← Back

Privacy Policy

Last updated: 2026-06-01

1. Introduction

CardPing is operated by BREWTECH VENTURE, a business registered in Malaysia (SSM Registration No. 202403169010; Company No. JM1008572-T).

This Privacy Policy explains how we collect, use, store, and share personal data when you use CardPing, in line with Malaysia's Personal Data Protection Act 2010 (PDPA) where applicable.

By using the Service and accepting this policy, you consent to the practices described here.

2. Data we collect

Depending on how you use the Service, we may collect:

  • Buyer display name.
  • Organizer email address, display name, and account identifiers.
  • Authentication and session data (including cookies and local storage tokens for buyers).
  • Card ping details (card identifiers, names, images, set info, condition selections).
  • Event and booth information created by organizers and vendors.
  • Vendor messaging identifiers, username (if available), shop name, and booth location (when registering through our vendor channel).
  • Technical data such as IP address, used temporarily for rate limiting and abuse prevention (not stored in our database as a permanent profile field).

3. Why we use your data

We process personal data to:

  • Provide and secure the Service (accounts, sessions, pings).
  • Connect buyers with vendors at events.
  • Let organizers manage events and floorplans.
  • Deliver vendor notifications where messaging is enabled.
  • Prevent abuse and maintain reliability.
  • Comply with legal obligations.

4. Legal basis

We rely on your consent (e.g. checkbox at registration), performance of the Service you request, and our legitimate interests in operating and securing the platform, where permitted under the PDPA.

5. Who we share data with

We do not sell your personal data.

We may share personal data only where necessary to operate the Service, with trusted third parties who process data on our behalf under confidentiality and security obligations, including:

  • Hosting, infrastructure, and application operations providers.
  • Database, authentication, and file storage providers.
  • Messaging and notification providers (when vendors or organizers use those features).
  • Card catalogue and search partners (search queries needed to show card details; we do not send your display name for card lookup).

6. Retention

We keep data for as long as your account or event activity requires, and for a reasonable period afterward for backups, disputes, or legal compliance.

Ended events may be cleaned up automatically by scheduled jobs. You may request earlier deletion (see Section 8).

7. Security

We use HTTPS, access controls, and other measures appropriate to the nature of the data we hold. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

8. Your rights (PDPA)

Subject to applicable law, you may request access to, correction of, or deletion of your personal data we hold.

Send requests to cardping2026@gmail.com. We aim to respond within twenty-one (21) days.

You may withdraw consent where processing is consent-based; this may limit your ability to use the Service.

9. Cookies and local storage

We use essential cookies and similar technologies for authentication (e.g. organizer sessions). Buyers may have session data stored in browser local storage.

We do not use advertising or third-party analytics cookies at this time. If we add non-essential tracking later, we will update this policy and, where required, obtain consent.

10. Families and younger players

TCG events are often enjoyed by families and younger players. We collect only the limited personal data described in this policy (such as a display name for buyers).

Parents or guardians with questions about a young person's use of the Service may contact us at cardping2026@gmail.com.

11. Changes

We may update this Privacy Policy. The date below will reflect the latest version. Material changes may require renewed acceptance.

12. Contact

Data protection enquiries: cardping2026@gmail.com

CardPing is operated by BREWTECH VENTURE, a business registered in Malaysia (SSM Registration No. 202403169010; Company No. JM1008572-T).