Home Privacy Policy
Legal · UFOREA Penang

Privacy Policy.

Last updated: 15 July 2026 Applies to: uforea.net & UFOREA Penang on-site Jurisdiction: Malaysia (PDPA 2010)

Welcome to UFOREA, a wonderland indoor playground in Penang where families come to play, celebrate and make memories. Just as we care for every child inside our doors, we care about protecting the personal information you share with us. This Privacy Policy explains, in plain language, what personal data we collect, why we collect it, how we look after it, and the choices and rights you have.

UFOREA handles personal data in line with Malaysia's Personal Data Protection Act 2010 (PDPA). By using our website, buying tickets, booking a party, or signing up for our updates, you agree to the practices described here. If anything below is unclear, we would be glad to help — you will find our contact details at the end.

1. Who we are

In this policy, "UFOREA", "we", "us" and "our" refer to the UFOREA indoor playground in Penang, Malaysia, and its website at uforea.net. We are the party responsible for the personal data we collect from you.

2. What personal data we collect

We only ask for the information we genuinely need. The details we collect depend on how you interact with us.

2.1 Website browsing and enquiries

When you browse uforea.net or send us a question, we may collect your name, email address, phone number, the content of your message, and basic technical information such as your device type, browser and pages viewed. Some of this is collected automatically through cookies and analytics (see Section 6).

2.2 Ticket and event purchases

When you buy tickets or book an event through us, we collect:

  • Your full name and contact details (email and phone number), and the guest's IC number, which we hold for record purposes only.
  • Booking details such as your chosen visit date, time slot, number of guests, ticket type, and the guest's actual birthday date, which helps us suggest a better time slot for your visit.
  • Payment information needed to complete your purchase. Card, e-wallet and FPX payments are processed securely by our payment provider; we do not store your full card details on our systems.

2.3 Online shop purchases

When you buy from the UFOREA online shop, we collect your full name, billing and delivery addresses, contact details, and payment method information so we can process your order and deliver your items.

2.4 Birthday party and event details

When you plan a birthday party or private event with us, we collect the booking organiser's contact details along with the party details you share — for example the number of guests, the child's name and age, the guest of honour's actual birthday date, theme preferences, and any food, allergy or accessibility notes needed to host your celebration safely.

2.5 Newsletters and marketing sign-ups

If you sign up for our newsletter, promotions or event updates, we collect your name and contact details so we can send you the updates you asked for.

3. How we use your data

We use the personal data we collect only for the purposes it was given, including:

  • Fulfilling your bookings and orders — processing tickets, party bookings and shop purchases, and sending you confirmations and receipts.
  • Serving you at the playground — verifying admission, planning your visit and time slot, and preparing for your party or event.
  • Customer care — answering your enquiries, handling rescheduling requests, and resolving any issues.
  • Marketing communications — with your permission, sending you newsletters, promotions and updates about UFOREA. We may also send event and deal updates via WhatsApp. You can opt out at any time (see Section 7).
  • Improving our website and service — understanding how our site is used so we can make it better and safer.
  • Legal and safety obligations — keeping records and meeting requirements under applicable law.

We will not use your personal data for a new, unrelated purpose without letting you know or, where required, obtaining your consent.

4. Sharing and disclosure

We do not sell or rent your personal data. We share it only where necessary, and only with parties who are expected to keep it secure:

  • Within UFOREA — with the relevant teams who need it to serve you.
  • Trusted service providers — such as our payment processor, booking and email tools, and delivery partners, who act on our behalf and only for the purposes we specify.
  • When required by law — for example in response to a valid court order, subpoena, or a lawful request from a government or law-enforcement authority.

Except as described above, we will not disclose your personal information to any third party outside UFOREA without your consent.

5. Data security

We take reasonable technical and organisational measures to protect your personal data against loss, misuse and unauthorised access. Payments are handled through secure, encrypted channels operated by our payment provider. While no system can be guaranteed completely secure, we work to keep your information safe and to limit access to those who need it.

6. Cookies and analytics

Like most websites, uforea.net uses cookies — small data files stored by your browser — to help our site work properly and to understand how it is used. Cookies allow us to remember your preferences, keep items in your cart, and improve your browsing experience. The analytics data we gather is used to make the site faster, clearer and more helpful.

Most cookies do not identify you personally. You can manage or refuse cookies through your browser settings. If you choose to block cookies, some features — such as saving items to your cart — may not work as smoothly.

7. Your rights

Under the PDPA, you have rights over the personal data we hold about you and your children. You may:

  • Access — ask what personal data we hold about you or your child.
  • Correct — ask us to update or fix inaccurate details.
  • Withdraw consent — opt out of marketing at any time by clicking "unsubscribe" in any email, replying to stop WhatsApp updates, or contacting us directly.
  • Enquire — ask how your data is being used or limit certain uses, subject to any legal or record-keeping requirements.

To exercise any of these rights, simply contact us using the details in Section 10. Registered customers can also review and update their details by signing in to their online account.

8. How long we keep your data

We keep personal data only for as long as it is needed for the purposes described in this policy, or for as long as we are required to keep it to meet legal, accounting or record-keeping obligations. When it is no longer needed, we take reasonable steps to remove or securely dispose of it.

9. Children's data

UFOREA is a family destination, and children's information is always provided by a parent or guardian when making a booking or purchase. We collect a child's details only to host their visit or celebration safely — for example their name, age and any allergy or accessibility needs — and we treat this information with particular care.

We retain a child's personal data only for as long as it is needed for the purposes it was collected and for any applicable records we are required to keep. We do not use children's data for independent marketing. Parents and guardians may review, update or ask about their child's information at any time by contacting us.

10. Changes to this policy and how to contact us

We may update this Privacy Policy from time to time to reflect changes in our practices or the law. If we make a change that materially affects how your information is handled, we will take reasonable steps to let affected guests know.

If you have any questions about this policy, or about the personal data we hold, please get in touch: