Privacy Policy

PropPlace.my is the platform operator and data controller/data user for personal data processed through this website, dashboard, Telegram workflows, email notifications, payment flows, AI tools and marketplace features.

For access, correction, withdrawal of consent, data portability, deletion, privacy complaints, security incident concerns or marketing opt-out requests, contact PropPlace.my at hello@propplace.my. WhatsApp support at +60178671679 may be used for convenience, but formal privacy requests should be sent by email so there is a clear written record.

Where PropPlace.my is required to appoint or notify a Data Protection Officer under Malaysian personal data protection requirements, the appointed Data Protection Officer or privacy contact may be reached through hello@propplace.my and will handle data subject requests, incident coordination, compliance monitoring and liaison with the Personal Data Protection Commissioner.

This notice is provided in English. A Bahasa Malaysia explanation can be requested where required.

PropPlace.my collects account details, contact details, agent profile information, verification documents or business cards, bank details for eligible referral payouts, listing content, uploaded media, inquiries, viewing requests, reviews, saved listings, saved searches, usage events, device or security signals, credit transactions, subscription or payment records, referral activity, feedback and AI Advisor inputs or outputs needed to operate the platform.

Please do not upload unnecessary sensitive personal data, biometric data, confidential owner/client information, identity documents, title documents, bank details or third party personal data unless the feature requires it and you have authority or consent to provide it.

We use information to authenticate users, create accounts, show listings and agent profiles, route inquiries, arrange viewing and cobroke workflows, process credits and payments, administer referrals, generate exports, run AI Advisor, send operational notices, prevent abuse, secure the platform, improve performance, provide support and maintain marketplace trust.

We process personal data only for lawful purposes connected to PropPlace.my services and aim to keep collection adequate but not excessive for those purposes.

Listings, agent names, agency details, registration numbers, profile photos, public contact channels, reviews and selected marketplace activity may be visible to other users or the public.

Inquiry details are shared with the relevant listing owner or agent so they can respond. Review details may be reviewed by PropPlace.my administrators before publication.

Do not upload confidential information into listing descriptions, photos, exports, reviews, inquiries or AI Advisor inputs unless you are authorised to use it.

AI Advisor and Prop Bot use submitted property information, available benchmarks, comparable evidence and model providers to generate analysis. Reports may be saved to the user account for history, export, audit and fair-use control.

Usage events, cookies, pixels, conversion tags and analytics may be used to measure traffic, advertising performance, product quality, fraud risk and marketplace engagement. Browser or platform controls may limit some tracking.

PropPlace.my relies on infrastructure and service providers such as Supabase, Vercel, payment processors, email providers, storage/CDN services, Telegram, analytics/advertising tools and AI model providers.

These providers may process data in Malaysia or outside Malaysia only as needed for the platform features they support, subject to contractual, technical or operational safeguards where applicable.

Where a service provider acts as a data processor for PropPlace.my, PropPlace.my expects the provider to process personal data only for authorised purposes, apply appropriate security controls, limit access, assist with personal data breach handling and support deletion, return or correction requests where operationally applicable.

Cross-border personal data transfers may occur when cloud, storage, email, analytics, payment, messaging or AI providers process data outside Malaysia. PropPlace.my will use lawful transfer conditions and reasonable safeguards required by Malaysian personal data protection law, which may include user consent, contractual commitments, necessity for platform services, legal claims or compliance, security controls and provider due diligence where applicable.

Personal data may be disclosed to relevant agents, owners, buyers, tenants, service providers, payment providers, professional advisers, regulators, law enforcement, dispute counterparties or platform administrators where needed for the stated purposes, legal compliance, security, support, fraud prevention or dispute handling.

You may request access to or correction of your personal data, withdraw consent where processing is consent-based, request deletion where retention is no longer required, request data portability where technically feasible and compatible, and opt out of non-essential marketing. Operational, security, transactional, account and legal notices may still be sent.

PropPlace.my may need to verify your identity and authority before acting on privacy requests, especially where a request affects account control, payment records, agent verification, third party personal data, security logs or legal records.

Operational records are retained as needed for account history, payment reconciliation, referral audits, abuse prevention, legal compliance, dispute handling, analytics and support.

We take reasonable steps to keep personal data accurate and up to date for its purpose. Users should update profile, contact, agent, bank and listing details when they change.

Personal data that is no longer required should be deleted, anonymised or archived according to operational and legal needs.

We use Supabase Auth, email verification, leaked-password protection, row-level security, service-role separation, rate limits, storage controls and admin-access controls to reduce misuse, unauthorized access, accidental disclosure and data loss.

Where applicable, PropPlace.my will maintain responsible privacy/security contacts and handle suspected personal data incidents according to Malaysian PDPA requirements and platform incident procedures.

If PropPlace.my has reason to believe a personal data breach has occurred, it will assess the incident, take reasonable containment steps, keep incident records and notify the Personal Data Protection Commissioner and affected data subjects where required by Malaysian personal data protection requirements.

Users should use strong passwords, protect their sessions, avoid sharing OTPs or verification links and report suspected misuse promptly.

Agents, owners and other users who upload or submit third party personal data, including owner details, buyer or tenant details, viewing records, lead information, documents, screenshots or private communications, must ensure they have a lawful basis, notice, consent or authority to provide that data to PropPlace.my.

Where PropPlace.my processes such data to provide platform tools on behalf of an agent, owner or agency, the submitting user remains responsible for their own PDPA obligations to the relevant client, prospect, owner, buyer, tenant or third party.