Privacy Policy

This policy explains how iBelanja Group Sdn. Bhd. ("iBelanja", "we") handles personal data across ibelanja.my and our survey and cashback platform (the "Service"). We handle personal data in line with Malaysia's Personal Data Protection Act 2010 (PDPA).

1. Data we collect

• Account details: name, phone number, email address and a hashed password or PIN.
• Survey and application information you submit, including supporting documents such as payslips or identity documents.
• Credit-related information from credit reporting agencies, where you have consented to a credit check.
• Payout details needed to process cashback or withdrawals.
• Messages we exchange with you by WhatsApp, SMS or email, and basic technical data such as IP address and device information.

2. How we use it

• To run the Service, verify your identity and process your applications, cashback and withdrawals.
• To contact you about your account, including one-time codes and status updates.
• To prevent fraud and meet legal obligations.
• To improve the Service.

3. Google user data (Google Calendar)

iBelanja staff and consultants may connect their own Google account so the Service can schedule appointments on their Google Calendar. When connected, we request:

• Calendar events (calendar.events): to create, update and delete appointment events on the connected calendar.
• Email address (userinfo.email): to show which Google account is connected.

We use this access only to provide the appointment scheduling feature. We do not use Google user data for advertising, do not sell it, and do not share it with third parties except service providers that host our systems. Access tokens are stored encrypted. You can disconnect at any time from the Service's settings, or revoke access at myaccount.google.com/permissions. iBelanja's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

4. Who we share data with

Only with providers that help us deliver the Service (cloud hosting, messaging, credit reporting and payment partners), and with authorities where the law requires. We do not sell personal data.

5. Storage and security

Data is stored on cloud infrastructure with access controls and encryption of sensitive fields. We keep it for as long as needed for the purposes above or as the law requires, then delete or anonymise it.

6. Your rights

You may ask to access or correct your personal data, or withdraw consent, by contacting us. Withdrawing consent may limit what the Service can do for you.

7. Contact

iBelanja Group Sdn. Bhd., TRX Exchange 106, Unit L33.05, Jalan Tun Razak, IMBI, 55100 Kuala Lumpur. Email: admin@ibelanja.my.