Legal

Privacy Policy

Last updated: 5 August 2026

This policy explains how Wii Event Malta (“Wii”, “we”) handles personal data on our website, ticketing platform and mobile apps. We operate from Malta and process data in line with the EU General Data Protection Regulation (GDPR).

What we collect

  • Ticket purchases: your email address, the tickets you buy, order amounts and event attendance (check-in scans). Card details are processed entirely by our payment provider, Revolut — they never reach our servers.
  • Account: your email address (used for one-time sign-in codes), saved events, and — if you enable notifications in the mobile app — a device push token.
  • Ambassadors: name, contact details and payout details (IBAN / Revolut / PayPal), stored encrypted, used solely to pay commissions.
  • Referrals: if you open an ambassador link, a referral code is stored in a cookie so the ambassador is credited if you buy a ticket.

What we use it for

  • Delivering tickets, entry QR codes and purchase receipts by email (contract performance).
  • Door check-in and fraud prevention at events (legitimate interest).
  • Optional event notifications you switch on in the app (consent — revocable anytime).
  • Paying ambassador commissions (contract performance).

We do not sell personal data, and we do not run third-party advertising or cross-app tracking.

Who processes it

We use Revolut (payments), Supabase (database hosting, EU region), Vercel (website hosting), Brevo (transactional email) and Expo (mobile push delivery). Each processes data only on our instructions.

Retention

Order and ticket records are kept as financial transaction records for the period required by Maltese tax and accounting law. Saved events, push tokens and profile details are kept until you delete them or your account.

Deleting your account

In the mobile app: Profile → Delete account. This erases your saved events, registered devices and profile details immediately. Purchase records are retained as required by law. You can also request deletion by emailing zedsi85@gmail.com from the address you used to buy — we action requests within 30 days.

Your rights

Under the GDPR you can request access, correction, deletion, restriction or portability of your data, and object to processing based on legitimate interest. Contact zedsi85@gmail.com. You may also lodge a complaint with the Office of the Information and Data Protection Commissioner (IDPC), Malta.

Contact

Wii Event Malta · zedsi85@gmail.com