Personal Data Protection Act (PDPA) Notice and Consent
Your Privacy Matters to Us
At Crypken Incorporated , a company registered in Malaysia, we are committed to safeguarding your personal data in accordance with the Personal Data Protection Act 2010 (“PDPA”). This notice outlines how we collect, use, disclose, and protect your personal data when you interact with us, including through our platforms, products, events, services, and technologies such as the Expo 2025 and other virtual or decentralized environments (collectively referred to as the “Services”).
Types of Personal Data We Collect
The personal data we collect may include, but is not limited to:
- Identity Information: Name, age, date of birth, gender, etc.
- Contact Information: Email address, phone number, physical address, etc.
- Professional Information: Company name, job title, industry, etc.
- Technical Information: Device identifiers, IP address, geolocation, browser type, etc.
- User Activity: Interactions within our platforms, assets created, preferences, transactions, etc.
- Biometric/Visual Data (if applicable): Avatar images, voice recordings, video interactions, etc.
- Blockchain-Related Data: Wallet addresses, asset ownership details, transaction records (if applicable and identifiable).
Purpose of Data Collection
We collect and process your personal data for purposes including, but not limited to:
- Service Access and Participation: To facilitate your access to our Services, platforms, and events.
- Communication: To send updates, notifications, service-related announcements, and customer support.
- Customization and Personalization: To tailor your experience and content based on your preferences or behavior.
- Marketing and Promotions: To share offers, news, or events (only with your explicit consent).
- Compliance: To fulfill legal or regulatory obligations under Malaysian laws and guidelines.
- Analytics and Improvements: To improve our products, services, and user experience.
- Security and Risk Management: To detect, prevent, or address fraud, abuse, or breaches of our terms.
Disclosure of Personal Data
Your data may be shared under these circumstances:
- With Consent: Shared with exhibitors, partners, or other users for networking or collaborative purposes.
- Service Providers: With third-party vendors (e.g., hosting, analytics, payment processors) under strict confidentiality agreements.
- Legal Obligations: When required by law, court order, or competent authorities.
- Cross-border Transfers: If data is transferred outside Malaysia, we will ensure compliance with PDPA standards for international transfers.
We do not sell or lease your personal data to third parties. Any third-party links or decentralized applications (dApps) within our platforms are subject to their own privacy practices.
Data Security
We take all reasonable and practicable steps to protect your personal data from unauthorized access, loss, misuse, alteration, or disclosure. Our safeguards include administrative, technical, and physical measures in line with industry best practices.
Data Retention
Your personal data will be retained for as long as necessary to fulfill the purposes stated above, or as required by applicable laws. After the retention period, your data will be securely deleted or anonymized.
Your Rights Under PDPA
You have the right to:
- Access: You can request access to your personal data held by us.
- Correction: Request correction of any inaccurate or outdated data.
- Withdraw Consent: Withdraw your consent to data processing at any time (where applicable).
- Erasure: Request deletion of your personal data, subject to legal requirements.
- Restrict Processing: Limit the way we use your data under certain conditions.
- Object to Processing: Object to certain types of processing, such as direct marketing.
Consent
By interacting with our Services or registering for our events, you:
- Confirm that you have read, understood, and agreed to the terms of this PDPA notice.
- Consent to the collection, use, and processing of your personal data as outlined above.
- Understand that providing complete and accurate information is necessary for access and participation.
Notice of Updates
This PDPA notice may be updated from time to time to reflect legal, regulatory, or operational changes. Any updates will be published on our official platforms, and your continued use of our Services constitutes acceptance of those changes.
Additional Notes
Some services or features may involve the use of decentralized technologies such as blockchain. While such platforms may offer transparency and ownership, data stored on-chain may be immutable and outside Crypken’s direct control. Please refer to our Privacy Policy for more specific information on data handling in blockchain or metaverse-related contexts.