Privacy Notice

1. About This Policy

This Privacy Notice explains how AMPLIFI ("we", "us") collects, uses, stores and protects your personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. By using this website, you consent to this policy.

2. Data We Collect

• Contact Information: Name, email address, Telegram username
• Assessment Data: Age confirmation, investment experience, preferred plan, partnership confirmation
• Promotion Tracking: Referrer codes, page visit records, IP address
• Contract Data: Signature name, signing time (if you sign a contract)
• Cookies: Login credentials, referral tracking, bot verification

3. Purpose of Use

Your personal data will be used for the following purposes:

• Assessing partnership eligibility and contacting you for follow-up
• Contract signing and service fulfillment
• Referral Partner Program management
• Website security and fraud prevention (Cloudflare Turnstile bot verification)
• Legal compliance and record keeping

4. Data Sharing

Except as outlined below, we do not sell or share your personal data with third parties:

• Service Providers: Supabase (data storage), Cloudflare (bot verification), Vercel (website hosting)
• Legal Requirements: When required by government authorities, courts, or law enforcement
• With Your Authorization: Upon obtaining your explicit consent

5. Retention Period

• Message Records: Retained for 6 months after response completion
• Assessment Data: Deleted 12 months after submission if no partnership begins
• Contract Data: Retained for 7 years as required by law
• Promotion Tracking: Retained for 12 months

6. Your Rights

Under the PDPA, you have the right to:

• Right of Access: Request access to the personal data we hold about you
• Right to Correction: Request correction of inaccurate data
• Right to Withdraw Consent: Request that we stop using your data
• Right to Erasure: Request deletion of your personal data (except where retention is legally required)
• Right to Complain: File a complaint with the Personal Data Protection Department of Malaysia (PDP)

To exercise these rights, please contact us via the website message form or our official Telegram channel.

7. Data Security

We implement the following technical measures to protect your data:

• HTTPS site-wide encrypted transmission
• Database Row Level Security (RLS) access control
• Passwords stored with bcrypt one-way encryption
• Regular security audits and vulnerability patching
• Cloudflare Turnstile to prevent bot attacks

8. Use of Cookies

This website uses essential cookies to provide the following functions: login session maintenance, referral code tracking, and bot verification. You may manage or delete cookies in your browser settings, but some features may not work properly as a result.

9. Minors

Our services are restricted to individuals aged 18 and above. We do not knowingly collect personal data from minors under 18. If you discover that we have inadvertently collected data from a minor, please contact us immediately for deletion.

10. Policy Updates

We may update this policy from time to time. Material changes will be reflected in the "Last Updated" date at the top of this page. We recommend reviewing this policy periodically.

11. Contact Us

If you have any questions about this policy or wish to exercise your rights, please contact us via the website message form or our official Telegram channel.