Privacy Policy

Section 01Who this Policy covers

This Policy applies to golfers who use the My Golf app or website, and to golf-course staff who use the Service to manage tee sheets, bookings and member scores. Where a golf course uses the Service to manage its own members, that course is a separate controller of the data it enters — its own privacy notice applies to those activities.

Section 02Data you give us

Account & profile

When you register or sign in we collect your name, and depending on how you sign up: nickname, email address, mobile phone number, gender, profile photo, city, state/region and country. If you sign in with Google, Apple or Facebook we receive a provider account identifier and the basic profile details (name, email, photo) that provider releases to us — we never receive your social-account password. If you register with email and password, your password is stored only as a salted one-way hash.

We also store your membership details where they apply: member code, member type (Basic or Premium), home course and home tee.

Golf & handicap data

The rounds you post — course played, tee, date, holes played, hole-by-hole and total scores — together with the score differentials and Handicap Index we calculate from them, and any Official Handicap Card request and its review status. You may also record the golf clubs and equipment in your bag.

Bookings & payments

Your tee-time bookings (course, date, time, number of players, playing partners you add, buggy/caddie options, notes) and, where you pay in the app, the payment method, amount, currency, transaction reference and any transfer screenshot you upload as proof of payment.

We never receive or store your full card number, CVV, bank password or mobile-wallet PIN. Payments made by KBZPay, MMQR, Wave Money or card are completed with the payment provider or at the course; we see only the reference and status needed to confirm your booking.

Support & correspondence

Messages, enquiries and attachments you send us through the app's Support section or by email, so we can answer you and keep a record of the issue.

Section 03Data we collect automatically

• Device & push token — a Firebase Cloud Messaging registration token for your device, its platform (Android/iOS) and when it was last seen, so we can deliver notifications and remove dead tokens.
• Technical log data — IP address, request time, app version and general device/OS information recorded by our servers, used for security, abuse prevention and debugging.
• Usage & diagnostics — how features are used and crash/error reports, so we can fix faults and improve the app. You can switch this off with the data tracking setting in the app (§14).
• Approximate location — see §8.

Section 04Why we use your data

We do not sell your personal data, and we do not use your health or precise location data for advertising or marketing.

Section 05Our legal grounds

We process your data because it is necessary to perform our agreement with you (running your account, handicap record and bookings); because we have a legitimate interest in keeping the Service secure, accurate and improving it; because you have given consent for optional features (location, health tracking, promotional messages, analytics), which you can withdraw at any time; and where we must comply with a legal obligation. Where consent is the ground, withdrawing it does not affect processing already carried out.

Section 06Who we share data with

• Golf courses you interact with — when you book a tee time or a course records your score, that course's staff can see your name, member details, handicap, contact details and the booking, so they can prepare the starter sheet and check you in.
• Myanmar Golf Federation — your profile, rounds and handicap history for handicap administration and Official Handicap Card review.
• Google / Firebase (Google LLC) — Cloud Messaging for push notifications, and Firestore to mirror live tee-sheet and notification data so the app updates in real time.
• Google, Apple and Facebook — only to verify your sign-in when you choose social login.
• Payment providers and banks — to process and reconcile payments you make in the app.
• Email delivery provider — to send you your data export and service emails.
• Hosting and infrastructure providers — who store and serve the data on our instructions.
• Authorities and advisers — where we are legally required to disclose, or to establish or defend legal claims.

Our service providers act on our instructions under contract and may not use your data for their own purposes.

Section 07What other golfers can see

Some information is visible to others by design:

• Your name, home course, member type and Handicap Index may appear in golfer directories, handicap listings and leaderboards on our website and in the app.
• If you make a booking open to join, your name and the booking details are shown to other golfers who can request to join.
• Players you add to a booking, and staff at that course, can see the booking and who is in the group.

Your email address, phone number and payment details are never shown in these public listings. Contact us if you do not want to appear in a public directory.

Section 08Location & GPS

With your permission, the app uses your device's location to show your position on the course map, measure distances to greens and hazards, and find courses near you. We use location only while you are using those features — we do not track your location in the background and we do not build a location history or profile from it. Distances are approximate: never rely on them for a safety-critical decision. You can revoke location permission at any time in your device settings; the rest of the app will keep working.

