Legal

Privacy Policy

FIND MY SPONSOR PRIVACY POLICY

1. Introduction

Find My Sponsor is a digital marketplace designed to connect people seeking sponsorship with individuals, businesses, organisations and other users interested in providing sponsorship or support.

Users may use the platform to:

  • create and maintain a personal profile;

  • identify themselves as a seeker, sponsor or both;

  • publish sponsorship needs;

  • publish sponsorship offers;

  • discover and match with other users;

  • communicate through in-app chat;

  • express interest in, save, shortlist or respond to posts;

  • report users, posts, messages or inappropriate activity;

  • receive personalised recommendations;

  • build a trust score, profile completeness score and platform reputation;

  • purchase optional platform features or digital services.

This Privacy Policy explains how NonPlus Sdn Bhd, trading as Find My Sponsor, collects, uses, stores, shares and otherwise processes personal information through:

  • the Find My Sponsor mobile application;

  • the Find My Sponsor website;

  • related web applications;

  • administrative and moderation portals;

  • customer-support channels;

  • related services, features and communications.

In this Privacy Policy:

  • “Find My Sponsor,” “we,” “our” or “us” refers to NonPlus Sdn Bhd.

  • “Platform” refers collectively to our applications, websites, services and systems.

  • “User,” “you” or “your” refers to a person who accesses or uses the Platform.

  • “Seeker” refers to a user seeking sponsorship or support.

  • “Sponsor” refers to a user offering or expressing an interest in providing sponsorship or support.

  • “Post” includes a sponsorship need, sponsorship offer or related content published through the Platform.

Malaysia’s Personal Data Protection Act applies to personal information processed in connection with commercial transactions, and recognises information such as names, identification numbers, health information, email addresses and photographs as personal data.  

2. Who Is Responsible for Your Information

The organisation responsible for the processing described in this Privacy Policy is:

Legal company name: NonPlus Sdn Bhd
Support email: fmssupport@nonplus.my

Where required by applicable law, Find My Sponsor acts as the data controller, data user, organisation, business or equivalent responsible party for your personal information.

Certain service providers process information on our behalf. Other providers, such as social sign-in platforms and mobile application stores, may process information independently under their own privacy policies.

3. Geographic Availability

Find My Sponsor is intended to be available globally, with an initial focus on Southeast Asia.

Because privacy rights and legal requirements vary by country, certain features, consent mechanisms or rights may differ depending on:

  • your country or region;

  • your age;

  • the location from which you use the Platform;

  • the nature of the information being processed;

  • whether local law requires parental or guardian consent;

  • whether local law requires a particular feature to be restricted.

Where local law provides stronger rights than this Privacy Policy, the applicable local law will prevail.

We may introduce jurisdiction-specific privacy notices or supplements for particular countries.

4. Minimum Age and Information About Younger Users

4.1 Minimum age

You must be at least 14 years old to create or use a Find My Sponsor account.

The Platform is not intended for children below the age of 14.

We do not knowingly permit anyone below age 14 to:

  • register for an account;

  • create a public profile;

  • publish a need or offer;

  • communicate with users;

  • upload identity documents;

  • participate in matching;

  • purchase paid features.

In the United States, COPPA generally applies to online services directed to children under 13 or services that knowingly collect personal information from children under 13. Find My Sponsor’s minimum age is set above that threshold.  

4.2 Users aged 14 to 17

Users aged 14–17 may be subject to additional protections.

Where local law requires parental or legal-guardian authorisation for a person of your age, you may use the Platform only after that authorisation has been obtained.

We may ask a user aged 14–17 to provide:

  • confirmation of parental or guardian permission;

  • the name and contact information of a parent or guardian;

  • evidence of age;

  • evidence that the parent or guardian has authorised use of the Platform.

We may limit certain features for users under 18, including:

  • direct contact with adults;

  • sharing of exact location;

  • public display of workplace or school information;

  • publication of sensitive evidence;

  • off-platform contact sharing;

  • anonymous contact;

  • certain categories of sponsorship;

  • access to paid or commercial features.

4.3 Age assurance

We may use reasonable measures to estimate or confirm age, including:

  • date of birth or birth year;

  • account information;

  • identity-verification information;

  • automated risk indicators;

  • manual review;

  • requests for additional confirmation.

We do not use age-verification information to publicly display your full date of birth.

4.4 Discovery of an underage account

If we reasonably believe that a user is below age 14, we may:

  • restrict the account immediately;

  • stop further collection;

  • remove public content;

  • request age confirmation;

  • terminate the account;

  • delete the account’s personal information, subject to legal and safety retention requirements.

A parent or guardian who believes that a child below 14 has provided information to us may contact fmssupport@nonplus.my.

5. Personal Information We Collect

We collect information in several ways:

  1. information you provide directly;

  2. information generated through your use of the Platform;

  3. information received from other users;

  4. information received from service providers;

  5. information inferred or generated by our systems.

The exact information collected depends on the features you use.

5.1 Account and authentication information

When you create or access an account, we may collect:

  • first name;

  • last name;

  • username;

  • email address;

  • telephone number;

  • profile photograph;

  • password-related account status;

  • authentication identifiers;

  • account creation date;

  • last login date;

  • sign-in method;

  • device and session information;

  • whether your email or telephone number is verified.

We use Clerk to support account authentication.

You may sign in using:

  • Google;

  • Apple;

  • Facebook;

  • another sign-in method we make available.

When you use social sign-in, we may receive information authorised by you and provided by the relevant service, such as:

  • name;

  • email address;

  • profile image;

  • provider-specific account identifier;

  • authentication status.

We do not receive your Google, Apple or Facebook password.

The sign-in provider independently processes information according to its own terms and privacy policy.

5.2 Profile information

Depending on your choices, your profile may include:

  • name;

  • profile photo;

  • cover image;

  • age or age range;

  • birth year;

  • gender, if voluntarily provided;

  • city;

  • state;

  • country;

  • general region;

  • languages;

  • biography;

  • headline;

  • occupation;

  • employer;

  • organisation;

  • school, college or university;

  • industry;

  • professional background;

  • education;

  • achievements;

  • interests;

  • skills;

  • website;

  • portfolio;

  • social-media links;

  • sponsorship history;

  • categories of interest;

  • badges;

  • account role;

  • profile completion status;

  • verification status;

  • trust score;

  • response rate;

  • platform activity.

You control the visibility of many profile fields.

Some information may remain visible where necessary for platform safety, such as:

  • verification badge;

  • account status;

  • role;

  • trust or reputation indicator;

  • public posts;

  • reportable account identifier.

5.3 Role, category and matching preferences

We may collect your preferences regarding how you intend to use the Platform, including:

  • whether you are primarily seeking, sponsoring or both;

  • categories you wish to support;

  • categories in which you may seek support;

  • preferred age range;

  • preferred region;

  • preferred countries or cities;

  • preferred sponsor type;

  • preferred seeker type;

  • sponsorship value range;

  • one-time or recurring interest;

  • willingness to accept partial sponsorship;

  • willingness to interact with anonymous users;

  • urgent versus long-term opportunities;

  • causes, interests and social-impact preferences;

  • saved searches;

  • blocked categories;

  • excluded regions.

We use these preferences to personalise discovery, recommendations, search results and matching.

Preferences do not guarantee that a match or sponsorship will occur.

5.4 Identity and verification information

We use a custom identity-verification process to promote safety and reduce fraud.

Depending on the verification level and jurisdiction, we may collect:

  • government-issued identification document;

  • passport;

  • national identity card;

  • driving licence;

  • document photograph;

  • document number;

  • full legal name;

  • date of birth;

  • nationality;

  • issuing country;

  • expiry date;

  • selfie;

  • facial image;

  • liveness-check image or video;

  • face-match result;

  • document-authenticity result;

  • verification confidence;

  • verification status;

  • failed verification attempts;

  • reason for rejection;

  • manual-review records;

  • fraud indicators.

