Privacy Policy

中文版

Note: this English text is an earlier version and is being updated. Where it differs from the Chinese version, the Chinese version (中文版) prevails.

1. Introduction

This Privacy Policy explains how Fight4UEC, including its subsidiaries, affiliates, and related entities (“Company”, “we”, “us”, or “our”), collects, processes, uses, discloses, retains, and protects your personal data. By accessing or using our platform, you acknowledge and agree to the practices described in this Privacy Policy.

This Policy outlines:

• The categories of personal data we collect;
• How such personal data is used;
• The parties to whom personal data may be disclosed and the reasons for such disclosure;
• How you may access or correct your personal data;
• How to submit inquiries or complaints;
• The necessity of providing certain personal data.

This notice is issued in compliance with Section 7 of the Malaysian Personal Data Protection Act 2010 (“PDPA”). It applies to all personal data currently in our possession or that we may acquire in the future.

2. Your Consent

By providing personal data to us or by using our platform, you confirm that:

• You have read, understood, and accepted the terms of this Privacy Policy;
• You consent to our collection, processing, and use of your personal data in the manner described herein;
• If you submit personal data belonging to a third party, you have obtained the necessary consent from that individual.

We reserve the right to amend this Privacy Policy with reasonable prior notice. Any revisions will take effect upon publication, and your continued use of the platform constitutes acceptance of the updated terms.

3. Collection of Personal Data

“Personal Data” refers to any information that identifies or can reasonably identify an individual, including but not limited to:

• Name, national identification number, passport number, date of birth
• Address, email address, telephone number, school, academic level
• Registration details, participation records
• Browsing activity, cookies, and device identifiers
• Payment and billing information (excluding full credit/debit card details)
• Educational information and learning preferences

3.1 Sources of Personal Data

We may collect personal data from the following sources:

1. Data you provide directly, such as:

   Contact information, account credentials, purchase records, event registrations, feedback, comments, and payment details.

2. Data collected automatically, through:

   IP addresses, device information, browser type, cookies, system logs, and interaction records.

3. Data obtained from third parties, including:

   Partner schools or tuition centres, payment service providers, social media platforms (if you log in using third-party accounts), public sources, and information required by law.

3.2 Usage and Learning Activity of Members

When you are signed in to your member account, we record how you use the platform: the pages you visit, how long a page is open in the foreground (time on page), when you sign in, and your learning activity (practice sets you attempt with scores and time taken, resources viewed and daily check-ins). This data is linked to your member account and is used by our administrators only to improve the service (for example, to see which features are used most) and to support your learning. It is never sold or used for advertising.

For all visitors, we also use Vercel Web Analytics to collect anonymous, aggregate traffic statistics (such as page views, referrers and device types). It does not identify you personally.

3.3 Order Data

When you buy notes or access packages, we keep the order (items, prices, totals, discount code), the payment method you chose, the payment screenshot you upload (image or PDF), the checkout confirmations you ticked (with their version and time) and, if you answer it, where you heard about us. For printed notes we also collect the recipient’s name (in English), shipping address and contact number. A copy of your member profile at the time of the order (name, email, phone, school, stream and grade) is stored with the order. We never collect card numbers.

4. Purpose of Processing Personal Data

Fight4UEC may process your personal data for the following purposes:

• Creating, maintaining, and managing user accounts;
• Delivering products, courses, notes, activities, and related services;
• Processing payments, transactions, and billing (verifying payment screenshots, granting online access, shipping printed notes and sending order emails);
• Providing customer service and technical support;
• Sending course recommendations, learning content, promotions, and event information;
• Conducting market research, analytics, and service improvements;
• Preventing fraud, abuse, or unlawful activities;
• Meeting legal, regulatory, and compliance obligations, including audits or investigations.

Failure to provide mandatory personal data may result in our inability to deliver certain services.

5. Data Disclosure and Sharing

We do not sell or trade personal data. However, we may disclose personal data to the following parties when necessary:

• Service Providers:

  Logistics companies (e.g. Pos Malaysia, which only receive the recipient name, address and contact number needed for delivery), payment gateways, email delivery tools, hosting providers, IT security services, and other vendors acting on our behalf.

• Business Partners:

  Schools, tuition centres, and educational collaborators—only for purposes relevant to the courses or activities you choose to participate in.

• Legal and Regulatory Authorities:

  Government agencies, enforcement bodies, and regulatory authorities as required under Malaysian law.

6. Data Retention

We retain personal data for as long as necessary to fulfill the purposes for which it was collected, or as required to:

• Provide ongoing services;
• Comply with statutory obligations;
• Resolve disputes;
• Enforce agreements.

Usage records of members (pages visited and time on page) are kept for about 180 days and then deleted automatically.

Orders (including shipping details) are transaction records and are kept for 7 years for accounting and tax purposes. Payment screenshots are kept for about 1 year after the order is completed or cancelled (to handle refunds or disputes) and then deleted. They are stored in private storage: only you can upload them, and only staff authorised to handle orders can view them, through short-lived links. They are never public.

Once data is no longer required, it will be securely deleted or anonymised.

7. Data Security

We implement appropriate technical and organisational measures to safeguard personal data, including:

• Data encryption;
• Access controls and restricted authorisation;
• Secure servers and network protections;
• Authentication and monitoring mechanisms.

Despite our efforts, no system can guarantee absolute security.

8. Your Rights

You may exercise the following rights at any time, and we will respond within 30 days:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request that your personal data be erased.
• Withdrawal of Consent: Opt out of marketing or cease further data processing.
• Restriction: Request limitations on specific processing activities.
• Cookies Management: Manage or disable cookies through your browser settings.

9. Cookies Policy

We use cookies to:

• Remember your preferences and login sessions;
• Enhance your browsing experience;
• Conduct analytics and performance measurement.

You may disable cookies in your browser, but certain platform features may become unavailable.

10. Children’s Privacy

• Our platform is not intended for children under the age of 13.
• Users under 18 must obtain consent from a parent or legal guardian.
• If we discover personal data submitted without proper consent, we will remove it promptly.

11. Third-Party Links

Our platform may contain links to third-party websites. We are not responsible for the content, security, or privacy practices of such external sites.

12. International Data Transfers

Where personal data is transferred to servers or service providers located outside Malaysia, we will implement reasonable safeguards to ensure that your data remains protected in accordance with applicable laws.

13. Updates to This Policy

We may update or revise this Privacy Policy periodically. All changes will be published on our platform and will take immediate effect upon posting.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact:

Personal Data Protection Officer

• Email: info.fight4uec@gmail.com
• Instagram: @fight4uec
• Facebook: @Fight4UEC
• Whatsapp: +6011-5586 1525