Section 09Health & fitness data

If you switch on health tracking, the app records each round as a workout (start time, finish time and distance walked) to Apple Health or Health Connect on your device, with your explicit permission. This data stays on your device under your control unless you separately choose to share it. We do not use health or fitness data for advertising, marketing or profiling, and we do not disclose it to third parties. You can revoke health permission at any time in your device settings.

Section 10Notifications & marketing

We send service notifications you need — booking confirmed or cancelled, join requests, handicap card updates, important system notices. Promotional notifications about course offers are sent only if you leave the promotions setting on. You can turn push notifications and promotional notifications off independently in the app's notification settings, or turn off notifications for My Golf entirely in your device settings.

Section 11Cookies on our website

The mygolf.com.mm website uses only the cookies it needs to work: a session cookie and a security (CSRF) token when you sign in or submit a form. We do not use advertising or cross-site tracking cookies. Blocking essential cookies will stop sign-in and forms from working.

Section 12How long we keep your data

• Account & profile — while your account is active, then deleted or anonymised after you close it (see §15).
• Scores, differentials and handicap history — kept for as long as you hold a handicap record, because a Handicap Index is calculated from your scoring history and MGF may need it to verify a card it has issued.
• Bookings and payment records — kept as long as needed for the booking, dispute handling, accounting and tax requirements.
• In-app notifications — automatically pruned after your notification retention period (30 days by default).
• Device push tokens — removed when your device stops accepting notifications or you sign out.
• Server logs — kept for a short period for security and debugging, then deleted or aggregated.

Section 13Security

Traffic between the app and our servers is encrypted with HTTPS/TLS. Passwords are stored only as salted one-way hashes. Access to member data is restricted by role — course staff can reach only the courses they are assigned to — and administrative actions are logged. No system can be guaranteed completely secure, so please keep your device and login credentials protected and tell us promptly if you think your account has been misused.

Section 14Your rights & choices

Subject to applicable law, you may:

• Access and correct your profile — edit it in the app, or ask us for a copy of the data we hold about you.
• Export your data — request a data export in the app and we will email you a spreadsheet of your playing history.
• Delete your account and data — see §15.
• Object or restrict — ask us to stop or limit a particular use of your data.
• Withdraw consent — turn off push notifications, promotional notifications or data tracking (usage analytics) in the app's settings, and revoke location or health permission in your device settings.
• Complain — contact us first and we will try to resolve it; you may also complain to the data-protection authority where you live.

We will respond to a rights request within 30 days. We may need to verify your identity before acting, and we may keep data we are legally required to retain.

Section 15Deleting your account

You can ask us to delete your My Golf account at any time:

• In the app — open Settings → Account → Delete account and confirm.
• By email — write to support@mygolf.com.mm from the email address on your account, asking us to delete it.

When we action the request we delete your profile, profile photo, device tokens, notifications, equipment list and app preferences. Booking and payment records, and score records that MGF must keep to support a handicap it has certified, are retained where the law or MGF's handicap rules require and are then de-identified so they are no longer linked to you. Deletion is completed within 30 days, apart from copies in secure backups which age out on our normal backup cycle. Deleting the app from your phone on its own does not delete your account.

Section 16Children

The Service is not directed at children under 13. You must be at least 13 (or have a parent or guardian's consent) to hold an account. Junior golfers' records are entered by a parent, guardian or club official. If you believe a child has given us personal data without the required consent, contact us and we will delete it.

Section 17Where your data is processed

We are based in Myanmar, and some of our service providers (for example Google/Firebase and our email provider) process data on servers outside Myanmar. Where data is transferred across borders we take reasonable steps to see that it remains protected to the standard described in this Policy, including through contractual safeguards with those providers.

Section 18Changes to this Policy

We may update this Policy as the Service develops or the law changes. The “Last updated” date above always shows the current version. If a change materially affects how we use your data we will tell you in the app or by email before it takes effect. Continued use of the Service after a change means you accept the updated Policy.

Section 19Contact us

For any privacy question, or to exercise the rights in §14:

Organisation

Myanmar Golf Federation — My Golf app

Address

[MGF office address, Yangon, Myanmar]

Email

support@mygolf.com.mm Privacy enquiries, data export, account deletion and general support

Website

mygolf.com.mm

You can also reach us through the Support section inside the app.