Policies

Privacy Policy

Here is the updated Privacy Policy for Smart MBS Arena, incorporating CHIP as the payment gateway, six-month membership billing with manual or automatic renewal using a saved card, and your contact details.

PRIVACY POLICY

Smart MBS Arena (Smart Sports Arena – 202603 121439)

Effective Date: 10 October 2026
Last Updated: 10 October 2026

1. Introduction

Welcome to Smart MBS Arena (“we”, “us”, “our” or “the Arena”). This Privacy Policy explains how we collect, use, disclose, store and protect your personal data when you access or use our website and online sports pitch booking services.

Our website allows customers to register for an account, log in, view available sports facilities, book a pitch, make online payments and subscribe to membership plans that offer discounts or other benefits.

We are committed to protecting your personal data in accordance with applicable Malaysian laws, including the Personal Data Protection Act 2010 (Act 709), as amended.

By using our website, you acknowledge that you have read this Privacy Policy. Where consent is required by law, we will obtain it through an appropriate consent mechanism.

2. Personal Data We Collect

We may collect the following categories of personal data, depending on how you use our website.

2.1 Account and Registration Information

When you register for an account or log in, we may collect:

  • Full name

  • Email address

  • Mobile phone number

  • Username and account identification details

  • Password or authentication credentials, protected using appropriate security measures

  • Other information you voluntarily provide through your account

2.2 Pitch Booking Information

When you make a reservation, we may collect:

  • Booking reference number

  • Selected sports facility or pitch

  • Booking date, time and duration

  • Number of participants, where applicable

  • Booking status and transaction history

  • Special requests or additional information submitted with your booking

2.3 Payment Information

We use CHIP (CHIP Asia) as our payment gateway for processing online payments, subject to the payment methods supported by the service.

We may collect or receive the following information relating to your transactions:

  • Payment amount and currency

  • Transaction reference number

  • Payment date and time

  • Payment status

  • Payment method

  • Relevant billing and transaction details

  • Refund or payment reversal records, where applicable

Payment card information may be processed by CHIP and its relevant payment partners. We do not intend to store complete payment card details or banking authentication credentials on our own systems.

For information about how CHIP handles payment and personal data, please refer to CHIP's applicable terms and privacy documentation at https://www.chip-in.asia/.

2.4 Membership Information

If you subscribe to a membership plan, we may collect:

  • Selected membership plan

  • Membership subscription date

  • Membership start and expiry dates

  • Membership status

  • Applicable discounts and benefits

  • Membership payment and renewal history

  • Renewal preference, including manual or automatic renewal

  • Relevant payment transaction references

Membership information is used to administer your subscription, verify eligibility and apply discounts to qualifying bookings.

2.5 Technical and Website Usage Information

When you access our website, we may collect technical information such as:

  • IP address

  • Browser type and version

  • Device and operating system information

  • Website access timestamps

  • Pages visited and interactions with website features

  • Cookies and similar technologies, where applicable

This information helps us maintain website functionality, improve user experience and detect suspicious or unauthorised activity.

3. How We Use Your Personal Data

We may use your personal data for the following purposes:

  1. To create, verify and manage customer accounts.

  2. To authenticate logins and maintain account security.

  3. To display available sports facilities and process pitch bookings.

  4. To confirm reservations and provide booking notifications.

  5. To process payments through CHIP and verify transaction status.

  6. To manage membership subscriptions and applicable discounts.

  7. To administer manual or automatic membership renewals.

  8. To communicate booking updates, cancellations, membership expiry and payment issues.

  9. To respond to enquiries, complaints and customer support requests.

  10. To maintain financial, operational and transaction records.

  11. To detect and prevent fraud, misuse or unauthorised access.

  12. To improve our website and booking services.

  13. To comply with applicable legal, regulatory and accounting requirements.

  14. To send marketing communications or promotional offers where permitted by law.

We will process your personal data only for purposes relevant to our services and permitted by applicable law.

