Privacy Policy

1. Who We Are

PropertyHub.my is operated by SLV Group Sdn. Bhd., a company registered in Malaysia. We operate an online marketplace platform connecting condo residents with service providers, parking rental, sublet listings, and facility bookings within Klang Valley high-rise developments.

• Company: SLV Group Sdn. Bhd.
• Platform: PropertyHub.my
• Country of Operation: Malaysia
• Data Controller: SLV Group Sdn. Bhd.
• Contact: hello@propertyhub.my

2. Information We Collect

2.1 Information You Provide Directly

• Account Registration: Name, email address, phone number, WhatsApp number, unit number, building name, password (stored encrypted).
• Partner Registration: Business or service description, service categories, pricing, profile photo, credentials or licences.
• Booking Information: Booking date and time, service requested, unit number, payment method, special instructions.
• Dispute Submissions: Dispute description, evidence photos, booking references, disputed amounts.
• Waitlist Signups: Name, email, phone, building name, role type.
• Communications: Messages sent through our platform or to our support team.

2.2 Information Collected Automatically

• Usage Data: Pages visited, search queries, listings viewed, time spent on pages.
• Device Information: IP address, browser type, operating system, device type.
• Cookies: Session cookies for login persistence, preference cookies for language and display settings.
• Transaction Data: Payment references, transaction amounts, payment gateway responses (we do not store full card details).

2.3 Information from Third Parties

• Payment gateway confirmations from iPay88, Touch 'n Go eWallet, FPX, and DuitNow.
• WhatsApp Business API message delivery status.

3. How We Use Your Information

We use personal data collected for the following purposes:

• Platform Operation: To create and manage your account, process bookings, facilitate payments, and deliver services.
• Service Matching: To connect residents with appropriate service providers based on building location and category preference.
• Payments & Receipts: To process payments, generate digital receipts, and manage escrow for disputed transactions.
• Dispute Resolution: To operate TribunalBot and resolve disputes between residents and service providers.
• Communications: To send booking confirmations, reminders, receipts, and platform updates via email and WhatsApp.
• Safety & Security: To verify partner credentials, detect fraud, and prevent misuse of the platform.
• Analytics & Improvement: To understand how users interact with the platform and improve our features.
• Legal Compliance: To meet obligations under Malaysian law, including PDPA 2010 and anti-money laundering regulations.

4. How We Share Your Information

We do not sell your personal data. We may share your information in the following limited circumstances:

• Service Providers within the Platform: When you make a booking, your name, unit number, and booking details are shared with the relevant partner to fulfil the service.
• Payment Processors: Transaction data is shared with our payment gateway partners (iPay88, TnG, FPX, DuitNow) to process payments. These providers are bound by their own privacy and security standards.
• AI Services: Anonymised dispute data may be processed by our AI provider (Anthropic Claude API) for TribunalBot dispute analysis. No personally identifiable information beyond what is necessary is transmitted.
• Legal Requirements: We may disclose your data if required by Malaysian law, court order, or governmental authority.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred to the new entity, subject to equivalent privacy protections.

5. Data Retention

We retain personal data for as long as necessary to fulfil the purposes described in this policy:

• Account Data: Retained for the duration of your account and 7 years after account closure (for audit and legal compliance purposes).
• Booking Records: Retained for 7 years for financial record-keeping compliance.
• Dispute Records: Retained for 7 years after dispute resolution.
• Payment Logs: Retained for 7 years per Bank Negara Malaysia guidelines.
• Marketing Communications: Retained until you unsubscribe or withdraw consent.
• Server Logs: Retained for 90 days.

You may request deletion of your account and personal data at any time, subject to our legal retention obligations.

6. Cookies & Tracking

PropertyHub.my uses cookies to operate the platform effectively:

• Essential Cookies: Required for login sessions and security. Cannot be disabled.
• Preference Cookies: Remember your language and display preferences.
• Analytics Cookies: Help us understand how visitors use the platform (anonymised data only).

You can manage cookie preferences through your browser settings. Disabling essential cookies may impair platform functionality.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data:

• All data transmitted between your browser and our servers is encrypted using SSL/TLS.
• Passwords are hashed using bcrypt before storage — we cannot retrieve your plaintext password.
• Payment card details are never stored on our servers — all card processing is handled by certified payment gateways.
• Access to personal data is restricted to authorised personnel on a need-to-know basis.
• Regular security assessments are conducted on our hosting infrastructure.

8. Your Rights Under PDPA

Under Malaysia's Personal Data Protection Act 2010, you have the following rights:

• Right of Access: Request a copy of the personal data we hold about you.
• Right of Correction: Request correction of inaccurate or incomplete personal data.
• Right to Withdraw Consent: Withdraw consent for processing where consent is the legal basis (e.g. marketing communications).
• Right to Limit Processing: Request that we stop using your data for certain purposes.
• Right to Data Portability: Request your data in a structured, machine-readable format.

To exercise any of these rights, contact us at privacy@propertyhub.my. We will respond within 21 days as required by PDPA.

9. Children's Privacy

PropertyHub.my is not intended for use by persons under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a child, please contact us at privacy@propertyhub.my and we will delete the data promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will notify you by:

• Posting a notice on PropertyHub.my
• Sending an email notification to registered users
• Updating the "Last Updated" date at the top of this page

Continued use of the platform after the effective date constitutes acceptance of the updated policy.

11. Contact Us

For any privacy-related questions, requests, or complaints:

• Email: privacy@propertyhub.my
• General Enquiries: hello@propertyhub.my
• Postal Address: SLV Group Sdn. Bhd., Kuala Lumpur, Malaysia

If you are not satisfied with our response, you may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) at www.pdp.gov.my.