Privacy Policy

1. Introduction

1.1 Welcome to the Jompilih platform, operated by Wavepecker Plt (LLP0034587-LGN) and its affiliates (individually and collectively, "Jompilih", "we", "us", or "our"). At Jompilih, we take our responsibilities under applicable privacy laws and regulations ("Privacy Laws") seriously and are committed to safeguarding the privacy of all users on our platform, including both buyers and sellers (individually and collectively referred to as "Users", "you", or "your"). The platform and the services we provide are collectively referred to as the "Services." This Privacy Policy ("Privacy Policy" or "Policy") outlines how we collect, use, disclose, and process the personal data you entrust to us. It is designed to help you understand how your data is managed and to assist you in making informed decisions when providing us with your personal information.

1.2 "Personal Data" refers to information, whether true or not, that can be used to identify an individual, either on its own or when combined with other data. Common examples include your name, contact details, and identification number.

1.3 By using our Services, creating an account with us, visiting our platform, or accessing our Services, you agree to the practices outlined in this Privacy Policy and consent to the collection, use, disclosure, and processing of your personal data as described. If you do not agree with this Policy or the way your personal data is handled, please discontinue using our Services or platform. Should any changes be made to this Privacy Policy, we will notify you, including by posting the updated Policy on our platform. We reserve the right to amend this Policy at any time. Your continued use of the Services or platform after changes have been made will constitute your acceptance of the revised Privacy Policy, to the fullest extent permitted by applicable law.

1.4 This Policy works in conjunction with other legal notices, contractual agreements, or consent clauses that govern the collection, storage, use, and disclosure of your personal data. Unless explicitly stated otherwise, this Policy does not override those notices.

1.5 This Policy applies to both buyers and sellers who use the Services unless explicitly stated otherwise.

2. When does Jompilih collect personal data?

2.1 We may collect personal data from you in the following circumstances:

When you register for an account or use our Services or platform.
When you complete any form, such as application forms related to our products and services, either online or in physical format.
When you enter into an agreement or provide documentation in relation to your interactions with us, or when you use our products and services.
When you interact with us, such as through phone calls (which may be recorded), letters, emails, social media platforms, or in-person meetings, including interactions with our customer service team.
When you use our platform or application, or when you interact with us electronically, including through the use of cookies and similar technologies.
When you grant permissions on your device to share information with our platform or application.
When you link your Jompilih account to your social media or external accounts, in accordance with the policies of those providers.
When you conduct transactions using our Services.
When you provide feedback, complaints, or participate in surveys.
When you register for promotions, contests, or loyalty programs.
When you submit personal data to us for any other reason.

The above list is not exhaustive but represents common situations in which we may collect personal data.

2.2 In addition to the data you provide, we may also collect personal data from third-party sources such as our affiliates, business partners (e.g., logistics or payment service providers), marketing partners, credit bureaus, referral programs, other users of our Services, or publicly available data.

2.3 In some cases, you may provide us with the personal data of others (e.g., family members, friends, or contacts). By providing this information, you confirm that you have obtained the necessary consent from those individuals for us to process their personal data as outlined in this Policy.

3. What personal data will Jompilih Collect?

3.1 The personal data that Jompilih may collect includes, but is not limited to:

Name;
Email address;
Date of birth;
Billing and/or delivery address;
Bank account and payment information;
Telephone number;
Gender;
Information sent by or associated with the device(s) used to access our Services or Platform;
Information about your network, including contact lists when device permissions are shared, and the people and accounts you interact with;
Photographs, audio, or video recordings;
Government-issued identification or other information required for due diligence, identity verification, and/or fraud prevention;
Marketing and communication preferences, including your preferences in receiving marketing from us or third parties, your communication history with us, our service providers, and other third parties;
Usage and transaction data, including details about your searches, orders, advertisements, and other content you interact with on the Platform, and other products and services related to you;
Location data;
Any other information provided by the User when registering or using the Platform and Services, as well as data related to how the User interacts with the Platform and Services;
Aggregate data regarding the content the User engages with.

3.2 You agree to provide accurate and truthful information and to inform us of any changes to such information. We reserve the right to request further documentation to verify the accuracy of any data provided.

3.3 If you register using your social media account ("Social Media Account"), link your Jompilih account to your Social Media Account, or use Jompilih’s social media features, we may access information you voluntarily provide to the Social Media Account provider, in accordance with their policies. Such data will be managed and processed in line with this Privacy Policy.

3.4 If you do not wish for us to collect the aforementioned personal data, you may opt-out at any time by notifying our Data Protection Officer in writing. More information about opting out is available in the section titled "How can you withdraw consent, request access to, or correct information you have provided to us?". Note that opting out or withdrawing your consent to the collection, use, or processing of your personal data may affect your ability to use certain features of our Platform or Services. For instance, disabling location-based data may limit the functionality of location-based services.

4. Collection of other data

4.1 Like most websites and mobile applications, our platform logs certain information from your device when you browse or interact with it. This includes, but is not limited to, your device’s Internet Protocol (IP) address, operating system, browser type, mobile device type and characteristics, unique device identifier (UDID or MEID), referring website address (if applicable), pages visited, visit duration, and sometimes a “cookie” (which can be disabled through your browser preferences) to remember previous sessions. If you are logged into your account, this data may be linked to your personal account. This information may also be included in anonymous statistics to help us understand visitor behavior and improve our services.

4.2 Our mobile applications may collect precise location data from your device using technologies such as GPS or Wi-Fi. We collect, use, disclose, and/or process this data for one or more purposes, including providing location-based services you request or delivering relevant content based on your location. You can usually disable location tracking in your device settings. If you have any questions on how to manage your mobile device's location services, please contact your mobile service provider or device manufacturer.

4.3 Similar to page views on our website, when you watch content, advertisements, or access software on our Platform, certain information (such as your IP address and operating system) may be sent to us. Instead of page views, your device will send data regarding the content or advertisements viewed, software accessed, and time spent.

5. Cookies

5.1 Jompilih and its authorized service providers or advertising partners may occasionally use "cookies" or other tools to collect or share information linked to your use of our Platform or Services. These tools help enhance our Platform, provide new features, and enable more personalized content delivery, including through remarketing. “Cookies” are stored identifiers on your device that track data regarding how the Platform and Services are accessed or used, including browsing history and items in your cart. We may link cookies to personal data, allowing us to track your preferences and optimize our services, as well as enabling third-party advertisers to serve relevant ads based on your browsing activity.

5.2 You can opt out of cookies by adjusting your browser or device settings. However, doing so may limit your ability to fully use all features of our Platform or Services.

6. How we use your information

6.1 We may collect, use, disclose, and/or process your personal data for one or more of the following purposes:

To evaluate or process your application, transactions, or communications with Jompilih or third parties via our Services.
To manage your access to and use of our Platform and Services, including remembering your preferences and managing your account with us.
To handle transactions, fulfill your requests, and notify you of service issues or account activities.
To enforce our Terms of Service or relevant user agreements.
To protect personal safety or the rights and property of others.
For identification, verification, due diligence, or fraud prevention.
To evaluate your credit or risk profile for credit or pay-later products.
To manage software updates and provide support for the proper operation of our Services.
To address customer service requests, carry out your instructions, or respond to inquiries made by or on behalf of you.
To communicate with you through voice calls, texts, emails, or postal mail for managing your relationship with Jompilih and your use of our Services.
To enable other users to connect with you and interact with your activities on the Platform, such as private messages or social features.
For research, analysis, and development to improve our services and recommend relevant products to you.
To audit, survey, or otherwise understand the audience's experience with Jompilih’s Services.
For marketing, including sending you promotional materials related to Jompilih or third-party products and services. You can unsubscribe at any time through the provided unsubscribe function.
To offer loyalty programs, partner offers, or co-branded marketing efforts, such as merchant loyalty programs or co-branded credit cards.
To comply with legal processes or regulatory requirements, or in cases where disclosure is necessary to protect Jompilih’s or others' rights, property, or safety.
To produce statistics for internal or regulatory reporting.
To conduct background checks or due diligence required by law or internal risk management procedures.
To audit Jompilih’s operations or Services.
To prevent or investigate fraud, violations of our Terms of Service, or other unlawful activities.
To back up and store your personal data for disaster recovery or other purposes, both inside and outside your jurisdiction.
To facilitate business asset transactions, such as mergers or sales, involving Jompilih or its affiliates.