4. Account Registration and Login

Customers must register for an account or log in to access the applicable pitch booking features.

You are responsible for providing accurate and up-to-date registration information and maintaining the confidentiality of your login credentials.

Please notify us promptly if you suspect that your account has been accessed or used without your authorisation.

We may use your account information to verify your identity, manage bookings, communicate with you and protect our website.

5. Pitch Bookings, Payments and Refunds

When you make a booking, we use the relevant information to reserve your selected facility, process your payment and maintain a record of the transaction.

Online payments are processed through CHIP and may involve banks, card networks or other payment service providers supporting the transaction.

These parties may process information necessary to complete or verify a payment, prevent fraud or facilitate a refund, subject to their respective terms and privacy policies.

We may retain relevant booking and transaction records to resolve disputes, verify payment status, administer cancellations and refunds, and comply with legal or financial obligations.

Booking cancellation, refund eligibility and payment terms may be governed by our separate Terms and Conditions.

6. Membership Plans and Six-Month Billing

Smart MBS Arena offers membership plans that may provide discounts or other benefits to eligible customers.

Memberships operate on a six-month billing cycle, subject to the terms of the selected plan.

When you subscribe to a membership, we may use your personal data to:

  • Register and manage your membership.

  • Record the membership start date and expiry date.

  • Verify eligibility for membership benefits and booking discounts.

  • Process membership payments through CHIP.

  • Manage manual or automatic renewal preferences.

  • Record payment and renewal status.

  • Notify you about upcoming renewals, failed payments, expiry or changes to membership benefits.

6.1 Manual Renewal

If you select manual renewal, you are responsible for renewing your membership and completing the applicable payment when the six-month membership period expires or when renewal becomes available.

Your membership benefits may expire if you do not renew within the applicable period.

6.2 Automatic Renewal Using a Saved Card

If you choose automatic renewal and provide the necessary authorisation, your membership may be renewed every six months using the payment card saved through the applicable CHIP payment functionality.

By enabling automatic renewal, you authorise the applicable recurring renewal charge in accordance with the membership plan and renewal terms presented to you at the time of subscription.

We may use relevant membership and payment information to initiate renewal transactions, verify payment results and update your membership status.

Payment card details are handled through CHIP's applicable payment functionality. Our systems may retain relevant payment references, transaction results and renewal status rather than the complete card details.

Automatic renewal is subject to the functionality and terms of CHIP and the relevant payment provider. A renewal may fail if the saved card is expired, invalid, declined or otherwise unavailable for payment.

Where a renewal payment fails, we may notify you and request that you update your payment method or complete the renewal manually. Membership benefits may be suspended or expire according to the applicable membership terms.

6.3 Renewal Cancellation

You may request cancellation of automatic membership renewal by using any available account functionality or contacting us through the contact details provided in Section 16.

Cancellation of automatic renewal generally prevents subsequent automatic renewal charges once the cancellation has taken effect. It does not necessarily terminate an already-paid membership period or entitle you to a refund.

Any refund or early termination will be handled in accordance with the applicable membership terms and refund policy.

6.4 Membership Discounts

Membership discounts are subject to the eligibility requirements, validity period and conditions of the selected plan.

An active membership does not guarantee pitch availability. All bookings remain subject to facility availability and the applicable booking terms.

7. Disclosure of Personal Data

We do not sell your personal data to third parties.

However, we may disclose relevant personal data to the following parties where necessary and permitted by law:

  • CHIP and payment partners: To process payments, manage authorised membership renewals, verify transactions and facilitate refunds.

  • Website hosting and IT providers: To host, maintain, secure and operate our website and booking platform.

  • Communication service providers: To send booking confirmations, account verification messages and membership notifications.

  • Professional advisers: Such as auditors, accountants and legal advisers, where necessary.

  • Government authorities and regulators: Where disclosure is required or authorised by law.

  • Other relevant parties: Where necessary to investigate suspected fraud, enforce our terms or protect our legal rights.

