GDPR Information

How we handle personal data for users in the European Economic Area under the GDPR and locally under Malaysia’s Personal Data Protection Act 2010 (PDPA). Our mini-games are for entertainment with free coins only (no real-money play) and for users 18+.

Who we are (Data Controller)

PlayTribeMY.fun acts as the data controller for personal data processed on this website.

Level 23, Ilham Tower, 8 Jalan Binjai, 50450 Kuala Lumpur, Malaysia
Phone: +60 3 2772 1010
Email: support@playtribemy.fun

Scope

This page applies to: (a) users located in the EEA where the GDPR is applicable; and (b) Malaysian users under the PDPA. If these frameworks conflict, we apply the stricter protections to the affected users.

Personal data we process

  • Account & gameplay: display name, email (if you contact us), preferences, in-game progress with free coins.
  • Technical: IP address, device/browser info, logs, security events.
  • Cookies: strictly necessary cookies; optional analytics/marketing cookies with your consent. See our Cookie Policy.

Purposes & legal bases

  • Provide and maintain the service (create/save progress, essential site features) — performance of a contract (GDPR Art. 6(1)(b)) / PDPA: necessary for services requested.
  • Security and fraud prevention (rate-limiting, abuse prevention, logs) — legitimate interests (Art. 6(1)(f)) / PDPA: legitimate interests.
  • Customer support — performance of a contract or legitimate interests.
  • Analytics (aggregated usage metrics) — consent (Art. 6(1)(a)).
  • Marketing measurement — consent (Art. 6(1)(a)).
  • Legal compliance (respond to lawful requests) — legal obligation (Art. 6(1)(c)).

Where we get data from

Directly from you (forms, support emails), and automatically via your device when you browse our pages (see Cookie Policy).

Recipients & processors

We use reputable service providers for hosting, security, analytics (if enabled), and email delivery. These providers act as processors under our instructions and are bound by confidentiality and data protection terms.

International transfers

Some providers may process data outside Malaysia or the EEA. Where GDPR applies, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (SCCs) or equivalent. Under the PDPA, we implement contractual and technical protections consistent with regulator guidance.

Retention

  • Support communications: up to 24 months after resolution.
  • Security logs: up to 12 months, unless needed longer for investigations.
  • Cookie preferences: up to 12 months (see Cookie Policy for exact lifetimes).
  • Aggregated analytics: retained in non-identifiable form where feasible.

Your rights (GDPR & PDPA)

  • Access your data and receive a copy.
  • Rectify inaccurate or incomplete data.
  • Erase data (“right to be forgotten”) where applicable.
  • Restrict or object to processing, including to processing based on legitimate interests.
  • Data portability (structured, commonly used, machine-readable format).
  • Withdraw consent at any time for analytics/marketing cookies without affecting lawfulness of prior processing.
  • Lodge a complaint with your supervisory authority (EEA) or Malaysia’s JPDP.

How to make a request

Email us at support@playtribemy.fun with the subject “Data Request”. We will verify your identity and respond without undue delay and within one month. If your request is complex or numerous, we may extend by up to two further months and will inform you.

Supervisory contacts

  • EEA users: You can find your authority via the European Data Protection Board website.
  • Malaysia: Jabatan Perlindungan Data Peribadi (JPDP) — Personal Data Protection Department.

Children & age

The service is intended for users aged 18+ in Malaysia. We do not knowingly process children’s data.

Automated decision-making

We do not perform automated decision-making or profiling that produces legal or similarly significant effects.

Requests

Submit a request to access or delete personal data via email. We’ll respond within 30 days (one month) from receipt, subject to identity verification and allowable extensions for complex cases.

Legal basis summary

Consent for analytics/marketing cookies; performance of a contract for providing the service; legitimate interests for security and service integrity; legal obligation where required by law.

Updates to this page

We may update this page to reflect changes in technology or regulatory guidance. Last updated on .