Privacy Policy — MyB2B Massage Malaysia

1. Introduction

MyB2B Massage Malaysia ("we", "us", "our") is committed to protecting the privacy of our clients and website visitors. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). By using our website or services, you consent to the practices described in this policy.

2. Information We Collect

Information you provide directly:

Name or preferred alias when booking
Phone number or Telegram username for communication
Location or address for outcall service delivery
Preferred date, time, and session type
Payment transaction references (we do not store full payment card details)

Information collected automatically:

Browser type and version
Device type (mobile, desktop, tablet)
IP address and approximate geographic location
Pages visited, time spent, and referral source
Cookies and similar tracking technologies (see Section 7)

3. How We Use Your Information

We use the information we collect for the following purposes:

To process and confirm your bookings
To provide, maintain, and improve our services
To communicate with you about your sessions, including confirmations and follow-ups
To process payments and deposits
To respond to your enquiries via Telegram or other communication channels
To comply with legal obligations under Malaysian law
To improve our website through analytics (anonymised data only)

4. Legal Basis for Processing (PDPA 2010)

Under the Personal Data Protection Act 2010 (PDPA), we process your personal data based on: (a) Contractual necessity — processing required to fulfil a booking you have made; (b) Consent — where you have given clear consent for us to contact you; (c) Legitimate interest — to improve our services and ensure safety. You may withdraw your consent at any time by contacting us via Telegram.

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data to third parties. We may share limited information only in the following circumstances:

Service delivery: Your location and session details are shared with your assigned therapist solely for service fulfilment
Payment processors: Transaction data is shared with payment gateways (DuitNow, FPX, e-wallets) to process your deposit
Legal requirements: If required by Malaysian law, court order, or regulatory authority

6. Data Security

We implement reasonable technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Telegram conversations are encrypted end-to-end. Booking records are stored securely and access is limited to authorised personnel only. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Cookies

Our website may use cookies and similar technologies to improve your browsing experience and analyse website traffic. Cookies are small text files stored on your device. You can control cookie settings through your browser preferences. Disabling cookies may affect some website functionality but will not prevent you from using our services.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by Malaysian law. Booking records are retained for a maximum of 12 months after your last session. Payment records are retained for 7 years in accordance with Malaysian tax and record-keeping requirements. You may request earlier deletion of your data (see Section 9).

9. Your Rights Under PDPA 2010

Under the Personal Data Protection Act 2010, you have the right to:

Access: Request a copy of the personal data we hold about you
Correction: Request correction of inaccurate or incomplete personal data
Withdrawal of consent: Withdraw your consent for data processing at any time
Deletion: Request deletion of your personal data, subject to legal retention requirements
Complaint: Lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia

To exercise any of these rights, contact us via Telegram at @myb2bmassage.

10. Third-Party Links

Our website may contain links to third-party websites (e.g., Telegram, payment providers, research sources). We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party website you visit.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of our website or services after changes constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, contact us via Telegram at @myb2bmassage. We respond to all enquiries within 24 hours.