Identity-verification information is used for:

  • confirming identity;

  • confirming age;

  • preventing duplicate accounts;

  • detecting false documents;

  • reducing impersonation;

  • investigating abuse;

  • supporting trust scoring;

  • enforcing platform rules.

Identity documents and facial images are not displayed publicly.

Where facial images or face-comparison methods are legally classified as biometric or sensitive personal information, we will process them only where an appropriate legal basis or valid consent exists.

We may provide a separate identity-verification notice at the time this information is collected.

5.5 Needs, offers and other post information

When you create a post, we may collect:

  • post title;

  • description;

  • category;

  • requested or offered amount or estimated value;

  • requested product or service;

  • location;

  • deadline;

  • urgency;

  • frequency;

  • intended recipients;

  • eligibility criteria;

  • photographs;

  • videos;

  • documents;

  • proof material;

  • captions;

  • language;

  • visibility setting;

  • anonymous-post preference;

  • match preferences;

  • creation and modification dates;

  • moderation status;

  • post performance;

  • saved, viewed or interested counts.

Posts may include details about:

  • education;

  • employment;

  • creative work;

  • community activity;

  • personal circumstances;

  • living needs;

  • health-related support;

  • emergencies;

  • charitable projects;

  • business plans.

You should not upload information that is unnecessary for your request.

You should redact:

  • full identity numbers;

  • bank account numbers;

  • card numbers;

  • passwords;

  • medical-record numbers;

  • exact home addresses;

  • third-party personal information;

  • confidential documents not required to explain the post.

5.6 Sensitive information

Depending on the categories you use and the content you voluntarily provide, we may process information that could be considered sensitive under applicable law.

This may include information relating to:

  • health or medical circumstances;

  • disability;

  • race or ethnicity;

  • religion;

  • financial hardship;

  • family circumstances;

  • identity documents;

  • facial images;

  • precise or approximate location;

  • minors;

  • emergency circumstances.

You should provide sensitive information only where it is relevant and necessary.

We may:

  • apply additional access restrictions;

  • limit public visibility;

  • blur or redact documents;

  • require express consent;

  • remove unnecessary sensitive details;

  • request that a document be re-uploaded;

  • make proof visible only to authorised staff or selected users.

We do not currently facilitate the transfer, escrow or exchange of sponsorship funds between sponsors and seekers through the Platform.

5.7 Location information

We may process location information to:

  • identify nearby opportunities;

  • match sponsors and seekers by region;

  • personalise recommendations;

  • display locally relevant categories;

  • improve search results;

  • detect unusual or fraudulent activity;

  • comply with regional requirements;

  • improve Platform performance and usability.

Location information may include:

  • city;

  • state;

  • country;

  • postcode or broad area;

  • location entered manually;

  • approximate location derived from your device;

  • approximate location derived from your IP address;

  • location permissions provided by your device.

We do not intend to collect continuous background location unless a future feature specifically requires it and you provide permission.

We generally recommend displaying only approximate location publicly.

You can manage device-level location permissions through your device settings. Disabling location may reduce the relevance of local matches.

5.8 Communications and chat information

The Platform includes in-app communication functionality supported by CometChat.

We may process:

  • message text;

  • message date and time;

  • sender and recipient;

  • delivery status;

  • read status;

  • typing status;

  • attachments;

  • photographs;

  • audio;

  • videos;

  • translated messages;

  • reactions;

  • deleted-message status;

  • blocked-user information;

  • report information;

  • moderation flags;

  • conversation metadata.

Messages are not intended to be public.

However, messages may be accessed or reviewed where reasonably necessary to:

  • investigate a report;

  • prevent fraud;

  • address harassment;

  • detect spam;

  • enforce community standards;

  • protect a user;

  • respond to a legal request;

  • resolve a technical issue;

  • investigate suspicious activity.

