Applies to: the Hala mobile app and the Hala website at hala.my. Covers: booking a space (a court or a venue space) and booking a class. Last updated: 23 August 2026

1. Who we are

Hala is run by Hala Sport Sdn Bhd, a private limited company incorporated in Malaysia on 15 February 2023.

In Malaysian data protection law we are the data controller for the personal data described here. That means we decide what is collected and why, and we are answerable for it.

This document is our personal data protection notice under section 7 of the Personal Data Protection Act 2010.

You may see a different support email address on a few screens inside the app. We are correcting them. The address to use is hello@hala.my.

This notice also replaces the older privacy text still shown inside the app under Account Settings. That screen is out of date and is being updated. Where the two differ, this document is the one that applies.

2. What we collect, and why

We have split this into what you type in yourself and what the app records without being asked. This is our best account of everything we collect. If we find we have missed something, we will add it here and say so.

2.1 What you give us

When you create an account

All four are required. You cannot create an account without them.

Later, if you choose to — on your profile screen

You can add a Facebook handle, an Instagram handle, a WhatsApp number, a short bio and a profile photo. None of these are required. Leave them blank and the app works exactly the same.

The same screen also lets you edit the name you gave at sign-up. That one is not optional — the app will not let you save an empty name.

To let you set a profile photo, the app asks for permission to use your camera or your photo library. It only reads the one image you pick. See section 2.6.

When you make a booking

We record which venue, which court, space or class, the date and time, the price of each slot, any equipment you rent with the booking, and the status of the booking — for example confirmed or cancelled.

When you pay

We hold a record of the transaction: what the booking was, the amount, and whether the payment succeeded. We collect payment for a booking on the venue's or operator's behalf and pass it on to them, so handling payment is one of the reasons we process your data. Your card, online-banking or eWallet details are entered on the payment provider's own page — see section 4.

2.2 What the app records automatically

Server records. Like any online service, our servers and the companies that host them record technical details of each request your app or browser makes: the IP address it came from, the time, and what was asked for. This is normal operational logging and we use it to keep the service running and to investigate problems.

Analytics. The Hala app installs no third-party analytics or crash-reporting kit — there is no Mixpanel, no Amplitude, no Segment, no Sentry and no Crashlytics. One exception we have to be straight about: the Android build of the app links Google Analytics for Firebase. Where that library is present it reports app-instance identifiers, sessions and screen views to Google automatically. The iPhone build has it switched off. Separately, the parts of Firebase we use for push notifications register an installation identifier with Google for every install of the app, on both platforms.

2.3 Where we get your information from

Most of what we hold comes from you, typed into the app. We also receive:

• From the venue or operator you booked with — confirmation that a booking stands, or that it has been cancelled or changed.
• From the payment provider — whether your payment succeeded, and a reference for it. Not your card number.
• From your phone's operating system — the push token and the device value described in section 2.2, issued by Apple or Google rather than typed by you.

We do not buy personal data, and we do not take it from data brokers, social networks or public listings.

2.4 What we do not collect

• We never ask you for a date of birth or your gender. Neither appears on the sign-up form or the profile screen.
• No card, bank or eWallet details are entered into Hala. You type them on the payment provider's own page, and Hala's app never reads or stores them.

2.5 Usage information

We look at aggregate measures, such as how many people use Hala on a given day, to decide what to build next.

This information is held anonymously. It is not attached to you or to your account. The same goes for any demographic information we use to make product decisions — it is held only in anonymous form.

We do not use any of it for advertising targeting. We do not sell it and we do not share it with advertisers.

2.6 Permissions the app asks for

• Camera and photo library. Asked for only so you can set a profile photo, and only on iPhone. On Android the app uses the system picker and asks for no permission at all.
• Location. The iPhone app's configuration file declares location access, including background location. There is no location code anywhere in the app and no location library installed, so the app does not read, send or store your location. This is a leftover declaration and it should be removed. The Android app declares no location permission.
• Background activity. The iPhone app declares background fetch and remote notification. The Android app declares internet access, vibration, and permission to restart notifications after your phone reboots. None of these collect personal data.

