Last updated 1 November 2026
Effective date: 1 November 2026
Laundrix Computer Programming Services is responsible for the personal information processed for MULAY’s platform operations.
Business address: Tacloban City, Philippines (the full registered address is given on request by email)
Privacy contact and Data Protection Officer: the owner of Laundrix Computer Programming Services
Email: support@mulaysport.com
This Notice explains our intended data practices. It must be read with any specific notice presented when collecting health information, identity documents, or information concerning a child.
Depending on the features you use, information may include:
We do not receive your Google or Facebook password through the normal authorised sign-in process.
Health information and certain identity and age information receive additional protection. Collecting them requires an appropriate basis under the rules for sensitive personal information; accepting general website terms is not a substitute for specific consent where required. (Data Privacy Act of 2012, Republic Act No. 10173, Section 13.)
We process information for defined purposes such as:
The applicable basis may include consent, performance of a contract, compliance with law, or another lawful basis appropriate to the particular processing. Optional publicity and marketing permissions are handled separately.
We do not rely on a single blanket consent for every use.
Information is disclosed only as appropriate to the purpose, including to:
Event organisers and coaches. They receive information reasonably necessary to administer their own event. Contact, guardian, pickup, or health information must be restricted to persons with a legitimate operational need.
Other members. A public or member-directory profile is optional. Attendance and reliability records are not made public through that directory.
Posts in Moments. A post you set to Public, with your name, profile picture and any pictures, can be seen by anyone, including people who are not signed in. A post set to Only me is visible only to you and to MULAY administrators who review reports. Members under 19 can post only to Only me.
Messages. Private messages are visible to the two members in the chat. Group chats for a game, tournament, clinic or club are visible to the host and the members who joined or follow. MULAY administrators do not read chats; they see only a message that a member reports. Messages may be kept for as long as needed for safety and dispute handling, and are removed with your account where the law allows.
Profile pictures and player lists. Adult members (19 and above) may upload a profile picture. If you keep the option on in My profile, other signed-in members can see your name, picture, position, level and club in the player list of a game, clinic or tournament you joined. Visitors who are not signed in see only a count. You can turn this off or remove your picture at any time. Members under 19 and children are never listed.
Shop orders. When you place an order, your delivery name, mobile number and address are shared only with the seller of that order, so the parcel can be delivered. Sellers must use them for that delivery only. MULAY keeps order records for dispute handling, tax and accounting, and removes personal details where the law allows.
Authorised personnel and service providers. Relevant personnel and contracted providers may process information for hosting, authentication, communications, payments, security, and support, subject to appropriate obligations.
Authorities and professional advisers. Disclosure may occur where lawfully required or necessary for a legitimate investigation, emergency, or legal claim.
Provider and hosting details: Render (website hosting, Singapore); Neon (database, Singapore); Resend (email delivery, Tokyo); Google and Facebook (sign-in, only if you choose them); ImprovMX (forwards messages sent to our support email address); GitHub (encrypted daily backups, United States); and PayMongo (online payment of platform fees, when we switch it on, Philippines). Some of these providers process information outside the Philippines, in Singapore, Japan and the United States. We use them under their service terms and only for the purposes in this Notice.
Independent hosts may have their own responsibilities as personal information controllers for information they collect or use for their events. Their responsibilities do not remove MULAY’s obligations for its own processing.
We do not sell personal information.
Children do not create independent accounts under this policy. An authorised parent or guardian manages a minor’s registration.
We request only information reasonably necessary for the activity and relevant safeguarding requirements. Child health, emergency, guardian, and pickup details are not intended for public display.
Separate permission is sought where required for publication of an identifiable child’s photograph, video, or promotional material.
A guardian may contact us to review or correct information concerning the child, subject to appropriate verification and applicable rights.
Players ordinarily pay hosts directly. Payment information supplied directly to a host is also subject to that host’s lawful handling responsibilities.
For platform fees, the identified payment provider handles the payment process. MULAY may retain transaction references and related administrative records necessary for accounting, support, or disputes.
We will not request a payment-provider password, PIN, or one-time password.
Tournament identity and age documents must be collected only for an identified verification purpose and made accessible only to authorised recipients. Publication of such documents is prohibited.
The specific upload notice must explain the recipient, purpose, required fields, security arrangements, and retention period before submission.
We use organisational, physical, and technical safeguards appropriate to the information and risks involved. These should include proportionate access restrictions, staff responsibilities, secure processing arrangements, and incident-response procedures.
No system can promise absolute security.
We investigate suspected personal data breaches and make notifications to the National Privacy Commission and affected persons when required by the applicable notification criteria and deadlines. (See the Implementing Rules and Regulations of the Data Privacy Act.)
Information is retained only for as long as reasonably necessary for its stated purpose, an applicable legal obligation, or the establishment, exercise, or defence of a legitimate claim.
MULAY keeps the following retention schedule, which covers at least:
Retention periods at MULAY:
A complaint or legal hold may justify retaining specific records longer. Access must remain restricted, and retention must not become indefinite merely because a dispute is conceivable.
Subject to applicable conditions, you may request information about processing, access, correction, objection, withdrawal of consent, erasure or blocking, and data portability where applicable. You may also seek the remedies available under law.
Withdrawal of consent applies prospectively and does not automatically invalidate processing already lawfully undertaken. Some requested features may become unavailable when necessary information can no longer be processed.
Contact support@mulaysport.com to exercise your rights. You may also complain to the National Privacy Commission. Guidance is published by the National Privacy Commission at privacy.gov.ph.
We use a secure sign-in cookie, kept for up to a year and renewed when you open MULAY, so you stay signed in until you sign out. We also use security cookies that protect forms, and small items stored in your browser: whether you closed the install card, when your sign-in was last renewed, and drafts of forms you are filling in (kept only in that browser tab). The app saves an offline page on your device. We do not use advertising or analytics trackers. Ads shown on MULAY are placed by us, and we count ad clicks in total without recording who clicked. Non-essential tracking must be identified and managed appropriately rather than implied by this Notice.
Material changes will be communicated through an appropriate notice. A change to this Notice does not itself authorise an incompatible new use of existing information.
Privacy contact: support@mulaysport.com