Event Organizer Privacy Policy

TicketCARE is committed to upholding the principles of good data protection practice. Protecting your privacy is important to us, and we strive to keep all information relating to you confidential under this statement and the Personal Data Protection Act 2010 ("PDPA") of Malaysia. As an online ticketing software provider, you, the Event Organizer, have contracted us to deliver online event ticketing services. Therefore, TicketCARE is the Data Controller responsible for the handling and safe and confidential storage of your personal data (your account and account users).

1. What Personal Data Do We Collect?

We collect personal information that you voluntarily provide to us and information automatically collected from your web session. If you create user accounts for individuals associated with your event, you must ensure you have their consent to provide us with their personal data.

Information you provide:

User's full name
Email
Contact number
Business/Organization name
Business registration number
Business/Organization address
TIN number and Taxpayer Information (for applicable Event Organizers)
Web address and social media pages (Facebook, Instagram, etc.)
Business bank account details (if required for ticket settlement).

Information we automatically collect:

IP address
Operating system
Browser type
Device type
Cookies.

2. How Do We Use Your Personal Data?

We use your personal data for the following purposes:

To enable us to deliver the TicketCARE service as per the Terms of Service and to keep you notified of system updates and new features.
To enable the creation of a TicketCARE account.
To set up users on your account and allow them access to the TicketCARE system.
To send you and your nominated users emails regarding your event, account, ticket settlement, or customer queries.
To identify you as a user and your permission level and TicketCARE account should you contact TicketCARE for support or assistance.
To access your bank account details to process ticket settlement if using TicketCARE merchant services.
To process card payments for sundry extras (e.g., event cancellations, stock orders, equipment hire) and arrange delivery.
To provide legally reportable information to Government agencies.
To provide online webinars about the TicketCARE system or new features.
To perform quality assurance, sales, or other business analyses.
For system security, client support, and site analytics, including collecting your IP address, operating system, and browser type. This statistical data cannot be used to identify a user.

Our legal basis for processing your personal data includes:

Performance of a contract (e.g., provision of online event ticketing services).
Legitimate interest (e.g., storage of IP Addresses for risk management, use of Cookies for platform progression).

3. Consequences of Not Providing Personal Data

While you may browse our website without providing personal data (other than automatically collected data), specific personal data is necessary to use our services, facilitate your TicketCARE account, and comply with our terms and conditions. TicketCARE will only collect and process the minimum data required to deliver our services or meet legal requirements. If you do not wish to provide the necessary personal data, we cannot offer our services to you.

TicketCARE does not share or sell client contact details to third parties unless stipulated in this Privacy Policy. TicketCARE will only contact you regarding the contract and your use of the TicketCARE system.

We may share your personal data with:

Sub-Processors: We may share Event Organizer's personal data with our processing partners contracted to assist TicketCARE in delivering our service. TicketCARE is responsible to ensure any partners are compliant with data privacy law and ensure the safety and confidentiality of your personal data.
Law Enforcement Agencies: Where necessary, to comply with legal obligations, protect our legitimate interests, or enforce our terms of service.
Customers: TicketCARE will not share your personal contact details with your ticket-buying customers unless you have provided written permission. Customers may contact you via the 'Manage my booking' portal, and we forward their message to your nominated email address.
New Owners (Business Transfers): If we undergo a sale, merger, acquisition, or other business restructuring, personal data may be transferred to the new owner or relevant third parties. We will ensure such transfers comply with data protection laws and that the new owner uses your data only for the same purposes outlined in this policy, unless you are informed otherwise. You will be notified if required by law.

5. Marketing Activities

TicketCARE may contact you to provide updates on our services and the TicketCARE platform. These communications are sent under 'delivery of a contract' to ensure you are updated with any changes. Should you wish to opt out of these communications, you can do so via the email received or by emailing us at support@ticketcare.my.

We use online advertising and remarketing services, including Google Ads and Facebook Ads, to show relevant TicketCARE advertisements to users who have previously visited our website. These services use cookies and similar tracking technologies to collect information about your browsing activity to deliver targeted advertisements based on your interests. You can opt out of personalized advertising through the settings provided by Google and Facebook or manage/disable cookies through your browser settings.

