Last Updated: May 5, 2026

In accordance with the Personal Data Protection Act 2010 ("PDPA") and the Personal Data Protection (Amendment) Act 2024, this Privacy Policy describes how Regme ("we", "us", or "our") collects, processes, and protects your personal data.

Note: In compliance with Section 7(3) of the PDPA, this notice is available in both English and Bahasa Malaysia. In the event of any inconsistency, the English version shall prevail.

1. Personal Information Collection and Use

We collect "Personal Data" which includes any information that identifies you. This includes:

• Identity Data: Name, IC/Passport number (if provided), and contact details.
• Third-Party Data: Information from Google/Facebook accounts as authorized by your settings.
• Purpose of Processing: We process your data to provide event registration services, lead collection, marketing (with consent), and to prevent fraud. Providing this data is voluntary, but failure to provide it may result in us being unable to provide our services to you.

2. Location and Sensitive Data

We collect general location data (IP address). Please note that under the 2024 Amendments, precise GPS-based location data may be classified as Sensitive Personal Data. We will only process precise location data with your explicit consent.

3. Log Data and Cookies

We use Log Data and Cookies (refer to our Cookie Policy) to monitor platform performance. By using the platform, you consent to our use of these tracking technologies.

4. Third-Party Sharing and Data Processors

We share anonymized usage data with Google Analytics and Hotjar. We ensure that any third-party "Data Processors" we engage are contractually bound to provide security levels that meet or exceed Malaysian PDPA standards.

5. Data Retention

We will only retain your Personal Data for as long as necessary to fulfill the purposes for which it was collected, or to comply with legal, regulatory, or internal policy requirements. Once no longer required, your data will be permanently deleted or anonymized.

6. Security and Breach Notification

We implement technical and organizational security measures to protect your data. In the event of a Personal Data Breach that is likely to cause significant harm, we are legally required to:

• Notify the Personal Data Protection Commissioner within 72 hours.
• Notify you as soon as practicable.

7. Your Data Protection Rights

Under the PDPA, you have the following rights:

• Right to Access & Correction: Request a copy of your data or correct inaccuracies.
• Right to Withdraw Consent: You may withdraw consent for marketing or processing at any time.
• Right to Erasure (New): You may request the deletion of your data where it is no longer necessary for the purpose it was collected.
• Right to Data Portability (New): Request your data in a structured, machine-readable format to be transferred to another service.
• Right to Prevent Distress: Prevent processing likely to cause unwarranted substantial damage or distress.

8. Data Protection Officer (DPO)

To exercise your rights or make an inquiry, please contact our designated Data Protection Officer:

• Contact Person: Head of Operations
• Email: support@regme.my

9. Changes to this Policy

We reserve the right to update this policy to reflect changes in the law. We will notify you of material changes via email or a prominent notice on the Platform.