Privacy Policy

This Privacy Policy explains how KLSE Terminal ("we", "us", "our"), operated by EPARC, collects, uses, and protects your personal data. We handle personal data in line with the Malaysian Personal Data Protection Act 2010 (PDPA). By using KLSE Terminal you agree to this policy and our Terms of Service.

1. What we collect

• Account data: your name, username, email address, and password (stored securely / hashed).
• Subscription & billing data: your tier and payment status. Card payments are processed by our payment provider; we do not store full card numbers.
• Usage data: how you interact with the platform, including pages viewed and features used, for product improvement.
• Optional integrations: if you connect Telegram alerts, we store the identifier needed to deliver messages to you.
• Technical data: IP address, browser type, and device information collected automatically.

2. How we use your data

• To create and manage your account and provide the platform;
• To process subscriptions and payments;
• To send service messages, alerts you opt into, and important notices;
• To improve, secure, and troubleshoot the platform;
• To comply with legal obligations.

We do not sell your personal data, and we do not send unsolicited cold marketing to scraped contacts.

3. Legal basis

We process your data to perform our contract with you (providing the service), with your consent (for optional features such as marketing or alerts), and to meet our legitimate interests in running and securing the platform.

4. Sharing & processors

We share data only with service providers who help us operate the platform — such as cloud hosting, our database/backend provider, our payment gateway, and email/alert delivery services. These providers process data on our instructions. We may also disclose data where required by law.

5. Data retention

We keep your personal data for as long as your account is active and as needed to provide the service, then for any period required to meet legal, accounting, or dispute-resolution obligations. You can request deletion of your account at any time.

6. Security

We use industry-standard measures including encryption in transit, access controls, and row-level security on our database. No system is perfectly secure, but we work to protect your data and will notify you of material breaches as required by law.

7. Your rights

Under the PDPA, you can:

• Access and request a copy of your personal data;
• Correct inaccurate or incomplete data;
• Withdraw consent for optional processing;
• Request deletion of your account and associated data.

To exercise these rights, email us at ep@eparc.io.

8. Cookies

We use essential cookies to keep you signed in and to operate the platform, and limited analytics to understand usage. You can control cookies through your browser settings.

9. Changes

We may update this policy from time to time. Material changes will be notified through the platform or by email.