We may use automated systems to detect:

  • spam;

  • scams;

  • abusive language;

  • harassment;

  • prohibited content;

  • suspicious contact sharing;

  • attempts to bypass platform safeguards.

We do not represent chat as end-to-end encrypted unless the implemented technical architecture provides true end-to-end encryption.

CometChat may process communication data as a service provider supporting the chat feature.

5.9 Reports, blocks and safety information

Users may report:

  • another user;

  • a profile;

  • a need;

  • an offer;

  • a message;

  • a photograph or video;

  • suspicious activity;

  • harassment;

  • fraud;

  • impersonation;

  • inappropriate or illegal content.

When a report is submitted, we may collect:

  • reporting user;

  • reported user or content;

  • report category;

  • explanation;

  • evidence;

  • screenshots;

  • relevant messages;

  • date and time;

  • moderation decision;

  • action taken;

  • appeal;

  • internal notes.

When you block another user, we may store:

  • blocker and blocked-user identifiers;

  • date of block;

  • reason, if provided;

  • relevant safety information.

We generally do not tell a blocked or reported user the identity of the reporting user, unless required by law or necessary to fairly handle a dispute.

5.10 Usage, device and technical information

We may automatically collect:

  • IP address;

  • device type;

  • device identifier;

  • operating system;

  • app version;

  • browser type;

  • language;

  • time zone;

  • mobile carrier;

  • screen size;

  • session information;

  • login activity;

  • crash logs;

  • diagnostic data;

  • network information;

  • referring source;

  • pages or screens viewed;

  • buttons selected;

  • search activity;

  • swipe decisions;

  • saved content;

  • viewing duration;

  • feature usage;

  • approximate location;

  • security events.

We use this information for analytics, security, debugging, product improvement and abuse prevention.

5.11 Analytics and product-experience information

We use analytics and product-observation technologies to understand how users interact with the Platform.

These technologies may collect:

  • page and screen views;

  • navigation paths;

  • clicks and taps;

  • feature usage;

  • session duration;

  • device and application information;

  • conversion events;

  • errors;

  • performance information;

  • broad location;

  • experiment participation;

  • interactions with recommendations.

We may use analytics providers acting on our behalf.

We do not need to identify every analytics provider in this Privacy Policy. We may maintain an updated list of material subprocessors or service providers separately.

Where required, we will obtain consent before using non-essential tracking technologies.

5.12 Purchases and subscription information

The Platform may offer optional purchases, subscriptions, boosts or premium features.

RevenueCat supports management of subscription and purchase entitlement information. Payments may be processed through native app-store payment systems, including Apple App Store or Google Play payment infrastructure.

We may receive:

  • product purchased;

  • subscription tier;

  • purchase date;

  • renewal date;

  • expiry date;

  • payment status;

  • cancellation status;

  • refund status;

  • entitlement information;

  • transaction identifier;

  • app-store account region;

  • promotional-offer status.

We generally do not receive or store your complete payment-card number from native app-store purchases.

The relevant app store or payment provider separately processes payment information under its own privacy policy.

At present, these purchases relate to Platform features and do not constitute transfer of sponsorship funds between users.

5.13 Push notifications and communications

We may use native mobile push-notification services to send:

  • account notifications;

  • verification updates;

  • security alerts;

  • new match notifications;

  • bid or request notifications;

  • post-status updates;

  • message alerts;

  • moderation decisions;

  • purchase or subscription updates;

  • feature announcements;

  • optional promotional messages.

You can manage push-notification permissions through your device settings.

Disabling notifications may cause you to miss time-sensitive updates but will not normally prevent basic use of the Platform.

5.14 Information received from other users

Other users may provide information about you when they:

  • submit a report;

  • mention you in a message;

  • respond to your post;

  • submit feedback;

  • upload evidence;

  • raise a safety concern;

  • identify suspected impersonation.

