PRIVACY POLICY

Privacy Policy – MoneyBuddyLab

Effective Date: 1 August 2025

Entity: MoneyBuddy Lab Resources (Sole Proprietorship, Malaysia)

Business Registration No.: SA0634858-V

Registered Business Address: C40-05 The Hub SS2, Jalan 17/47 Seksyen 19, 46400 Petaling Jaya, Selangor, Malaysia

1. Introduction

MoneyBuddy Lab Resources (“we,” “our,” “us”) respects your privacy and is committed to protecting the personal data of our users, customers, and their families. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia and, where applicable, international best practices.

2. Information We Collect

We may collect the following categories of personal data:

– Parent/Guardian Information: Full name, email, phone number, and billing/shipping address.

– Child’s Profile Information: First name or nickname, age, and non-sensitive preferences (e.g., mission selections).

– Account Information: Username, password, and login activity.

– Transaction Information: Payment details (processed securely via third-party payment gateways such as Stripe or Touch ‘n Go).

– Website Usage Data: IP address, browser type, pages visited, time spent, cookies, and tracking pixels.

– Voluntary Submissions: Feedback, survey responses, or user-uploaded content.

3. Purpose of Data Collection

In compliance with Section 6 of the PDPA, your personal data is collected for the following purposes:

– To register and manage user accounts.

– To process and fulfil orders for our products and services.

– To deliver missions, updates, and newsletters.

– To communicate important announcements, including changes to our terms or policies.

– To personalise content and improve our website and user experience.

– To comply with legal and regulatory requirements.

4. Children’s Privacy

– All cadet accounts are created by a parent or legal guardian, who provides consent for the child’s participation.

– Children may log in to the Cadet Portal using a nickname and password created during registration. No full name or sensitive personal details are required for child access.

– We do not knowingly collect personal data directly from children without parental involvement.

– If we discover that a child’s personal data has been provided without proper consent, we will delete it immediately.

5. Disclosure of Personal Data

We do not sell your personal data. We may disclose your information to:

– Service Providers: Payment processors, IT support, hosting providers, email marketing tools (e.g., Mailchimp).

– Logistics Providers: To deliver your orders.

– Legal or Regulatory Authorities: When required by law.

– Business Transfer Scenarios: In the event of a merger, acquisition, or transfer of ownership, where permitted by law.

6. Data Security

We apply reasonable security measures in accordance with Section 9 of the PDPA to protect personal data from loss, misuse, unauthorised access, disclosure, alteration, or destruction. However, no internet transmission or electronic storage is 100% secure.

7. Retention of Personal Data

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law.

8. Your Rights Under the PDPA

9. Cookies & Tracking Technologies

10. International Transfers

11. Updates to This Policy

12. Contact Us