Privacy Policy – TAPAUasia

1Who we are

TAPAUasia (“TAPAU”, “we”, “us”) is run by TAPAUasia Sdn. Bhd. (Company registration no.), Registered business address. We are the data user responsible for your personal data under the PDPA.

For anything about your data, contact our Data Protection Officer, Data Protection Officer name or role, at Privacy contact email, e.g. [email protected].

2What this policy covers

This policy covers the TAPAUasia website, TAPAUtv (the live channel, on-demand videos and the live chat) and the emails we send you. It does not cover other websites you reach through links or embedded players on TAPAU. Those have their own policies.

3What we collect

When you create an account: your username, email address, password (stored encrypted, we never see it) and display name.

When you fill in your profile: anything you choose to add, such as a profile photo, short bio, location, website and social media links.

When you take part: the music, music videos, films, events and stories you submit (including files, links and credits), your reviews and ratings, likes, comments, votes in the weekly charts and messages in the TAPAUtv live chat.

When you send a tip: payments are handled by our payment provider, CHIP. We receive a record of the payment (amount, date, status and a reference). We do not receive or store your card or bank details.

When you contact us: your message and the details you include.

Automatically: technical data such as your IP address, browser, device type, the pages you visit and when, collected through server logs and cookies (see Cookies).

4How we use it

To create and run your account, and keep you signed in.
To show your profile and the things you post to other people on TAPAU.
To review submissions before they go live and to moderate the community.
To count chart votes fairly, including checking for duplicate accounts and vote manipulation.
To process tips and keep records we are required to keep.
To send you emails you need, such as account verification, password resets and updates on your submissions.
To send you news from TAPAU, only if you have agreed to it. You can unsubscribe at any time.
To keep TAPAU secure, prevent abuse and fix problems.
To understand how TAPAU is used so we can improve it.
To meet our legal obligations.

6What other people can see

TAPAU is a public community. The following are visible to anyone, including people who are not signed in:

Your display name, profile photo, bio and the links you add to your profile.
Your published reviews, ratings, stories, comments and submissions, with your display name.
Messages you send in the TAPAUtv live chat, while the chat is open.

Your email address is never shown publicly. Chart pages show vote totals, not who voted.

8Transfers outside Malaysia

Some of our service providers store or process data outside Malaysia. When that happens we take steps to make sure your data gets a level of protection comparable to the PDPA.

9Cookies

We use a small number of cookies:

Essential cookies that keep you signed in and protect your account. TAPAU does not work properly without them.
Security and performance cookies set by Cloudflare to block attacks and keep pages loading fast.
Analytics, if we turn them on, to count visits and see which pages are useful. We will update this policy before we do.

Embedded players (YouTube, Bandcamp) may set their own cookies when you use them. You can block or delete cookies in your browser settings, but signing in needs essential cookies.

10How long we keep it

Account and profile data: for as long as your account is open. If you delete your account, it is hidden straight away and we keep the data for 6 months so you can log in and restore it. After 6 months it is deleted.
Content you post: until you remove it or delete your account. Content already broadcast on TAPAUtv or shared in promotional material may stay in archives.
Vote records: for the current chart week plus the chart archive, which keeps totals only.
Payment records: for 7 years, as required for tax and accounting.
Server logs: up to 90 days.

When we no longer need data, we delete it or make it anonymous.

11Your rights

Under the PDPA you can:

Ask for a copy of the personal data we hold about you.
Ask us to correct data that is wrong or out of date. You can also edit most of it yourself in My TAPAU.
Withdraw your consent, or ask us to stop using your data for direct marketing.
Ask us to delete your account and the data linked to it.
Ask for your data in a format you can take elsewhere.

Email Privacy contact email, e.g. [email protected] from the address on your account. We will reply within 21 days. We may ask you to confirm your identity first.

12Keeping it safe

We use encrypted connections (HTTPS), store passwords encrypted, limit who on our team can access personal data and keep backups secure. No system is perfectly secure. If a data breach is likely to cause you harm, we will tell you and the Personal Data Protection Commissioner as the law requires.

13Younger members

You must be at least 13 to use TAPAU. If you are under 18, you need a parent or guardian’s permission to create an account. If you believe a child under 13 has given us personal data, contact us and we will delete it.

14Changes to this policy

We may update this policy as TAPAU grows. If the changes are significant, we will tell you by email or on the site before they take effect. The date at the top shows when it was last updated.

15Contact us

TAPAUasia Sdn. Bhd.
Registered business address
Data Protection Officer: Data Protection Officer name or role
Privacy contact email, e.g. [email protected]