Skip to main content

PERSONAL DATA PROTECTION NOTICE

Last Updated: 21 September 2026

CEVILE ENTERPRISE (Registration No. PG0420218-T) (“CEVILE ENTERPRISE”, “we”, “us”, “our” or “MyApp”) respects your privacy and is committed to protecting your personal data.

This Personal Data Protection Notice (“Privacy Notice”) explains how we collect, use, disclose, store and otherwise process your personal data when you visit or use https://myapp.com.my/ (“Website”), contact us, submit an enquiry, request our services, participate in our corporate events, training, team-building or team-bonding activities, or otherwise interact with us.

This Privacy Notice is issued in accordance with the Personal Data Protection Act 2010 (Act 709) (“PDPA”), as amended from time to time, and applicable regulations, standards, guidelines and directions issued under the PDPA.


1. WHO WE ARE

The entity responsible for your personal data is:

CEVILE ENTERPRISE
Registration No.: PG0420218-T
19 Lebuh Sungai Pinang 3,
11600 Jelutong, Penang,
Malaysia.

Telephone / WhatsApp: +6011-21477236
Email: [email protected]
Website: https://myapp.com.my/

In this Privacy Notice, CEVILE ENTERPRISE may also be referred to as “MyApp”.


2. PERSONAL DATA WE MAY COLLECT

Depending on how you interact with us, we may collect and process personal data such as:

A. Identification and contact information

This may include:

  • full name;

  • company or organization name;

  • job title or position;

  • email address;

  • telephone or mobile number;

  • correspondence address;

  • billing or business contact information; and

  • other information you voluntarily provide to us.

B. Information relating to our services

Where relevant to a corporate event, training programme, team-building activity, team-bonding activity, course survey or other service, we may process information such as:

  • participant name;

  • participant contact information;

  • company or organization;

  • department or job function;

  • registration or attendance information;

  • course, programme or event responses;

  • survey responses and feedback;

  • preferences or information necessary to organize an activity; and

  • other information reasonably required to provide the requested service.

C. Technical and usage information

When you visit our Website, certain technical information may be collected automatically, depending on the technologies and services implemented on the Website. This may include:

  • IP address;

  • browser type;

  • device type;

  • operating system;

  • approximate location derived from technical information;

  • pages visited;

  • date and time of access;

  • referring website;

  • Website interaction information; and

  • cookies or similar technologies.

D. Information you provide to us

We may also collect personal data when you:

  • complete a contact or enquiry form;

  • request a quotation;

  • communicate with us by email, telephone, WhatsApp or other communication channels;

  • register for an event, course or activity;

  • participate in a survey;

  • engage us for corporate training, team building or related services;

  • provide feedback;

  • subscribe to communications;

  • communicate with our representatives; or

  • otherwise voluntarily provide information to us.


3. PURPOSES OF PROCESSING YOUR PERSONAL DATA

We may collect, use and process your personal data for the following purposes:

  1. responding to your enquiries and requests;

  2. providing information about our services;

  3. preparing quotations, proposals and service arrangements;

  4. providing and administering our services;

  5. organizing corporate events, training programmes, courses, team-building activities and team-bonding activities;

  6. administering participant registration and attendance;

  7. conducting course surveys, assessments, feedback and evaluations;

  8. communicating with you regarding programmes, events and services;

  9. managing customer and business relationships;

  10. processing invoices, payments and accounting records;

  11. maintaining business records;

  12. improving our Website, products and services;

  13. analyzing Website usage and performance;

  14. maintaining the security and integrity of our Website and systems;

  15. detecting, preventing and investigating fraud, misuse, security incidents or unlawful activities;

  16. complying with applicable laws, regulations, court orders and lawful requests;

  17. establishing, exercising or defending legal rights;

  18. handling complaints, disputes and enquiries;

  19. sending service-related communications;

  20. sending marketing or promotional communications where permitted by applicable law and, where required, with your consent;

  21. carrying out internal administration and business operations; and

  22. any other purpose reasonably necessary for the provision of our services or purposes disclosed to you at the time your personal data is collected.


