Privacy Notice

Who we are

This platform, Academy by MetaPlay (the "Platform"), is operated by Metahub Sdn Bhd (Registration No. 202201032515 (1478212-K)) ("Metahub", "we", "us", "our"). We are the data controller for personal data processed through the Platform. This Notice explains what personal data we collect, why, and your rights under the Personal Data Protection Act 2010 of Malaysia (as amended).

Data Protection Officer: Ong Zhong-Ken. Contact: support@metahub.my.

Who this Notice covers, and children's data

The Platform is used by sports academies to run their programmes: enrolment, scheduling, attendance, skills assessment, report cards, and communications with parents. Many students are children under 18.

We process a child's personal data only on the basis of consent given by that child's parent or legal guardian, who creates the account and enrols the child. The guardian controls the child's data on the Platform and may withdraw consent at any time (see Your rights). We do not knowingly allow anyone under 18 to create their own account.

What we collect

From the account-holding parent or guardian: name, email address, phone number, and relationship to the student.

About the student, provided by the guardian or the academy: name, date of birth or age group, gender (optional); attendance records; skills assessments, scores, grades and report cards; observations and notes recorded by coaches; and an emergency contact. To confirm a student's age we may sight an identification document, but we do not store NRIC or passport numbers. We do not collect medical or health information through the Platform.

From coaches and academy staff: name, contact details, role, and academy assignment.

Automatically: basic technical and usage data (such as log data and device or browser information) needed to operate and secure the Platform.

Why we use it

To deliver the service the academy and guardian have signed up for: enrolment, scheduling, marking attendance, recording assessments and producing report cards; to send service communications such as enrolment confirmations, absence alerts, session reminders, payment coupons and receipts; to keep children safe through emergency contact information; and to administer, secure and improve the Platform. We do not sell personal data and we do not use it for third-party advertising.

Legal basis

Consent, given by the parent or guardian for a student's data and by the account holder for their own data, together with our legitimate need to operate the service you have asked us to provide.

Who we share it with

The academy the student is enrolled with, and its authorised owner, managers and coaches, so they can run the programme.

Service providers who process data on our behalf under confidentiality and data-protection obligations, namely our hosting and database provider and our email-delivery provider. They may only use the data to provide those services to us.

Others where required by law, or to protect the rights, safety and security of students, users, the public, or the Platform. We do not make our user list available to marketing partners.

Cross-border processing

Some of our service providers may store or process data on servers located outside Malaysia. Where that happens we take steps to ensure the data receives protection consistent with the cross-border transfer requirements of the Personal Data Protection Act 2010.

How we protect it

Access to personal data is restricted by role, data is encrypted in transit, and access is limited to people who need it to operate the service. No system is perfectly secure, but if a personal-data breach occurs we will act on it and notify the Personal Data Protection Commissioner and affected individuals in line with our legal obligations.

How long we keep it

We keep a student's personal data for as long as they are enrolled with the academy, and for a limited period afterwards to meet operational and legal needs, after which it is deleted or anonymised. Guardians may request deletion at any time (see Your rights).

Your rights

Under the Personal Data Protection Act 2010 you may, at any time, access the personal data we hold, request correction of it, withdraw consent, request deletion, limit how it is processed, or where applicable request a copy for portability. To exercise any of these, contact our Data Protection Officer at support@metahub.my. Withdrawing consent to essential data may mean a student can no longer be enrolled on the Platform.

Changes

We may update this Notice. The current version and its effective date will always be shown here, and material changes affecting how we handle personal data will be brought to your attention.

Contact

Data Protection Officer, Metahub Sdn Bhd (1478212-K): support@metahub.my.