Back to home

Privacy Policy

Effective date: 17 May 2026

1. Who We Are

MAD Portal (the “Service”) is operated by Lim We Chern (“Operator”, “we”, “us”), a private operator based in Malaysia. This Privacy Policy explains how we collect, use, store, disclose and protect your personal data when you use the Service. It is issued in accordance with the Personal Data Protection Act 2010 of Malaysia (“PDPA”).

2. Personal Data We Collect

When you register or use the Service, we may collect:

  • Identification data: full name, display name, email address, profile photo (optional).
  • Account data: hashed password, language preference, referral code, referrer relationship.
  • Usage data: videos watched, watch timestamps, completion records, notes you write, projects you favourite.
  • Technical data: IP address, browser type, device, log timestamps for security and audit purposes.
  • Communication data: emails you send to us, including any attachments.

We do not knowingly collect or process sensitive personal data (race, religion, health, etc.). You should not submit such information through the Service.

3. Purposes of Processing

We process your personal data to:

  • create and manage your account, authenticate you, and verify your email;
  • operate the referral and approval workflow;
  • deliver training content, track progress and personalise your experience;
  • send transactional emails (verification, approval notices, password reset);
  • improve, secure, and troubleshoot the Service;
  • comply with legal obligations and respond to lawful requests.

4. Legal Basis

Our legal basis for processing personal data is your consent (granted at registration), the performance of the contract represented by these Terms, our legitimate interests in running and securing the Service, and compliance with applicable Malaysian law.

5. Disclosure to Third Parties

We share personal data only with the following categories of recipients:

  • Hosting and storage: Amazon Web Services (AWS, S3) — for media and database hosting.
  • Email delivery: Mailtrap — for transactional emails.
  • Authentication and security: Laravel Sanctum, our own server logs.
  • Regulators and law enforcement: if required by law, court order, or lawful request.

We do not sell or rent your personal data. We do not share your data with advertising networks.

6. International Transfers

Our processors may store data on servers outside Malaysia (including the Asia-Pacific and the United States). By using the Service, you consent to such transfers for the purposes described in this Policy. We use processors that apply industry-standard security practices.

7. Retention

We retain personal data for as long as your account is active and for a reasonable period thereafter to comply with legal, accounting, or reporting obligations. Activity logs and audit data may be retained up to 24 months. You may request deletion at any time (see Section 9).

8. Security

We apply reasonable administrative, technical and physical safeguards, including encrypted transport (HTTPS), hashed passwords, access controls, and routine security review. However, no method of transmission or storage is completely secure. You acknowledge that you use the Service at your own risk and that the Operator cannot guarantee absolute security.

9. Your Rights under the PDPA

Subject to applicable conditions and exceptions, you have the right to:

  • access the personal data we hold about you;
  • request correction of inaccurate or incomplete data;
  • withdraw consent or limit further processing;
  • request deletion of your account and associated data;
  • lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

To exercise these rights, contact us at iqi@madrealty.co. We will respond within a reasonable timeframe and may require proof of identity.

10. Cookies and Local Storage

We use a small number of strictly necessary cookies and browser-storage entries to keep you signed in, remember language preference, and protect against CSRF. We do not use third-party advertising cookies or behavioural tracking.

11. Children

The Service is not directed at individuals under 18. If we become aware that we have collected personal data from a minor, we will delete it promptly.

12. Limitation of Liability for Data Loss

To the maximum extent permitted under Malaysian law, the Operator shall not be liable for any loss, corruption, unauthorised disclosure, or destruction of personal data arising from events beyond our reasonable control, including cyberattacks, third-party processor failures, or force majeure. Your remedies are limited as set out in our Terms & Conditions.

13. Changes to this Policy

We may update this Policy from time to time. Material changes will be communicated via email or in-product banner. Your continued use of the Service after the effective date constitutes acceptance of the updated Policy.

14. Contact

For questions or requests under this Policy, contact: iqi@madrealty.co.