Privacy notice

FY Brothers Badminton Academy ("FYBBA", "we") runs badminton training for children and adults in Shah Alam, Selangor. We decide how the personal data in this website and app is used, so we are its data controller under the Personal Data Protection Act 2010 (PDPA).

Parents and guardians: name, phone (WhatsApp), email, login ID, language, and your relationship to each child.

Players: name, nickname, date of birth, gender, school, photo, playing hand, emergency contact, level, training bookings, attendance, assessments and coach comments, fitness test results, tournament results, badges, certificates and the moments you share.

Payments: fees, invoices, receipts and the payment proof you upload. We never see or keep your card or online-banking details; payment providers handle those.

Staff and coaches: details needed for employment and pay, including IC number, bank account, EPF, SOCSO and tax numbers, leave, claims, clock-in location and payslips.

Website visitors: what you type into the registration, free-tour, enquiry and job forms. We count page visits without identifying you.

Sign-in records: when you sign in, failed sign-ins and security changes, to keep accounts safe.

To run training: registering players, planning sessions and courts, taking attendance, coaching, assessing progress and keeping parents updated.

To bill and collect fees, issue invoices and receipts, and keep accounts as the law requires.

To contact you by WhatsApp, email and app notifications about training, payments, reports and events. You can switch WhatsApp and email reminders off in your profile.

To employ and pay staff and coaches, and meet EPF, SOCSO, EIS and income tax duties.

To keep the service safe and working, and to answer your questions and requests.

To show photos or videos of a player on our website or social media only when the parent has said yes in the app. You can change this at any time.

Most of our players are under 18. We collect a child's data from, and with the consent of, their parent or guardian, who can see, correct and manage it in the parent app.

Inside FYBBA, people see only what their job needs: coaches see their players, office staff see their own department, and payroll is limited to HR and management.

Service providers who work for us: hosting for this website and its database, payment processing, WhatsApp and email delivery, and parcel delivery for the shop. They may only use the data to provide their service to us.

Government bodies when the law requires it, for example EPF, SOCSO and LHDN for staff, or the police with a lawful request.

Some of these providers store data on servers outside Malaysia. We use providers that protect data to a standard similar to the PDPA.

We do not sell personal data, and we do not share it for other companies' marketing.

Player and family records: while the player trains with us. After they leave, you can ask us to remove their personal details. Fee, invoice and payment records are kept for 7 years because tax law requires it, but no longer show the child's name once removed.

Staff records and payslips: 7 years after employment ends, as employment and tax law require.

Free-tour bookings: 2 years. Website enquiries: 2 years after they're closed. App notifications: 12 months. Sign-in records: up to 24 months. These are deleted automatically.

Every page checks who you are and what you may see, and the database checks again. Changes are recorded in a history. Files such as certificates and payslips are private and open only through short-lived links.

If a data breach could cause you harm, we will tell the Personal Data Protection Commissioner and you as the law requires.

You can ask for a copy of your data, ask us to correct it, withdraw consent, ask us to stop using it for a purpose, or ask us to remove it. You can also download your data yourself.

Signed in: open the menu → Privacy & my data. Not signed in: WhatsApp or email us using the details below. We reply within 21 days.

If you're not happy with our answer, you can complain to the Personal Data Protection Department (Jabatan Perlindungan Data Peribadi), pdp.gov.my.

The website uses a few cookies it needs to work: your sign-in, your shopping cart, your language (English or Bahasa Melayu) and your cookie choice.

Only if you tap Accept on the cookie message, we also use Google Analytics and Meta Pixel to count visits and see which pages and ads bring families to us. They record things like the pages you open and your device type, not your name or what you type into our forms. Google and Meta process this data under their own privacy policies and may handle it outside Malaysia.

You can change your mind at any time with "Cookie settings" at the bottom of every page. If you say no, nothing is tracked and the website works the same.

Maps load from Google only when you tap "Show the map".

FY Brothers Badminton Academy (SSM 003443470-P). D-30(3), Jalan Lengkuas D16/D, Ken Rimba, Seksyen 16,, 40200 Shah Alam, Selangor. WhatsApp 016-305 0656, fy.brothersba@gmail.com.