Privacy Notice

1. Personal data we collect

Depending on how you use iklan.app, we collect:

• Account data: name, email address, WhatsApp/phone number, business name, preferred language, and your password (stored only as a one-way cryptographic hash; we cannot read it).
• Media partner data: company name, SSM registration number, website, ad types offered, states covered, ad space details, prices and photos you upload.
• Ad request data: ad type, location, budget, start date, duration, description of what you want to promote, and the space you enquired about.
• Quotes and communications: prices, inclusions and messages exchanged through the platform.
• Testimonials: name, business, optional email, rating, text and optional photo or logo.
• Newsletter: your email address and the date and source of your subscription.
• Technical and usage data: pages visited, referring website, campaign tags (UTM), device type (mobile, tablet or desktop), language, and actions taken on the site such as viewing a space or previewing a poster.
• Security data: login times, failed login attempts, and a keyed one-way hash derived from your IP address. We do not store your IP address itself.

Poster text and images you use in the billboard preview stay in your browser and are not uploaded or stored by us.

2. How we collect it

We collect personal data directly from you when you fill in forms on iklan.app, and automatically when you use the site (see section 9 on cookies and analytics). If a media partner or advertiser gives us information about you in the course of a transaction, we handle it under this Notice.

3. Why we use your personal data

We may use your personal data to:

• create, verify and manage your account, including email confirmation and password resets;
• provide, operate, maintain and improve iklan.app;
• match your ad request with suitable media partners, deliver it to them, and let partners send you quotes;
• publish or display information you choose to make public, such as approved listings and testimonials;
• enable communication between users of the platform;
• verify media partners, review listings and help prevent fraud, abuse, spam, offensive content and unlawful activity;
• send account, security and transaction-related communications, such as new requests, new quotes, approvals, security alerts and password changes;
• provide customer support and handle enquiries, reports and complaints;
• carry out analytics, maintenance and security of the platform (using aggregated, first-party analytics);
• comply with legal, regulatory and enforcement obligations and lawful requests from authorities;
• establish, exercise or defend legal claims; and
• other purposes permitted or required under applicable law.

Where you have agreed, or where permitted by applicable law, we may also use your contact details to send updates, promotions or marketing communications. You can stop receiving marketing communications at any time using the unsubscribe link in those messages or on your account page.

4. Who we share it with

• Media partners: when you send an ad request, its details (ad type, location, budget, dates, business name and description) are shown to verified media partners matched to it, either automatically by ad type and state, or manually by our administrators. Your name, WhatsApp number and email are revealed to a partner only after that partner sends you a quote.
• Advertisers: when you, as a partner, send a quote, the advertiser sees your company name, quote details and message, and can contact you on the WhatsApp number linked to your account.
• The public: approved listings (including photos and your company name) and approved testimonials (name, business, rating, text and photo) are publicly visible. Your email address is never displayed publicly.
• Service providers acting on our behalf: we may use third-party providers to help operate and support iklan.app. Depending on the services you use, these may include hosting and infrastructure, email delivery, communications, security, verification, analytics, customer support, payment processing or other technology services. We give them only the personal data they need to perform their services, or as permitted or required by law, and require them to protect it.
• Authorities and advisers: where required by law, court order or a lawful request, or where necessary to protect our rights, users or the public, and to our professional advisers.
• A successor: if our business or assets are sold, merged or restructured, personal data may be transferred to the new owner, who will be bound by this Notice.

We do not sell your personal data, and we do not share it with advertisers or data brokers for their own marketing.

5. Public information

Some information you submit to iklan.app is published or displayed publicly when you choose to make a listing, profile or other content available to the public.

This may include your company or business name, listing titles and descriptions, photos, general location (town and state), size, price, and approved testimonials (name, business, rating, text and photo). Your email address, WhatsApp number and password are never displayed publicly.

Please do not include personal information you do not want to be public in fields intended for listings, testimonials or other public content.

6. Transfer outside Malaysia

Some of the service providers we use to support iklan.app, such as hosting, infrastructure, communications, security or other technology providers, may process or store personal data outside Malaysia.