6.2 You acknowledge and consent that Jompilih may access, store, and disclose your account information and content if required by law or a court order, or in good faith to: (a) comply with legal obligations, (b) respond to government or regulatory requests, (c) enforce Jompilih’s Terms of Service or Privacy Policy, (d) address any claims or disputes involving Jompilih, (e) respond to customer service requests, or (f) protect the safety of Jompilih, its users, or the public.

6.3 As the specific reasons for collecting, using, or processing personal data may vary depending on the situation, some purposes may not be listed here. We will inform you of such other purposes at the time of obtaining your consent, except where processing without consent is permitted by privacy laws.

7. HOW DOES JOMPILIH PROTECT AND RETAIN CUSTOMER INFORMATION?

7.1 We implement a range of security measures to ensure the protection of your personal data within our systems. Customer information is secured behind protected networks and is accessible only by authorized employees who possess special access rights. However, while we take these precautions, it is important to note that absolute security cannot be guaranteed.

7.2 We retain personal data in compliance with the applicable Privacy Laws. Once the personal data is no longer required for its initial purpose, for legal or business reasons, or if there are no legitimate interests to warrant further retention, we will securely anonymize or destroy it. If you stop using the platform or your access is revoked, we may continue storing, using, and disclosing your personal data in line with this Privacy Policy and legal obligations. Where legally permitted, we reserve the right to securely dispose of your data without prior notice.

8. DOES JOMPILIH DISCLOSE CUSTOMER INFORMATION TO THIRD PARTIES?

8.1 As part of our business operations, we may need to share, process, disclose, or transfer your personal data to third-party service providers, agents, affiliates, or other relevant parties either within or outside Malaysia for the purposes mentioned earlier. These parties, acting on our behalf or otherwise, may process your data for one or more of these purposes. We strive to ensure that these entities maintain the security of your personal data and retain it only as long as needed for the purposes stated. These entities may include:

Our subsidiaries, affiliates, or related companies;
Buyers or sellers you interact with on Jompilih for the stated purposes;
Contractors, agents, service providers, and other external entities providing services like logistics, marketing, IT support, and financial services;
Government authorities as required or permitted by law;
Successors in the event of a merger, restructuring, or other transfer of assets;
Other third parties for the stated purposes.

8.2 We may also share user data, including statistical and demographic insights, with advertising partners and third-party providers of marketing services like remarketing and targeted advertisements.

8.3 Where the applicable Privacy Laws allow us to collect, use, or disclose personal data without your consent, we will do so in accordance with those laws. This may include situations where we have a legal obligation, are fulfilling our contractual obligations to you, or where a legitimate interest exists that does not infringe on your data protection rights.

8.4 While we strive to protect your data, there is no absolute guarantee against unauthorized access due to potential external threats, such as hacking. Nonetheless, we will implement reasonable security measures as required by law to safeguard your personal data.

8.5 Users (including any representatives or agents acting on their behalf) who gain access to other users' personal data via the platform must comply with Privacy Laws, ensuring proper handling and respecting requests to delete or review such data in accordance with legal requirements.

8.6 Sellers who access buyers' personal data must adhere to Privacy Laws, using it only to fulfill orders or respond to inquiries. Such data should not be used outside Jompilih without written consent from both the buyer and Jompilih, and sellers must employ adequate security measures to protect the data, retaining it only as necessary and deleting it upon request or after completing the transaction. In the event of a potential data breach, sellers are required to notify Jompilih’s Data Protection Officer promptly.

