PERSONAL DATA PROTECTION NOTICE (PDPA)

Effective Date: 5 June 2026

This Personal Data Protection Notice ("Notice") explains how BOOMieY collects, uses, processes, stores, and discloses personal data in accordance with the Personal Data Protection Act 2010 of Malaysia ("PDPA").

By accessing or using BOOMieY, you acknowledge that your personal data may be collected, used, processed, and disclosed in accordance with this Notice.

1. PERSONAL DATA WE COLLECT

We may collect personal data including:

Identity Information

• Full name
• Username
• Date of birth (where applicable)
• Identity verification information (where required)

Contact Information

• Email address
• Phone number
• Mailing address
• Business address

Account Information

• Login credentials
• Profile information
• Membership information
• Seller account information

Transaction Information

• Purchase history
• Order information
• Payment information
• Subscription information

Technical Information

• IP address
• Device information
• Browser information
• Application usage data
• Log files

Communication Information

• Customer support communications
• Messages submitted through the Platform
• Feedback and survey responses

2. PURPOSE OF COLLECTION

We may collect and process personal data for purposes including:

• Creating and managing accounts;
• Verifying user identity;
• Providing Platform services;
• Processing transactions;
• Facilitating customer and seller relationships;
• Providing customer support;
• Managing memberships and subscriptions;
• Improving Platform functionality;
• Security and fraud prevention;
• Compliance with legal obligations;
• Internal analytics and reporting;
• Marketing communications where permitted by law;
• Any purpose reasonably related to the operation of BOOMieY.

3. DISCLOSURE OF PERSONAL DATA

We may disclose personal data to:

Service Providers

• Cloud hosting providers;
• Infrastructure providers;
• Analytics providers;
• Customer support providers;
• Security providers.

Payment Providers

• Payment gateways;
• Financial institutions;
• Payment processors.

Sellers

Where a Customer chooses to purchase from, follow, subscribe to, join, or otherwise establish a relationship with a Seller through BOOMieY, certain personal data may be shared with the Seller in accordance with the Customer Relationship Policy.

Such information may include:

• Name;
• Email address;
• Phone number;
• Order information;
• Relationship and membership information.

Legal Authorities

Where required by law, court order, regulatory requirement, or governmental request.

4. CUSTOMER RELATIONSHIP DATA

BOOMieY operates as a relationship infrastructure platform.

When Customers establish relationships with Sellers through the Platform, certain information may be shared with and, where permitted by Platform policies, exported by eligible Sellers for purposes including:

• Order fulfillment;
• Customer support;
• Membership management;
• Relationship management;
• Marketing communications where legally permitted.

Such sharing is governed by the Customer Relationship Policy and applicable laws.

5. DATA TRANSFERS

Your personal data may be stored, processed, or transferred to locations outside Malaysia where necessary for Platform operations.

BOOMieY will take reasonable measures to ensure such transfers comply with applicable legal requirements.

6. DATA SECURITY

BOOMieY implements reasonable administrative, technical, and organizational safeguards to protect personal data from:

• Unauthorized access;
• Unauthorized disclosure;
• Misuse;
• Loss;
• Alteration; and
• Destruction.

However, no system can guarantee absolute security.

7. DATA RETENTION

BOOMieY retains personal data only for as long as necessary to:

• Provide services;
• Comply with legal obligations;
• Resolve disputes;
• Enforce agreements;
• Prevent fraud and abuse;
• Maintain business records.

When personal data is no longer required, it may be deleted, anonymized, or securely destroyed.

8. YOUR RIGHTS

Subject to applicable law, you may have the right to:

Access

Request access to personal data held by BOOMieY.

Correction

Request correction of inaccurate, incomplete, or outdated information.

Withdrawal of Consent

Withdraw consent for processing where permitted by law.

Limitation of Processing

Request limitation of certain processing activities where applicable.

BOOMieY may require verification of identity before processing requests.

9. FAILURE TO PROVIDE INFORMATION

If required personal data is not provided, BOOMieY may be unable to:

• Create accounts;
• Process transactions;
• Provide services;
• Verify identity;
• Fulfill legal obligations.

10. COOKIES AND TRACKING TECHNOLOGIES

BOOMieY may use cookies, SDKs, pixels, and similar technologies to:

• Improve Platform performance;
• Remember user preferences;
• Analyze usage patterns;
• Detect fraud and abuse;
• Enhance user experience.

Users may manage cookie settings through their devices or browsers where applicable.

11. CHANGES TO THIS NOTICE

BOOMieY may update this Notice from time to time.

Updated versions will be published on the Platform with a revised effective date.

Continued use of the Platform constitutes acceptance of the updated Notice.

12. CONTACT INFORMATION

For inquiries, access requests, correction requests, or privacy-related matters, please contact:

Quantarie Technologies

Penang, Malaysia

Support Email: [email protected]

Legal Email: [email protected]

Website: https://www.boomiey.com/