Where personal data is transferred outside Malaysia, we take reasonable and appropriate steps to ensure the transfer is carried out in accordance with applicable personal data protection law, including section 129 of the PDPA.

Where consent or additional safeguards are required by applicable law for a particular transfer, we will take the necessary steps before or at the time of that transfer.

7. How long we keep it

• Accounts that are never email-confirmed, and their pending requests, are deleted automatically after 7 days.
• Active account data is kept while your account exists. When you delete your account, your account, requests and quotes are deleted; records we must keep for legal, tax or dispute purposes may be retained for as long as the law requires.
• Analytics events and security logs are deleted automatically after about 13 months (400 days).
• Password reset links expire after 1 hour and email confirmation links after 24 hours.
• Newsletter data is kept until you unsubscribe.

Despite the periods above, we may keep certain data or records for longer where required or permitted for legal, regulatory, tax, accounting, audit, fraud-prevention or dispute-resolution purposes, or to meet applicable record-keeping obligations.

If laws applicable to iklan.app as an online platform or marketplace require us to keep certain records about users, suppliers, listings or transactions for a set period, those records may be kept for the period the law requires, even after an account has been deleted or deactivated.

8. How we protect it

We take reasonable steps to protect personal data from loss, misuse, unauthorised access, disclosure, alteration or destruction. These include encrypted connections (HTTPS/HSTS), strong one-way password hashing, email verification, rate limiting and account lockout, spam and abuse filtering, strict access controls for administrators, re-encoding of uploaded images, and audit logs. No system is completely secure.

If a personal data breach occurs, we will assess it and take appropriate action to contain, investigate and reduce its impact. Where notification to the Personal Data Protection Commissioner or affected individuals is required by applicable law, we will make that notification within the time and in the manner required by law.

You are responsible for keeping your password confidential and for activity under your account. Tell us immediately at iklan@cashdir.com if you suspect unauthorised access.

9. Cookies and analytics

• A session cookie (iklan_sess) keeps you logged in and protects forms against forgery. It is essential and is deleted when you log out or close your browser.
• A language cookie (iklan_lang) remembers whether you chose BM or English.
• We use first-party analytics stored on our own server. We do not use third-party advertising trackers or sell analytics data. Obvious bots are excluded.
• We load fonts from Google Fonts, which may receive your IP address and browser details when the fonts load.

You can block cookies in your browser, but logging in and submitting forms will not work without the session cookie.

10. Your rights

Subject to the PDPA, you have the right to:

• access your personal data and obtain a copy of it;
• correct personal data that is inaccurate, incomplete, misleading or out of date;
• withdraw your consent, or ask us to stop or limit processing (this may mean we can no longer provide the service to you);
• ask us to stop sending marketing emails (use the unsubscribe link or your account page);
• request that your personal data be transmitted to another data controller where technically feasible (data portability);
• delete your account yourself at any time under My account > Account & security.

To exercise these rights, email iklan@cashdir.com. We may need to verify your identity, and we will respond within the time required by the PDPA. We may charge a fee permitted by law for data access requests.

11. Your obligations

Please give us accurate information and keep it up to date. If you provide personal data about another person (for example, a colleague as a contact), you confirm that you have their consent to do so.

Providing your name, email and WhatsApp number is necessary to send ad requests or receive quotes. If you do not provide them, we cannot provide those services.

12. Children

iklan.app is intended for businesses and individuals aged 18 and above. We do not knowingly collect personal data from minors. If you believe a minor has given us personal data, contact us and we will delete it.

13. Links to other services

The platform links to third-party services such as WhatsApp and partner websites. Their privacy practices are governed by their own policies, and we are not responsible for them.

14. Changes to this Notice

We may update this Notice from time to time. The latest version is always published on this page with its effective date. Where changes are significant, we will notify registered users by email or on the site. Continued use after an update means you accept the revised Notice.

15. Language

This Notice is available in English and Bahasa Malaysia. If there is any inconsistency, the English version prevails.

16. Contact us

For any questions, requests or complaints about privacy and your personal data, contact us at:

• iklan.app
• Privacy email: iklan@cashdir.com
• Complaints and reports: iklan@cashdir.com