STARR KL
Last updated: September 2026
STARR KL ("STARR", "we", "us") runs a members-only nightclub in Kuala Lumpur, Malaysia, and the STARR KL app that goes with it. This page explains what information the app collects, why, and what you can do about it. We've tried to write it in plain language rather than legal jargon — if anything here is unclear, email us and we'll explain it properly.
This app is for our 18+ nightclub members. STARR KL is not directed at children, and we do not knowingly collect information from anyone under 18. If you believe a minor has given us information, contact us and we'll delete it.
We collect the following, and nothing else:
The app never takes a payment and never sees a card. Table deposits are transferred by you, from your own banking app, to the club's bank account. No card number, no payment method and no payment credential of any kind is entered into this app or stored by STARR.
We never collect your home address. The app has an optional "home shortcut" that gives you a discount when you order a ride home through Grab. That shortcut is saved only on your own phone — it is never sent to or stored on STARR's servers. When you tap the ride button, your saved address is passed directly from your device to Grab. We simply never see it.
Your mobile number is part of your membership. It is how the club reaches you about your own table on the night, and it is how another member can invite you to theirs without having to know your email address.
Invite search is deliberately narrow. A member searching by name is shown your name and only the last three digits of your number — never the whole number. A member who already knows your full number can search by it, and is shown that the number is on a membership, but is not shown your name. Your name and your number are only put together for someone else once you have accepted a seat at their table yourself.
When you set up your membership, the app asks you to state your gender, and offers two options: female and male. You tell us; we never guess, infer or detect it from your name, your photo, your bookings or anything else.
We collect it for one reason. STARR sometimes reserves an offer for women — a free drink on ladies' night, for example. Your stated gender is what decides whether that offer appears in your app. Nothing else in the app reads the field. It is not used to advertise to you, it is not shared with anyone, and it is not sold.
You can change it at any time under Edit profile on the Account tab, and it is deleted with the rest of your account if you delete your membership.
If a member of bar staff believes the account in front of them does not match the person claiming an offer reserved for women, they can record that observation for a manager to look at later, away from the bar. The drink is still poured. Recording it does not block your account, does not cancel your voucher, does not cost you points and does not notify you. A manager decides; the software never does.
Your information is visible to STARR staff who need it to do their job (e.g. door staff confirming entry, hosts managing your table). We do not sell your data to anyone.
Grab is mentioned above only because of the on-device ride-home shortcut. STARR's servers do not share any data with Grab — the connection happens directly from your phone, and Grab only ever receives what you choose to send it in that moment.
If you allow notifications, your phone gives the app a push token — an address for your device, issued by Apple or Google, that lets a message reach this installation of the app. We store it against your membership so we know where to send yours.
What we send to it: announcements about the club's nights; free gifts dropped to members, which are limited in number and go to whoever claims them first; a ping when your guests arrive at the door; alerts about your own bookings; and, if you want it, a monthly summary of your points.
What we do not do with it. The token is not an advertising identifier. It is not the identifier Apple or Google give to advertisers. We do not use it to track you, we do not share it with advertisers or data brokers, and it is not combined with anything from outside this app.
You control it. Notifications are optional — the app works normally if you refuse them, and refusing does nothing else. On the Account tab, under Preferences, you can turn Table drops, Door alerts and the Point summary on and off independently, and you can withdraw notification permission entirely in your phone's own settings. The token is deleted along with everything else when you delete your account, and once it is gone we cannot notify you.
When the app crashes or hits an error, it sends a technical report to Sentry, a crash-reporting service we use to find and fix faults. Without it, an app that fails on your phone fails silently and we never learn about it.
What a crash report contains: the error itself and the technical trace of where in our code it happened, your device model, your operating system version, and the version of the STARR KL app you are running. The app also sends a small sample of timing measurements — roughly one session in five — so we can see which screens are slow.
What a crash report does not contain. We have switched off, deliberately and individually, every feature of this service that could carry your personal information off your phone:
Because a report carries nothing that identifies you, we cannot connect one to your membership, and deleting your account does not require us to go looking for your crash reports — there are none tied to you to find.
Crash reporting cannot be switched off from inside the app. It runs only in the published version; it is off while the app is being developed.
We keep your information for as long as your account is active. If you delete your account, your member record and everything attached to it — bookings, points history, vouchers, party records, door scans and your push token — is deleted immediately and permanently from our database.
The club's own business records — its accounting of what was spent and paid on a given night, and its own record of entry — exist independently of your app account and are not part of what the app deletes. See Delete your account for the full picture.
STARR KL operates in Malaysia and handles personal data in line with the Personal Data Protection Act 2010 (PDPA). In plain terms: we only collect what we need to run the club and the app, we keep it secure, we don't sell it, and you can ask us what we hold and have it deleted.
Your data is stored with Supabase, a hosted database provider, with access controls that restrict each member's data to that member and to staff who need it for their role. No system is perfectly secure, but we take reasonable steps to protect your information from unauthorised access.
If we make material changes to how we handle your data, we'll update this page and the "Last updated" date above.
STARR KL is responsible for the personal information described on this page. For any question about your information, to ask what we hold about you, or to make a privacy request, email support@starrofficial.com.