Privacy Policy

This policy applies to event owners, Merchants, administrators, team members, Scanner personnel, ticket buyers, attendees, website visitors and other individuals who use or interact with NakSeat.

For account data, platform security, communications and NakSeat operations, NakSeat may act as a data controller.

For buyer and attendee data collected for a specific event, the Merchant typically determines the purpose for which that data is collected. In such cases, the Merchant may act as a data controller and NakSeat processes the data on behalf of the Merchant to provide platform services.

Depending on how you use NakSeat, we may collect the following categories of data.

1. Identity information such as name and account name.
2. Contact information such as phone number and email address.
3. Account information such as sign in method, user role, related Merchant and access status.
4. Booking information such as event, date, session, seat category, quantity, price, payment status, booking number and attendance records.
5. Ticket information such as ticket tokens, ticket status, scan records and the number of attendees checked in.
6. Transaction information such as amount, currency, payment reference, payment status and transaction time.
7. Merchant information such as business name, events, location, support number, payment settings, team members and content entered into the platform.
8. Technical information such as IP address, browser type, device type, access time, pages viewed, security logs and error records.
9. Communication information such as enquiries, support requests, complaints and feedback.

NakSeat does not intend to store bank account numbers, banking passwords or full payment card details. Sensitive payment information may be processed by the payment provider used by the Merchant.

We may obtain data directly from you, from Merchants, from Merchant team members, through use of the platform, through sign in providers, through payment providers or from service providers who help us operate NakSeat.

If you provide another individual's data, you confirm that you have the appropriate permission to do so and that the information is accurate.

We may use data for the following purposes.

1. Creating and managing accounts.
2. Processing bookings and recording payment status.
3. Generating, displaying and sending tickets and booking information.
4. Enabling Merchants to manage events, pricing, quotas, bookings, team members and attendance.
5. Enabling Scanners to verify tickets and record attendee check in.
6. Sending operational notices, confirmations, receipts, event information and support communications.
7. Detecting misuse, fraud, unauthorised access and security threats.
8. Maintaining, testing, analysing and improving platform performance.
9. Fulfilling legal, tax, audit, enforcement and dispute resolution requirements.
10. Protecting the rights, safety, property and legitimate interests of NakSeat, Merchants, users and the public.

Where required, we will obtain consent before processing personal data. You may withdraw consent subject to applicable law and related operational limitations.

Withdrawal of consent does not affect processing that has already been carried out lawfully. Certain functions may not be able to continue if data required for accounts, payments, tickets, security or compliance cannot be processed.

We do not sell personal data as a product.

We may share data with the following parties to the extent necessary to provide and protect the services.

1. The Merchant operating the event related to your booking.
2. Merchant team members who are granted access according to their duties.
3. Payment providers such as Billplz.
4. Providers of hosting, database, email, analytics, security, identity verification and technical support services.
5. Professional advisors, auditors, insurance companies and corporate service providers.
6. Authorities, courts or enforcement agencies where required by law or where necessary to protect rights and safety.
7. A buyer, investor or business successor in the event of a reorganisation, financing, sale of assets, merger or transfer of business.

Each service provider may be subject to its own policies and terms. NakSeat does not control the independent practices of third parties who do not act on behalf of NakSeat.

Data may be stored or processed using infrastructure operated by NakSeat or service providers in Malaysia or other countries.

If data is transferred outside Malaysia, NakSeat will take reasonable steps and apply appropriate safeguards as required by law.

We retain data for as long as necessary to provide the services, fulfil the purpose of collection, maintain business records, prevent fraud, manage disputes and comply with legal obligations.

The actual period depends on the type of data, account status, relationship with the Merchant, security requirements and legal requirements. Once data is no longer needed, we may delete, anonymise or isolate the data through a reasonable process.

NakSeat applies reasonable technical and organisational measures to protect data from loss, misuse, alteration, disclosure or unauthorised access.

However, no internet system, electronic transmission or storage method can be guaranteed to be completely secure. To the extent permitted by law, NakSeat does not guarantee that a security incident will never occur.

Users are responsible for safeguarding their accounts, devices, ticket links and sign in information. Any suspicious activity should be reported to NakSeat promptly.

Subject to applicable law, you may request to know whether your data is being processed, obtain access, correct inaccurate data, withdraw consent or object to direct marketing.

We may request identity verification before fulfilling a request. We may also refuse or limit a request where permitted by law, where the request affects the rights of other individuals, or where data must be retained for security, dispute or compliance purposes.

For booking data controlled by a Merchant, we may direct your request to the relevant Merchant.

The Merchant is responsible for ensuring that buyer and attendee data is collected lawfully, is relevant, is accurate and is used only for the purposes disclosed.

The Merchant is also responsible for managing team member access, maintaining data confidentiality, responding to buyer requests and complying with data protection obligations applicable to their business.

NakSeat reserves the right to restrict or suspend a Merchant's access if data use is believed to breach the law, individual rights or platform security.

NakSeat is not intended for independent use by children. Bookings involving children should be made by a parent, guardian or authorised adult.

Merchants should avoid collecting children's data that is not necessary to manage bookings and attendance.

NakSeat may use cookies and browser storage necessary for sign in, security, user preferences, platform functionality, performance and usage analysis.

Blocking certain cookies may cause some functions to operate incorrectly.

Individual Merchants may enable their own advertising and analytics measurement tools through their Merchant settings. These tools currently include Meta Pixel, TikTok Pixel, Google Analytics 4 and Google Tag Manager.

When a Merchant enables these tools, the relevant scripts load only on that Merchant's own booking, payment and ticket flow. They do not load on NakSeat marketing pages, the Platform Admin area, the Merchant dashboard, the scanner or other Merchants' pages.

1. Page view measurements such as the booking page being opened.
2. Checkout interaction measurements such as a buyer starting checkout.
3. Successful purchase measurements such as a completed payment and issued ticket.

NakSeat does not intentionally send buyer name, email, phone number or other booking form personal information through these tracking events. The tools may receive technical visit, device and interaction signals according to their own operation.

Your use of these tools may also be subject to the privacy policies and practices of Meta, TikTok and Google. You can manage cookies and browser storage in your browser settings.

Merchants remain responsible for their own legal and privacy obligations when using advertising and analytics measurement tools, including any disclosure, consent or notice required for their events.

Separately, NakSeat operates its own Meta Pixel to measure its own marketing. It loads only on NakSeat's public marketing pages and its merchant sign up and Free Trial activation steps, and never on Merchant booking pages, tickets, dashboards, sales, scanner, payment or Platform Admin pages. It measures page views, marketing call to action clicks, merchant registration and Free Trial activation only, without names, emails, phone numbers, booking codes, ticket tokens or payment references, and with automatic advanced matching disabled. It does not load for visitors in regions where prior consent is required for advertising cookies. This Pixel is entirely separate from any Merchant's own Pixel.

NakSeat may contain links or connections to third party sites and services. This policy does not govern those sites or services. You should read their privacy policies before providing data.

NakSeat may update this Privacy Policy to reflect changes in services, operational practices or law.

The latest version will be displayed on this page together with the effective date. Continued use after a change takes effect indicates that you have read the latest version, to the extent permitted by law.