3. Our legal basis

Under the PDPA we process your personal data because:

• You consented. You gave us your details to open an account and to book.
• We need it to perform our contract with you. We cannot give a venue your booking without your name and a way to contact you.
• We have a legal obligation. For example, keeping the transaction records tax law requires us to keep.

Giving us your name, email address, phone number and password is obligatory — without them we cannot create your account or take a booking. Everything on the profile screen is voluntary and nothing happens if you leave it out.

4. Who we share it with

We do not sell your personal data. We share it only with the organisations below, only for the reason given.

About payments. When you pay, the app opens the payment provider's own page inside a browser window in the app. You type your payment details into their page, not into Hala. Hala's own code never reads or stores your card number, expiry date or security code. How the provider handles what you type is governed by their privacy policy, not this one. Note that we send them your name, email address and booking reference before that page opens, so they can raise the bill.

We may also share personal data where the law requires it — for example a valid order from a court or a regulator.

5. Where your data is processed, and transfers out of Malaysia

Today our servers and database are hosted on Heroku, which is part of Salesforce. We are moving that hosting to Microsoft Azure. That migration is in progress at the time of writing — it is not finished, and Azure is not holding your data yet. We will update this notice when the move is complete.

Both Heroku and Azure are outside Malaysia. So are SiteGround, Google, Apple and Vercel. That means personal data described in this notice is transferred out of Malaysia.

Section 129 of the PDPA, as amended, no longer works from a government whitelist of approved countries. A transfer out of Malaysia now has to rest on a proper legal footing — for example that the receiving country has laws giving substantially similar protection, or that we have taken reasonable precautions such as binding contract terms with the recipient. We are telling you about these transfers here because the law requires that you be told.

6. The website

The Hala website at hala.my is a simple site.

• It sets no cookie.
• It loads no analytics, no advertising pixel and no tracker.
• It does not ask you to log in and has no sign-up form. The buttons that look like contact forms open your own email app or WhatsApp. Nothing is sent to us until you press send yourself.
• It saves the site's own display settings in your browser's local storage. That is the site's content, not information about you.

Three honest technical notes, because a careful reader would want them:

1. The site's host receives your IP address and browser details on every visit, and builds the venue pages you see. That host is outside Malaysia.
2. The site loads its fonts from Google Fonts. That is a request from your browser to Google's servers, which discloses your IP address and browser type to Google. It is not a tracker and it sets no cookie, but it is a third party seeing that you visited.
3. The site fetches its own content — the venue directory and its layout settings — from a hosted database service. That store holds the site's content, not visitor personal data. But your browser makes the request, so that service's servers see your IP address.

A map on the site loads from Google Maps only if a map key has been configured. When it does, Google sees your IP address.

7. How long we keep things

The PDPA's retention principle says personal data must not be kept longer than is necessary for the purpose it was collected for. When it is no longer needed, it should go.

8. Your choices — how to limit what we do

Beyond the formal rights in section 11, here is how you can actually turn things down:

• Push notifications. Turn them off in your phone's own settings, under notifications for the Hala app. We will stop sending them and your bookings still work.
• Optional profile fields. Your Facebook handle, Instagram handle, WhatsApp number, bio and photo are all optional. You can clear any of them at any time on the profile screen, including removing a photo you have already uploaded. Your name is the one field the app will not let you leave empty.
• Marketing email. If we send you marketing, every message carries an unsubscribe link, and you can also email hello@hala.my and tell us to stop. We must stop, and we will. Service messages about a booking you have made are not marketing and will continue while the booking stands.
• Everything else. Email hello@hala.my and tell us what you want us to stop doing. If we cannot run your account without it, we will say so plainly rather than quietly carrying on.

Other people's information. Please do not put someone else's personal details — their phone number, their photo, their name — into your bio or your profile fields without asking them first. If you tell us about another person in an email to support, we will use it only to deal with what you asked us about.

9. Cancellations and refunds

The refund rules for your session are set by the venue or operator you booked with, and we cannot overrule them. They differ from venue to venue.