We process this information only where relevant to Platform operations, moderation, safety or legal compliance.

5.15 Information inferred or generated by our systems

We may derive information from collected data, including:

  • possible interests;

  • likely preferred categories;

  • match relevance;

  • trust indicators;

  • fraud risk;

  • response behaviour;

  • account-quality signals;

  • recommended content;

  • probable language;

  • approximate region;

  • post-legitimacy signals;

  • moderation priority;

  • profile completeness.

These inferences may be produced using automated or AI-assisted tools.

6. How We Use Personal Information

We may use personal information for the following purposes.

6.1 Providing the Platform

To:

  • create and maintain accounts;

  • authenticate users;

  • provide profiles;

  • publish needs and offers;

  • enable discovery;

  • support search and filtering;

  • provide chat;

  • enable reporting and blocking;

  • manage subscriptions and purchases;

  • provide customer support;

  • deliver notifications.

6.2 Verification and trust

To:

  • verify identity;

  • confirm age;

  • detect false or duplicate accounts;

  • prevent impersonation;

  • generate verification badges;

  • calculate trust indicators;

  • support profile-completeness calculations;

  • identify suspicious activity.

6.3 Matching and recommendations

To:

  • recommend sponsors, seekers, offers or needs;

  • personalise feeds;

  • identify geographically relevant opportunities;

  • display match reasons;

  • rank search results;

  • recommend categories;

  • improve relevance.

6.4 Safety and moderation

To:

  • investigate reports;

  • identify fraud, scams or spam;

  • detect harassment;

  • block prohibited content;

  • restrict abusive users;

  • preserve evidence;

  • enforce terms and community standards;

  • protect younger users;

  • respond to emergencies where legally permitted.

6.5 Product improvement

To:

  • understand Platform usage;

  • measure engagement;

  • diagnose errors;

  • improve design;

  • test new functionality;

  • improve recommendation quality;

  • evaluate performance;

  • conduct research and aggregate analysis.

6.6 Communication

To:

  • send service notifications;

  • answer support requests;

  • send verification updates;

  • communicate moderation decisions;

  • notify you of matching activity;

  • provide security alerts;

  • send optional marketing communications where permitted.

6.7 Legal and compliance purposes

To:

  • comply with laws;

  • respond to lawful requests;

  • enforce contractual rights;

  • establish or defend legal claims;

  • maintain required records;

  • protect users and the public;

  • investigate suspected illegal activity.

7. Legal Bases for Processing

Depending on the applicable law, we may rely on one or more of the following grounds:

7.1 Performance of a contract

Where processing is necessary to:

  • create your account;

  • provide Platform features;

  • publish your content;

  • provide matches;

  • operate chat;

  • manage purchases;

  • provide support.

7.2 Consent

Where you provide consent for:

  • optional location access;

  • sensitive profile information;

  • identity-verification processing;

  • facial or liveness verification;

  • optional marketing;

  • optional profile visibility;

  • non-essential analytics;

  • certain processing involving younger users.

You may withdraw consent, although this may prevent use of features that require the relevant information.

7.3 Legitimate interests

Where permitted, we may process information for legitimate interests such as:

  • securing the Platform;

  • detecting fraud;

  • moderating content;

  • improving recommendations;

  • understanding use;

  • preventing duplicate accounts;

  • protecting users;

  • enforcing rules.

We will balance these interests against your rights.

7.4 Legal obligation

Where processing is required to comply with:

  • applicable laws;

  • court orders;

  • regulatory requirements;

  • law-enforcement requests;

  • child-safety obligations;

  • recordkeeping requirements.

7.5 Protection of vital interests

In exceptional circumstances, information may be processed to protect someone’s life, safety or health.

8. Public and Private Information

8.1 Information you make public

Depending on your settings, public information may include:

  • name or display name;

  • profile image;

  • headline;

  • biography;

  • broad location;

  • role;

  • categories;

  • occupation;

  • organisation or university;

  • badges;

  • verification status;

  • trust indicator;

  • profile-completeness indicator;

  • needs;

  • offers;

  • success stories;

  • selected sponsorship history.

