Privacy Policy

1. Information We Collect

We collect only the information necessary to provide you with our membership services:

• Account information — phone number, name, and optionally email address (provided during registration).
• Authentication data — One-Time Password (OTP) sent to your phone number; Google account profile (name, email) if you sign in with Google.
• Membership data — loyalty points, wallet balance, transaction history, tier status, redeemed rewards and vouchers, gift cards.
• Device information — device type, operating system version, and app version (collected automatically for troubleshooting).

We do not collect location data, contacts, photos, or any sensitive personal data beyond what is listed above.

2. How We Use Your Information

• To create and manage your membership account.
• To authenticate your identity via OTP or Google Sign-In.
• To maintain your wallet balance, loyalty points, and transaction records.
• To process reward redemptions and gift card transactions.
• To send you relevant announcements, deals, and promotions.
• To improve the App and troubleshoot issues.

3. Data Sharing & Disclosure

We do not sell, rent, or trade your personal data. Your information may be shared only in the following circumstances:

• Service providers — Firebase (authentication and analytics), cloud hosting providers that process data on our behalf under strict confidentiality agreements.
• Merchant partners — the restaurant or snooker venue where you use your membership, limited to your membership ID, name, tier, and applicable vouchers/wallet balance required to process a transaction.
• Legal obligations — when required by Malaysian law or a valid court order.

4. Data Retention

We retain your personal data for as long as your account is active. If you delete your account, your data will be soft-deleted (deactivated) immediately and permanently purged from our systems within 90 days. Transactional records may be retained in anonymised form for accounting and legal compliance purposes.

5. Account Deletion

You may delete your account at any time from Profile → Delete My Account within the App. Upon deletion:

• Your account will be deactivated immediately.
• Any remaining wallet balance, loyalty points, and active vouchers will be forfeited.
• Your personal data will be permanently erased within 90 days.

6. Data Security

We implement industry-standard security measures to protect your data, including:

• HTTPS/TLS encryption for all data in transit.
• JWT-based authentication with tokens stored in secure device storage.
• Server-side access controls and database encryption at rest.

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Third-Party Services

The App uses the following third-party services:

• Google Firebase — authentication and crash reporting (Firebase Privacy Policy).
• Google Sign-In — optional social login (Google Privacy Policy).

8. Children’s Privacy

The App is not intended for children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

9. Your Rights

Under the Malaysian Personal Data Protection Act 2010 (PDPA), you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and data.
• Withdraw consent for data processing.

To exercise these rights, contact us at the email address below.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this page periodically.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Company: Resertech Technology Sdn Bhd
• Email: support@mixsys.co
• Website: https://mixsys.co