Privacy notice

1. What we collect

• From you: your name, your mobile number, and your birthday, only if you choose to add it.
• When you use Nana Play: the receipt numbers you add, the amounts of those bills (from our own sales records), your chips, the rewards and vouchers you use, and when each happened.
• From your phone: a sign-in cookie that keeps you signed in, the language you choose, and a few small settings kept in your browser (for example, whether you have already seen a tip).
• If you turn on chip alerts: the notification address your phone's browser gives us for this app. Nothing else about your phone.

We do not collect your location, contacts or photos, and we never ask for bank card details or ID numbers.

2. Why we use it

• To run your membership: to recognise you, credit chips for your bills, and let you use rewards, vouchers and your birthday treat.
• To send your sign-in code by SMS.
• To keep the programme fair: to stop the same bill being claimed twice, and to look into problems.
• To send you offers by SMS, only if you said yes. You can change this at any time in the app (More → Offers by SMS).
• To understand, in totals, how the programme is used.

3. Who sees it

• Our staff, only as far as they need to serve you. At the counter they see your name, the last four digits of your number and your chips, but never your birthday.
• Companies that run services for us: the SMS provider that sends your codes and messages, and the provider that hosts our systems in Singapore. They may only use your data to provide those services to us. Singapore has its own personal data protection law.
• Your phone's push service (Apple, Google or your browser's maker), only if you turn on chip alerts. The alert is encrypted, so they cannot read it.
• Authorities, when the law requires it.

We do not sell your data.

4. Required or optional

Nana Play is for people aged 18 and over. Your name and mobile number are needed to be a member; without them we cannot run your account. Your birthday is optional; without it you simply won't get the birthday treat. Offers by SMS are optional too.

5. How long we keep it

We keep your data while you are a member. If you ask us to close your account, we delete your name, number and birthday, and keep only the anonymous records of bills and rewards that we need for our accounts. If you don't use Nana Play for two years, we close your account the same way. A phone number that asks for a sign-in code but never joins is deleted after a day. Records of staff actions are kept for seven years. A phone's notification address is deleted when you turn alerts off, when you sign out on that phone, when it stops working, or when you close your account.

6. Your rights

You can ask us for a copy of the personal data we hold about you, in a common format you can take elsewhere, ask us to correct it, ask us to stop sending you offers, or ask us to close your account. Ask any manager at the bar, or contact our data protection officer at +60 12-897 4221. We reply within 21 days.

If you are not happy with our reply, you can contact the Personal Data Protection Department (JPDP).

7. Keeping it safe

Your sign-in codes are never stored in a readable form, staff actions are recorded, and only staff who need them can see member details.

If a breach of our systems puts your data at risk, we will tell the Personal Data Protection Commissioner and, where it could harm you, tell you too.

8. Changes

If we change this notice, we will update the date above and tell you in the app.