8. Personal Information and Data Protection Policy

The Company will collect, use, store, disclose, and protect users’ personal data in accordance with Malaysia’s Personal Data Protection Act 2010 (PDPA) and other applicable laws.

For the purpose of providing and managing platform services, the Company may process, within a reasonable and necessary scope, users’ names, contact details, delivery addresses, payment information, transaction records, device information, and other data related to accounts, orders, payments, logistics, customer service, or after-sales support.

The above data may be used for account registration and verification, order fulfilment, payment processing, logistics delivery, customer service, after-sales support, marketing notifications, risk control, fraud prevention, dispute resolution, compliance review, and fulfilment of legal obligations. For the above purposes, the Company may disclose relevant data within the necessary scope to payment institutions, logistics service providers, technical service providers, professional advisers, affiliated service providers, regulatory authorities, or law enforcement authorities.

Users shall ensure that the personal data they provide to the platform is true, accurate, complete, and timely updated. Users may request access, correction, or withdrawal of consent from the Company in accordance with applicable law; however, where the relevant data remains necessary for order fulfilment, after-sales handling, compliance review, dispute resolution, or fulfilment of legal obligations, the Company may continue to retain or process such data within the scope permitted by law.