PART B – FULL PRIVACY POLICY (PDPA EXTENDED)

1. LEGAL BASIS

This Privacy Policy complies with:

• Personal Data Protection Act 2010 (Malaysia).

2. TYPES OF DATA COLLECTED

We may collect:

Personal Data

• Name
• Email
• IP address
• Device information

Transaction Data

• Payment reference via Bayarcash
• Purchase history
• Credit usage logs

Usage Data

• Prompt text
• Generated outputs
• Login timestamps

3. PURPOSE OF COLLECTION

Data is used for:

• Service provision
• Credit tracking
• Fraud prevention
• Affiliate tracking
• Legal compliance

4. DATA RETENTION

• Generated outputs auto-deleted within 24 hours
• Transaction data retained for tax compliance
• Logs retained for security monitoring

5. CROSS-BORDER PROCESSING

AI infrastructure may process data outside Malaysia.

By using the Platform, you consent to such transfer.

6. DATA SECURITY

We implement:

• SSL encryption
• Password hashing
• Limited admin access
• Server-level safeguards

However, no online transmission is 100% secure.

7. USER RIGHTS UNDER PDPA

Users may request:

• Access to personal data
• Correction
• Deletion
• Withdrawal of consent

Subject to service limitations.

ADDITIONAL PRIVACY EXPANSION

DATA BREACH RESPONSE POLICY

In the event of a confirmed data breach:

• We will investigate promptly
• Take reasonable corrective measures
• Notify affected users if required under Malaysian law

However, we are not liable for third-party hacking beyond reasonable safeguards.

COOKIE & TRACKING DISCLOSURE

We may use:

• Essential cookies
• Analytics tracking
• Affiliate tracking cookies

Users may disable cookies but functionality may be limited.