4. HOW WE COLLECT YOUR PERSONAL DATA

We may collect personal data:

  • directly from you;

  • from your employer, company or organization where you participate in a corporate programme;

  • when you submit forms through our Website;

  • when you communicate with us;

  • when you register for or participate in our programmes or activities;

  • through cookies and similar technologies;

  • from service providers assisting us with our business operations; or

  • from other lawful sources.

Where personal data is provided to us by another person or organisation on your behalf, that person or organisation should ensure that they have the appropriate authority or lawful basis to provide the information to us.


5. WHETHER PROVISION OF PERSONAL DATA IS VOLUNTARY OR MANDATORY

Generally, you may choose whether to provide your personal data.

However, certain personal data may be necessary for us to:

  • respond to your enquiry;

  • provide a quotation;

  • register you for an event or programme;

  • provide our services;

  • process transactions;

  • administer participation in an activity; or

  • comply with legal or regulatory requirements.

If you do not provide information that is reasonably necessary for these purposes, we may be unable to provide the relevant service, respond to your request or complete the relevant transaction.


6. DISCLOSURE OF PERSONAL DATA

We will not sell your personal data.

Where reasonably necessary for the purposes described in this Privacy Notice, we may disclose or provide access to personal data to selected third parties, including:

  • our employees, representatives and authorized personnel;

  • professional advisers, consultants, accountants, auditors and legal advisers;

  • technology, hosting and cloud-service providers;

  • website, software and IT service providers;

  • communication and email service providers;

  • payment processors and financial institutions, where applicable;

  • event, training and programme service providers;

  • contractors and suppliers supporting our business;

  • insurers and other professional service providers;

  • government authorities, regulators, law-enforcement agencies or courts where required or permitted by law; and

  • other persons where disclosure is necessary for the purposes described in this Privacy Notice or otherwise permitted by applicable law.

We require relevant service providers and third parties handling personal data on our behalf to take appropriate measures to protect that information and to process it only for authorized purposes.


7. CROSS-BORDER TRANSFER OF PERSONAL DATA

Some of our technology, hosting, software, communication or other service providers may process or store personal data outside Malaysia.

Where personal data is transferred outside Malaysia, we will take steps to ensure that the transfer is carried out in accordance with the applicable requirements of the PDPA, including the requirements applicable to cross-border transfers.

Depending on the circumstances, such transfer may be necessary for the performance of a contract, supported by your consent, or otherwise carried out under a permitted condition under applicable law.

The Malaysian Personal Data Protection Department has issued specific guidance concerning cross-border transfers under section 129 of the PDPA.


8. COOKIES AND SIMILAR TECHNOLOGIES

Our Website may use cookies and similar technologies.

Cookies may be used to:

  • enable Website functionality;

  • remember preferences;

  • understand how visitors use our Website;

  • improve Website performance;

  • maintain security; and

  • support analytics or other Website functions.

The use of third-party analytics, advertising or other technologies depends on the services actually implemented on our Website.

You may configure your browser to reject or delete cookies. However, disabling certain cookies may affect Website functionality.


9. DIRECT MARKETING

Where permitted by applicable law, we may use your contact information to send information concerning our services, programmes, events, training, team-building activities and other business offerings.

Where consent is required, we will obtain the appropriate consent.

You may withdraw your consent or opt out of direct marketing communications at any time by contacting:

Email: [email protected]

You may also use an unsubscribe mechanism provided in an electronic marketing communication, where available.

Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.


10. PERSONAL DATA OF EVENT OR TRAINING PARTICIPANTS

Where My App provides services to a company, organization or other client, the client may provide us with personal data relating to employees, participants, guests or other individuals attending a programme.

In such circumstances, we may process the information as part of providing the contracted services.

The relevant client is responsible for ensuring that it has the appropriate authority and/or lawful basis to provide such personal data to us.

Where appropriate, we may process such information only according to the client's instructions and the agreed service arrangements.


11. PHOTOGRAPHS, VIDEOS AND EVENT MATERIALS

Our events and activities may involve photography or video recording.

