Privacy Policy

Speedofis99 Academy Sdn Bhd ("we", "us", "our") operates Poket Bisnes ("the App"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

By using the App, you consent to the collection and use of your information as described in this policy.

2.1 Account Information

• Full name and business name
• Email address
• Phone number (optional)
• Profile photo (optional)

2.2 Business & Financial Data

• Transaction records (income, expenses, categories)
• Invoice, quotation, and receipt data
• Customer information you enter
• Business profile details (SSM number, bank account info for invoicing purposes)
• Monthly budget and sales targets

2.3 Usage Data

• Login timestamps and session information
• Features used within the App
• Device type and browser information
• IP address

2.4 Payment Information

• Subscription plan and billing history
• Payment transactions are processed by ToyyibPay. We do not store your full payment card details. Please refer to ToyyibPay's Privacy Policy for their data handling practices.

We use your information to:

• Provide and maintain the App and its features
• Process your subscription and payments
• Send important service notifications (trial expiry reminders, payment confirmations)
• Respond to your support requests
• Improve and develop new features based on usage patterns
• Comply with legal obligations under Malaysian law
• Generate anonymised, aggregated statistics about App usage (your individual data is never shared)

• Your data is stored securely on Supabase infrastructure with encryption at rest and in transit
• We implement Row Level Security (RLS) to ensure you can only access your own data
• Access to your data is restricted to authorised personnel only
• We conduct regular security reviews of our infrastructure
• Despite our best efforts, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.

We do not sell, trade, or rent your personal data to third parties.

We may share your information only in these limited circumstances:

• Service Providers: Third-party services that help us operate the App (Supabase for database, ToyyibPay for payments). These providers are contractually obligated to protect your data.
• Legal Requirements: If required by law, court order, or government authority under Malaysian law.
• Business Transfer: In the event of a merger, acquisition, or sale of assets, your data may be transferred with prior notice to you.

As a data subject under PDPA 2010, you have the right to:

• Access your personal data that we hold
• Correct inaccurate or incomplete personal data
• Request deletion of your personal data (subject to legal retention requirements)
• Withdraw consent for processing of your personal data
• Object to processing of your personal data for direct marketing purposes

To exercise any of these rights, contact us at support@poketbisnes.com. We will respond within 21 days.

• Active account data is retained for as long as your account remains active
• Upon account deletion, your data will be permanently deleted within 90 days
• Financial records may be retained for up to 7 years to comply with Malaysian financial regulations
• Anonymised, aggregated data may be retained indefinitely for analytical purposes

The App uses minimal cookies and local storage strictly necessary for:

• Maintaining your login session
• Remembering your preferences (e.g. dismissed notifications)

We do not use cookies for advertising or tracking purposes across other websites.

Poket Bisnes is intended for business use by adults aged 18 and above. We do not knowingly collect personal data from individuals under 18 years of age. If we become aware that we have collected data from a minor, we will delete it immediately.

The App may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties and encourage you to review their privacy policies.

We may update this Privacy Policy from time to time. Significant changes will be communicated via:

• Email notification to your registered email address
• In-app notification at least 14 days before changes take effect

Continued use of the App after changes take effect constitutes acceptance of the updated policy.

Your data may be stored and processed in servers located outside Malaysia (Supabase infrastructure). By using the App, you consent to this transfer. We ensure appropriate safeguards are in place to protect your data in accordance with PDPA requirements.

For any privacy-related questions, concerns, or requests:

Speedofis99 Academy Sdn Bhd
Email: support@poketbisnes.com
Website: poketbisnes.com
Kuala Terengganu, Terengganu, Malaysia

For formal PDPA complaints, you may also contact:
Personal Data Protection Department Malaysia (JPDP)
Website: pdp.gov.my