Public information may be viewed, copied, captured or shared by other users.

Do not make information public that you are not comfortable sharing.

8.2 User-controlled visibility

Where available, you may manage the visibility of:

  • name;

  • profile photo;

  • age range;

  • city or region;

  • employer;

  • university;

  • occupation;

  • social links;

  • sponsorship preferences;

  • post visibility;

  • activity information.

Some operational information cannot be hidden where it is necessary for safety or functionality.

8.3 Information that is not public

We do not intentionally make the following public:

  • full date of birth;

  • email address;

  • telephone number;

  • password;

  • government ID;

  • ID number;

  • liveness image;

  • full location;

  • private chat;

  • report history;

  • internal moderation records;

  • device identifiers;

  • private analytics data.

9. AI, Automated Processing and Profiling

We may use AI-assisted and automated technologies to support:

  • matching;

  • recommendations;

  • search ranking;

  • trust scoring;

  • profile completeness;

  • document review;

  • identity verification;

  • content moderation;

  • suspicious-activity detection;

  • translation;

  • post suggestions;

  • category suggestions;

  • image analysis;

  • safety review.

We may use third-party or internally developed AI systems. We do not need to identify a specific model provider in this Privacy Policy, particularly where providers or technical architecture may change.

We require providers processing information on our behalf to handle it subject to appropriate contractual, confidentiality and security requirements.

Malaysia has issued guidance relating to automated decision-making and profiling under its personal-data framework.  

9.1 AI matching

Matching may consider:

  • role;

  • categories;

  • location;

  • age preferences;

  • sponsorship preferences;

  • post content;

  • interests;

  • past activity;

  • interaction patterns;

  • saved posts;

  • trust signals;

  • availability;

  • reported or blocked relationships.

A recommendation does not represent:

  • a guarantee;

  • an endorsement;

  • a promise of sponsorship;

  • confirmation that another user is safe;

  • professional advice.

9.2 Trust scoring

Trust scores may consider factors such as:

  • identity-verification status;

  • profile completeness;

  • account age;

  • response rate;

  • successful platform activity;

  • confirmed reports;

  • disputes;

  • spam behaviour;

  • suspicious activity;

  • consistency of information;

  • document-review results;

  • social or professional verification;

  • compliance with Platform rules.

We do not publish the complete formula, weightings, anti-fraud rules or thresholds because doing so could undermine fraud prevention.

We may provide:

  • the score or score range;

  • a general explanation;

  • suggestions for improvement;

  • key factors affecting the score.

9.3 Significant decisions

Where required by applicable law, users may request:

  • an explanation of a materially adverse automated decision;

  • human review;

  • correction of inaccurate information;

  • an opportunity to provide additional information;

  • an appeal.

Where reasonably possible, permanent account bans, serious verification rejection and other significant adverse decisions will involve human review rather than relying solely on automation.

10. How We Share Information

We do not sell personal information in the ordinary sense of exchanging it for money.

We may share information in the following circumstances.

10.1 With other users

Information is shared with other users according to:

  • your profile settings;

  • post visibility;

  • matching activity;

  • chat participation;

  • your actions;

  • Platform safety requirements.

10.2 Authentication providers

We use service providers supporting:

  • account registration;

  • social sign-in;

  • authentication;

  • session management;

  • account security.

This includes Clerk and sign-in services provided by Google, Apple and Facebook.

10.3 Chat provider

CometChat may process:

  • message content;

  • attachments;

  • identifiers;

  • delivery information;

  • communication metadata.

10.4 Purchase and subscription providers

We may share purchase-related information with:

  • RevenueCat;

  • Apple;

  • Google;

  • app stores;

  • payment processors;

  • subscription-management providers.

