Privacy Notice
Version 2026-11-draft · DRAFT FOR LEGAL REVIEW — not yet in force. A Bahasa Melayu version must be published alongside this notice before launch (PDPA section 7(3)).
This notice explains how NAGAMING ENTERPRISE (Registration No. [●]), trading as BUDDY ("BUDDY", "we") processes personal data under the Personal Data Protection Act 2010, as amended ("PDPA").
1. Data we collect
| From | Data |
|---|---|
| Customers and enquirers | Name, mobile number, email, address and location, property and site details, photos of your sink area (if provided), order, payment-reference, delivery, installation, serial-number, warranty and service records, and communications with us. |
| Affiliates | Name, contact details, identification details needed for tax and payment verification, bank account details, referral and commission records, and portal activity. |
| Installers | Name, company, contact details, service areas, competency or insurance records, job records, completion photos, and payment records. |
| Website visitors | Referral-link codes stored in a cookie for 30 days, basic technical logs (IP address, device, pages visited) for security and fraud prevention. |
2. Why we use it
(a) To respond to your enquiry and assess whether your site is suitable.
(b) To quote, sell, invoice, collect payment, deliver, install, and provide warranty and service.
(c) To attribute a sale to the Affiliate who introduced you, and to calculate and pay commission.
(d) To assign and pay installers, and to verify installations.
(e) To keep business, tax and audit records required by law.
(f) To prevent fraud, abuse and security incidents.
(g) Only if you opt in: to send product updates and offers. You can opt out at any time.
3. Who we share it with
(a) The Affiliate who introduced you. They see your name, enquiry and order status only — not your payment details.
(b) The installer assigned to your job. They see only your contact name, phone number and installation address.
(c) Service providers acting for us: cloud hosting and database (which may store data outside Malaysia, with safeguards required by the PDPA), email or messaging providers, and our bank or payment providers.
(d) Professional advisers, auditors, and authorities where the law requires it.
We do not sell personal data.
4. Is giving your data required?
Your name and mobile number are needed to respond to an enquiry. Your address is needed for delivery and installation. If you do not provide them, we cannot process your enquiry or order.
5. How long we keep it
(a) Enquiries that do not lead to an order are kept for up to [24 months] after last contact.
(b) Order, invoice, warranty and commission records are kept for 7 years, or longer if the law requires.
(c) Data is then deleted or anonymised.
6. Security
Access is role-based. Partners see only their own customers, and installers see only their assigned jobs. Data is encrypted in transit, and changes to sensitive records are logged. We will notify you and the Personal Data Protection Commissioner of a personal data breach where the law requires.
7. Your rights
You may ask to access or correct your personal data, withdraw consent (including marketing consent), or ask us to limit processing. Where the PDPA provides it, you may also ask us to transmit your data to another organisation. We may charge a fee permitted by law for access requests, and will respond within the period required by law.
8. Contact
Data Protection Officer: [name] Email: [official BUDDY email] Phone: +60 12-540 2341 (WhatsApp preferred) Address: [registered address]
We may update this notice. The current version is always at [domain]/privacy.