This Privacy Policy explains how RCAquaCycle Portal ("we", "us", "our") collects, uses, discloses, stores and protects your personal data in accordance with the Personal Data Protection Act 2010 ("PDPA") of Malaysia. By using our self-service laundry kiosks, website and related services (collectively, the "Services"), you consent to the processing of your personal data as described below.

Polisi ini diterbitkan dalam Bahasa Inggeris dan Bahasa Malaysia menurut Seksyen 7(3) PDPA. Sekiranya terdapat percanggahan, versi Bahasa Inggeris terpakai.

---

1. Who we are (Data User)

RCAquaCycle Portal is the data user responsible for your personal data. You may contact us at:

• Email: help@jomdiy.com.my
• Phone: +601133333876

2. Personal data we collect

Depending on how you use the Services, we may collect:

• Identity & contact data — name, email address, mobile phone number.
• Account credentials — password (stored in encrypted form) and one-time verification codes (OTP).
• Transaction & payment data — wallet top-ups, machine usage, payment records and loyalty points. We do not store full card numbers; card payments are processed by our licensed payment provider.
• Service usage data — machine bookings, queue tickets, support requests and notification preferences.
• Technical data — IP address, device and browser information, and session data collected automatically when you use our website.

3. Purposes of processing (Notice & Choice)

We process your personal data to:

• create and manage your account and verify your identity;
• operate the laundry kiosks, queue, payments and loyalty programme;
• process transactions, top-ups, refunds and maintain billing records;
• send service notifications, receipts and important account messages;
• provide customer support and respond to your enquiries;
• maintain security, prevent fraud and misuse of the Services; and
• comply with legal, regulatory and accounting obligations.

Where required by law, we will obtain your consent before processing. Some data is obligatory — if you do not provide it, we may be unable to create your account or deliver certain Services. Marketing messages (if any) are optional and you may opt out at any time.

4. Disclosure of personal data

We do not sell your personal data. We may disclose it to:

• payment and banking partners to process transactions;
• technology and hosting service providers acting on our instructions;
• professional advisers, auditors and regulators where required; and
• government or law enforcement authorities where permitted or required by law.

Where personal data is transferred outside Malaysia, we will take reasonable steps to ensure it receives a level of protection comparable to the PDPA.

5. Data security (Security Principle)

We apply reasonable technical and organisational measures — including encrypted passwords, access controls, secure transmission (HTTPS) and restricted staff access — to protect your personal data against loss, misuse, unauthorised access, alteration or disclosure.

6. Data retention (Retention Principle)

We retain personal data only for as long as necessary to fulfil the purposes above or to meet legal, tax and accounting requirements. When no longer required, data will be securely deleted or anonymised.

7. Your rights (Access & Correction)

Under the PDPA, you have the right to:

• request access to the personal data we hold about you;
• request correction of inaccurate, incomplete or outdated data;
• withdraw your consent or limit the processing of your data; and
• enquire about how your data is being processed and disclosed.

To exercise any of these rights, contact us at help@jomdiy.com.my. We may need to verify your identity before acting on your request, and a reasonable fee may apply for data access requests as permitted by law. We will respond within the timeframe required under the PDPA.

8. Cookies

Our website uses cookies and similar technologies to keep you signed in, remember your preferences and improve the Services. You may control cookies through your browser settings, though some features may not function properly if cookies are disabled.

9. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page with a revised effective date. Continued use of the Services after any change constitutes acceptance of the updated policy.

10. Contact us

For any questions, requests or complaints about your personal data or this Privacy Policy, please contact:

• RCAquaCycle Portal
• Email: help@jomdiy.com.my
• Phone: +601133333876

---

Salinan Dasar Privasi ini dalam Bahasa Malaysia boleh diperolehi dengan menghubungi kami melalui e-mel di atas.