Privacy Policy

Last updated: 28 October 2026

Malaysia Cyclist (malaysiacyclist.com, and our accounts on Instagram, Facebook, TikTok and YouTube) is an independent cycling media site run by Juan Carlos Alonso from Ipoh, Perak, Malaysia. This policy explains what information we handle, why, and the choices you have. We follow the Personal Data Protection Act 2010 (PDPA).

Visiting the website

We measure traffic with a self-hosted instance of Plausible Analytics. It uses no cookies, does not track you across sites, and stores no personal identifiers. We only see aggregate figures, such as page views, referring sites, country and device type. You do not need to accept a cookie banner because we do not set tracking cookies.

Some pages embed YouTube videos. When you play an embedded video, Google may set its own cookies under the Google Privacy Policy.

Messages you send us

If you contact us by Instagram direct message or email, we use what you send only to reply to you and to improve the site (for example, correcting event details). We do not sell it or add you to a mailing list.

Race results and result cards

For some events we republish official results from the event's timing provider: name, bib number, category, finishing time and position. These results are already public. We may also generate a shareable result card for each finisher. If you would like your result removed or hidden, contact us with the event name and your bib number and we will remove it.

Ride videos

Our ride videos are filmed on public roads and at public events, with on-screen data from our own rider's devices (speed, power, heart rate, GPS route). Other riders, vehicles or number plates may appear incidentally. If you appear in a video and want it blurred or removed, contact us with a link and timestamp.

Our social media accounts and the apps that publish to them

We publish our own videos and posts to our own accounts on Instagram, Facebook, TikTok and YouTube. Publishing is done through each platform's official API (Meta Graph API, TikTok Content Posting API, YouTube Data API), via a scheduling tool that we host ourselves. When we connect an account to that tool, it receives an access token for that account only, so it can upload our videos, publish or schedule our posts, and read basic profile information and engagement statistics (views, likes, comments) for our own posts.

  • We only connect accounts that we own and operate.
  • We do not collect, store or process data about other users of those platforms, beyond what appears publicly on our own posts (such as comments).
  • Access tokens are stored on our own server, are never shared, and can be revoked at any time from the platform's settings.
  • We do not sell data or use it for advertising profiles.

Your use of Instagram, Facebook, TikTok and YouTube is governed by those platforms' own privacy policies.

YouTube API Services

Our upload and scheduling tools use YouTube API Services to upload videos to our own YouTube channel, set their titles, descriptions, chapters and thumbnails, and read our own channel's video statistics. By using these tools you are bound by the YouTube Terms of Service, and Google's use of data is described in the Google Privacy Policy. We store only the access tokens and the IDs of videos we upload, on our own server, and share YouTube data with no one. Access can be revoked at any time from Google's security settings page, after which the stored tokens stop working.

Other sites

We link to event organisers, registration pages and partner sites. Their privacy practices are their own. Tools that live on a subdomain of malaysiacyclist.com may publish their own privacy notice.

How long we keep information

Analytics are kept in aggregate. Messages are kept as long as needed to deal with your request. Race results stay published unless removal is requested.

Your rights

Under the PDPA you may ask to access or correct personal data we hold about you, or ask us to stop processing it. To make a request, email hello@malaysiacyclist.com or message @malaysiacyclistcom on Instagram. We aim to reply within 21 days.

Changes

If this policy changes, we will update this page and the date at the top.