Privacy Policy

1. Who We Are

Tickgate is operated by Multixers Technology (Registration No.: 202603017629 (003813923-W)). This Privacy Policy explains how we collect, use, and protect your personal data when you use our platform and services.

2. Information We Collect

We may collect:

• Account information: name and email address. You sign in with a code sent to that email, or with Google — we keep no password. If you sign in with Google, we receive your name, email address, and profile picture from Google
• Transaction information: ticket purchases, payment details (processed by our payment providers), and order history
• Event-related information: attendee details you provide at checkout, including your answers to any questions the organiser asks
• Refund information: when you request a refund, your bank, account holder name, account number, and identity card number, so the refund can be paid into your account
• Organiser information: if you sell tickets, the identity of the person or company behind your organisation, the supporting documents you upload, and the bank account you are paid out to
• Technical data: IP address, browser type, device information, and usage data

3. How We Use Your Information

• Provide ticketing and account services
• Process payments and send order confirmations and receipts
• Process refunds to buyers and payouts to organisers
• Verify organisers and prevent fraud
• Share attendee details with event organisers where necessary
• Communicate with you about your orders and our services
• Improve our platform, security, and user experience
• Comply with legal obligations

4. Cookies and Similar Technologies

We use cookies to keep you signed in and to remember your preferences. You can adjust your browser settings to limit cookies; some features may not work fully if cookies are disabled.

On our public pages — event pages, organisers' pages, and our own — we also use Google Analytics, which sets cookies to count visits and see how people find and move through the site. It tells us about visits in aggregate, not who you are, and we do not use it for advertising. You can block it with your browser's settings or Google's opt-out add-on.

5. Sharing of Information

We may share your information with event organisers, payment and service providers, and authorities when required by law. We do not sell your personal data to third parties for marketing.

Our service providers receive only what they need for the work they do for us:

• Our payment provider (Billplz): your payment details, and the bank details used to send a refund or payout
• Our email provider (Amazon Web Services): your email address and the emails we send you
• Google: only if you choose to sign in with Google
• Google Analytics: how our public pages are visited, as described in section 4

Some of these providers may process your data outside Malaysia. Where they do, we take steps to make sure it is protected to a standard comparable to the Personal Data Protection Act 2010.

Sharing with event organisers: When you purchase a ticket, the personal details you provide at checkout (such as your name and email address) will be shared with the event organiser for the purpose of managing attendance and communicating event updates. The organiser is an independent party and is responsible for how they handle your data once received. Our Organisation Terms of Service require them to use it only to run the event you bought a ticket to, and not to sell it, pass it on, or use it for marketing without your consent.

6. Google User Data (Sign in with Google)

Tickgate lets you sign in with your Google account instead of an email code. This section explains how Tickgate accesses, uses, stores, protects, shares, retains, and deletes the Google user data it receives when you do.

Data accessed

Tickgate requests only the basic sign-in scopes openid, email, and profile, and receives from Google:

• your name
• your email address (and whether Google has verified it)
• your profile picture
• your Google account ID

Tickgate does not request or access your Gmail, contacts, calendar, Drive, or any other Google data.

Data usage

Tickgate uses this data only to:

• create your Tickgate account, or sign you in to it
• link your Google account to your Tickgate account by its Google account ID, so you can sign in again later
• fill in your name and email address on your account and orders
• send your tickets, receipts, and order updates to that email
• show your profile picture in your account

Data sharing

Tickgate does not sell Google user data, and does not use or transfer it:

• for advertising, including personalised or targeted ads
• to data brokers or other information resellers
• to determine credit-worthiness or for lending purposes
• to develop, improve, or train generalised artificial intelligence or machine learning models

Tickgate does not share Google user data with third parties. The only exception is the name and email address on a ticket order, which the event organiser receives to manage attendance, as described in section 5 — and only when you buy a ticket to their event.

Data storage and protection

Your name, email address, Google account ID, and profile picture link are stored with your account in our database, on servers we run. Data is sent only over encrypted (HTTPS) connections, and only our own systems and the staff who run the service can reach it. Tickgate does not store your Google password, or any Google access or refresh token after you have signed in.

Data retention and deletion

Tickgate keeps this data for as long as you have an account. You can delete your account at any time from its settings; your Google user data is then deleted for good after 30 days (see section 10). You can also ask us to delete it by emailing hello@tickgate.com, and you can remove Tickgate's access to your Google account at any time at myaccount.google.com/connections.

Limited Use

Tickgate's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

7. Minors and Children's Privacy

The Platform may be used to purchase tickets for events attended by minors. By completing a purchase on behalf of a minor, the parent or legal guardian confirms they have consented to the collection and use of the minor's personal data as described in this Policy.

If you are under 18 years old, you may use the Platform only with the involvement and consent of a parent or legal guardian. We do not verify the age of users and are not responsible for use of the Platform by minors without appropriate parental consent.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data. Payment details are handled by our payment providers in line with industry standards. Identity card and bank account numbers are stored encrypted.

9. Your Rights

You may have the right to access, correct, or delete your personal data, or to object to certain processing. You can update your account details in your profile, and delete your account from its settings: it is kept for 30 days, when signing in again restores it, and then deleted for good. For other requests, contact us below.

10. How Long We Keep Your Data

We keep your account for as long as you have it. Once you delete it, your account and the files you uploaded are deleted for good after 30 days.

Records of orders, payments, and refunds are kept for as long as the law requires us to keep accounting and tax records — generally seven years in Malaysia — even after your account is deleted, but no longer linked to it.

Attendee details already passed to an event organiser are kept by that organiser, under their own responsibility.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new "Last updated" date. If we change how Tickgate uses Google user data, we will email you before the change takes effect.