We should also be straight that Hala applies a rule of its own today. When you cancel in the app, the app tells you that refunds are not given for cancellations caused by “user negligence or oversight”, that a refund from Hala will only be granted where the cause was a failure of the Hala app, and that you must supply proof such as a screenshot.

If you contact us about a cancellation, we will pass your request and the relevant booking details to the venue and follow it up.

None of this removes your rights under Malaysian consumer law, including the Consumer Protection Act 1999, which continue to apply whatever a venue's own policy says.

10. Security — and its limits

What we actually do:

• Traffic between the app and our servers goes over an encrypted connection. Every address the app talks to is HTTPS, and neither the iPhone nor the Android build allows an unencrypted exception.
• Payment card details never touch our systems (section 4).

Three weaknesses we know about, and are fixing. So that you are not asked to sign in every time you open the app, the app saves your email address and your password in its own storage on your device, and re-sends them to sign you in. The password is saved as ordinary text, not scrambled. On an iPhone that storage is included in iCloud and iTunes device backups, so the password can be copied off the phone in a backup; on Android, backups of the app's data are switched off. Separately, the app writes the details of each request it makes — including headers and, on sign-in, the password — to your phone's own device log, and it does this in the released app as well as in test builds. None of this is how it should be. We are saying it rather than letting you assume otherwise, and all three are on the list to fix: sign-in should use a token rather than a stored password, and the logging should be switched off in released builds. In the meantime, do not reuse a password that matters elsewhere.

What we are not going to claim:

• We do not claim your data is perfectly safe. No one can honestly claim that.
• We hold no security certification such as ISO 27001, and we are not saying we do.

If there is a breach. If personal data is lost or exposed, Malaysian law requires us to notify the Personal Data Protection Commissioner as soon as practicable, and in any case within 72 hours, where the breach causes or is likely to cause significant harm. If the breach is likely to cause you significant harm, we must also tell you, without unnecessary delay and within seven days of telling the Commissioner. We will do both.

11. Your rights, and how to use them

Write to hello@hala.my or WhatsApp +60 11-6112 0497. Tell us the name, phone number and email address on your account so we can find it and check the request really came from you.

Asking is free. We do not charge a fee for an access request.

We reply to access and correction requests within 21 days, which is the period the PDPA allows a data controller. For deletion requests we do better: see below.

Deletion

You can ask us to delete your account and the personal data attached to it, and we will carry that out in full. You do not need the app installed and you do not need to be signed in to ask.

There are two ways to ask, and a page that explains it:

1. Email hello@hala.my with the subject "Delete my Hala account".
2. Message us on WhatsApp at +60 11-6112 0497.

The account deletion page at hala.my/delete-account — the route the App Store and Play Store listings point to — explains the process and sends you to one of those two channels. There is no form on it.

Include the name, phone number and email address on the account.

Our timings, as published on hala.my: we acknowledge your request within 2 business days and complete it within 30 days.

What we keep. Transaction and payment records are kept for 7 years for tax and accounting, as set out in section 7. If anything else has to stay, we will tell you what it is and why.

12. Age

Hala is for people aged 18 and over. In Malaysia the age of majority is 18, and a person under 18 generally cannot enter into a binding contract. Accounts, bookings and payments are for adults.

If you are under 18, please do not create an account. An adult can make a booking in their own name and bring you along.

If we learn that an account belongs to someone under 18, we will close it and delete the personal data held on it, except anything we are required by law to keep. If you believe a child has given us personal data, email hello@hala.my and we will deal with it.

13. When and how you get this notice

The PDPA requires us to give you this notice when we first ask you for personal data, and at the latest when we first collect it.

We are not doing that properly yet, and we would rather say so. The sign-up screen in the app does not currently link to this notice or ask you to acknowledge it, and hala.my does not yet publish it. Today it reaches you only through the privacy screen inside the app, which is out of date. That is a gap we are closing:

14. Data protection officer, and registration

The Personal Data Protection (Amendment) Act 2024 requires a Data Protection Officer where an organisation processes the personal data of more than 20,000 people, or sensitive personal data including financial information of more than 10,000 people, or where its activities involve regular and systematic monitoring. Where a DPO is appointed, the Commissioner must be notified within 21 days, the DPO's contact details must be published, and the guidelines require a dedicated email address for the DPO — a general support address will not do.