9. Information Regarding Children

9.1 Jompilih's services are not designed for individuals under the age of 13. We do not knowingly collect or retain personal data or non-identifiable information from children under 13, nor is any part of our platform or services intended for them. If you are a parent or legal guardian, please do not permit children in your care who are under 13 to submit personal data to Jompilih. Should personal data of a child under 18 in your care be shared with us, you provide your consent for its processing and agree to be bound by our policies on their behalf. We will close any accounts exclusively used by children and will delete any personal data submitted without parental consent for children under 18.

10. Information Collected by Third Parties

10.1 Jompilih utilizes Google Analytics, a service by Google, Inc. that helps us analyze how users interact with the platform. Google Analytics uses cookies—small text files stored on your device—to collect data about your use of the platform, including your IP address. This data is transferred to Google’s servers in the United States for processing, and Google uses it to evaluate platform usage, compile reports, and provide other services related to website activity and internet use. Google may share this information with third parties as required by law or if those third parties process data on Google’s behalf. Your IP address will not be linked with other Google data.

10.2 We or third parties may offer downloadable applications through Jompilih or its services. These applications might access and allow third parties to view identifiable information like your name, username, device IP address, or cookies installed on your device. Additionally, they may ask for more information directly from you. Jompilih does not control these third-party products or services. We recommend you review the terms and privacy policies published by these third parties before using their applications.

11. Security and Third-Party Site Disclaimer

11.1 WHILE WE STRIVE TO MAINTAIN THE SECURITY OF PERSONAL DATA ON OUR PLATFORM, WE CANNOT GUARANTEE THE SECURITY OF DATA PROVIDED TO THIRD-PARTY SITES. We implement security measures to protect personal data in our possession, with such data stored behind secure networks accessible only by a limited number of authorized individuals. When you access your personal data or place orders, we use secure servers and encrypt sensitive information in our databases.

11.2 For your convenience, Jompilih may link to third-party websites or services. These sites operate independently from Jompilih and have their own privacy policies and security practices, even if affiliated with us. Data collected by co-branded partners or third-party sites—whether offered through or linked to Jompilih—may not be received by us.

11.3 Jompilih holds no responsibility or liability for the content or security of these third-party websites. Accessing these sites is at your own risk. However, we strive to protect the integrity of our platform and welcome feedback regarding any third-party links or sites, especially if a specific link does not function.

12. Will Jompilih Transfer Your Information Overseas?

12.1 Your personal data may be transferred, stored, or processed outside your home country for one or more purposes related to the services we provide. In most cases, your data will be processed at our overseas servers. Jompilih will only transfer your personal information in compliance with relevant privacy laws.

13. How Can You Withdraw Consent, Request Access, or Correct Information You Have Provided to Us?

13.1 Withdrawing Consent

13.1.1 You have the right to withdraw your consent for the collection, use, or disclosure of your personal data. To do so, you can request the deletion of your data by sending an email to our Data Protection Officer via feedback form. We will process your request in accordance with this Privacy Policy and applicable privacy laws. However, withdrawing your consent may result in our inability to continue providing services, which could lead to the termination of your account or contract with us.

13.1.2 If you have shared YouTube content, in addition to withdrawing consent by emailing us as mentioned in Section 13.1.1, you can also revoke Jompilih's access to your personal data via the Google security settings page at https://security.google.com/settings/security/permissions.

13.2 Requesting Access to or Correction of Personal Data

13.2.1 If you have an account with Jompilih, you can access or correct your personal data through the Account Settings page on the platform. If you don’t have an account, you can submit a written request to access or correct your data by contacting us via feedback form. We may require additional information to verify your identity and nature of the request to process it accordingly.

13.2.2 We may charge a reasonable fee for handling and processing your request to access your data. If a fee is applicable, we will provide you with a written estimate before proceeding. Please note that we are not obligated to respond to your access request until the fee has been agreed upon and paid.

13.2.3 We reserve the right to refuse a request to correct your personal data in accordance with applicable privacy laws, which may entitle us to deny such corrections under certain circumstances.

14. Questions, Concerns, or Complaints? Contact Us

14.1 If you have any questions, concerns, or complaints about our privacy practices, feel free to reach out to us via feedback form.