Privacy notice

Bida Nào is operated by Nao La Labs Pte. Ltd. (UEN 202632597C), a company registered in Singapore. You can reach us at support@bidanao.app about anything in this notice, including data-protection requests.

Our Data Protection Officer, as required by the PDPA, can be reached at the same address: support@bidanao.app.

If you ask to be notified when we launch, we store your email address. If you send a venue enquiry, we store the name, venue name, contact details and message you provide.

We use these only to reply to you and to tell you when the app opens. We do not sell them, and we do not use advertising or tracking cookies on this site.

Your account: name, mobile number, email address and gender. Gender is optional, collected for future events, and never shown to venues. Your mobile number is verified once with a one-time code sent over WhatsApp, or by text if you ask for it. Our messaging provider handles the number only to deliver that code.

How you use it: the queues you join, the bookings you make, and the matches and frames you score.

Profile photo and nickname: both optional. If you set them, they are shown beside your name to players you match with — never to venues. Photos and nicknames are screened before they appear, and you can change or remove them in the app at any time.

Location: only if you allow it. We use it to sort venues by distance and suggest where you are playing; to fill in your country when you sign up, if you have already allowed location; to check your country when you change it in the app; and to fill in the address of a venue you add. For the country check and for a venue you add, your position is sent to our server and looked up on OpenStreetMap’s address service; we keep the country, or the venue’s address and map pin, not your position. A venue you add records that you added it until we have checked it. You can refuse and still use the app.

Venue reviews: if you rate a venue you have played at, your stars and comment are shown publicly, in the app and on that venue’s page on bidanao.app, with your nickname, or your first name and the initial of your last name. Comments are screened before they appear, and the venue may reply. You can edit or delete your review at any time; deleting your account deletes it.

Camera and photos: only if you allow them. Scanning another player’s QR code to join a match is processed on your phone and never uploaded. If you choose to contribute a photo of a venue, that photo is uploaded and stored; if we approve it, it may be shown on that venue’s page in the app, without your name attached.

Notifications: if you allow them, a device token so we can tell you when it is your turn.

Screens you open: the app records which of its screens you open and when, with the app version and the type of phone system, so that we can see where the app is hard to use and improve it. Before you sign in, these records carry only a random number the app keeps on your phone; once you sign in, they are linked to your account. They contain nothing you type and no location. We keep them for 180 days, then delete them. They stay in our own database: we do not use an outside analytics service, and we never sell or share them.

When you join a queue or make a booking, that venue sees the display name on your account and your booking or queue details, so their staff can call you when a table is ready.

Venues do not see your phone number or email address. The one exception is outside Singapore: before your first queue place or booking there, the app asks for a number the venue can reach you on, and that venue sees it on its queue and booking lists. Venues also cannot see your history at other venues. Your rating appears only where described under “Leaderboards and your player page” below.

Once your BidaRate settles, it is ranked on our public leaderboards — on bidanao.app and on the board of the venues where you play. Your name is shown there only if you switch it on in the app; otherwise your place is listed without your name.

The same setting also publishes a public player page at bidanao.app/p/ followed by your nickname. It shows your nickname, your ratings (including one still forming), your home venue, your best moments (such as break-and-runs, run-outs and your highest break) and your last few results with win or loss. An opponent on that page is named only if they have switched the same setting on themselves.

You can switch it off at any time. That removes your player page and takes your name off the leaderboards; your place stays on the boards without your name.

We keep your account data for as long as your account exists. Queue, booking and match records are kept while they are useful to you and to the venue you played at. Records of the screens you open are deleted after 180 days, or with your account if you delete it first.

If a venue has blocked an account for repeated no-shows, that record can outlive the account, so that the block cannot be avoided simply by signing up again.

If you confirm a friend’s match result in your browser without an account, we keep the email address you confirmed for up to 7 days, so the result can be added to your account if you sign up with that email. After that we delete the address. The friend who invited you sees only a shortened form of it, such as j•••@gmail.com.

You can view and change your name, phone number and notification preferences in the app under Account.