6. How Long Do We Keep Your Personal Data?

TicketCARE will keep your personal data for no longer than is reasonably necessary. An account administrator can delete a user and their personal data anytime. If an account has been dormant for three years (i.e., no logins), it will be deleted along with all personal and event data, unless an Event Organizer with Administrative access requests in writing that an account remains active. If you use TicketCARE merchant services, financial data (used for ticket payouts) may be retained for seven years following the financial year in which a payment was processed. Accounts can be closed by submitting a written request from an account Administrator. However, if there is event data within an account (e.g., bookings), Personal Data and Event Data will be retained for twenty four months to assist with booking queries, finance reporting, or charge disputes.

7. Your Rights and Your Personal Data

Under the Personal Data Protection Act 2010 (PDPA) and general data protection principles, you have the following rights regarding your personal data:

Right to be informed of why your data is being processed (as outlined in this Policy).
Right of access to the personal data held about you by TicketCARE.
Right to rectification if incorrect data is held.
Right to erasure (may be subject to the booking contract and retention periods).
Right to object to processing or withdraw consent where provided.
Right to withdraw consent when we rely on consent to process your personal data.

To exercise your rights, you must contact the Event Organizer (the Data Controller), who is responsible for how your personal data is used. TicketCARE can provide you with contact details for the Event Organizer or will forward your request on your behalf. Please note that it is obligatory for us to process certain personal data, without which we may not be able to process your orders or transactions.

8. Further Processing

TicketCARE will not process your personal data beyond this booking and the activities outlined under 'How do we use your personal data?'.

9. Other Websites

Our website may contain links to other websites (e.g., Event Organizer websites, social media pages, payment processors). This Data Privacy Policy only applies to the TicketCARE website, so when you link to other websites, you should read their privacy policies. We are not responsible for the content or privacy practices of other websites or services.

10. Children’s Personal Data

We do not knowingly collect personal data from children under thirteen (13). If you are under thirteen (13), please do not enter any personal data online at TicketCARE. We encourage parents and legal guardians to monitor their children's Internet usage and to help enforce our Privacy Policy by instructing their children never to provide personal data to TicketCARE or any other online service without their permission.

If you believe a child under 13 has provided their personal data to TicketCARE, please contact us, and we will try to delete this information.

11. International Data Protection Laws

As TicketCARE is an international company, your personal information and other data collected about you may be transferred, stored, and processed in any country where our servers are located (e.g., Singapore, US) or where our sub-processors' services or servers are located (e.g., US, EU). By accessing or using the TicketCARE service, you specifically acknowledge and agree that this information may be transferred outside of Malaysia, and that these countries’ data protection laws may differ from Malaysia’s. Your use of the TicketCARE service constitutes your consent to such transfers.

When personal data is transferred, we ensure that appropriate safeguards are in place to protect your data under Malaysian and worldwide data protection laws. For transfers to countries without an adequacy decision, we will implement appropriate safeguards.

12. Updates to This Policy

This Privacy Policy is regularly reviewed to ensure ongoing compliance with data privacy regulations. Any variations become effective upon posting to our website. We encourage you to check this policy periodically for changes.

13. Security

While no data transmission over the Internet can be guaranteed to be 100% safe, secure, or error-free, we make reasonable efforts to ensure the security of your information on our systems. We use Secure Server Software (SSL) and firewalls to protect your information from unauthorized access, disclosure, alteration, or destruction. When you submit credit card details, we use industry-standard PCI DSS technology. However, this is not an ironclad 100% fool-proof protection. You agree that we shall have no liability to you in the event of a breach by a third-party hacker or mischief-maker. If we learn of a security system breach, we shall notify you so you can take appropriate protective steps. By using our websites or providing personal information, you agree that we can communicate with you electronically regarding security, privacy, and administrative issues.

14. Contact Details

To exercise any relevant rights, or for queries or complaints regarding TicketCARE and the handling of your personal data, please contact us at support@ticketcare.my

Depending on your query, we may need to forward your request to the Event Organizer, who is the Data Controller and responsible for handling your personal data.

15. How to Make a Complaint

If you are unhappy with how TicketCARE has processed your personal data, you may first contact us using the contact details above. If you remain dissatisfied, you can apply directly to the Personal Data Protection Commissioner or other relevant Malaysian data protection authority for a decision.

All the important legal and security stuff, right here.