PRIVACY POLICY

BR Innovate Future Sdn. Bhd.
Company Registration No.: 202401046400 (1592246-D)
Effective Date: 5 November 2024
Last Updated: 5 November 2024

1. Introduction

BR Innovate Future Sdn. Bhd. (“BRIF”, “we”, “our”, or “us”) is committed to protecting your personal data and privacy in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

This Privacy Policy explains how we collect, use, disclose, store, and safeguard your personal data when you engage with us through any of the following:

  • Our websites, digital platforms, and mobile applications
  • Product or service purchases (online or offline)
  • Affiliate, agent, or merchant partnership programs
  • Communication through WhatsApp, email, or live chat
  • Interactions as a visitor, customer, vendor, or business partner

By accessing our platforms, submitting information, or using our services, you consent to the data processing practices described in this Policy.

2. Personal Data Collected

2.1 Information You Provide to Us

  • Identification Data: Full name, NRIC/Passport, gender, date of birth, tax ID
  • Contact Data: Phone number, email, billing/shipping address
  • Account Data: Login credentials, passwords, user/member ID
  • Transaction Data: Payment methods, transaction IDs, invoice/order history
  • Communications: Emails, WhatsApp/live chat history, support tickets
  • Documents: NRIC/passport for verification, payment screenshots, application forms

2.2 Data Collected Automatically

  • Technical Data: IP address, browser/device info, OS, timezone
  • Behavioral Data: Click paths, session durations, referring URLs
  • Cookies: Functional, analytics, marketing, and personalization cookies

3. Purpose of Data Collection

3.1 To Provide Our Services

  • User registration, login, order processing
  • Product/service delivery, digital content distribution
  • Identity verification and fraud prevention
  • Account management and customer communication

3.2 For Customer Support

  • Respond to queries, complaints, and refund/return requests
  • Improve resolution time and service quality

3.3 For Marketing (with Consent)

  • Send product offers, promotions, service updates
  • Personalized offers based on purchase history
  • Email newsletters, surveys, and loyalty rewards (opt-out anytime)

3.4 Legal, Compliance & Audit

  • Financial recordkeeping (tax, audit, accounting)
  • Compliance with laws, regulations, and court orders
  • Prevention of fraud and security breaches

4. Disclosure of Personal Data

We do not sell or profit from your personal data. However, we may disclose it to:

4.1 Internal Parties

  • Directors, authorized employees, customer support, affiliate managers

4.2 External Partners

  • Payment Gateways: HitPay, FPX, GrabPay, Stripe
  • IT Providers: Hosting/cloud storage, CRM platforms
  • Analytics Tools: Google Analytics, Meta Pixel
  • Marketing Tools: Email delivery (e.g., MailerLite), WhatsApp API tools (e.g., respond.io)

4.3 Legal Entities

  • Regulatory authorities or courts as legally required

5. Data Security

We employ industry-standard security including:

  • SSL Encryption (256-bit) for all transmissions
  • Password hashing & role-based access
  • Firewall, malware protection, audit logs
  • Employee NDAs & regular security training
  • Data breach protocols and incident response

While we adopt strict measures, no online system is 100% secure. Users must also protect their own login credentials.

6. Your Rights Under PDPA

You have the right to:

  • Access your data
  • Correct inaccurate or outdated data
  • Withdraw Consent (for marketing or general processing)
  • Request Deletion of unnecessary data
  • Object to Processing for specific purposes (e.g., direct marketing)
  • Lodge a Complaint with the Personal Data Protection Commissioner

7. Data Retention

Your personal data will be retained:

  • As long as necessary for the original purpose
  • Up to 7 years for legal/accounting compliance
  • Until your account is closed or deemed inactive

Data no longer needed will be securely deleted or anonymized.

8. International Transfers

Your data may be stored or processed outside Malaysia. We ensure:

  • The destination country provides adequate protection
  • Data transfers are contractually regulated
  • Transfers are strictly for operational/business needs

Data no longer needed will be securely deleted or anonymized.

9. Third-Party Links

Our site or communications may contain links to external websites.

We are not responsible for their privacy practices. Always review their privacy policies before engaging.

10. Cookies and Tracking

We use cookies to:

  • Maintain essential site functions
  • Analyze visitor activity
  • Personalize your experience
  • Display relevant marketing

You can manage cookie settings via your browser or our cookie consent banner.

11. Changes to This Policy

We may update this policy due to:

  • Legal/regulatory changes
  • New technology or features
  • Improvements in data protection

Major changes will be announced via email or our website.

© 2026 BR Innovate Future Sdn. Bhd. All rights reserved.

This policy is governed by the laws of Malaysia.