Privacy Policy

1. Introduction and Legal Framework

PropGo.my ("we," "us," "our," or "the Company") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information in compliance with Malaysian laws including:

• Personal Data Protection Act 2010 (PDPA)
• Communications and Multimedia Act 1998 (CMA)
• Online Safety Act 2024
• Consumer Protection (Electronic Trade Transaction) Regulations 2024
• Malaysian Communications and Multimedia Commission (MCMC) guidelines

Data Controller: PropGo.my is the data controller responsible for your personal data. Our registered address is Kuala Lumpur, Malaysia.

2. Information We Collect

Personal Information:

• Name, email address, and phone number
• Professional credentials (for real estate agents)
• REN license number and agency information
• Profile photo and bio
• Payment information (processed securely by Stripe)

Property-Related Information:

• Property requests and responses
• Location preferences and requirements
• Communication history on the platform
• Search and browsing activity

Technical Information:

• IP address and device information
• Browser type and version
• Usage analytics and platform interactions
• Cookies and tracking technologies

3. How We Use Your Information

Service Provision:

• Connect property seekers with real estate agents
• Process and display property requests and responses
• Facilitate communication between users
• Manage subscriptions and usage limits

Platform Improvement:

• Analyze usage patterns to improve our services
• Develop new features and functionality
• Ensure platform security and prevent fraud
• Provide customer support

Communication:

• Send service-related notifications
• Provide customer support responses
• Share platform updates and new features
• Marketing communications (with your consent)

4. Legal Basis for Processing (PDPA Compliance)

Under the Malaysian PDPA, we process your personal data based on the following legal grounds:

• Explicit Consent: When you provide clear, informed consent to our privacy policy and terms of service
• Contract Performance: To fulfill our obligations under the service agreement with you
• Legitimate Interest: For platform security, fraud prevention, service improvement, and business operations
• Legal Obligation: To comply with Malaysian laws including PDPA, CMA, and Online Safety Act 2024
• Vital Interest: To protect your safety or the safety of others in emergency situations

Withdrawal of Consent:

You have the right to withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal. Contact us at support@propgo.my to withdraw consent.

5. Information Sharing and Disclosure

With Other Users:

• Property seekers and agents can see each other's profile information
• Communication through our platform is visible to participants
• Agent verification status and credentials (when applicable)

With Service Providers:

• Stripe for payment processing
• Supabase for data hosting and management
• Cloud infrastructure providers
• Analytics and customer support tools

Legal Requirements:

We may disclose information when required by law, court order, or to protect our rights and users' safety.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication measures
• Secure payment processing through PCI-compliant providers
• Regular backup and disaster recovery procedures

7. Your Rights Under PDPA

As a data subject under Malaysian PDPA, you have the right to:

• Access: Request information about your personal data we hold
• Correction: Update or correct your personal information
• Withdrawal of Consent: Withdraw consent for data processing
• Data Portability: Receive your data in a structured format
• Limit Processing: Request limitations on how we use your data

To exercise these rights, contact us at support@propgo.my

8. Subscription and Usage Data

Agent Subscription Tracking:

• Free tier: Track monthly usage up to 10 responses
• Pro tier: Monitor subscription status and billing
• Usage analytics for platform optimization
• Payment history and transaction records

Data Retention:

• Account data: Retained while account is active
• Transaction records: 7 years for tax and legal purposes
• Analytics data: Aggregated and anonymized after 2 years
• Inactive accounts: Deleted after 3 years of inactivity

9. Cookies and Tracking

We use cookies and similar technologies for:

• Authentication and session management
• Storing user preferences
• Analytics and performance monitoring
• Security and fraud prevention

You can control cookies through your browser settings, but some features may not work properly.

10. International Data Transfers

Your data may be processed outside Malaysia by our service providers. We ensure adequate protection through contractual safeguards and compliance with international data protection standards.

11. Children's Privacy

Our service is not intended for children under 18. We do not knowingly collect personal information from children. If we become aware of such collection, we will delete the information immediately.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or platform notifications. Your continued use constitutes acceptance of the updated policy.

13. Content Moderation and Online Safety

In compliance with the Online Safety Act 2024 and Communications and Multimedia Act 1998, we implement measures to protect users from harmful content:

• Automated content scanning for prohibited material
• User reporting mechanisms for harmful content
• Human review of flagged content
• Removal of content that violates Malaysian laws
• Cooperation with Malaysian authorities when required

Prohibited Content: We prohibit and actively monitor for content including but not limited to: child sexual abuse material, financial fraud, cyberbullying, content sensitive to race/religion/royalty, false information, and content that incites public disorder.

14. Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will:

• Notify the Personal Data Protection Commissioner within 72 hours
• Inform affected individuals without undue delay
• Provide details of the breach and mitigation measures
• Implement remedial actions to prevent future breaches

15. Cross-Border Data Transfers

Your personal data may be transferred to and processed in countries outside Malaysia. We ensure adequate protection through:

• Contractual safeguards with international service providers
• Compliance with international data protection standards
• Regular security assessments of third-party processors
• Data processing agreements that meet PDPA requirements

Service Providers: We work with international providers including Stripe (payment processing), Supabase (data hosting), and cloud infrastructure providers with appropriate safeguards.

16. Marketing and Communications

We may send you marketing communications with your explicit consent. You can opt out at any time:

• Unsubscribe links in all marketing emails
• Account settings to manage communication preferences
• Direct contact at support@propgo.my
• Clear consent mechanisms for different communication types

Service Communications: We may send essential service-related communications (notifications, updates, security alerts) without consent as necessary for service provision.

17. Complaints and Regulatory Compliance

If you have concerns about our data processing practices, you can:

• Contact our Support team at support@propgo.my
• File a complaint with the Personal Data Protection Commissioner
• Seek legal advice from qualified Malaysian legal professionals
• Report content violations to Malaysian Communications and Multimedia Commission (MCMC)

18. Contact Information

For privacy-related questions, data subject requests, or to exercise your rights, contact us: