Privacy Policy

Effective Date: October 19, 2026 Platform: diSabah (disabah.com and associated mobile applications) Operated By:Blok Infiniti Contact Email: support@disabah.com

At diSabah, operated by Blok Infiniti ("we," "us," or "our"), we respect your privacy and are committed to protecting your personal data. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you visit our platform, and outlines your rights under the Personal Data Protection Act 2010 (PDPA) of Malaysia.

By registering an account or using diSabah, you consent to the data practices described in this policy.

1. Information We Collect

To operate our B2B2C marketplace and logistics network, we collect data depending on your role within the diSabah ecosystem:

A. Retail Customers (Users)

1. Registration Data: Full name, email address, phone number, and password.
2. Transaction Data: Billing/shipping addresses, order history, and payment method details (processed securely via our approved gateways like SenangPay and DOKU; we do not store full credit card numbers).

B. Wholesale Dealers & Stockists

1. Registration & Verification Data: Business/Company name, SSM registration number, business address, and authorized representative contact details.
2. Documentary Proof: Identity images or business documents uploaded for account approval and assigning wholesale status.

C. Vendors & Merchants

1. Business Data: Store name, SSM registration, business address, and operational contact info.
2. Financial Data: Bank account details exclusively for processing vendor payouts.

D. Delivery Partners (Riders)

1. Onboarding Data: Full name, NRIC (Identity Card), driving license, vehicle registration, and emergency contact details.
2. Financial & Location Data: Bank account details for commission payouts and real-time GPS location data strictly during active delivery shifts to ensure accurate routing and customer updates.

2. How We Use Your Information

We strictly use your personal data for the following purposes:

1. Fulfillment: To process, pack, and deliver retail and wholesale orders.
2. Verification: To authenticate Dealer and Vendor accounts to unlock B2B pricing and wholesale MOQs.
3. Financial Processing: To facilitate secure cashless payments, calculate Rider commissions, and disburse Vendor payouts.
4. Communication: To send order updates, platform notifications, or customer support responses.
5. Security & Fraud Prevention: To enforce our Zero-Tolerance Policy, monitor unauthorized off-platform cash transactions, and protect the ecosystem from abuse.

3. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data. We only share necessary information with trusted third parties under strict confidentiality:

1. Between Ecosystem Users: Vendors receive customer names and addresses to pack orders. Riders receive customer/dealer names, phone numbers, and delivery locations to fulfill orders.
2. Payment Gateways: Financial data is transmitted securely to our mandated payment partners (SenangPay, DOKU, and integrated banking portals) to process cashless transactions.
3. Legal & Regulatory Authorities: We may disclose your data if required by Malaysian law, a court order, or requested by law enforcement (e.g., PDRM) to investigate fraud or criminal activity.

4. Account Registration, Retention, and Deletion

You have full control over your continued participation in the diSabah ecosystem.

A. Registration & Retention Your data is retained only for as long as your account is active, or as necessary to fulfill legal, tax (LHDN), and accounting obligations in Malaysia.

B. Account and Data Deletion Customers, Dealers, Vendors, and Riders all have the right to request the permanent deletion of their accounts and associated personal data.

1. How to Request: You can initiate an account deletion directly through the "Settings" or "Profile" menu in the diSabah mobile app/web panel, or by emailing support@disabah.com with the subject "Account Deletion Request."
2. The Deletion Process: Upon receiving a valid request, we will deactivate your profile and delete your personal identifiers within 14 to 30 working days.
3. Exceptions: Please note that even after account deletion, we are legally required to retain historical transaction logs, financial records, and wholesale commission ledgers for a minimum of seven (7) years to comply with Malaysian taxation and auditing laws. These retained records will be anonymized where possible.

5. Data Security

We implement industry-standard security measures, including data encryption, secure server hosting, and SSL technology, to protect your personal information against unauthorized access, alteration, or destruction. However, no internet transmission is 100% secure, and we cannot guarantee absolute security.

6. Your Rights Under the Malaysia PDPA

Under the Personal Data Protection Act 2010, you have the right to:

1. Access: Request a copy of the personal data we hold about you.
2. Correction: Request updates or corrections to inaccurate or incomplete data.
3. Withdraw Consent: Withdraw your consent for us to process your data (Note: Withdrawing consent may require the termination of your diSabah account, as we cannot fulfill orders without processing your data).

To exercise any of these rights, please contact our Data Privacy Officer at support@disabah.com.

7. Changes to this Privacy Policy

Blok Infiniti reserves the right to update this Privacy Policy periodically to reflect changes in our practices or Malaysian legal requirements. We will notify you of any material changes via email or platform announcements.