Until this is settled, questions about your personal data should go to hello@hala.my.

15. Changes to this notice

We will update this notice when what we do changes — and the hosting move in section 5 is one such change already in progress.

When we change something that matters, we will change the date at the top and tell you in the app or by email before it takes effect. We will not quietly widen what we do with your data and hope you do not notice.

16. How to complain

Come to us first. Email hello@hala.my or call +60 11-6112 0497. Tell us what went wrong and we will look into it.

If we do not fix it, you can complain to the Personal Data Protection Commissioner:

Jabatan Perlindungan Data Peribadi (Department of Personal Data Protection) Website: www.pdp.gov.my

You can also take the matter to court. Complaining to us does not remove any other right you have.

Last updated: 23 August 2026

Who we are

Hala is operated by Hala Sport Sdn Bhd, a private limited company incorporated in Malaysia on 15 February 2023.

In this agreement, "Hala", "we", "us" and "our" mean Hala Sport Sdn Bhd. "You" and "your" mean the person using the Hala app or the Hala website.

What this agreement covers

This agreement covers two things:

1. The Hala mobile app, and
2. The Hala website at hala.my.

Together we call these "Hala".

Hala is used to find places to play sport and to book a space at a venue — a court, a pitch, a studio space. Space booking is the service you can complete in the app today.

Class booking is described on the hala.my website. See section 5 for what we can honestly say about it right now.

Any other Hala product runs on its own terms, which you would be asked to accept separately.

1. Agreeing to these terms

You agree to these terms by a positive act, not by looking around.

You agree to them when you tick the box on the sign-up screen to say you accept this agreement and the Privacy Policy, and again each time you confirm a booking. We show you both documents on that screen before you tick.

If you only browse the app or the website — reading venue listings, looking at the directory, seeing what is available — without creating an account or making a booking, the only parts of this agreement that apply to you are section 12 (Using Hala properly) and section 16 (The rest). Browsing is not agreement to a booking contract.

If you do not agree with these terms, please do not create an account or make a booking. You can close your account at any time (see section 13).

The notice we show you before payment

Before you pay, the app shows a refund policy and participant waiver with a tick-box asking you to confirm you have read it.

We should be straight about who wrote that text. As the app is built today, that text is written into the Hala app itself. It is the same for every venue — only the venue's name is dropped into it. It is not supplied by the venue, and it is not specific to the venue or the sport you are booking. It includes a release of liability in favour of the venue covering, in its own words, any form of negligence.

Section 9 explains what that release can and cannot do.

2. Who can use Hala

Hala is for adults. You must be 18 or over to create an account or make a booking.

In Malaysia the age of majority is 18, and a person under 18 generally cannot enter into a binding contract. We are not set up to take bookings for under-18s, and there is no parent or guardian route on Hala at the moment.

If we learn that an account belongs to someone under 18, we will close it. We will refund anything paid for a session that has not happened yet, we will delete the personal data held on that account in line with the Privacy Policy, and we will tell the account holder what we have done. If you think a person under 18 has an account, email hello@hala.my.

You also need to give us information that is true, and keep it up to date.

Booking for someone else. The app does not have a way to book for another person — every booking is made in your own name, with your own contact details. If that changes, we will update this agreement and the Privacy Policy first, and we will tell you.

3. Your account

To book anything you need an account. When you sign up we ask for your full name, email address, phone number and a password.

We send a one-time code to confirm the account is yours. The code is checked against the phone number you registered, and your phone number is also what you enter if you need to reset a forgotten password. So please give us a number you can actually receive messages on and keep it up to date — without it you cannot recover your account.

