Privacy Notice

1. About this notice

This Privacy Notice explains how AMPLIFI ("we", "us") collects, uses, stores and protects your personal data in accordance with Malaysia’s Personal Data Protection Act 2010 (PDPA). By using this website, you acknowledge that you have read and agree to this notice.

2. Data we collect

• Contact information: name, email address, Telegram username
• Assessment data: age confirmation, investment experience, preferred plan, cooperation confirmation
• Referral tracking: referrer code, page visit records, IP address
• Contract data: signing name, signing time (if you sign a contract)
• Cookies: login session, referral tracking, bot verification

3. Purpose of use

We use your personal data for the following purposes:

• Assessing eligibility and contacting you for follow-up explanations
• Contract signing and service delivery
• Referral Partner programme administration
• Website security and anti-fraud measures (Cloudflare Turnstile bot verification)
• Legal compliance and record retention

4. Data sharing

Except in the situations listed below, we do not sell or share your personal data with third parties:

• Service providers: Supabase (data storage), Cloudflare (bot verification), Vercel (website hosting)
• Legal requirements: where required by lawful requests from government authorities, courts or law enforcement
• With your authorisation: where we have obtained your explicit consent

5. Retention period

• Message records: retained for 6 months after the response is completed
• Assessment data: deleted after 12 months if no cooperation begins
• Contract data: retained for 7 years as required by law
• Referral tracking: retained for 12 months

6. Your rights

Under the PDPA, you have the right to:

• Right of access: request access to your personal data held by us
• Right to correction: request correction of inaccurate data
• Right to withdraw consent: request that we stop using your data
• Right to erasure: request deletion of your personal data (except where retention is legally required)
• Right to complain: file a complaint with Malaysia’s Personal Data Protection Department (PDP)

To exercise these rights, please contact us via the website message function or our official Telegram channel.

7. Data security

We implement the following technical measures to protect your data:

• Site-wide HTTPS encrypted transmission
• Database Row Level Security (RLS) access isolation
• Passwords stored using one-way bcrypt hashing
• Regular security reviews and vulnerability patching
• Cloudflare Turnstile to reduce automated abuse

8. Use of cookies

This website uses essential cookies to provide the following functions: maintaining login sessions, tracking referral codes and performing bot verification. You may manage or delete cookies in your browser settings, but some features may not function properly as a result.

9. Minors

Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected data from a minor, please contact us immediately so we can delete it.

10. Policy updates

We may update this notice from time to time. Material changes will be reflected in the "Last Updated" date at the top of this page. We recommend reviewing this notice periodically.

11. Contact us

If you have any questions about this notice or wish to exercise your rights, please contact us via the website message function or our official Telegram channel.