Privacy Policy (PDPA 2010 Notice)

Statutory Compliance Notice under Personal Data Protection Act 2010 | MMB Digital Solutions PLT

In compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia, this Privacy Notice explains how MMB Digital Solutions PLT (202604002797 / LLP0048043-LGN) collects, processes, protects, and disposes of personal data in connection with the operation of LelongRadar.

1. Identity of Data User (Pengguna Data)

The entity responsible for processing personal data on this platform is MMB Digital Solutions PLT (Registration No: 202604002797 / LLP0048043-LGN), located at 3A-23-02, Pandan Ville, Jalan Pandan Indah 1/16, 55100, W.P Kuala Lumpur, Malaysia. Official Data Compliance Contact: support@lelongradar.my.

2. Data Minimization & Collection Scope

LelongRadar operates under a strict data-minimization architecture. We do not collect government identification numbers (NRIC), physical residential addresses, telephone numbers from users, or demographic profiles. We collect and process only:

Authentication Identifier: Your registered email address and encrypted password credentials (handled securely via Supabase Auth).
Service Entitlement Parameters: Your active membership tier status (Free Preview or Pro Member), subscription renewal timestamps, and self-service cancellation indicators.
Referral Program Attribution: Your unique alphanumeric referral code and the referral attribution link binding referring members, used solely to calculate subscription billing credits.

3. Payment Card Vaulting Offload (PCI-DSS Level 1)

LelongRadar never captures, processes, sees, transmits, or stores debit or credit card numbers, CVV security codes, bank account details, or online banking credentials. All payment processing, recurring tokenization, and PCI-DSS compliance are offloaded directly to Stripe Malaysia Sdn. Bhd. Charges appear under the statement descriptor LELONGRADAR*MMB.

4. Foreclosure Debtor Privacy (Defamation Shield)

In strict compliance with the Defamation Act 1957, the PDPA 2010, and common law privacy principles, LelongRadar indexes physical real estate assets exclusively. Our automated data ingestion engine systematically strips, purges, and discards all personal borrower names, assignor names, debtor identities, individual NRIC numbers, and related litigation proceeding identifiers from public dockets prior to database storage. We index property parcels and physical auction parameters only.

5. User Account Deletion & Cryptographic Anonymization

In accordance with Section 30 and Section 34 of the PDPA 2010, registered users maintain an absolute right to withdraw consent and request immediate account deletion. Users may execute self-service account erasure directly within their Account Dashboard (Danger Zone) or by written request to our support desk.

Upon confirmation of account deletion:

Active Database Purge: Your login authentication record, plaintext email address, active sessions, and personal preferences are permanently and irreversibly purged from our active operational databases.
7-Year Statutory Accounting Ledger (Section 82, Income Tax Act 1967): To satisfy statutory record-keeping mandates enforced by the Inland Revenue Board of Malaysia (Lembaga Hasil Dalam Negeri - LHDN), historical transaction receipts are archived in an anonymized cryptographic ledger. Your personal identifiers are irreversibly hashed using one-way cryptographic algorithms (SHA-256) alongside the external payment token. No plaintext personal data is retained.

6. Data Subject Access, Corrections & Inquiries

You have the right to inspect, update, or correct your registered email address, or inquire regarding our data protection policies. Inquiries may be submitted directly to our Data Protection Coordinator at support@lelongradar.my or via post to MMB Digital Solutions PLT at 3A-23-02, Pandan Ville, Jalan Pandan Indah 1/16, 55100, W.P Kuala Lumpur, Malaysia.

Selaras dengan kehendak Akta Perlindungan Data Peribadi 2010 (APDP 2010) Malaysia, Notis Privasi ini menerangkan bagaimana MMB Digital Solutions PLT (202604002797 / LLP0048043-LGN) mengumpul, memproses, melindungi, dan melupuskan data peribadi berhubung penggunaan portal carian LelongRadar.

