Privacy Policy

Last updated: August 2026

MyBola ("we", "our", or "us") operates a business management platform accessible via the MyBola app. This policy describes how we collect, use, and protect your information when you use our services.

1. Information We Collect

• Account information: Name, email address, and business details you provide when registering.
• Phone number (optional): You may provide a phone number so we can match your account to membership records an academy has already created for you. It is not required — you can use the app without one, and you can add, change, or remove it at any time in the app's settings.
• Messaging data: Messages sent and received through WhatsApp, Messenger, or Instagram when you connect those channels to MyBola.
• Usage data: Log data, device information, and how you interact with the app.
• Payment information: Transaction records processed through connected payment providers (we do not store raw card data).

2. How We Use Your Information

• To provide and operate the MyBola platform.
• To route and display messages from connected social channels to your business dashboard.
• To process bookings, billing, and attendance records for your business.
• To send service-related notifications.
• To improve and debug the platform.

3. Messaging Channels (WhatsApp, Messenger, Instagram)

When you connect a WhatsApp Business number, Facebook Page, or Instagram professional account, MyBola receives inbound messages via Meta's Webhooks API. This data is stored in your private business workspace and is not shared with other businesses or used for advertising purposes.

4. Payments

Payments for bills and bookings are processed by Fiuu (Razer Merchant Services), a licensed Malaysian payment gateway. When you start a payment, MyBola sends Fiuu your name, email address, and phone number if you have provided one, together with the amount and a short description of what is being paid for. Fiuu uses this information to process the transaction and to identify the payment to you and to the business. You complete the payment on Fiuu's own page — MyBola never receives or stores your card, wallet, or banking credentials.

Once a payment succeeds, we email a PDF receipt to the email address on your account.

5. Data Sharing

We do not sell your data. We share data only with:

• Service providers who operate our infrastructure (Google Firebase / Google Cloud).
• Meta Platforms, as required by the WhatsApp Business API and Messenger Platform agreements.
• Fiuu (Razer Merchant Services), to process payments you initiate (see Section 4).
• Legal authorities when required by applicable law.

6. Data Retention

We retain your data for as long as your account is active. You may request deletion at any time (see Section 9).

7. Security

All data is stored on Google Cloud infrastructure in the asia-southeast1 region. Access is restricted by Firebase Security Rules and authenticated user sessions.

8. Cookies

The MyBola web app uses session cookies required for authentication. We do not use tracking or advertising cookies.

9. Your Rights & Data Deletion

You may request access to, correction of, or deletion of your personal data at any time by emailing neil@mybola-admin.com or by using the data deletion form at mybola-admin.com/data-deletion.

10. Changes to This Policy

We will update this page when we make material changes and note the new date above.

11. Contact

For privacy questions, contact us at neil@mybola-admin.com.