In short: We collect what we need to register you for programmes, record attendance and issue certificates. We do not sell, rent or trade your data, and we do not hand it to any other organisation for marketing.
1. Who We Are
EvenTraZ is operated by Sci-Pro KIK, of Pusat Sains & Kreativiti Terengganu
21080 Kuala Terengganu
Terengganu. For the
purposes of the Personal Data Protection Act 2010 (PDPA), we are the data user for the
personal data described below.
2. What We Collect
| Data | Purpose |
|---|---|
| Full name | Identifying your registration and printing your name on certificates. |
| IC number | Verifying participant identity and preventing duplicate registrations. |
| Phone number and email | Registration confirmations and programme notices. |
| School name and school code | School-level registration. |
| Names and IC numbers of teachers & students | Official attendance lists and individual certificates. |
| Names and IC numbers of family members | Group registration for public participants. |
| State (visitor log only) | Aggregate statistics on where visitors travelled from. |
| IP address at QR scan | Attendance audit trail and detecting misuse of QR codes. |
| Google account email and ID | Sign-in, only if you choose to sign in with Google. |
We do not collect your home address, and we never store your password as readable text — passwords are kept as one-way hashes.
Children's data
School registrations include the names and IC numbers of students, including those under 18. This is entered by the school, not the student. Schools confirm at the point of submission that parental or guardian consent has been obtained.
3. Who We Share With
We do not sell, rent or trade your personal data, and we do not hand participant lists to other organisations for their own purposes. Your data goes only to the parties needed to run the system:
- Hosting provider — the database sits on their servers.
- Email delivery — your name and email are used to send confirmations.
- Google — only if you choose "Sign in with Google", which gives us your email and account ID.
- Programme organisers — an administrator sees registrations for their own programmes only.
Third-party services on our pages
Our pages load fonts and interface libraries from public content delivery networks (Google Fonts, unpkg, jsDelivr, cdnjs) and maps from OpenStreetMap. These providers can see your IP address when a page loads. They do not receive your name, IC number or registration details.
4. Security
- Passwords are stored as hashes using a standard algorithm, never as plain text.
- Administrator access requires a login, and each administrator sees only their own programmes.
- Participant portal pages cannot be opened without logging in.
- Connections to this site are encrypted with HTTPS.
No online system is completely secure. We cannot guarantee absolute security, but we will notify you if a breach occurs that affects you.
5. How Long We Keep It
Registration, attendance and certificate records are kept for as long as necessary after a programme ends, for certificate verification and reporting. After that they are deleted or anonymised.
6. Your Rights Under the PDPA
- Access — request a copy of the data we hold about you.
- Correction — correct inaccurate data. You can also update your own name, IC and phone under Profil Saya.
- Withdraw consent — though this may mean you can no longer join programmes or download certificates.
- Limit processing — ask us to stop using your data for particular purposes.
To exercise any of these, contact eventraz2026@gmail.com. Requests are answered within 21 days, as provided under the PDPA.
7. Changes
Changes are published on this page with a new revision date. Significant changes are notified by email to registered users.
8. Contact
Questions about this policy can be sent to eventraz2026@gmail.com or through the Contact Us page.
Dasar Privasi (Bahasa Melayu)
Ringkasnya: Kami mengumpul maklumat yang diperlukan untuk mendaftarkan anda ke program, merekod kehadiran dan mengeluarkan sijil. Kami tidak menjual, menyewa atau memperdagangkan data anda, dan tidak menyerahkannya kepada organisasi lain untuk tujuan pemasaran.
1. Siapa kami
EvenTraZ dikendalikan oleh Sci-Pro KIK, beralamat di Pusat Sains & Kreativiti Terengganu
21080 Kuala Terengganu
Terengganu.
Bagi maksud Akta Perlindungan Data Peribadi 2010 (PDPA), kami ialah pengguna data.
2. Maklumat yang kami kumpul
Nama penuh, nombor Kad Pengenalan, nombor telefon dan emel, nama dan kod sekolah, nama serta No. KP guru pengiring dan murid, nama serta No. KP ahli keluarga, negeri (log pengunjung sahaja), alamat IP semasa imbasan QR, dan emel serta ID akaun Google jika anda log masuk dengan Google.
Kami tidak mengumpul alamat rumah anda, dan kata laluan disimpan sebagai hash sehala, bukan teks biasa.
3. Maklumat kanak-kanak
Pendaftaran sekolah melibatkan nama dan No. KP murid, termasuk murid bawah 18 tahun. Maklumat ini dimasukkan oleh pihak sekolah, dan pihak sekolah mengesahkan semasa penghantaran bahawa kebenaran ibu bapa atau penjaga telah diperoleh.
4. Perkongsian maklumat
Kami tidak menjual, menyewa atau memperdagangkan maklumat anda, dan tidak menyerahkan senarai peserta kepada organisasi lain untuk tujuan mereka sendiri. Maklumat hanya dikongsi dengan penyedia hosting, perkhidmatan emel, Google (jika anda log masuk dengan Google), dan penganjur program yang anda sertai.
5. Keselamatan dan tempoh penyimpanan
Kata laluan disimpan sebagai hash, akses pentadbir dilindungi log masuk, portal peserta memerlukan log masuk, dan sambungan disulitkan menggunakan HTTPS. Rekod disimpan selama selama yang diperlukan selepas program tamat.
6. Hak anda
Anda berhak mengakses, membetulkan, menarik balik kebenaran dan menghadkan pemprosesan maklumat peribadi anda. Hantar permohonan ke eventraz2026@gmail.com dan kami akan menjawab dalam tempoh 21 hari.