You are responsible for:

• choosing a password that is not easy to guess, and not reusing one from somewhere else;
• keeping your password to yourself; and
• telling us at hello@hala.my as soon as you think someone else has got into your account.

Please take the "do not reuse a password" point seriously, because of something we would rather tell you than have you discover. To keep you signed in, the app saves your email address and password on your own phone as ordinary readable text rather than in a secure keychain, and on an iPhone that storage is included in device backups. The app also writes technical request details to the phone's own log. The Privacy Policy sets this out in full and says what we are doing about it. It is being fixed. In the meantime, use a password you do not use anywhere else.

If someone uses your account without your permission, tell us quickly and we will help you secure it and sort out what happened. We will not simply treat everything done through your account as if you did it. If you did not authorise something, and you told us as soon as you reasonably could, we will not hold you to it. What we do ask is that you take reasonable care of your password and act promptly when something looks wrong.

4. What Hala is — and who you are actually contracting with

This is the most important section in this agreement. Please read it.

Hala is a platform. We connect people who want to play with the venues, operators and coaches who provide the space and the coaching.

When you make a booking through Hala, two separate contracts exist:

Contract 1 — between you and the venue, operator or coach. This is the contract for the actual session: the court, the pitch, the studio space, the coaching. The venue or operator sets the price, the times, the rules of the premises, and its own cancellation and refund policy. It is responsible for providing what you booked, and for the condition and safety of its premises, its equipment and its staff.

Contract 2 — between you and Hala. This is the contract for the platform itself: showing you what is available, taking your booking, passing it to the venue, collecting payment on the venue's behalf, and giving you a record of your booking in the app.

So: Hala does not own, run or staff the venues, and Hala does not employ the coaches. We are not the supplier of the sporting session. We are the one who arranged it for you.

What that means in practice:

• The venue's or operator's own terms apply to your session, on top of this agreement.
• We do our best to show accurate information about venues, prices and availability, but much of it comes from the venue. If something is wrong, tell us and we will get it fixed.
• Some venue and business listings on the Hala website are there for information only. A listing is not a recommendation, and not every listed place can be booked through Hala.

We are not trying to use this section to make ourselves unaccountable. Where Hala itself gets something wrong — the booking we sent through was not the one you made, we took the wrong amount, our system lost your booking — that is ours, and section 11 explains how we deal with it.

5. Making a booking

Space bookings. You pick a sport, then the date and the time of day you want, then a venue, then an available slot on a specific court or space. You can put more than one slot in your cart before you pay. You can also add rental equipment to a booking where the venue offers it — see section 7.

Class bookings.

When is a booking confirmed?

Choosing a slot does not hold it. A booking is confirmed when payment has gone through and the booking shows as confirmed in My Bookings in the app. Until then, the slot can still be taken by someone else.

Very occasionally a slot may turn out not to be available even after you have paid — for example, the venue took a booking on its own system at the same moment, or the venue has to close. If that happens, we will tell you, and you get your money back in full, including any Hala fee.

6. Prices, fees and payment

The price you see before you pay is the price. Prices are in Malaysian Ringgit.

Where the price comes from. The venue, operator or academy sets the price of the court, space or class. Hala does not set it.

Hala's fee. Where Hala charges a booking fee, it is shown to you as a separate line before you pay, so you can see exactly what you are paying and to whom.

How you pay. When you check out, the app opens the payment provider's own page inside a browser window. You enter your payment details there — on Billplz's page, not on a Hala screen. Depending on what the provider offers, that may be a card, an FPX online-banking login or an eWallet.

To create the bill, we send the provider your name, your email address, your Hala user ID, the booking reference, and a description of what you are paying for — the venue, the slots and any equipment you added. The Privacy Policy sets this out.

Hala's own systems never see or store your card number, expiry date or security code. The payment provider handles that, under its own terms and its own security standards.

Getting back to your bookings. When the payment is finished, tap the back arrow at the top of the payment window — the window does not close by itself. Your booking will show in My Bookings once the payment provider has confirmed the payment to us.

Who holds the money. We collect payment for a booking on behalf of the venue or operator, and pass it on to them. Where a refund is due, it usually comes back the same way it went out.

