Terms of Service

You are responsible for the credentials of your M.A.F Cloud account and any actions taken under it. Do not share API keys or passwords. If you suspect compromise, revoke keys from /dashboard/keys and reset your password immediately.

Accounts are secured with a username and password. You must use a valid email address for verification and account recovery.

Age requirement. You must be at least 13 years old (or the age of digital consent in your jurisdiction, whichever is higher) to use M.A.F Cloud. If you are under 18, you confirm that a parent or legal guardian has reviewed these terms and consents to your use of the service on your behalf.

About the operator. M.A.F Cloud is an independent homelab project operated by a single Malaysian developer (AmirSys / Arsyad) with parental and legal-guardian oversight where required under Malaysian law. Where any clause below would otherwise require a registered corporate entity to bind you, the operator’s parent or legal guardian stands in that role.

You are responsible for keeping your email address current. Verification emails and password reset links are only delivered to your registered email.

You may not use M.A.F Cloud to:

• Distribute pirated software, mods, or copyrighted content you don't have a license to.
• Run cracked or non-premium Minecraft authentication for paid public servers (private LAN parties are fine).
• Attack, DDoS, or abuse other systems from your nodes.
• Mine cryptocurrency, run botnets, or deploy any workload designed to harm third parties.
• Host content that is illegal in Malaysia or in the jurisdiction your VPS is located in.
• Resell capacity at a markup without prior written agreement.
• Attempt to bypass AI token limits, rate limits, or subscription plan restrictions.
• Use the AI assistant for generating harmful, abusive, or illegal content.

Violations may result in immediate account suspension without refund. We do not pre-screen what you run, but we will act on credible abuse reports.

M.A.F Cloud offers two hosting models depending on your plan selection.

• Managed Game Slots and Homelab LXC VPS: hosted directly on our homelab infrastructure with instant activation, shared public IP via NAT port-forwarding, and optional Pterodactyl Panel or M.A.F Panel.
• BYO VPS (Bring Your Own VPS): you supply and own your own machine (DigitalOcean, Hetzner, Contabo, and similar providers) while we provide the control-panel orchestration.

For hosted LXC VPS and Game Slots:

• Instances auto-suspend when the paid period (hour, week, or month) expires. Data remains safe and retained while suspended.
• Public network access is provided via NAT port-forwarding on a shared public IP. No dedicated public IP is provided unless requested.
• Root password and panel access credentials are delivered securely upon instant payment activation.

All prices are listed in Malaysian Ringgit (MYR). We offer flexible billing cadences for Game Slots and VPS hosting (hourly, weekly, and monthly rates) as well as BYO Panel plans (FREE RM0, PRO RM29.90, and STUDIO RM59.90).

AI tokens are allocated per plan period. FREE gets 1M tokens, PRO gets 10M tokens, and STUDIO gets 50M tokens per period. Tokens are deducted based on actual AI model usage.

Payments are processed manually via bank transfer or e-wallets. Send your payment receipt with your username on WhatsApp for instant 1-click activation.

Because compute resources, IP port allocations, and homelab capacity are reserved or provisioned the moment a payment is confirmed, all sales are generally final. The following refund rules apply.

• Infrastructure failure. If we cannot provision or maintain the service you paid for due to a fault on our end, you may request a full refund or pro-rated service credit within 7 days of payment by emailing with your payment receipt.
• Duplicate or wrong transfer. Accidental over-payments, duplicate transfers, or transfers to the wrong account reference are recoverable within 14 days once verified against our bank record.
• Voluntary cancellation. If you stop using the service before your paid period ends, the unused remainder is non-refundable but your account remains active until the period expires.
• Acceptable-use violation. Accounts suspended for violating section 02 (Acceptable use) are non-refundable.

Approved refunds are returned via the original method where possible (same bank account, same e-wallet). Bank processing time on the recipient side is outside our control and usually completes within 3 to 7 business days.

The AI assistant is powered by a third-party LLM provider. By using it you also agree to Google's Terms of Service.

• AI requests are rate-limited to 10 requests per minute per account.
• Tokens are deducted based on actual usage reported by the AI model. All models use tokens from your plan allocation.
• We do not store AI conversation content beyond what is needed for conversation history in your account.
• The AI can execute shell commands on your server on your behalf. You are responsible for reviewing AI-suggested commands before applying them.
• We are not liable for data loss caused by AI-executed actions on your server.

We store: account email, username, hashed password, hashed API keys, and metadata about your servers and nodes (names, IPs, status, AI conversation history). We do not read your world files or application data directly.

Where your data lives. Account metadata, authentication records, billing status, and AI conversation history are stored in our managed Supabase PostgreSQL database hosted in the Tokyo region (ap-northeast-1). Game server files, container workloads, LXC storage volumes, and on-disk backups are hosted locally on our homelab infrastructure in Malaysia, or on your own third-party host if you chose the BYO VPS model.

Server logs streamed through the live console pass through our gateway in transit; we do not persist them server-side beyond what your container's stdout already retains.

You can request full account deletion from settings. We will wipe your account row, API keys, nodes, AI history, and any cached metadata within 30 days. Backup retention follows the same 30-day window.

These terms, and any dispute or claim (including non-contractual disputes or claims) arising out of or in connection with them or their subject matter or formation, are governed by and construed in accordance with the laws of Malaysia.

The parties irrevocably agree that the courts of Malaysia shall have exclusive jurisdiction to settle any dispute or claim arising out of or in connection with these terms, save that we may bring proceedings against a defaulting user in any court of competent jurisdiction in the user's place of residence to recover amounts owed.

Nothing in this clause limits your rights under the mandatory consumer protection laws of your own jurisdiction where those laws apply.

The service is provided "as is," with no uptime SLA. Your servers run on your own VPS, so availability depends on your machine and provider. We are not liable for lost worlds, lost players, lost revenue, or downtime. AI-generated output is not guaranteed to be accurate or safe to apply without review.

To the maximum extent permitted by Malaysian law, our total aggregate liability to you for all claims arising under or in connection with these terms is capped at the total amount you paid us for the service in the 3 months immediately before the claim arose.

We will update these terms when needed and email registered users if the change materially affects how you use the service. Your continued use after a 30-day notice constitutes acceptance of the updated terms.