Privacy Policy

1. Personal data we collect

We collect only the personal data reasonably necessary to operate the marketplace and provide our services. Depending on how you use this website, this may include:

• Identity and contact details — name, email address, telephone number and address provided when you register an account, send an enquiry or apply as a dealer.
• Dealer business details — company name, registration number (SSM), business address and authorised representatives provided during dealer onboarding.
• Enquiry and preference details — vehicles you view or enquire about, estimates you request, and communications between you and dealers conducted through the website.
• Technical and usage data — device and browser information, pages visited, and interactions, collected through cookies and similar technologies (see section 5).
• We do not intentionally collect sensitive personal data (such as religious beliefs or health information) and ask that you do not provide it.

2. How we use your data

We process your personal data for the following purposes:

• Creating and administering your account, including authentication and security.
• Forwarding your enquiries and contact details to the relevant dealer so the dealer can respond to you.
• Operating, maintaining and improving the marketplace, including producing estimates and personalising content.
• Communicating with you about your account, enquiries, reservations and support requests.
• Conducting due diligence on dealer applications and monitoring listings for fraud prevention and platform safety.
• Complying with legal obligations, including requests from Malaysian authorities and courts.
• Where required under the PDPA, we will obtain your consent before using your data for direct marketing, and you may opt out at any time.

3. Disclosure of your data

We do not sell your personal data. We disclose it only as described below:

• Dealers — when you send an enquiry about a listing, the relevant dealer receives your name, contact details and enquiry contents so it can respond.
• Service providers — trusted processors who provide hosting, analytics, communications and technical support, bound to use data only on our instructions.
• Authorities — the Royal Malaysian Police, Malaysian Communications and Multimedia Commission, courts or other lawful authorities where required by law.
• Business transfers — in connection with a merger, acquisition or sale of assets, subject to confidentiality safeguards.

4. Transfer of data outside Malaysia

Our servers and some service providers may be located outside Malaysia. Where personal data is transferred abroad, we take reasonable steps to ensure the receiving party continues to protect it to a standard comparable to the PDPA, as required by section 129 of the PDPA.

5. Cookies and similar technologies

We use cookies and similar technologies to keep you signed in, remember your preferences (such as sort order and filters), measure website performance, and understand how the marketplace is used. You can control cookies through your browser settings; disabling them may affect some features, such as staying signed in.

6. Security and retention

We apply administrative, technical and physical safeguards appropriate to the sensitivity of the data, including encrypted connections, access controls and audit logging, in line with section 9 of the PDPA.

We retain personal data only for as long as necessary for the purposes above or as required by law (section 10 of the PDPA), after which it is securely deleted or anonymised. Account data is generally retained while your account is active and for a reasonable period afterwards to meet legal and audit obligations.

7. Your rights

Under the PDPA, you have the right to request access to your personal data held by us (section 30) and to request correction of inaccurate or incomplete data (section 34). To exercise these rights, or to withdraw consent, limit processing, or complain about our handling of your data, contact us through the contact details published on this website.

We will respond within the timeframes required by law and may need to verify your identity first. A prescribed fee may apply to access requests as permitted under the PDPA. If you remain dissatisfied, you may lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

8. Children

This website is not directed at persons under 18 years of age, and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, please contact us so we can delete it.

9. Changes to this policy and contact

We may update this Privacy Policy from time to time. Material changes will be published on this page with a revised “Last updated” date, and continued use of the website constitutes acceptance of the updated policy.

For any question about this policy or your personal data, please contact us through the contact details published on this website.