7. Cancellations, refunds and changes

The rules that decide whether you get your money back are mostly the venue's, but not entirely. Hala applies a rule of its own as well. Here is both.

The venue's rules

Each venue, operator or coach sets its own cancellation and refund policy for the session, and policies differ a lot. Some venues refund nothing for a cancellation. Some refund only in specific situations, such as rain stopping play on an uncovered court.

Before you pay, the app shows you a refund policy and waiver and asks you to tick that you have read it. As explained in section 1, that text is currently written by Hala and is the same for every venue. Please read it — but read section 9 too, because a waiver cannot sign away everything just by saying so.

Hala's own rule

We should be straight that Hala applies a rule of its own today. When you cancel a booking in the app, the app tells you that:

• refunds are not given for cancellations caused by user negligence or oversight;
• a refund from Hala will only be granted where the cause was a failure of the Hala app; and
• you must supply proof, such as a screenshot or other documentation, to support the claim.

That is a Hala rule, not a venue rule, and we are writing it here rather than leaving it to appear only in a dialog box at the moment you cancel.

What you can do in the app

You can cancel a booking from My Bookings. Cancelling in the app tells the venue you are not coming. It does not by itself mean you get your money back — that is decided by the rules above.

You cannot move a booking to a different time in the app. There is no reschedule button. If you need to change a session, contact us at hello@hala.my or contact the venue, and we will see what can be done.

What Hala does, and what Hala cannot do

If you have a question or a complaint about a cancellation or a refund, contact us at hello@hala.my and we will route it to the right venue or operator and follow it up with them. We will tell you what they say. We will chase them if they go quiet.

What we cannot do is promise a refund the venue has not agreed to, or overrule the venue's policy, because we are not the party providing the session. We will not pretend otherwise.

Where you always get your money back

• If the venue cancels, or we cancel, and it is not because of something you did, you get your money back in full, including any Hala fee.
• If Hala makes the mistake — we sent the wrong booking, we took the wrong amount, our system lost a booking you paid for — you get your money back in full, including our fee.

Your legal rights are unaffected

Whatever any policy says, Malaysian consumer law still applies. Under the Consumer Protection Act 1999, a supplier of services to a consumer must carry out those services with reasonable care and skill, and those protections apply whatever a contract says to the contrary. If a venue simply does not provide what you paid for, or provides it badly, you may have rights under that Act regardless of its stated refund policy — including the right to bring a claim to the Tribunal for Consumer Claims (see section 15).

Equipment rental

Where the app lets you add rental equipment — a racket or similar — to a booking, the equipment belongs to the venue and the venue's rules apply to it. Please return it in the condition you got it. If you damage or lose it, the venue may charge you for it, and that is between you and the venue.

8. Turning up and behaving at a venue

When you book through Hala, you are a guest of that venue. Please:

• turn up on time, and leave on time so the next players can start;
• follow the venue's rules, and the instructions of its staff and coaches;
• wear appropriate footwear and clothing for the surface and the sport;
• treat the venue's property, equipment and other people with care and respect; and
• do not play while under the influence of alcohol or drugs.

A venue can refuse entry or ask you to leave if you behave in a way that is unsafe, abusive or against its rules. That is the venue's decision to make, and whether you get any money back in that situation is covered by section 7.

If you damage a venue's property, the venue may hold you responsible for it. That is between you and the venue.

No-shows. If you do not turn up, section 7 decides what happens to your money. Repeatedly booking and not turning up may lead us to limit or suspend your account (see section 13).

9. Sport carries risk

Sport is physical. Playing badminton, futsal, padel, pickleball, squash, tennis or anything else carries a real risk of injury: strains, sprains, collisions, falls, and sometimes worse. Outdoor and semi-outdoor courts add weather: heat, rain, wet surfaces.

You know your own body. Please:

• only take part if you are in reasonable condition to do so;
• get medical advice first if you are unsure, or if you have a condition that could be affected;
• tell the venue or coach about anything they need to know to keep you safe;
• warm up, and play within your own ability; and
• stop if something hurts.