10.5 Hosting and technology providers

We may use providers for:

  • cloud hosting;

  • databases;

  • storage;

  • content delivery;

  • backups;

  • security;

  • fraud detection;

  • analytics;

  • email;

  • notifications;

  • identity verification;

  • AI processing;

  • customer support.

10.6 Professional advisers

We may disclose information to:

  • lawyers;

  • auditors;

  • insurers;

  • consultants;

  • accountants;

  • compliance advisers.

10.7 Corporate transactions

Information may be disclosed in connection with:

  • merger;

  • acquisition;

  • financing;

  • restructuring;

  • sale of assets;

  • insolvency;

  • transfer of the Platform.

Where appropriate, we will require the recipient to respect applicable privacy obligations.

10.8 Legal and safety disclosures

We may disclose information where reasonably necessary to:

  • comply with law;

  • respond to a court order;

  • respond to lawful government requests;

  • investigate fraud;

  • prevent harm;

  • protect rights;

  • enforce agreements;

  • report illegal conduct;

  • respond to an emergency.

11. International Data Transfers

Because Find My Sponsor operates globally and uses service providers in different countries, personal information may be processed outside:

  • your country;

  • Malaysia;

  • the country in which it was collected.

Countries may have different privacy laws.

Where required, we will use appropriate safeguards, which may include:

  • contractual protections;

  • standard contractual clauses;

  • approved transfer mechanisms;

  • adequacy decisions;

  • access controls;

  • data minimisation;

  • encryption;

  • provider due diligence.

Malaysia has issued guidance addressing cross-border transfers of personal information.  

12. Data Retention

We retain information only for as long as reasonably necessary for:

  • Platform operations;

  • the purposes described in this policy;

  • safety;

  • fraud prevention;

  • legal compliance;

  • dispute resolution;

  • enforcement.

Indicative periods include:

Information Typical retention
Active account information For the duration of the account
Public profile information Until removed or account deletion
Posts Until deleted, expired, removed or account deletion
Chat messages While account is active and for a limited period afterwards
Identity-verification result While necessary for safety and verification
Raw identity documents Only as long as reasonably needed for verification and review
Reports and moderation records As required for safety, enforcement and appeals
Security logs A reasonable security-retention period
Analytics records According to configured analytics retention
Subscription records As required for purchase administration and legal records
Backups Until overwritten under the backup cycle

12.1 Account deletion

When you request account deletion:

  1. your account may first be deactivated;

  2. your profile may no longer be publicly accessible;

  3. deletion will generally be completed within 30 days;

  4. information in active systems will be removed or anonymised;

  5. backups may take additional time to be overwritten.

12.2 Information we may retain after deletion

We may retain limited information beyond 30 days where necessary to:

  • comply with law;

  • prevent fraud;

  • maintain a ban;

  • respond to a dispute;

  • protect another user;

  • preserve evidence;

  • enforce agreements;

  • maintain transaction or subscription records;

  • defend legal claims.

For example, we may retain:

  • a hashed email or telephone number belonging to a permanently banned account;

  • moderation decisions;

  • report records;

  • evidence associated with serious abuse;

  • purchase and refund records;

  • consent records;

  • legal-request records.

Where possible, retained information will be restricted and separated from active user systems.

13. Security

We use reasonable administrative, technical and organisational measures designed to protect personal information.

Measures may include:

  • encryption in transit;

  • encryption at rest where appropriate;

  • role-based access;

  • access logging;

  • authentication controls;

  • least-privilege access;

  • secure development practices;

  • monitoring;

  • backup controls;

  • incident-response procedures;

  • vendor due diligence;

  • staff confidentiality requirements;

  • regular review of security controls.

No internet-based system can be guaranteed to be completely secure.

You are responsible for:

  • maintaining account security;

  • protecting your device;

  • using secure sign-in methods;

  • not sharing access credentials;

  • reporting suspected compromise promptly.

