HelixMC

Privacy Policy

Last updated: 2026-10-05

HelixMC ("we") handles personal data as described below, in line with Malaysia's Personal Data Protection Act 2010 (PDPA).

1. Information we collect

  • Your email address (for registration and login)
  • Your Minecraft username and UUID (to check your eligibility to join the Server; verified using Mojang's public API)
  • Your payment history (processed by ToyyibPay. We do not hold card numbers, bank account details or other payment credentials — these are managed by ToyyibPay)
  • Your Discord account information (Discord ID and username — only if you choose to link Discord)
  • The name, email address and message you submit through the contact form

2. How we use it

  • To add you to the Server whitelist and manage your membership
  • To confirm your payment status and contact you about renewals
  • To investigate and act on violations of the Terms of Service
  • To reply to your enquiries

3. Disclosure to third parties

  • Except where required by law, we do not disclose your personal data to third parties without your consent.
  • To process payments, the information required for the payment is shared with ToyyibPay (our payment provider).
  • Service providers that host our website, database and email (such as Vercel and Supabase) process data on our behalf, only as needed to run the Service.

4. Cookies

  • We use only the cookies needed to keep you signed in. We do not use advertising or tracking cookies.

5. Retention and deletion

  • You can ask for your account to be deleted from "Delete account and data" on My page. It is deleted automatically 7 days after the request; until then you can cancel it from My page.
  • We delete: your login and email address, the links to your Minecraft and Discord accounts, your warning history, your contact messages and staff notes about you.
  • We keep: payment records, no longer linked to you (accounting), records of staff actions without information that identifies you, and reports you sent, without your name.
  • Only when a banned account is deleted, we keep the Minecraft account's ID so the ban cannot be avoided by registering again.
  • Contact form messages are deleted automatically one year after they are received.
  • Remaining membership days are not refunded (Refund Policy §1).

6. Access and correction

  • Under the PDPA you may request access to, or correction of, your personal data. Please contact us through the contact form.

7. Contact

For questions about how we handle personal data, please use the contact form or email helixmc16@gmail.com.