Who we are
Routte is an online system for martial arts clubs and tournaments, run by Routte. This notice explains how we handle personal data under Malaysia's Personal Data Protection Act 2010.
Clubs and tournament organisers decide what they record about their members and athletes. For that data, the club or organiser is responsible for having the right to collect it, and Routte processes it on their behalf. For account data (your sign-in, your own profile, your Routte invoices) we are responsible.
What we hold
Accounts
- Your name, email address, password (stored only as a secure hash) and time zone.
- For clubs and teams: the club's name, country, contact and billing details.
- For referees: your referee profile and the events you are approved for.
Members and athletes (entered by clubs, coaches and organisers)
- Identity: name, date of birth, gender, nationality and an identity or passport number when a club or event requires one.
- Sport: rank, weight, height, club, school, photo and the categories entered.
- Contact: email and phone of the member or their parent or guardian, for fees and reminders.
- Club records: memberships, attendance, invoices, payments and receipts.
- Competition records: draws, bouts, scores, results and medals.
Technical data
- Cookies that keep you signed in, and device cookies that let judges and team officials use a PIN on their own phone.
- Notification subscriptions, when a coach turns on notifications in the Routte app.
- Logs of changes and scoring actions, so mistakes can be traced and corrected. Identity numbers, phone numbers and birth dates are masked in these logs.
We do not use advertising or analytics trackers on Routte.
Children
Many athletes are under 18. Their data is entered by their club, coach or event organiser, who must have the consent of a parent or guardian. Parents can ask the club, or us, to see or correct their child's data.
What is public
When an organiser publishes an event, its public pages show the event details. When the organiser publishes the draw, the brackets show each athlete's name, competitor number, club or school, nationality and, if the organiser allows it, photo. Live scoreboards, results and medal tables show the same details. Routte's website may show these published results, such as recent bouts, champions and club medal tables.
Dates of birth, identity numbers, emails, phone numbers, weights and payment details are never public.
Why we use it
- To run the service you or your club signed up for: registrations, draws, scoring, results, club records and fees.
- To send messages you expect: account emails, invitations, payment reminders, and event notifications you turned on.
- To bill clubs and teams for Routte, and to keep accounting records as the law requires.
- To keep the service secure, fix problems and prevent misuse.
Who else handles it
- Hosting and file storage providers, which store the system and uploaded images and documents.
- Our email delivery provider, which sends account and reminder emails.
- Payment providers (Billplz, SecurePay, SenangPay, ToyyibPay), when you pay online. Card and bank details go straight to them; Routte never sees or stores them.
- Your browser's notification service, when you turn on notifications.
- WhatsApp, when a club sends payment reminders through its own WhatsApp settings.
We do not sell personal data. We share it with authorities only when the law requires it.
How long we keep it
- Account, club and competition records: while the account is active, and after that only as long as the club, the event's organiser or the law needs them.
- Team officials' phones and app settings: deleted 30 days after their access to an event ends.
- Notification logs: 90 days. Change and audit logs: up to one year.
- Backups: up to 14 days.
Your rights
You can ask to see the personal data we hold about you, ask us to correct it, or withdraw your consent where we rely on it. For data a club or organiser entered, we may pass your request to them. We reply within 21 days.
Write to [email protected].
Security
All traffic to Routte is encrypted. Passwords are hashed, judges' PINs work only on their own phone, and changing a password removes saved sign-ins and PINs on other devices. Access to club data is limited to that club's own accounts.
Changes
We will update this notice when the way we handle data changes, and show the new date at the top.