Privacy Policy

Privacy Policy

This Privacy Policy ("Policy") explains how OnDeWei Enterprise (Registration No.: 202403203125 (003630244-T)) ("OnDeWei," "we," "us," or "our") collects, uses, processes, and discloses your Personal Data in connection with your use of the OnDeWei Application and the services provided therein.

1. Acknowledgment and Consent

By using our Service, you agree that you have read and understood this Policy and consent to the collection and processing of your Personal Data as described herein. If you do not agree to these terms, you must immediately cease using the Service.

We reserve the right to amend this Policy at any time, and your continued use of the Service constitutes acceptance of any amendments.

2. Personal Data We Collect

We collect information that identifies you or allows you to be identified. This includes information provided directly by you, information collected automatically, and information from third parties.

2.1 Information for All Users (Consumers and Riders)

• Identity Information: Full name, gender, date of birth, student identification (for student users), and identification card or passport number.
• Contact Information: Phone number and email address.
• Technical Information: Device model, operating system, IP address, and unique device identifiers.
• Transaction Data: Details of orders placed, services completed, and payment history.
• Communication Data: Records of your interactions with our customer support and Help Center.

2.2 Information Specific to Consumers

• Delivery Address: Your physical address provided for delivery.
• Third-Party Contacts: With your permission, we collect phone numbers from your mobile address book to facilitate service features.

2.3 Information Specific to Riders

• Professional Documentation: Copies of your motorcycle license, road tax, and insurance policies.
• Verification Data: Facial recognition data or fingerprints (Biometric Data) for identity verification.
• Background Information: Results of background searches regarding criminal records or legal investigations.
• Health Information: Where necessary for safety, results of health or mental health evaluations.

3. Purpose of Processing Your Personal Data

We process your Personal Data for purposes directly related to our business operations, including:

• Providing the Service: Linking Consumers with Riders and facilitating delivery of orders.
• Identity Verification: Verifying age of Consumers and professional qualifications of Riders.
• Safety and Security: Conducting background checks, monitoring for fraudulent activity, and ensuring platform integrity.
• Communications: Sending order updates, marketing promotions (with your consent), and responding to inquiries.
• Legal Compliance: Complying with statutory obligations, assisting law enforcement investigations, and defending our legal rights.

4. Disclosure of Personal Data

We do not sell your Personal Data. We may disclose your data to the following categories of recipients:

• Transactional Counterparties: Sharing Consumer address and contact number with Riders to complete deliveries, and sharing Rider information with Consumers for safety and tracking.
• Third-Party Service Providers: Vendors providing technical infrastructure, cloud hosting, payment processing, or analytics.
• Regulatory and Legal Bodies: JPDP, MCMC, APAD, law enforcement, or other authorities as required by law.
• Corporate Affiliates: Sharing within the OnDeWei group for internal administration and reporting.

5. Security and Infrastructure

OnDeWei is committed to protecting your Personal Data. We implement technical and organizational security measures that match industry standards, including:

• Encryption: Using 2048-bit SSL encryption for data in transit and secure encryption for data at rest.
• Access Control: Limiting access to Personal Data to authorized personnel on a need-to-know basis.
• Monitoring: Regular security audits, vulnerability scans, and real-time application monitoring.

6. Retention and Deletion

We retain your Personal Data only as long as necessary to fulfill the purposes described in this Policy or as required by Malaysian law. When data is no longer required, we will take steps to permanently destroy or anonymize it.

7. Your Rights Under the PDPA

Under the Malaysian Personal Data Protection Act, you have the following rights:

• Right of Access: Request a copy of the Personal Data we hold about you.
• Right of Correction: Request correction of inaccurate or incomplete Personal Data.
• Right to Withdraw Consent: Withdraw your consent for data processing at any time.
• Right to Data Portability: Request transfer of your Personal Data to another service provider in a machine-readable format.
• Right to Prevent Processing for Marketing: Request that we stop using your data for direct marketing.

8. International Transfers

If we transfer your Personal Data outside Malaysia, we will ensure the destination provides an adequate level of protection comparable to the PDPA or that appropriate safeguards are in place.

9. Data Breach Notification

In the event of a personal data breach that meets the threshold of "significant harm," we will notify the Personal Data Protection Commissioner within 72 hours of becoming aware of the breach and notify affected individuals without unnecessary delay.

10. Contact Us and Data Protection Officer (DPO)

For any questions regarding this Policy or to exercise your rights, please contact our Data Protection Officer at: