Privacy Policy
Effective date: 22 June 2026 Last updated: 22 June 2026
This Privacy Policy explains how Debate Arena (https://debate-arena.example) collects, uses, and protects your personal data, in line with the Personal Data Protection Act 2010 (Malaysia) ("PDPA"). It forms part of our Terms of Service. For any privacy request, contact support@debate-arena.example.
This document also serves as our PDPA Privacy Notice. By using the Service, you consent to the processing of your personal data as described here.
1. Who is responsible for your data
The data user (controller) is the administrator of Debate Arena. All privacy correspondence should be sent to support@debate-arena.example.
2. What we collect
| Category | Examples | Why |
|---|---|---|
| Account data | Email address, username, date of birth | Create your account, verify age, log you in |
| Authentication data | One-time passcodes, login session identifiers | Securely sign you in and keep you signed in |
| Content data | Debate topics, comments, votes, anonymous flags, reports | Operate the core debate features |
| Transaction data | Token packs purchased, amounts, order references, status | Credit tokens and keep purchase records |
| Technical data | IP address, device/browser type, timestamps, log data | Security, abuse prevention, troubleshooting |
| Usage data | Pages viewed, actions taken | Improve and maintain the Service |
We do not collect or store your full payment card details — those are handled by our payment provider (the Merchant of Record).
3. How we use your data
We process your personal data to:
- create and manage your account and authenticate you;
- provide the debate, voting, and token features;
- process token purchases and keep billing records;
- moderate content and enforce our Disclaimer / Content Policy, including automated filtering and handling reports;
- protect the security and integrity of the Service and prevent fraud and abuse;
- communicate with you about your account or important changes; and
- comply with legal obligations under Malaysian law.
4. Legal basis and consent
Under the PDPA, we process your data based on your consent (given when you use the Service) and where processing is necessary to perform our contract with you, to comply with the law, or for our legitimate operation of the Service.
5. Disclosure of your data
We do not sell your personal data. We may share it with:
- Service providers who help us operate, such as our hosting, email, payment, and analytics providers, under appropriate confidentiality obligations;
- Authorities and third parties where required by Malaysian law, valid legal process, or to protect the rights, property, or safety of Debate Arena, our users, or the public.
Some providers may process data outside Malaysia. Where we transfer data abroad, we take reasonable steps to ensure it is protected to a standard consistent with the PDPA.
6. Anonymous posts
Choosing to post "anonymously" only hides your username from other users. We still associate the post with your account internally, and it may be disclosed where required by law. Anonymity toward other users is not anonymity toward us or the authorities.
7. Data retention
We keep personal data only as long as necessary for the purposes above, or as required by law (for example, transaction records for tax and accounting). When data is no longer needed, we delete or anonymise it. Inactive accounts may be deactivated and later removed.
8. Security
We use reasonable technical and organisational measures to protect your data (for example, HTTP-only session cookies, hashed one-time passcodes, and access controls). No system is perfectly secure; we cannot guarantee absolute security.
9. Your PDPA rights
Subject to the PDPA, you may:
- access the personal data we hold about you;
- request correction of inaccurate or incomplete data;
- withdraw consent to processing (this may mean you can no longer use the Service);
- limit processing for direct marketing; and
- request deletion of your account and associated personal data.
To exercise any right, email support@debate-arena.example. We may need to verify your identity before acting, and we will respond within the time required by the PDPA.
10. Cookies
We use cookies and similar technologies as described in our Cookie Policy.
11. Children
The Service is not intended for anyone under 18. We do not knowingly collect data from minors. If you believe a minor has provided us data, contact support@debate-arena.example and we will delete it.
12. Changes to this Policy
We may update this Policy from time to time. The "Last updated" date will change, and material changes will be notified where appropriate.
13. Governing law
This Policy is governed by the laws of Malaysia, in particular the PDPA, and is subject to the exclusive jurisdiction of the Malaysian courts.
14. Contact
Privacy questions or requests? Email support@debate-arena.example.