14. Personal Data Breaches

If we become aware of a security incident affecting personal information, we will:

  • investigate;

  • contain the incident;

  • assess risks;

  • take remedial action;

  • notify authorities where legally required;

  • notify affected users where legally required or appropriate.

Malaysia has established guidance and regulatory procedures concerning personal-data breach notification.  

15. Your Privacy Rights

Depending on your location, you may have rights to:

  • access personal information;

  • obtain a copy;

  • correct inaccurate information;

  • update incomplete information;

  • delete information;

  • restrict processing;

  • object to processing;

  • withdraw consent;

  • opt out of marketing;

  • request data portability;

  • object to profiling;

  • request human review;

  • appeal a decision;

  • complain to a regulator.

Malaysia’s privacy-notice framework is intended to inform individuals about how their personal information is processed so they can make informed choices.  

15.1 Exercising your rights

You may exercise available rights through:

  • account settings;

  • privacy settings;

  • in-app account deletion;

  • contacting [privacy email].

We may need to verify your identity before completing a request.

We may refuse or limit a request where:

  • we cannot verify identity;

  • the request affects another person’s rights;

  • retention is legally required;

  • information is required for safety;

  • an applicable exemption applies.

We will respond within the timeframe required by applicable law.

16. Profile Visibility and Privacy Controls

Users may be able to manage:

  • public/private profile fields;

  • profile discoverability;

  • age visibility;

  • location visibility;

  • occupation visibility;

  • employer visibility;

  • university visibility;

  • social-link visibility;

  • post visibility;

  • anonymous-post settings;

  • who can contact them;

  • blocked users;

  • recommendation preferences;

  • notification settings.

Private settings do not prevent us from processing information internally where necessary to operate, secure or moderate the Platform.

17. Reporting and Blocking

You can report users or posts through available reporting tools.

You may be able to report:

  • scam activity;

  • spam;

  • harassment;

  • impersonation;

  • suspicious posts;

  • misleading information;

  • inappropriate content;

  • identity misuse;

  • safety concerns;

  • underage users.

You may block another user to limit communication and visibility.

Reports should be truthful and submitted in good faith.

Submitting false or malicious reports may result in account action.

18. Marketing Communications

We may send optional communications about:

  • new features;

  • promotions;

  • premium services;

  • platform events;

  • success stories;

  • community updates.

Where required, we will obtain consent.

You can unsubscribe from marketing communications.

You may still receive essential communications relating to:

  • security;

  • account changes;

  • verification;

  • moderation;

  • purchases;

  • service operation;

  • legal notices.

19. Cookies and Similar Technologies

Our website and web-based interfaces may use:

  • cookies;

  • local storage;

  • software development kits;

  • analytics tags;

  • pixels;

  • session technologies;

  • device identifiers.

These may support:

  • login;

  • security;

  • preferences;

  • analytics;

  • performance;

  • personalisation;

  • fraud prevention.

Where required, non-essential cookies will be subject to consent.

A separate Cookie Notice may provide further details.

20. Third-Party Links and Off-Platform Activity

Profiles or posts may contain links to:

  • websites;

  • portfolios;

  • social-media profiles;

  • external services.

We are not responsible for the privacy practices of external services.

When you leave the Platform or communicate outside the Platform, the other service’s privacy rules apply.

You should exercise caution before sharing:

  • telephone numbers;

  • home addresses;

  • identity documents;

  • banking details;

  • passwords;

  • confidential information.

21. Changes to This Privacy Policy

We may update this Privacy Policy to reflect:

  • new features;

  • changes in processing;

  • changes in providers;

  • changes in law;

  • security improvements;

  • operational changes.

When material changes are made, we may notify you through:

  • the app;

  • email;

  • website notice;

  • account notification.

The updated policy will display a revised “Last updated” date.

Where required, we will obtain renewed consent.

22. Contact Us

Questions, complaints or privacy requests may be directed to:

NonPlus Sdn Bhd
Support email: fmssupport@nonplus.my

Questions? Contact us at fmssupport@nonplus.my.