Hala does not supervise sessions. We are not present at the venue. We do not assess whether a venue is safe on the day, whether a court is dry, whether a coach is qualified, or whether you are fit to play. Those are matters for the venue, the operator, the coach and you.

About the waiver you tick before paying. Please read it — much of it will apply. But a venue cannot sign away everything just by putting it in a waiver. The waiver the app shows today says the venue and its staff will not be held liable for injury, loss or property damage, including from any form of negligence. Malaysian law is very unlikely to let a venue rely on a term like that where the injury was caused by its own carelessness, whatever you ticked. If something goes wrong at a venue, talk to us before you assume the waiver settles it.

What we will not ask you to give up. Nothing in this agreement asks you to release Hala from responsibility for death or personal injury caused by our own negligence, or from anything else that Malaysian law does not allow us to exclude. We would not be able to enforce such a term anyway, and we are not going to write one.

10. Things you put on Hala

You can add a name, a short bio, social media handles — Facebook, Instagram, a WhatsApp number — and a profile photo to your profile. Everything except your name is optional; leave it blank and the app works exactly the same.

Who can see it today. These details are stored on your account, and they are not currently shown to any other Hala user. There is no player search, there is no way to reach another person's profile, and the buttons that would let someone contact you directly are switched off. If that changes, we will update this agreement and the Privacy Policy before it changes, not after.

Please only post things that are yours to post, and that are decent. Do not post anything that is unlawful, abusive, hateful, sexual, misleading, someone else's private information, or someone else's photo without their permission. Do not impersonate anyone.

You keep ownership of what you post. By posting it, you give us permission to store it and to show it back to you inside Hala so that the app works as intended. That permission is limited to running Hala. We are not taking a licence to use your photo or your words in advertising.

We can remove content that breaks these rules, and we will tell you if we do.

If you delete your account, we remove your profile content. See the Privacy Policy for what happens to the rest of your data, including the records we are required to keep.

11. Where Hala's responsibility starts and stops

We want this section to be honest rather than a wall of capital letters, because a Malaysian court can refuse to enforce a term in a consumer contract that causes a significant imbalance to the consumer's detriment, or that limits liability without adequate justification.

We are responsible for Hala. We will provide the app and the website with reasonable care and skill. If we make a mistake — we send the wrong booking to a venue, we take the wrong amount from you, our system loses a booking you paid for — we will put it right, and refund you what you paid for that booking including our fee.

Claims against a venue, operator or coach are yours to bring, and this agreement does not touch them. They provide the session and they answer for it. Nothing here excludes, limits or releases their liability to you — those are not our contracts to give away, and we do not attempt it. If you have a problem with them, you can pursue it with them directly, and we will help you reach them.

We cannot promise Hala is always up. Apps and servers go down, phones lose signal, and we sometimes take Hala offline to fix or improve it. We do not promise uninterrupted service. If an outage stops a booking you paid for from happening, you get your money back.

Losses we do not cover. We are not responsible for losses no one could reasonably have seen coming — for example lost business or lost opportunities. We are responsible for the obvious ones. If we lose a booking you paid for and you have to book somewhere else at short notice, tell us what the replacement cost and we will look at covering the difference.

A limit on the money — and where it does not apply

If we are found liable to you for a failure of the booking service, our total liability is limited to the total amount you paid through Hala for the booking or bookings the claim relates to, plus any Hala fees on them.

That limit does not apply at all to:

• a claim arising from our failure to keep your personal data safe;
• money we charged you that we should not have charged you; or
• anything in the list below.

For those, you can claim the loss you actually suffered.

And nothing in this agreement limits or excludes our liability for:

• death or personal injury caused by our negligence;
• fraud or fraudulent misrepresentation;
• anything under the Consumer Protection Act 1999 or any other Malaysian law that cannot be excluded or restricted by agreement; or
• refunding money you paid for a booking that did not happen.