You can delete your account from the same screen. Deleting removes your account and your personal data from our systems. Matches you played with other people remain, with your name removed, because they are also part of the other players’ records. If you no longer have the app, you can request deletion here.

You may also ask us for a copy of your data, ask us to correct it, or withdraw consent, by emailing support@bidanao.app. We will respond within a reasonable time, as the PDPA requires.

This website uses no advertising or tracking cookies, and we don’t profile visitors or share anything with ad networks.

The app stores a sign-in token on your device so you stay signed in, your theme and language choices, and the random number described under “Screens you open”. The app contains no advertising or third-party analytics code.

A venue that takes a paid plan gives us a billing contact and an email address for receipts, and we keep a record of what was paid and when, so that we can take payment, issue receipts and answer questions about a charge. Payment itself is handled by a PCI-compliant payment provider — we never see or store full card details.

Pro, for players. If you subscribe to Pro in the app, Apple or Google takes the payment — we never see your card. A subscription-management provider that works for us receives your account ID and the status of your subscription from the store, so that we know when to switch Pro on or off. We keep a record of your plan, the store it was bought through, its reference and its dates, for as long as you have the account.

Our website offers an automated assistant that answers venue owners’ questions. If you use it, we store the conversation, the hall it relates to and any contact details you choose to give. We use them to answer you, to follow up on a claim or a request you make, and to improve our answers. Your messages are processed by an AI service provider to generate the replies; this may take place outside Singapore, under the same protection described below, and the provider does not use them to train its models. A conversation with no contact details is deleted after 90 days, and others after 12 months. You can delete your conversation at any time with “Start over” in the chat, or ask us to. More in About the Bida Nào assistant.

When you claim a hall’s listing we store your name, your role, your work email and the hall’s UEN, to check that you run the hall and to set up your login.

Our systems run on hosting and database providers that may process data on servers outside Singapore. Anyone who processes data for us is required to protect it to a standard comparable to the PDPA, and may use it only to provide that service to us.

Bida Nào is also used by venues outside Singapore and by the people who play at them. For a venue outside Singapore we hold its login email, its name and address, its phone number if it gives one, and what it records in its dashboard. If it pays for a plan, we also hold its billing contact, the email for its receipts and its business tax number where one is required.

For a customer of such a venue we hold the name and phone number they give when they join its queue or book a table on its web page, or that the venue types in for them, and the record of that queue place or booking.

We use this data to run the venue’s page, queue and bookings, to let the venue see who is waiting or booked, to take payment and issue invoices, and to answer requests for help. We do not sell it, and we do not use it for advertising.

For the customer details a venue records, the venue decides why they are collected, and we process them on its behalf. If your question is about a venue’s own use of your details, ask the venue first; we will help it answer you.

Our main database is hosted in Singapore. If you are outside Singapore, using Bida Nào therefore means your data is transferred to Singapore and processed there and by the providers below. We require each provider to protect it to a standard comparable to the PDPA and to use it only to provide its service to us.

The providers that process data for us are: Supabase, our database and logins (Singapore); Cloudflare, which serves our website (worldwide); Stripe, card payments; Resend, the emails we send; Twilio, WhatsApp messages, text messages and verification calls; Google, our email inbox; and the provider that runs our venue help chat. Stripe, Resend, Twilio, Google and the help chat’s provider may process data in the United States. We update this list before adding or replacing a provider.

We keep a venue’s data while its account exists. Queue and booking records are kept while they are useful to the venue and the player. Billing records are kept for at least five years, as Singapore law requires.

Laws such as Malaysia’s Personal Data Protection Act, the UK and EU General Data Protection Regulation and Australia’s Privacy Act give you rights over your personal data: to see it, to correct it, to have it deleted, to object to or limit its use, to withdraw your consent, and in some places to receive a copy in a form you can take elsewhere and to complain to your data-protection authority. We honour these rights wherever you are.

To use any of them, email support@bidanao.app. A person replies within one working day, and we act on your request within the time your law allows.

If we change how we handle personal data, we will update this page and the date at the top. Significant changes will be announced in the app.

See also our terms of use.