1. Identiti Pengguna Data

Entiti yang bertanggungjawab memproses data peribadi di bawah platform ini ialah MMB Digital Solutions PLT (No. Pendaftaran: 202604002797 / LLP0048043-LGN), beralamat di 3A-23-02, Pandan Ville, Jalan Pandan Indah 1/16, 55100, W.P Kuala Lumpur, Malaysia. E-mel: support@lelongradar.my.

2. Skop Pengumpulan & Prinsip Pengurangan Data

LelongRadar beroperasi di bawah prinsip pengurangan data yang ketat. Kami tidak mengumpul nombor kad pengenalan (No. K/P), alamat kediaman peribadi pengguna, nombor telefon pengguna, atau maklumat demografi. Kami hanya mengumpul dan memproses:

Pengecam Pengesahan: Alamat e-mel berdaftar anda dan kata laluan yang disulitkan (diuruskan secara selamat melalui Supabase Auth).
Parameter Langganan: Status tahap keahlian anda (Pratonton Percuma atau Ahli Pro), tempoh pembaharuan langganan, dan rekod pembatalan perkhidmatan.
Penjejakan Program Rujukan: Kod rujukan alfanumerik unik anda serta pautan rujukan untuk menghubungkan ahli, digunakan secara eksklusif bagi pengiraan kredit langganan percuma.

3. Pelepasan Pengendalian Kad Pembayaran (Pematuhan PCI-DSS Tahap 1)

LelongRadar tidak sekali-kali merekodkan, memproses, melihat, atau menyimpan nombor kad debit atau kredit, kod keselamatan CVV, butiran akaun bank, atau kelayakan perbankan dalam talian. Semua pemprosesan pembayaran dikendalikan secara terus oleh Stripe Malaysia Sdn. Bhd. di bawah piawaian PCI-DSS Tahap 1. Caj penyata bank akan dipaparkan sebagai LELONGRADAR*MMB.

4. Perlindungan Privasi Peminjam Lelongan (Perlindungan Fitnah)

Berdasarkan Akta Fitnah 1957, APDP 2010, dan prinsip undang-undang lazim, LelongRadar mengindeks parameter hartanah fizikal semata-mata. Sistem kami menapis, memadam, dan membuang semua nama peminjam, penyerahhak, nombor kad pengenalan individu, serta maklumat litigasi guaman daripada notis awam sebelum disimpan ke dalam pangkalan data.

5. Pemadaman Akaun Pengguna & Pengekalan Berkanun Percukaian

Di bawah Seksyen 30 dan 34 APDP 2010, pengguna berdaftar berhak menarik balik persetujuan dan menuntut pemadaman akaun pada bila-bila masa melalui Papan Pemuka Akaun (Zon Bahaya / Danger Zone) atau melalui permohonan bertulis.

Setelah pemadaman akaun disahkan:

Pemadaman Pangkalan Data Aktif: Maklumat log masuk, alamat e-mel teks biasa, sesi aktif, dan tetapan peribadi anda akan dipadamkan secara kekal dari pangkalan data aktif kami.
Pengekalan Berkanun 7 Tahun LHDN (Seksyen 82, Akta Cukai Pendapatan 1967): Bagi mematuhi kewajipan undang-undang percukaian Lembaga Hasil Dalam Negeri (LHDN), rekod invois pembayaran terdahulu disimpan dalam bentuk lejar kriptografi tanpa data peribadi. Alamat e-mel dan ID pengguna ditukar kepada bentuk cincangan satu hala (SHA-256) yang tidak boleh dinyahsulit.

6. Hak Akses, Pembetulan & Pertanyaan Data

Anda berhak menyemak, mengemas kini, atau membetulkan alamat e-mel anda, atau membuat pertanyaan berhubung dasar perlindungan data kami dengan menghubungi Penyelaras Perlindungan Data MMB Digital Solutions PLT di support@lelongradar.my.