PRIVACY POLICY

Last updated: 11 October 2026

Ifcon Technology Sdn Bhd ("we", "us", "our") operates DataCar. This Privacy Policy explains how we collect, use, disclose, and protect your personal data in accordance with the Personal Data Protection Act 2010 ("PDPA") of Malaysia. By using the Platform, you consent to the practices described in this Policy.

1. Personal Data We Collect

• Account data: your name, mobile phone number, and email address (if provided).
• Order data: vehicle registration numbers you search, order history, coupon usage, and invoice details.
• Payment data: payment status and reference numbers from our payment gateway. We do not collect or store your full card number, CVV, or online banking credentials — these are handled directly by our PCI-DSS compliant payment gateway.
• Verification data: the one-time password (OTP) delivery status used to verify your phone number during login.
• Technical data: IP address, device and browser information, and usage logs collected automatically when you use the Platform.

2. How We Use Your Personal Data

• To create and manage your account, and to verify your identity via OTP;
• To process payments, generate Reports, and issue tax invoices or e-Invoices;
• To respond to your enquiries and provide customer support;
• To send you order confirmations, service updates, and (where you have consented) promotional communications;
• To detect, investigate, and prevent fraud, abuse, or unauthorised activity;
• To comply with our legal and regulatory obligations, including tax and e-Invoicing requirements under Malaysian law.

3. Disclosure of Personal Data

We do not sell your personal data. We may disclose personal data to:

• our payment gateway provider, to process your payment;
• our SMS/OTP delivery provider, to verify your phone number;
• the Inland Revenue Board of Malaysia (LHDN) and other relevant authorities, where required for e-Invoicing or tax compliance;
• professional advisors, auditors, or regulators, where necessary to comply with the law or protect our legal rights;
• a successor entity, in the event of a merger, acquisition, or sale of assets, subject to equivalent privacy protections.

4. Data Security

We implement reasonable technical and organisational measures — including access controls, encryption in transit, and hashed authentication credentials — to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

5. Data Retention

We retain your personal data for as long as your account remains active, and thereafter for as long as necessary to comply with our legal, tax, and accounting obligations (including e-Invoice record-keeping requirements), resolve disputes, and enforce our agreements.

6. Your Rights Under the PDPA

Subject to the PDPA, you have the right to:

• request access to the personal data we hold about you;
• request correction of personal data that is inaccurate, incomplete, or outdated;
• withdraw your consent to the processing of your personal data for a particular purpose, such as marketing communications;
• limit the processing of your personal data in certain circumstances.

To exercise any of these rights, please see our PDPA Notice or contact us using the details below. We may require proof of identity before actioning your request, and reasonable processing fees may apply as permitted under the PDPA.

7. Cookies and Similar Technologies

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Platform is used. You can control cookies through your browser settings, although disabling them may affect certain features of the Platform.

8. Children's Privacy

The Platform is not directed at children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised "Last updated" date.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

Ifcon Technology Sdn Bhd
L12.08, Level 12, Tower 2, Wangsa 118, Jalan Wangsa Delima, Wangsa Maju, 53300 Kuala Lumpur, Malaysia
Email: noreply@datacar.my
Phone: +603 4141 8050