalam Bahasa Malaysia melalui e-mel di bawah.
1. What we collect
| Data | When | Why |
|---|---|---|
| Name, email address, password (hashed) | When you register | To create and secure your account and send receipts and service messages |
| Google or Facebook account identifier, display name, profile picture, verified email | When you sign in with Google or Facebook | To sign you in without a password and link the sign-in to your account. We receive only what the provider shares after you consent; we never receive your provider password |
| Phone number | If you add it in Settings | Event-day contact only |
| Club memberships, applications, roles, posts, photos | When you join or interact with a club | To run the club roster, feed and events you take part in |
| Vehicle details, lap times, modifications, maintenance records, proof media | When you use the Garage or submit a lap | To keep your garage and to let a track captain verify a lap |
| Orders, event entries, points and credits ledger | When you buy or enter | To fulfil the order, issue entry, and credit points |
| Notification preferences and settings | When you change them | To honour your choices |
| Device and usage data (IP address, device type, app version, crash logs) | Automatically | Security, rate limiting and fixing faults |
2. What we do not do
- We do not sell personal data.
- We do not post to your Google or Facebook account.
- We do not use your data for advertising outside the app.
3. Who we share it with
- The clubs you belong to. Your name, car, role and activity are visible to that club's committee and, depending on your privacy settings, its members.
- Sign-in providers. Google LLC and Meta Platforms, through Firebase Authentication, process the sign-in itself.
- Payment providers. When payments are enabled, the payment gateway receives the amount and a reference; we never see your full card number.
- Hosting. Our servers are located in Malaysia. Firebase Authentication may process sign-in data outside Malaysia; by using social sign-in you consent to that transfer.
- Law. Where required by Malaysian law or a lawful request.
Our news pages summarise public articles and credit the publisher. They contain no personal data of members.
4. How long we keep it
- Account data: while your account is active and for 30 days after you request deletion.
- Orders and payment records: 7 years, as required for tax and accounting.
- Club audit logs: kept by the club with your name replaced by "deleted member" once your account is removed.
- Server logs: 90 days.
5. Your rights
Under the PDPA you may access, correct and request deletion of your personal data, and withdraw consent to processing that is not required to provide the service.
- Access and correction: in the app under Settings, or by email.
- Deletion: see driveclubofficial.com/data-deletion. Deletion is permanent after 30 days.
- Marketing: the weekly digest and every notification can be switched off in Settings.
6. Security
All traffic is encrypted in transit. Passwords are stored hashed. Sign-in tokens can be revoked per device by signing out. We limit sign-in attempts to protect against guessing. No system is perfectly secure; if we become aware of a breach affecting your data we will notify you and the Personal Data Protection Commissioner as the law requires.
7. Children
The service is for drivers and riders aged 18 and above. We do not knowingly collect data from anyone under 18.
8. Changes
We will post any material change here with a new effective date and ask you to accept it in the app before continuing.
9. Contact
Data protection enquiries: support@driveclubofficial.com. Postal enquiries can be sent to the address on our terms page.