Where photographs, videos or other materials containing identifiable individuals are intended to be used for promotional, marketing or public-facing purposes, we will take appropriate steps to address applicable consent and privacy requirements.

If you have concerns regarding the use of your image or personal data in event materials, please contact us at:

[email protected]


12. RETENTION OF PERSONAL DATA

We will retain personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected, including:

  • providing services;

  • maintaining business and transaction records;

  • complying with legal, accounting and regulatory obligations;

  • resolving disputes;

  • enforcing agreements; and

  • protecting our legal rights and legitimate business interests.

When personal data is no longer required, we will take reasonable steps to securely delete, destroy, anonymize or otherwise dispose of it, subject to applicable legal and regulatory requirements.


13. SECURITY OF PERSONAL DATA

We take reasonable and appropriate technical and organizational measures to protect personal data against:

  • unauthorized access;

  • accidental or unlawful destruction;

  • loss;

  • alteration;

  • misuse;

  • disclosure; and

  • other unauthorized processing.

However, no method of transmission or electronic storage can be guaranteed to be completely secure.

Accordingly, while we take reasonable measures to protect your information, we cannot guarantee absolute security of information transmitted through the Internet.


14. PERSONAL DATA BREACHES

If we become aware of a personal data breach, we will assess the incident and take appropriate steps in accordance with applicable law and regulatory requirements.

Where a breach meets applicable notification criteria, we will make the required notification to the Personal Data Protection Commissioner and affected individuals where required.

The current Malaysian guidance provides for notification to the Commissioner as soon as practicable and no later than 72 hours where the applicable breach-notification criteria are met.


15. YOUR RIGHTS

Subject to applicable law and any applicable exceptions, you may have rights in relation to your personal data, including the right to:

  • request access to personal data held by us;

  • request correction of inaccurate, incomplete or outdated personal data;

  • request information concerning the processing of your personal data;

  • withdraw consent where processing is based on consent;

  • request that we cease or not begin processing for direct marketing purposes; and

  • exercise other rights available under applicable Malaysian data protection law.

Requests should be made in writing to:

CEVILE ENTERPRISE
19 Lebuh Sungai Pinang 3,
11600 Jelutong, Penang, Malaysia.

Email: [email protected]
Telephone: +6011-21477236

We may need to verify your identity before processing a request.

We may also charge a reasonable fee where permitted by applicable law or refuse a request where permitted or required by law.


16. ACCURACY OF PERSONAL DATA

You are responsible for ensuring that personal data provided to us is accurate, complete and up to date.

If any of your personal data changes, please notify us so that we can update our records.


17. CHILDREN AND MINORS

Our Website and services are primarily intended for businesses, organizations and adults.

Where our services involve participants who are minors, we may require appropriate consent or authorization from a parent, guardian, school, organization or other responsible person, depending on the circumstances.

We do not knowingly collect personal data from children for purposes unrelated to our services.


18. THIRD-PARTY WEBSITES AND SERVICES

Our Website may contain links to websites, platforms or services operated by third parties.

We are not responsible for the privacy practices, content, security or policies of third-party websites or services.

You should review the privacy notices of those third parties before providing them with personal data.


19. CHANGES TO THIS PRIVACY NOTICE

We may update this Privacy Notice from time to time to reflect changes in:

  • our services;

  • technology;

  • business practices;

  • applicable laws;

  • regulatory requirements; or

  • our personal-data processing activities.

The latest version will be published on our Website with the relevant “Last Updated” date.


20. CONTACT US

If you have questions, requests or complaints concerning the processing of your personal data, please contact us:

CEVILE ENTERPRISE (PG0420218-T)
19 Lebuh Sungai Pinang 3,
11600 Jelutong, Penang, Malaysia.

Telephone / WhatsApp: +6011-21477236
Email: [email protected]
Website: https://myapp.com.my/

We will consider and respond to personal-data requests in accordance with applicable law.


21. GOVERNING LAW

This Privacy Notice is governed by the laws of Malaysia.

Nothing in this Privacy Notice limits any rights that cannot lawfully be excluded or restricted under applicable Malaysian law.