Privacy

How MYFP protects players

Plain-language summary first; the details follow.

Every child's profile starts private. Only guardians decide what anyone else sees.
Academies can invite a player, but can never take over their identity.
Guardians can download everything or withdraw consent at any time.

Version 2026-09-24. Written to follow Malaysia's Personal Data Protection Act 2010 (PDPA). This is a product policy, not legal advice; have counsel review it before public launch.

Whose data this is

Most players here are children. A parent or legal guardian creates and controls each player's profile. Players cannot create their own accounts.

What we hold

Name, date of birth, position and playing details you enter; the team memberships, match results, statistics, training attendance, coach assessments, goals and achievements that come from real activity; photos you upload; and audit records of who changed what.

Who can see it

Every profile starts fully private to guardians. You choose, field by field, what is public, visible to signed-in users, or visible to the player's organisation. Coaches and academy staff see a player only while the player is on their team. Nothing is ever shown publicly unless you switch it on.

Your rights

Guardians can, from the player's page: download everything we hold as a file, change every visibility setting, and withdraw consent. Withdrawing consent makes the whole profile private immediately. To have a profile deleted, contact us and we will remove it.

Where it is kept

In a private database on our own server, backed up nightly. We do not sell data and do not use it for advertising.

Staff and organisations

An organisation can only add staff by invitation, and the invited person must accept. Verification and match records are logged, and result corrections require a written reason.