Privacy Policy

Last updated 7 September 2026 · Notice under the Personal Data Protection Act 2010 (Malaysia)

1. What we collect

• When you register for an event: your name, email address and WhatsApp number, and which page you came from.
• When you buy: the above, plus your order, the amount paid, the payment method and the payment reference. We never see or store your full card number or bank login — those go directly to Billplz or HitPay.
• When you attend or use a product: which sessions you joined, what you watched, your questions in Q&A or chat, and recordings of live sessions you take part in.
• When you contact us: your messages and our replies, by email or WhatsApp.
• From your browser: basic technical data such as IP address, browser type and pages visited, through Cloudflare, which hosts and protects our site.

Giving us your name, email and WhatsApp number is voluntary, but without them we cannot register you, send you join links, or deliver what you bought.

2. Why we use it

Purpose	Examples
To deliver what you asked for	Send your join link, session reminders, replays, receipts and instalment payment links
To take payment and keep accounts	Create your bill, match the payment to your order, issue a receipt, keep tax records
To support you	Answer questions, handle refunds and complaints
To tell you about our other training	Emails or WhatsApp messages about future events and programmes — only with your consent, and you can stop any time
To run and protect the site	Prevent spam and abuse, fix faults, count visitors
To meet the law	Keep records the law requires; respond to lawful requests

3. Consent and marketing messages

• Registering or buying is your consent to us using your data for the purposes in section 2.
• WhatsApp messages are sent only to a number you gave us, and only after you ticked the WhatsApp box. Reply STOP to any message to stop them.
• Every marketing email has an unsubscribe link. Or email us and we will remove you.
• Stopping marketing does not stop the messages you need to receive what you paid for (join links, receipts, payment links).

4. Who we share it with

We share only what each service needs to do its job. We do not sell your data.

Who	What they do	Where they process data
Billplz	Takes MYR payments (FPX, card)	Malaysia
HitPay	Takes SGD payments (PayNow, card)	Singapore
Meta (WhatsApp Cloud API)	Delivers our WhatsApp messages to you	Meta’s servers, which may be outside Malaysia
Cloudflare	Hosts and protects the website; routes our email	Global network
Our email service provider	Sends our emails to you	May be outside Malaysia
Zoom or a similar platform	Runs live online sessions	May be outside Malaysia
NestEggAdvisor	Gives you the software access included in some products (we pass your email so your access can be switched on)	Malaysia
Our accountant, lawyers, and authorities	Only where the law or a legal process requires	Malaysia

5. Data going outside Malaysia

Some of the services above run outside Malaysia. If you are in Singapore, your data is collected in Singapore (for example by HitPay) and sent to us in Malaysia. By registering or buying, you agree to these transfers. We only use providers that protect data to a standard at least as good as the PDPA requires.

6. How long we keep it

Data	Kept for
Event registration (no purchase)	Up to 24 months after the event, then deleted or made anonymous
Orders, payments, receipts	7 years, as Malaysian tax and company law requires
Support messages	Up to 24 months after the last message
Session recordings	For as long as the product is offered, then deleted
Marketing list	Until you unsubscribe, then only a “do not contact” record so we do not message you again

7. Your rights

Under the PDPA you may:

• Access the personal data we hold about you;
• Correct it if it is wrong or out of date;
• Withdraw consent to marketing at any time;
• Limit how we use your data, where the law allows;
• Ask us to delete data we no longer need to keep.

Email [email protected] with the subject “PDPA request”. We may ask you to confirm who you are. We will reply within 21 days. The law lets us charge a small fee for an access request; we do not normally charge one.

8. How we protect it

Our site is served over HTTPS. Payment details are handled only by the payment provider. Registration and order data are stored on servers with access limited to people who need it. No system is perfectly secure, but we take reasonable steps and will tell you if a breach affects you.

9. Children

Our training is for working adults. We do not knowingly collect data from anyone under 18.

10. Changes

We may update this notice. The date at the top shows the current version. If a change matters to you, we will tell you by email or WhatsApp.

11. Contact

Konsortium Majumas Sdn. Bhd. (Company No. 201201036931)
Address: No. 01-02, Jalan Molek 1/31, Taman Molek, 81100 Johor Bahru, Johor, Malaysia
Email: [email protected]
Phone: 011-5589 1833