Privacy Policy

AI JENTAYU TECHNOLOGY SDN BHD ("Company," "we," "our," or "us") respects the privacy of individuals and is committed to protecting personal data in accordance with the Malaysia Personal Data Protection Act 2010 ("PDPA"), applicable data protection laws across Southeast Asia, and the General Data Protection Regulation (EU) 2016/679 ("GDPR") where relevant.

This Privacy Policy describes how we collect, use, process, disclose, retain, store, transfer, and safeguard personal data obtained through the Dipsea Island website, mobile applications, products, services, and related platforms (collectively, the "Services").

Scope & Application

This Privacy Policy applies to all users, customers, visitors, partners, and individuals who interact with our Services, whether directly or indirectly, including through third-party platforms, integrations, and communication channels.

This Policy governs all forms of personal data collected electronically, manually, automatically, or through any other lawful means.

Definitions

For purposes of this Privacy Policy:

• 2.1"Personal Data" refers to any information that identifies or can reasonably identify an individual.
• 2.2"Processing" includes collecting, recording, storing, using, disclosing, transferring, or deleting data.
• 2.3"Data Subject" refers to the individual whose personal data is processed.

Categories of Personal Data Collected

We may collect, process, and retain the following categories of personal data, including but not limited to:

3.1 Identity & Contact Information

Name, identification details where legally required, email address, telephone number, billing address, delivery address, and account profile details.

3.2 Account & Authentication Data

Usernames, passwords (encrypted), login timestamps, account preferences, and security credentials.

3.3 Financial & Transaction Information

Payment method details, transaction history, invoices, refunds, and billing records.

3.4 Technical & Usage Data

IP addresses, device identifiers, browser type, operating system, location data, session logs, and website interactions.

3.5 Communication Data

Customer support messages, feedback, emails, chat records, and survey responses.

Purposes of Data Processing

Personal data is collected and processed for purposes including but not limited to:

• Creating and managing user accounts
• Delivering products and services
• Processing payments and transactions
• Verifying identity and preventing fraud
• Providing customer support and communications
• Improving services, features, and performance
• Conducting analytics and business research
• Sending marketing communications (subject to consent)
• Complying with legal and regulatory obligations
• Enforcing terms and protecting legal rights

Legal Basis for Processing

Where applicable under GDPR and PDPA, we rely on:

• Explicit consent
• Performance of contractual obligations
• Compliance with legal requirements
• Legitimate business interests — security, service improvement, and fraud prevention

Consent & Withdrawal

By using our Services or providing personal data, you consent to the processing described in this Policy.

You may withdraw consent at any time by contacting us or adjusting account preferences. Withdrawal does not affect prior lawful processing.

Marketing & Promotional Communications

We may communicate promotional materials, updates, newsletters, and offers through email, SMS, phone calls, or other channels where permitted by law.

You may opt out at any time through unsubscribe links, account settings, or contacting us directly.

Cookies & Similar Technologies

We use cookies, pixels, tags, and tracking technologies to:

• Enhance website functionality
• Remember preferences
• Analyse usage patterns
• Improve performance and content

Disclosure of Personal Data

We may disclose personal data to:

• Subsidiaries, affiliates, and related entities
• Third-party service providers and contractors
• Payment processors and technology providers
• Marketing partners (with consent)
• Legal advisers, auditors, and regulators
• Law enforcement where legally required
• Parties in mergers, acquisitions, restructuring, or asset transfers

All disclosures are subject to confidentiality and data protection obligations.

Cross-Border Transfers

Personal data may be transferred, stored, and processed in jurisdictions outside Malaysia or Southeast Asia.

Where such transfers occur, we implement appropriate safeguards to ensure compliance with PDPA, GDPR, and other applicable laws.

Data Retention

We retain personal data only for as long as necessary to fulfil operational, contractual, legal, and regulatory purposes. Data may be anonymised or securely deleted thereafter.

Security Measures

We implement reasonable administrative, technical, and physical safeguards including encryption, access controls, monitoring, and secure storage to protect personal data.

Individual Rights

Subject to applicable law, individuals may request:

• Access to personal data
• Correction of inaccuracies
• Withdrawal of consent
• Restriction of processing
• Data portability
• Deletion of data where legally permissible
• Objection to certain processing activities

Requests may require identity verification before being actioned.

Third-Party Websites & Services

Our Services may contain links to external websites or platforms. We are not responsible for their privacy practices and encourage review of their policies.

Children's Data

Our Services are not directed at individuals under the age of 18 unless expressly stated. We do not knowingly collect personal data from minors without verifiable parental consent.

Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy at any time. Updated versions will be posted with a revised effective date. Continued use of Services constitutes acceptance.

Contact Information

For privacy inquiries, consent withdrawal, or data subject requests, contact: