Privacy Policy

1. Introduction

This Privacy Policy applies to Coinpetal (referred to as "we", "us", or "our"), a financial education provider operating from 14 Jalan Tun Fuad Stephens, 88000 Kota Kinabalu, Sabah, Malaysia. It governs the collection, use, storage, and protection of personal data submitted through our website at https://coinpeta.biz and through direct contact with our team.

By using our website or contacting us, you acknowledge that you have read and understood this policy. If you have any questions, please reach out to us at [email protected].

2. Data We Collect

We collect personal data when you submit an enquiry form, contact us by phone or email, or enrol in one of our programs. The types of data we may collect include:

• Contact details: Full name, email address, phone number
• Enquiry content: Messages or questions you submit through our form
• Usage data: Browser type, pages visited, visit duration — collected via cookies if consented
• Program records: Enrolment status, session attendance, completion certificates issued

We collect only the data necessary for the purpose stated. We do not collect sensitive financial data, bank account details, or government ID numbers through this website.

3. How We Use Your Data

Data collected from you is used for the following purposes:

• Responding to your enquiries and program questions
• Processing enrolment and confirming program participation
• Sending program-related communications (schedules, materials, follow-ups)
• Improving our programs through aggregated feedback analysis
• Legal compliance and record-keeping obligations

We do not use your personal data for direct marketing without your explicit consent, and we do not sell your data to third parties under any circumstances.

4. Legal Basis for Processing

We process your personal data on the following legal bases under Malaysia's PDPA: (a) your consent, given when you submit an enquiry or accept our cookies; (b) performance of a contract, when you enrol in a program; (c) legitimate interest, for internal record-keeping and service improvement. Where processing is based on consent, you may withdraw that consent at any time.

5. Data Retention

We retain personal data for as long as necessary to fulfil the purposes described in this policy. Specific retention periods are:

• Enquiry data not resulting in enrolment: 12 months from last contact
• Participant enrolment and program records: 7 years for compliance purposes
• Website usage data (cookies): As specified in our Cookie Policy

6. Data Sharing

We do not sell, rent, or trade your personal data. We may share data with:

• Analytics service providers (e.g. Google Analytics) — only with your cookie consent and in aggregated form
• Email service providers used for program communication — under strict data processing agreements
• Regulatory authorities — where required by Malaysian law

7. Data Protection Measures

We apply appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, or loss. These include secure server infrastructure, limited staff access on a need-to-know basis, and regular review of our data handling practices. In the event of a data breach that may affect your rights, we will notify you and the relevant authorities in line with PDPA obligations.

8. Cookies

Our website uses cookies to understand how it is used and to improve your experience. You can manage your cookie preferences at any time. For detailed information, please review our Cookie Policy.

9. Your Rights Under PDPA

Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to your personal data:

• Right of access: Request a copy of the personal data we hold about you
• Right to correct: Request correction of inaccurate or incomplete data
• Right to withdraw consent: Withdraw consent to data processing at any time
• Right to request deletion: Where data is no longer necessary for the purpose collected
• Right to object: Object to processing for direct marketing

To exercise any of these rights, please email us at [email protected]. We will respond within 21 days in line with PDPA requirements.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their respective privacy policies before submitting any personal data to them.

11. Children's Privacy

Our programs and website are intended for individuals aged 18 and above. We do not knowingly collect personal data from persons under 18. If you believe a minor has submitted data through our site, please contact us so we can remove it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The "Last Updated" date at the top of this page will reflect any revisions. Continued use of our website after changes have been posted constitutes acceptance of the revised policy.

13. Contact for Data Queries

For any questions, data access requests, or complaints regarding this Privacy Policy, please contact us: