Controller: LuckyBox (see Contact). We process data to run accounts, checkout, shipping and after-sales under PDPA Malaysia, PDPA Singapore and UU PDP Indonesia as applicable.
We store email, name, hashed password, shipping address, order and payment status. IP is used to guess country; you can override it.
Card numbers are entered on the payment gateway and are not stored on this site.
We keep paid-order records as required for tax and disputes. Tickets are visible to operators.
You may request access or deletion via Contact / WhatsApp, except records we must keep by law.