Get the app

Privacy Policy

Effective date:

XCue is a cue sports ranking app operated by Strike X ("we", "us", "our"), a business registered in Malaysia. This policy explains what personal data we collect when you use the XCue app, the XCue website (strikex.dev) and XCue displays at partner clubs, how we use it, and the choices you have. We handle personal data in line with Malaysia's Personal Data Protection Act 2010 (PDPA).

1. Who we are

Strike X, Malaysia
Email: support@strikex.dev

2. What we collect

  • Account information: your username, display name, phone number (verified with a one-time code sent to your WhatsApp) and password (stored only in encrypted, hashed form). If you sign in with Apple, we receive the email address Apple shares with us, which may be a private relay address.
  • Profile: your profile photo, home club, favourite clubs, language and display preferences, such as your main badge.
  • Match and ranking data: matches you create or join, frame scores, results, points, ranks, seasons, tournaments, achievements and statistics.
  • Content you share: CueRoom posts, comments and likes, and any reports you submit.
  • Club table data: when you play on a CueMind scoring table at a partner club, the table sends us the match result and frame details, linked to your account.
  • Location: if you allow it, your device location is used to show clubs near you. We do not keep a history of your location.
  • Device and technical data: device type, operating system, app version, a notification token (if you allow notifications), and crash and error reports that help us fix problems.
  • Support messages: what you send us when you contact us.

3. How we use it

  • To create and secure your account and verify your phone number.
  • To run matches, rankings, seasons, tournaments, leaderboards and achievements.
  • To provide community features and keep XCue safe, including reviewing reports, removing content and preventing abuse or fraud.
  • To send notifications you have chosen to receive, such as match and tournament updates. Promotional messages are only sent if you opt in.
  • To answer your questions and provide support.
  • To fix problems and improve XCue.
  • To comply with the law.

We do not sell your personal data, and we do not use it for third-party advertising or tracking.

4. Who we share it with

  • Other XCue users: your username, display name, profile photo, ranks, badges, statistics, match results and posts are visible to other users. Leaderboards, including usernames and ranks, may also be shown on screens at partner clubs. Your phone number is never shown to other users.
  • Partner clubs: clubs where you play, or that you choose as your home club, can see matches and rankings connected to their venue.
  • Service providers: trusted companies that help us run XCue, for example by providing hosting and data storage, delivering verification codes and notifications, and reporting app crashes. They may only use your data to provide these services to us and must keep it secure.
  • Legal reasons: when required by law, regulation, court order or a lawful request from authorities, or to protect the rights and safety of our users and others.
  • Business changes: if our business is reorganised or transferred, your data may be transferred as part of it, and this policy will continue to apply.

5. How long we keep it

  • We keep your personal data while your account is active.
  • When you delete your account (in the app under Settings > Delete Account, or by contacting us; see strikex.dev/delete-account), your account is hidden immediately and you have 30 days to change your mind by signing in again.
  • After 30 days, we permanently delete your personal data, including your account, phone number, profile, photos, posts, comments, notifications and device tokens. We do not keep your personal data after that.
  • Match results that involve other players remain only in anonymised form, shown as "Deleted player", so that other players' records and rankings stay correct. They no longer identify you.
  • Copies in our routine backups are overwritten automatically within a short period.
  • Verification codes expire within minutes.

6. Your rights

Under the PDPA you may ask to access, correct or delete your personal data, and to withdraw your consent or limit how we use it. You can do most of this directly in the app: edit your profile, change notification settings or delete your account. For anything else, email support@strikex.dev and we will respond within 21 days. You can also turn off location access and notifications at any time in your device settings.

7. Security

We protect your data with encryption in transit, access controls and two-step verification for staff accounts, and we limit access to the people who need it. No system is completely secure, but we work to protect your information and act quickly if a problem occurs.

8. Children

XCue is not intended for children under 13, and we do not knowingly collect personal data from them. If you are between 13 and 17, please use XCue only with the permission of a parent or guardian. If we learn that a child under 13 has created an account, we will delete it. Parents or guardians can contact us at support@strikex.dev.

9. Storage outside Malaysia

Our service providers may store or process data on servers outside Malaysia. When this happens, we take steps to ensure your data receives a level of protection comparable to the PDPA.

10. Changes to this policy

We may update this policy from time to time. We will change the effective date above, and for significant changes we will let you know in the app.

11. Contact us

Strike X, Malaysia
Email: support@strikex.dev

If there is any difference between language versions of this policy, the English version applies.

Read the Terms & Conditions →