PRIVACY POLICY (Malaysia PDPA Compliant)

for Befday.com and the befday mobile app

Effective Date: 28 May 2026

Last Updated: 20 June 2026

1. Introduction

Befday (“we,” “our,” “us”) operates https://befday.com and the befday mobile application for iOS and Android (together, the “Platform”).

We are committed to protecting your personal data in accordance with the Malaysia Personal Data Protection Act 2010 (PDPA).

By using our Platform, you consent to the collection and processing of your personal data as described in this Privacy Policy.

2. Personal Data We Collect

We may collect the following personal data:

(a) Data you provide directly

  • Name
  • Email address
  • Date of birth
  • Account login details (including your Google account name, email, and profile picture when you sign in with Google)
  • Profile information
  • Social media handles you choose to add (e.g. Instagram, Threads, TikTok, WhatsApp)
  • Content you upload or create (messages, events, images, shop bookmarks, likes, and redemption status)
  • Communications with us

(b) Data collected automatically

  • IP address
  • Device type and browser
  • Usage data (pages visited, time spent)
  • Cookies and tracking data

(c) Optional data

  • Payment-related data (processed via third-party payment providers)

(d) Location data (mobile app only)

If you grant location permission in the befday mobile app, we use your device location to show nearby bookmarked shops, sort saved shops by distance, and (if you enable nearby alerts) monitor regions around your bookmarked shops. Your location is processed on your device and is not stored on our servers. See Section 4 for details.

(e) Product analytics and error monitoring

We use PostHog, a third-party product analytics service, to understand how the Platform is used and to detect and diagnose errors. This helps us fix bugs and improve the product. PostHog may receive:

  • Product usage events (e.g. screens or pages viewed, features used)
  • Error logs and diagnostic information
  • Device type, operating system version, and IP address

This data is used to operate and improve the Platform, not for advertising or cross-app tracking. PostHog processes data under their privacy policy.

3. Purpose of Collecting Personal Data

We collect and process your personal data for the following purposes:

  • To create and manage your account
  • To provide and operate Befday services
  • To personalize user experience
  • To communicate updates and notifications
  • To improve website and app functionality
  • To detect, diagnose, and fix errors in the mobile app
  • To detect and prevent fraud or misuse
  • To comply with legal obligations

We will not process your personal data for any purpose not stated here without your consent.

4. Location Data and Geofencing (Mobile App)

The befday mobile app offers an optional “nearby alerts” feature that notifies you when you are close to a shop you have bookmarked.

  • This feature uses geofencing, which requires background (“Always”) location access on your device.
  • Geofence monitoring is performed by your device’s operating system. We do not collect, transmit, or store your location history on our servers.
  • The feature is off by default. You can enable or disable it, adjust the alert radius, and set quiet hours at any time in the app’s profile settings, or revoke location permission in your device settings.
  • Alerts are delivered as local notifications on your device when you enter a monitored region. befday servers do not send push notifications to the app.
  • If you only grant “While Using” location access, your location is used solely to sort bookmarked shops by distance while the app is open.

5. Local Notifications (Mobile App)

With your permission, the befday mobile app can show local notifications when you are near a bookmarked shop (nearby alerts). These alerts are created and delivered entirely on your device when a geofence region is entered — befday servers do not send push notifications to the app.

We do not send marketing or promotional push notifications. You can disable nearby alerts in Profile → Nearby Alerts or turn off notifications in your device settings.

Birthday reminder emails on befday.com (if you receive them) are sent by email only. They are not delivered as mobile app push notifications.

6. Disclosure of Personal Data

We may disclose your personal data to:

  • Service providers (hosting, analytics, email, payment processors)
  • Professional advisers (legal, audit, IT security)
  • Government authorities if required by Malaysian law
  • Third parties you authorize or request us to share data with

We do not sell personal data to third parties.

7. Consent

By using Befday, you consent to the processing of your personal data under this Privacy Policy.

Where required by law, we will obtain separate explicit consent for specific data processing activities.

You may withdraw consent at any time by contacting us (see Section 14), subject to legal or contractual restrictions.

8. Cookies

We use cookies and similar technologies to:

  • Remember preferences
  • Improve performance
  • Analyze traffic

You may disable cookies through your browser, but some features may not function properly.

9. Data Security

We take reasonable steps to protect your personal data, including:

  • Encryption where appropriate
  • Access controls
  • Secure hosting infrastructure

However, no internet transmission is completely secure, and we cannot guarantee absolute security.

10. Data Retention

We retain personal data only as long as necessary for:

  • The purposes stated in this policy
  • Legal obligations under Malaysian law
  • Dispute resolution and enforcement

When no longer needed, data will be deleted or anonymized.

11. Access and Correction Rights (PDPA Rights)

Under the Malaysia PDPA, you have the right to:

  • Request access to your personal data
  • Request correction of inaccurate or outdated data
  • Withdraw consent (subject to legal restrictions)

Requests may be subject to a reasonable administrative fee, where permitted by law.

To exercise your rights, contact us at: dzulhelmynazri@gmail.com

12. Cross-Border Data Transfer

Your personal data may be transferred to and stored in servers outside Malaysia.

When this occurs, we ensure that:

  • The receiving country provides adequate data protection OR
  • The transfer is done with contractual safeguards to protect your data

13. Third-Party Services

We may use third-party service providers (e.g., PostHog for product analytics and error monitoring, Google Analytics for website traffic, hosting, payment processors). These providers have their own privacy policies, and we encourage you to review them.

14. Contact Information (Data Protection)

If you have questions or requests regarding your personal data:

  • Email: dzulhelmynazri@gmail.com
  • Website: https://befday.com

15. Updates to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised date.