Terms of Service.

You're responsible for the credentials of your M.A.F Cloud account and any actions taken under it. Don't share API keys or passwords. If you suspect compromise, revoke the keys from /dashboard/keys and reset your password.

You must be at least 13 years old (or the age of digital consent in your country, whichever is higher).

You may not use M.A.F Cloud (Managed or BYO) to:

• Distribute pirated software, mods, or copyrighted content you don't have a license to.
• Run cracked / non-premium Minecraft authentication for paid public servers (private LAN parties are fine).
• Attack, DDoS, or abuse other systems from your nodes.
• Mine cryptocurrency, run botnets, or any non-Minecraft workload.
• Host content that's illegal in Malaysia or in the jurisdiction your VPS is in.
• Resell capacity at a markup without prior written agreement.

Violations may result in account suspension. We don't pre-screen what you run, but we will act on credible reports.

On the BYO tier you supply your own VPS. That means:

• You're responsible for your VPS provider's terms (DigitalOcean, Hetzner, etc).
• You're responsible for OS security, firewall, kernel updates.
• The M.A.F Cloud agent runs as root and uses the host Docker socket. You're trusting it (and us) with that access.
• If you uninstall the agent, your servers stop being orchestrated. Worlds remain at /var/mcdata on your VPS.
• We will not access your VPS outside the agent protocol. We can't recover data if you wipe your own machine.

On the Managed tier we provide the hardware. That means:

• We're responsible for keeping the host OS and Docker patched.
• SLA: 99.5% monthly uptime on Studio and Network tiers. Hobby is best-effort.
• We take daily backups (retention per tier). Restoring from a backup is self-serve via the panel.
• If we suspend a server for ToS violation, world data is held 14 days, then deleted.

Monthly cycles. Upgrades prorate to the day. Downgrades take effect at the next cycle. We use Stripe for cards (planned) and FPX for Malaysia (planned). Until those land, billing is manual invoice via email. No charges happen on the free tier.

We store: account email, hashed password, hashed API keys, and metadata about your servers and nodes (names, IPs, status). We don't read your world files. Server logs streamed through the live console pass through our gateway in transit; we don't persist them server-side beyond what your container's stdout already has.

You can request account deletion from settings. We'll wipe your row, your keys, your nodes, and any cached metadata within 30 days.

The service is provided "as is." We're not liable for lost worlds, lost players, lost revenue, or downtime beyond a proportional refund of the affected billing period (Managed tier SLA only).

We'll update these terms when needed and email you if it materially affects how you use the service. Your continued use after a 30-day notice is consent to the new version.