Privacy

When you book with us we collect your name, your WhatsApp number and, if you give one, your email. Alongside that we store the booking itself — court or class, date, time, party size and price — plus the payment status and order id that Midtrans returns to us.

We never see or store your card number, PIN or OTP. All payment data is handled by Midtrans. Your card details never touch our servers.

To confirm and manage your booking, to send you the confirmation on WhatsApp, and to contact you if something about your slot changes. Nothing else — we do not sell or share your details, and we run no advertising trackers.

An account is optional — you can book as a guest, exactly as before, and we will never make you sign in to do it. If you do create one, it stores your name, your WhatsApp number and, only if you add them, an email address, a password (stored scrambled, never in plain text) and a Google sign-in connection. It also stores your notification preferences and the link between you and the bookings made under your number.

We use it for three things and nothing else: to show you your bookings, to let you cancel one yourself, and to send the WhatsApp reminders you switched on. We do not sell or share it, and we do not send you marketing unless you ask us to.

Signing in sends a six-digit code to your WhatsApp. We store only a scrambled copy of that code, never the code itself, and the code stops working after five minutes. Sign-in codes and emailed links are deleted within 24 hours of expiring — automatically, whether or not you used them. A signed-in session lasts up to 90 days and is then deleted; signing out deletes it immediately.

If you sign in with Google, we receive your email address, your name and a stable account id from Google, and nothing else. We get no access to Gmail, Drive, your contacts or anything else in your Google account, and we hold no token that would let us reach it later.

Account email — confirming an address and resetting a password — is sent through Resend, a third-party email provider who processes the message on our behalf. That is the only email we send. Booking confirmations and reminders go over WhatsApp, and we send no marketing email.

You can delete your account yourself, at any time, from Account → Delete my account. It is immediate and permanent — there is no grace period and no hidden copy.

Your account, sign-in methods and preferences are deleted immediately and permanently. Your past bookings stay in our accounting records (name, number and amount), because we’re required to keep them — but they’re no longer connected to an account.

Payments are processed by Midtrans (PT Midtrans). Their own privacy terms apply to the payment step. We receive only the outcome — paid, pending or failed — and the order reference.

We keep booking records for as long as we need them to run the club and meet our accounting obligations, then reduce them to the minimum.

This site runs on Vercel and our database is hosted on Neon. Both operate outside Indonesia. Under UU No. 27/2022 on Personal Data Protection (UU PDP), making a booking constitutes your consent to that cross-border transfer for the purpose of delivering the service you asked for.

We apply data minimisation: we collect only the fields listed above and nothing more. To be plain about it — this is documented and minimised, not locally resident. We do not claim your data stays in Indonesia.

You can ask us to correct or delete your details at any time. Message us on WhatsApp and we will action it.

Essential cookies only — the staff sign-in session and its CSRF protection, your own sign-in session if you have an account, and a short-lived cookie that protects the Google sign-in step. There are no third-party advertising or analytics trackers on this site.

Reach us on WhatsApp for any question about your data, or read our Terms.