Last updated: 24 July 2026
Apphia Multimedia (M) Sdn Bhd ("we", "us", "our") is committed to protecting your personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. This notice explains what data we collect, why, and your rights over it.
1. What Personal Data We Collect
- Full name, IC/passport number, date of birth
- Contact details: email address, phone number, emergency contact number
- Payment-related data processed by our licensed payment gateway, Curlec (we do not store your card/bank details ourselves)
- Jersey size, category selection, and any health/medical notes you voluntarily provide
- Photos/videos taken during the event for promotional purposes (see Section 5)
- Technical data such as IP address and browser type, for security and fraud-prevention purposes
2. Purpose of Collection
- To process your event registration and payment
- To assign bib numbers, prepare race kits/jerseys, and manage kit distribution
- To contact you regarding your registration, event updates, or safety notices
- To send your registration receipt via email and/or WhatsApp
- To comply with legal, insurance, and event-safety obligations
3. Disclosure of Personal Data
We do not sell your personal data. We may share limited data with:
- Curlec (payment gateway) — solely to process your payment
- Event logistics/medical partners — solely for on-ground safety and kit distribution
- Regulatory or law enforcement authorities, where required by law
4. Data Security
We store your data in a database protected by industry-standard controls: parameterised database queries (preventing SQL injection), encrypted admin access, restricted staff access on a need-to-know basis, and secure hosting with HTTPS encryption in transit.
5. Photos & Media
By participating in CYBERATHON 2026, you consent to being photographed/filmed during the event, and to the use of such media for CYBERATHON's promotional materials (website, gallery, social media), unless you notify us in writing prior to the event that you opt out.
6. Your Rights
Under the PDPA, you have the right to:
- Request access to the personal data we hold about you
- Request correction of inaccurate personal data
- Withdraw consent for direct marketing communications
- Request deletion of your data, subject to our legal/record-keeping obligations (e.g. financial transaction records)
7. Data Retention
Registration and payment records are retained for as long as required for event operations, accounting, and legal compliance (typically up to 7 years for financial records), after which they are securely deleted or anonymised.
8. Contact / Data Protection Queries
To exercise any of your rights above, email privacy@apphia.com.my or use our Feedback form.