Privacy Policy

Commitment to PDPA

We are committed to complying with the Malaysian Personal Data Protection Act 2010.

All processing of personal data will follow the PDPA principles:

• General Principle
• Disclosure Principle
• Security Principle
• Retention Principle
• Data Integrity Principle
• Access Principle

What Personal Data We Collect

We may collect the following personal data when you use our platform:

• Name
• Email address
• Mobile number
• Date of birth (if required)
• Payment details (processed securely via payment gateways)
• Delivery or billing address
• Demographic information
• Device data, IP address, cookies
• Behavioural data such as voucher usage, purchase history, click data, and browsing patterns
• Any other information you voluntarily provide to us

How We Collect Your Data

We collect data through:

• Account registration
• Voucher purchase
• Voucher redemption
• Website and app interactions
• Cookies and tracking tools
• Customer service communications
• Third-party integrations (e.g., payment gateways, analytics tools)

Consent for Marketing & Data Sharing

By using our platform, you hereby give explicit consent for:

• Use of your personal data for our own marketing
• Use of your personal data for third-party marketing
• Sharing of your data with partners for promotional purposes
• Use of behavioural data (e.g., browsing, purchases) for personalised ads
• Combination of your data with external marketing tools (e.g., Facebook Ads, Google Ads)

Disclosure to Third Parties

We may disclose your data to the following, where relevant:

• Merchant Partners for voucher redemption
• Payment gateway providers (if necessary)
• Professional advisers (legal, financial, technical)
• Regulators or government agencies (if legally required)

We will not sell your personal data to third parties.

Data Storage & Security

We implement reasonable technical and organisational measures to protect personal data, including:

• Secure servers
• Access controls
• Regular security audits
• Limited data access by authorised staff only

However, no system is 100% secure, and you agree that data transmission is at your own risk.

Retention of Personal Data

We retain personal data only as long as necessary for:

• Fulfilling the purpose it was collected for
• Legal, accounting, and reporting obligations
• Protection against disputes or fraud

After retention periods expire, data will be securely deleted.

Accuracy of Personal Data

• You are responsible for providing accurate and up-to-date information.
• We may request verification for certain transactions.

Transfer of Data Outside Malaysia

• If required, we may transfer your data outside Malaysia (e.g., for cloud hosting or analytics).
• We ensure such transfers comply with PDPA requirements.

Updates to This Privacy Policy

• We may update this Privacy Policy from time to time.
• Continued use of our platform means you accept the updated version.