Our data-protection practices are built around Malaysia’s Personal Data Protection Act 2010 (as amended 2024). The notes below summarise our approach — always confirm current details with your legal adviser.
Data Protection Officer
A designated Data Protection Officer oversees our compliance with the PDPA and is named in our internal privacy notices.
Breach Notification
In the event of a data breach, we notify the Personal Data Protection Commissioner within 72 hours, and affected individuals where there is a significant risk of harm.
Data Residency
Platform data is hosted on infrastructure based in Singapore; the basis for this cross-border transfer is documented in our internal privacy notice.
Retention & Cookies
We apply defined retention periods per data category, enforced through scheduled review, and use cookies only for essential site functionality and anonymised analytics — never for third-party advertising.
Questions about data protection? Email [email protected]