Dokumen Undang-Undang
Dasar Privasi
Kemaskini terakhir: 20 Jun 2026
Ringkasan
✓ Kami tidak menjual data anda kepada sesiapa
✓ Data pelajar anda disimpan dengan selamat dan dienkripsi
✓ Kami mematuhi PDPA 2010 Malaysia
✓ Anda boleh meminta data anda pada bila-bila masa
✓ Anda boleh padam akaun dan data anda dengan mudah
1. Introduction
ClassRep Sdn. Bhd. ("we", "us", "our") operates the ClassRep platform. This Privacy Policy explains how we collect, use, store, and protect personal data when you use our service. We are committed to protecting your privacy and complying with the Personal Data Protection Act (PDPA) 2010 of Malaysia. By using ClassRep, you consent to the data practices described in this policy.
2. Information We Collect
We collect the following categories of personal data: • Account information: Name, email address, phone number, and password (stored as a secure hash) when you register for an account. • Centre information: education centre name, address, registration number, and operating details you provide during setup. • Student and parent records: Student names, date of birth, IC/passport numbers, school, class enrolment, and parent/guardian contact details entered by you into the platform. • Attendance and academic records: Attendance logs, assessment scores, and progress report content you create using the Service. • Payment information: Invoice records and payment transaction data. Card or bank account details are processed directly by Billplz and are not stored on our servers. • Usage data: Log files, device type, browser, IP address, pages visited, and feature usage patterns for service improvement.
3. How We Use Your Information
We use collected data to: • Provide and operate the ClassRep service • Process subscription payments and generate invoices • Send automated WhatsApp messages (via Whapi) on your behalf to parents • Generate progress reports and attendance records • Provide customer support • Improve and develop new features • Comply with legal obligations under Malaysian law We will not use your data for any purpose not described in this policy without your explicit consent.
4. Third-Party Services
We share limited data with trusted third-party providers to operate the Service: • Billplz (Payment processing): Invoice payment data is transmitted to Billplz to process FPX transactions. Billplz is a registered Payment Gateway in Malaysia. View their privacy policy at billplz.com/privacy. • Whapi (WhatsApp messaging): When you configure WhatsApp integration, message content and recipient phone numbers are transmitted through Whapi's API. View their privacy policy at whapi.cloud. • Cloud hosting providers: Our servers are hosted on secure cloud infrastructure. Data is stored within data centres with SOC 2 compliance. We do not sell, rent, or trade your personal data or your students' data to any third party for commercial purposes.
5. Data Security
We implement industry-standard security measures to protect your data: • All data is transmitted over HTTPS/TLS encryption • Passwords are stored using bcrypt hashing • Access to production databases is restricted to authorised personnel only • Regular security audits and vulnerability assessments are conducted While we take all reasonable precautions, no system is completely secure. In the event of a data breach that affects your rights and freedoms, we will notify you and the relevant authorities as required by PDPA 2010.
6. Data Retention
We retain your data for as long as your account is active or as needed to provide the Service. If you close your account: • You may export all your data within 30 days of account closure • After 30 days, personal data will be permanently deleted from our systems • Some data may be retained longer where required by Malaysian law or for legitimate business purposes (such as tax records) Anonymised, aggregated data may be retained indefinitely for analytics purposes.
7. Your Rights Under PDPA 2010
Under the Personal Data Protection Act 2010, you have the right to: • Access: Request a copy of the personal data we hold about you • Correction: Request correction of inaccurate or incomplete data • Withdrawal of consent: Withdraw your consent for processing (note this may affect your ability to use the Service) • Limitation: Request that we limit how we process your data in certain circumstances To exercise these rights, contact us at privacy@ClassRep.my. We will respond within 21 days as required by the PDPA.
8. Children's Data
ClassRep stores records about students, who may be minors. This data is entered by education centre administrators (the account holders), who are responsible for obtaining appropriate parental consent before inputting any student's personal data. We do not knowingly collect personal data directly from children under 18 through our public-facing registration forms. If you believe we have inadvertently collected such data, please contact us immediately.
9. Cookies
We use essential cookies to maintain your login session and remember your language preference. We do not use cookies for third-party advertising or cross-site tracking. You can control cookies through your browser settings, though disabling essential cookies may prevent you from logging in.
10. Parent Portal
The ClassRep Parent Portal allows parents and guardians to view their child's attendance, invoices, and progress reports. Access is controlled by the education centre administrator. Parents who access the portal are subject to this Privacy Policy as it relates to the data they can view.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or via an in-app notice at least 14 days before the changes take effect. The "last updated" date at the top of this page reflects the most recent revision.
12. Contact & Complaints
If you have any questions about this Privacy Policy, or wish to exercise your data rights, please contact: ClassRep Sdn. Bhd. Data Protection Officer Email: privacy@ClassRep.my Address: Kuala Lumpur, Malaysia If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) at pdp.gov.my.