12. Using Hala properly

Please do not:

• break the law using Hala;
• try to get into someone else's account, or into parts of our systems you are not meant to reach;
• scrape, copy or republish Hala's content, listings or venue data for your own product, except where copyright law allows it — for example quoting a short extract in a review, or copying for research, private study, criticism or news reporting;
• upload anything harmful, such as a virus;
• make bookings you have no intention of using, or make them to block out slots; or
• resell a Hala booking for profit without the venue's agreement.

Hala's name, logo, design, text, illustrations and sport icons belong to us. You may use the app and the website for your own personal use. That does not give you the right to copy or reuse our material for anything else, beyond what copyright law already permits.

13. Suspension, and ending this agreement

You can leave whenever you like. Email hello@hala.my, or message us on WhatsApp at +60 11-6112 0497. The account deletion page at hala.my/delete-account explains the process and points you to those same two channels. Bookings you have already made and paid for still stand — closing your account does not cancel them, and does not make you lose money you have already paid. Refunds still due to you are still due to you, including the refunds sections 14 and 16 give you for a session that has not happened yet.

We acknowledge a deletion request within 2 business days and complete it within 30 days. The Privacy Policy explains what is deleted, and the transaction and payment records we are required to keep for 7 years for tax and accounting.

We may suspend or close an account if you seriously or repeatedly break this agreement — for example, fraudulent payments, abuse of venue staff or other users, or repeated no-shows.

If we do:

• we will tell you, and tell you why, unless the law stops us from doing so;
• where the problem is one you can fix, we will normally warn you first and give you a chance to fix it;
• you do not lose money you have already paid. Bookings already paid for are honoured where the venue is still willing to take you, and where they are not, you are refunded; and
• you can ask us to look again by emailing hello@hala.my, and a person will review it.

We will not take your money as a penalty. There is no clause in this agreement under which you forfeit amounts you have already paid because of a breach.

14. Changes

Changes to Hala. We will keep changing and improving the app and the website. Features may be added, changed or removed. We may stop offering Hala altogether — if we do, we will give you as much notice as we reasonably can, and honour or refund bookings already made.

Changes to these terms. We may update this agreement. When we do:

• we will change the "Last updated" date at the top;
• if a change matters to you, we will tell you in the app or by email at least 30 days before it takes effect;
• the version you agreed to when you made a booking is the version that applies to that booking. A later change does not reach back and alter a booking you have already made; and
• if you do not want to accept the change, close your account before it starts and we will refund anything you have paid for a session that has not happened yet.

15. Malaysian law, and how to sort out a problem

Talk to us first. Most problems are quicker to fix by email. Write to hello@hala.my or call +60 11-6112 0497 and tell us what happened. We aim to acknowledge you within 2 business days.

The law that applies. This agreement is governed by the laws of Malaysia. The courts of Malaysia have jurisdiction over any dispute arising from it.

The Tribunal for Consumer Claims. Nothing in this agreement stops you from taking a claim to the Tribunal for Consumer Claims (Tribunal Tuntutan Pengguna Malaysia), which hears consumer claims up to RM50,000. We do not require you to arbitrate, we do not ask you to give up your right to go to court or to the Tribunal, and we do not ask you to give up the right to join a claim with others.

Claims against a venue or a coach are between you and them, and they may have their own terms about where a dispute is heard. We will help you contact them.

16. The rest

Each part stands alone. If a court or the Tribunal decides that part of this agreement cannot be enforced, that part drops out and the rest still applies.

Not enforcing something is not giving it up. If we do not act on a breach straight away, we can still act on it later.

If our business is sold. If our business is sold or reorganised, this agreement may move to the new owner. We will tell you before that happens. The new owner takes it on the same terms — your bookings and your rights come with it. If you would rather not continue, you can close your account and we will refund anything you have paid for a session that has not happened yet. You cannot transfer your account or this agreement to someone else.

Headings are there to help you find things. They do not change what the terms mean.

Language. This agreement is written in English.

Your privacy is covered by the Hala Privacy Policy, which sits alongside this agreement. If anything here appears to conflict with it on what we collect, share or keep, the Privacy Policy is the one to follow.