Privacy Policy

We collect only what the app needs to work:

• Account information — your display name, email address, phone number, and your province, district and village. You provide these when you sign up or complete your profile. A profile picture is optional.
• Sign-in information — if you sign in with email, your password is stored only as a salted hash by our authentication provider and is never visible to us. If you use Google Sign-In, we receive your name, email address and profile picture from Google.
• Bookings — the venue and pitch you booked, the date and time slot, and the status of the booking.
• Wallet and top-ups — your wallet balance and transaction history, plus each top-up request: the amount, the bank account you chose, an optional reference, and the image of the bank transfer slip you upload. We never collect card numbers — the app does not process card payments.
• Notification data — a push token for the device, along with the platform, device name and app version, stored only after you grant notification permission, plus which kinds of notification you switched on.
• Technical logs — our hosting provider records IP addresses and request logs for security, abuse prevention and debugging.

Two permissions look sensitive but produce no data on our servers. We spell them out because app stores and users both ask about them.

• Location — with your permission, the app reads your device location to sort nearby stadiums by distance and draw your position on the venue map. It is used on the device only, in that moment. It is never transmitted to us and never stored. The permission is optional; refusing it only turns off distance sorting.
• Photo library — when you attach a bank transfer slip, your operating system’s picker hands back the single image you selected. The app cannot browse or read your library, and only that one image is uploaded.
• No advertising or tracking — the app contains no advertising SDKs, no third-party analytics, and no cross-app or cross-site tracking. We do not build advertising profiles and do not use an advertising identifier.

• To create and maintain your account and keep you signed in.
• To show tournaments, fixtures, live scores, standings and player statistics.
• To take, show and cancel your stadium bookings.
• To review top-up requests and credit your wallet. Every top-up is checked by a person on our team — the app itself never moves money.
• To send the notifications you have switched on, such as kickoff and result alerts.
• To answer your support emails.
• To keep the service secure, prevent abuse, and fix problems.

We do not use your personal data for advertising or for automated decisions that produce legal effects.

Where data protection law such as the GDPR applies to you, we rely on performance of a contract for your account, bookings and wallet; consent for notifications and location access, which you can withdraw at any time in your device settings; legitimate interests for security and abuse prevention; and legal obligation where accounting or other law requires us to keep records.

We do not sell your personal data, and we do not share it with advertisers or data brokers. We use the service providers below, which process data on our instructions:

We may also disclose data where we are legally required to, or to establish or defend a legal claim. If the app is ever transferred to another operator, we will tell you here before your data moves.

Our providers operate servers outside Laos, so your data may be processed abroad. We only use established providers that offer contractual data-protection commitments covering those transfers.

• Account and profile data — for as long as your account exists, then deleted when you ask us to delete it.
• Bookings, wallet transactions and top-up records including transfer slips — kept while your account exists and afterwards only as long as accounting, tax or dispute-resolution needs require, then deleted.
• Push tokens — removed when you turn notifications off, when the token expires, or when your account is deleted.
• Technical logs — kept for a short period for security purposes and then rotated out.

• All traffic between the app and our servers is encrypted with HTTPS/TLS, and data is encrypted at rest by our hosting provider.
• Database row-level security rules mean each account can only read and write its own records — one user cannot reach another user’s bookings, wallet or profile.
• Bank transfer slips are stored in a private storage bucket, reachable only by you and the authorised staff who review top-ups.
• Access to administrative tools is limited to the small number of staff who need it.

No system is perfectly secure, but if a breach ever affects your personal data we will notify you and any regulator we are required to inform.

• Access — ask for a copy of the personal data we hold about you.
• Correction — edit your name, phone, address and picture yourself in the app under Account, or ask us to correct anything else.
• Deletion — delete your account and personal data yourself, from Account › Delete account in the app, which removes it immediately. If you cannot sign in, email us instead. See the account deletion page.
• Withdrawing consent — turn notifications or location access off at any time in your device settings, or notification kinds off inside the app.
• Portability and objection — request your data in a portable format, or object to processing based on legitimate interests.
• Complaint — if you are in a country with a data protection authority, you can complain to it. We would rather you told us first so we can fix it.

To exercise any of these, email [email protected] from the address on your account. We respond within 30 days.

Happy World is a general-audience sports app and is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has given us personal data, email us and we will delete the account.

We update this page when the app changes. The date at the top always shows the current version, and for material changes we will give notice in the app before they take effect. Continuing to use Happy World after a change means you accept the updated policy.

Happy World — email [email protected]. We are based in the Lao PDR and normally reply within one to two working days.