🔒 Privacy Policy & PDPA Notice

1. Types of Personal Data We Collect

We collect data that you voluntarily provide to us when you register on the platform, submit cleanup logs, or interact with our services.

Other data collected includes:

• Email Address (used for account verification and administrative communication)
• Gender
• Nationality
• Cleanup location names and GPS coordinates
• Photographic evidence of cleanups

2. Purpose of Data Collection

We collect your personal data for the following purposes:

1. Account Management: To verify your identity, create and manage your volunteer account, and issue a unique Membership ID.
2. Platform Operation: To validate and approve cleanup submissions, and accurately track environmental impact data.
3. Safety & Verification: To verify the authenticity of cleanup logs and prevent fraudulent submissions.
4. Community Recognition: To display your public achievements (Nickname and Total Weight) on the Live Scoreboard to encourage community participation.
5. Communication: To send you platform announcements, event notifications, and for Administrators to contact you via WhatsApp regarding your submissions or account.
6. Reporting: To generate anonymized or demographic reports (e.g., total waste by state or gender) to measure the platform's collective impact.

3. Disclosure of Your Personal Data

We DO NOT sell, trade, or rent your personal identification information to anyone.

Your sensitive data (Surname, IC/Passport, Phone, Birth Year) is strictly visible only to authorized Administrators and Managers for verification and safety purposes.

We may disclose your data if legally required to do so by law enforcement or regulatory authorities in compliance with Malaysian law.

4. Data Security

We implement a variety of security measures to maintain the safety of your personal information:

• Passwords are encrypted using industry-standard bcrypt hashing. We cannot see your plain-text password.
• Sensitive personal data is segregated in the system and restricted by strict role-based access controls.
• File uploads (evidence photos) are stored outside the public web root and protected against direct execution.
• Database interactions use prepared statements (PDO) to prevent SQL injection attacks.

However, no method of transmission over the Internet is 100% secure. We strive to use commercially acceptable means to protect your data but cannot guarantee absolute security.

5. Data Retention

We retain your personal data only for as long as your account is active or as needed to provide you services. If you wish to delete your account and have your data removed, you may contact an Administrator. Please note that anonymized impact data (total weights) may be retained for historical and environmental reporting purposes.

6. Your Rights Under the PDPA

Under the Malaysian PDPA, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of any inaccurate or incomplete personal data.
• Withdrawal of Consent: Withdraw your consent for us to process your personal data (which may affect your ability to use the platform).

To exercise any of these rights, please contact our Data Protection Officer via the details below.

7. Cookies & Sessions

We use strictly necessary PHP sessions to maintain your login state securely. We do not use third-party tracking cookies, advertising cookies, or analytics cookies that track you across other websites.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

9. Contact Information

For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact the platform administration: