PRIVACY & PDPA NOTICE
This notice explains what personal data the Johor Southern Tigers collect through this website, why we collect it, and what you can ask us to do with it. It covers ticket purchases, merchandise orders, fan club sign-ups and the club newsletter.
What we collect, and why
Buying a ticket collects your name, email address and phone number. We use them to process the order, send your e-ticket, and admit you at the venue.
A merchandise order also collects your delivery address, which we use to ship your order and for nothing else.
Joining the fan club records your name, email address, phone number and membership tier, so we can issue your membership and remind you when it is due for renewal.
Signing up for club news records your email address, and your phone number only if you choose to give it.
Scanning a ticket at the gate records the time, the outcome of the scan, and which staff device scanned it. This is how a ticket cannot be used twice, and how we settle a disagreement at the turnstile.
Our servers hold your IP address briefly to limit abuse, such as automated attempts to flood checkout or the sign-up form. It is not used to identify you or to build a profile.
We collect all of this from you directly, through the forms on this site. We do not buy personal data or obtain it from anyone else.
The fields marked required on a form are obligatory: without them we cannot process your order, deliver your e-ticket, ship your goods or issue your membership, and the form will not submit.
Everything else is voluntary. The phone number on a newsletter sign-up and the marketing opt-in can both be left blank, and your order or sign-up will go through exactly the same.
Payments
Payments are handled by Billplz, our payment gateway. Your card and banking details are entered on their systems and never reach ours — we keep only the payment reference and the amount collected.
Who else sees your data
Club email — order confirmations, e-tickets and newsletters — is delivered through an email service provider, Brevo. Your address is passed to them for that purpose alone.
We do not sell your personal data, and we do not share it for anyone else's marketing.
Marketing is a separate choice
We send club news only to people who have asked for it. Buying a ticket or a shirt does not add you to the mailing list: the opt-in is its own box, unticked by default, and we record when you ticked it.
Every marketing email carries an unsubscribe link that works in one click. When you unsubscribe we keep a permanent record of that decision, so a later sign-up somewhere else cannot quietly put you back on the list.
Cookies
This site sets four cookies and no others: jst_visitor holds your place in the queue during a busy on-sale, jst-locale remembers the language you chose, jst_customer_session keeps a signed-in customer session, and jst_admin_session keeps club staff signed in to the admin area.
None of them follow you between sites, and none are used for advertising or analytics. There is no tracking on this site.
How long we keep it
Order records are kept for as long as we need them for the event itself and for the tax and accounting records the club is required to hold.
Fan club records are kept after a membership lapses so we can offer you a renewal. Unsubscribe records are kept indefinitely, for the reason given above.
If you ask us to save your delivery details for next time, we keep them until you remove them on your account page.
Your rights under the PDPA
The Personal Data Protection Act 2010 gives you the right to ask for a copy of the personal data we hold about you, to have it corrected if it is wrong, and to withdraw a consent you have given.
To make a request, or to ask anything in this notice, contact the club: Contact
To stop receiving club news, use the unsubscribe link in any club email.