Privacy Policy

1. Introduction

Welcome to WE368. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our rewards platform, mobile application, and website.

By using WE368 services, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Personal Information

We collect personal information that you voluntarily provide to us when you:

• Register for an account
• Make purchases at partner merchants
• Redeem rewards
• Contact our customer support
• Participate in surveys or promotions

This information may include:

• Full name
• Email address
• Phone number
• Date of birth
• Mailing address
• National identification number (MyKad/IC number) for verification purposes
• Payment information
• Profile photo (optional)

2.2 Transaction Information

We automatically collect information about your transactions and activities, including:

• Purchase history at partner merchants
• Points earned and redeemed
• Rewards claimed
• Transaction dates, times, and amounts
• Merchant information

2.3 Device and Usage Information

When you access our platform, we automatically collect:

• Device type and model
• Operating system and version
• IP address and location data
• Browser type and language preferences
• App usage statistics
• Crash reports and performance data

2.4 Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to enhance your experience, analyze trends, and gather demographic information. You can control cookie preferences through your browser settings.

3. How We Use Your Information

We use the collected information for various purposes:

3.1 To Provide and Maintain Our Services

• Process your registration and manage your account
• Track and credit points for eligible purchases
• Process reward redemptions
• Verify your identity and prevent fraud
• Provide customer support

3.2 To Improve and Personalize Your Experience

• Analyze usage patterns to improve our platform
• Recommend relevant rewards and offers
• Customize content based on your preferences
• Conduct research and analytics

3.3 To Communicate With You

• Send transaction confirmations and account updates
• Notify you about new features and promotions
• Respond to your inquiries and support requests
• Send marketing communications (with your consent)

3.4 For Legal and Security Purposes

• Comply with legal obligations and regulations
• Detect and prevent fraud, abuse, and security incidents
• Enforce our terms of service
• Protect the rights and safety of our users and partners

4. How We Share Your Information

4.1 With Partner Merchants

We share necessary transaction information with our partner merchants to:

• Verify eligible purchases
• Credit points to your account
• Process reward redemptions

4.2 With Service Providers

We engage third-party companies to perform services on our behalf, including:

• Payment processing
• Data analytics
• Customer service
• Marketing and advertising
• Cloud storage and hosting

These service providers have access to your information only to perform specific tasks and are obligated to protect your data.

4.3 For Legal Compliance

We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to:

• Comply with legal processes
• Enforce our agreements
• Protect our rights or property
• Prevent fraud or security issues

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity. We will notify you of any such change.

5. Data Security

We implement industry-standard security measures to protect your personal information:

• Encryption of data in transit and at rest
• Secure servers and databases
• Regular security audits and assessments
• Access controls and authentication protocols
• Employee training on data protection

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes
• Enforce our agreements

When your information is no longer needed, we will securely delete or anonymize it. Transaction records may be retained for up to 7 years as required by Malaysian financial regulations.

7. Your Privacy Rights

Under Malaysian Personal Data Protection Act (PDPA) and other applicable laws, you have the following rights:

7.1 Right to Access

You can request a copy of the personal information we hold about you.

7.2 Right to Correction

You can update or correct your personal information through your account settings or by contacting us.

7.3 Right to Deletion

You can request deletion of your personal information, subject to legal retention requirements.

7.4 Right to Withdraw Consent

You can withdraw consent for marketing communications at any time by clicking "unsubscribe" in our emails or adjusting your notification settings.

7.5 Right to Data Portability

You can request your data in a structured, machine-readable format.

7.6 Right to Object

You can object to certain processing of your personal information, including marketing activities.

To exercise these rights, please contact us at privacy@we368.com or through our app's support section.

8. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately so we can delete it.

9. International Data Transfers

Your information may be transferred to and processed in countries outside Malaysia. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable laws.

10. Third-Party Links and Services

Our platform may contain links to third-party websites, apps, or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by:

• Posting the updated policy on our website and app
• Sending you an email notification
• Displaying a prominent notice in the app

Your continued use of our services after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:

13. Regulatory Information

WE368 is committed to compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. Our company is registered with the Personal Data Protection Commissioner and adheres to all relevant data protection regulations.

Company Registration: 202600001-X (Example)

PDPA Registration: Registered with Department of Personal Data Protection