Ringkasan Bahasa Malaysia
DU2BAO2 memproses data akaun, penjual, penyenaraian, transaksi, laporan dan data teknikal untuk mengendalikan dan melindungi platform. Maklumat awam dan rekod peribadi diasingkan mengikut keperluan. Data tertentu boleh disimpan sekurang-kurangnya tiga tahun atau lebih lama jika diperlukan bagi pertikaian, penipuan, cukai atau undang-undang.
1. Data controller
The data controller/operator is [INSERT LEGAL / BUSINESS NAME], Registration No. [INSERT IF APPLICABLE]. Privacy contact: [INSERT PRIVACY EMAIL].
2. Personal data we may collect
- Account and authentication information, display name, email, telephone number and profile information.
- Seller verification information including legal identity, address, business details, payout information and verification documents where required.
- Listing information, photographs, serial numbers, receipts, authenticity records and product details.
- Transaction information including order references, payment status, payout status, delivery/tracking, refunds, chargebacks and disputes where Protected Checkout is used.
- Marketplace communications, reports, support records and fraud investigation material.
- Technical information such as IP address, browser/device information, security logs, cookies and session identifiers.
3. Purposes of processing
- Create and secure accounts and verify sellers.
- Publish legally required seller and listing information.
- Operate listings, messaging and transactions.
- Facilitate payments, payouts, delivery and DU2BAO2 Protection where enabled.
- Authenticate selected items and investigate disputes, fraud, counterfeit or stolen goods.
- Comply with tax, e-Invoicing, marketplace record-keeping and lawful requests.
- Improve security, reliability and user experience.
4. Public and private information
Seller information required to be publicly disclosed may appear on listings. Identity-verification documents, private account records and sensitive payout information are not intended to be public merely because DU2BAO2 must retain them for verification or compliance.
5. Sharing and service providers
DU2BAO2 does not sell personal data to data brokers. Data may be shared where reasonably necessary with payment providers, banks, couriers, authentication providers, identity/login providers, hosting/cloud/security providers, professional advisers and competent authorities.
6. Payment information
Where an independent payment provider is used, DU2BAO2 should minimise direct storage of full payment-card information. DU2BAO2 may retain transaction identifiers, payment status, refund, payout and settlement information required to administer the marketplace.
7. Cross-border transfers
Some service providers may process or store data outside Malaysia. DU2BAO2 will take reasonable steps to ensure transfers are handled in accordance with applicable PDPA requirements and appropriate contractual, organisational or technical safeguards.
8. Retention
DU2BAO2 retains data only as long as reasonably necessary or legally required. Certain marketplace records may be retained for at least three years. Data may be retained longer for unresolved transactions, chargebacks, fraud, counterfeit investigations, tax/accounting, litigation or regulatory requests. Account closure does not require immediate deletion of records that must lawfully be retained.
9. Security
DU2BAO2 uses reasonable technical and organisational safeguards which may include authentication, restricted administrative permissions, database access controls, Row Level Security, encryption where appropriate, logging, backups and monitoring. No internet-connected system can be guaranteed completely secure, and DU2BAO2 does not represent that Supabase RLS or any other single control makes data immune from unauthorised access.
10. Personal data breaches
DU2BAO2 will assess and respond to suspected personal data breaches and, where applicable legal thresholds are met, make required notifications to the Personal Data Protection Commissioner and affected individuals within the periods required by Malaysian law.
11. Your rights
Subject to the PDPA and applicable exceptions, users may request access or correction, withdraw consent where relevant, limit certain processing, opt out of direct marketing and exercise other applicable rights. DU2BAO2 may offer account deletion, but legally required transaction, fraud, dispute and regulatory records may be retained.
12. Cookies, analytics and fraud detection
DU2BAO2 may use cookies, session storage, analytics and automated risk indicators for security, account sessions, preferences, marketplace performance and fraud detection. Significant enforcement decisions may be subject to human review where appropriate.
13. Data Protection Officer
Where DU2BAO2 becomes legally required to appoint and register a Data Protection Officer, it will do so and publish appropriate contact information.