We take reasonable steps to ensure that third parties handling personal data on our behalf are subject to appropriate confidentiality and data protection obligations.

8. Cookies and Similar Technologies

Our website may use cookies and similar technologies to support essential website functions, maintain sessions, remember preferences and improve website performance.

These technologies may be used to:

  • Keep customers logged in during an active session.

  • Maintain account and booking functionality.

  • Remember user preferences.

  • Analyse website usage and performance.

  • Support security and fraud prevention.

You may be able to manage or disable cookies through your browser settings. Disabling certain cookies may affect login, booking or payment functionality.

Where required, we will seek consent before using non-essential cookies or similar tracking technologies.

9. Data Security

We take reasonable technical, organisational and administrative measures to protect personal data against unauthorised access, disclosure, alteration, loss, misuse or destruction.

These measures may include access controls, secure authentication, encryption where appropriate, system monitoring, secure hosting and restricted access to personal data.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

If a personal data breach occurs, we will take appropriate steps in accordance with applicable legal and regulatory requirements.

10. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, including account administration, booking management, membership services, payment verification, dispute resolution and compliance with legal obligations.

Certain booking, payment, membership and transaction records may need to be retained after an account is closed or a membership expires.

When personal data is no longer required, we will take reasonable steps to delete, destroy or anonymise it, subject to applicable legal requirements and legitimate record-retention needs.

11. International Data Transfers

Some website hosting, payment processing or technology service providers may store or process personal data outside Malaysia.

Where personal data is transferred outside Malaysia, we will take appropriate steps to ensure that the transfer complies with applicable Malaysian data protection requirements.

12. Your Rights and Choices

Subject to applicable law and any relevant exceptions, you may have the right to:

  • Request access to personal data that we hold about you.

  • Request correction of inaccurate, incomplete or outdated personal data.

  • Withdraw consent where processing is based on consent, subject to applicable legal and contractual restrictions.

  • Request information about how your personal data is processed.

  • Request that we stop processing your personal data for direct marketing purposes.

  • Raise a concern or complaint about our handling of your personal data.

You may contact us using the details in Section 16 to exercise these rights.

We may need to verify your identity before processing a request. Certain information may need to be retained where required by law or necessary to complete an existing transaction or resolve a dispute.

13. Marketing Communications

We may send service-related communications, including booking confirmations, payment updates, account notifications, membership expiry reminders and renewal notices.

Where permitted by law, we may also send promotional messages about our facilities, membership plans, discounts or special offers.

You may opt out of promotional communications by following the unsubscribe instructions provided in the message or contacting us directly.

Opting out of marketing communications will not prevent us from sending essential messages concerning your account, bookings, payments or membership.

14. Third-Party Websites and Services

Our website may contain links to third-party websites or services, including CHIP.

This Privacy Policy applies only to Smart MBS Arena's website and services. We are not responsible for the privacy practices, content or security of third-party websites or services.

Customers are encouraged to review the relevant third-party privacy policies and terms before using those services.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our operations, website features, payment arrangements, membership plans, technology or legal requirements.

Any updated version will be published on our website with a revised “Last Updated” date.

Where required by law, we will notify you of material changes or obtain any additional consent that may be necessary.

16. Contact Us

If you have questions about this Privacy Policy, wish to access or correct your personal data, or would like to raise a privacy-related concern, please contact us:

Business Name: Smart MBS Arena
Registered Business Name / Reference: Smart Sports Arena – 202603 121439
Address: Smart MBS Arena, Seremban 2, 70300 Seremban, Negeri Sembilan, Malaysia
Email: admin@smartmbsarena.my
Phone: 019-649 4872

We will review and respond to privacy-related enquiries in accordance with applicable laws and our internal procedures.

17. Acknowledgement

By registering for an account, making a booking or subscribing to a membership plan, you acknowledge that you have been informed of the personal data practices described in this Privacy Policy.

Where consent is required, your consent will be requested separately or through an appropriate consent mechanism.