Privacy Notice — System Subscription

Notice version: 1.0  |  Effective: 5 Ogos 2026

This notice applies to associations or organisations registering, renewing or adding modules to a Sistem Kutipan Yuran (SKY4ALL) subscription, and to the officers responsible for that subscription. It does NOT cover Member and Sub-Member personal data — that data is controlled by the association and is described in a separate privacy notice.

1. Who Is Responsible For Your Data

For data collected through the order, renewal and module-addition forms, MJ Solutions acts as the Data Controller.

Note that this role differs from our role within the SKY system itself. For Member and Sub-Member personal data entered into the system by the association, the association is the Data Controller and MJ Solutions is only a Data Processor acting on the association's instructions.

2. Personal Data We Collect

Association / organisation details: name, address, telephone number, fax number, email address and website, association type, and any uploaded logo.

Responsible officer: full name, mobile number, email address, username and password (stored hashed).

Subscription and payment information: selected package and modules, subscription period, amount payable, payment method, transaction references, and bank account details used for fee collection.

Technical data: IP address and form submission time, recorded for security and consent-evidence purposes.

We do not collect Member or Sub-Member data through this subscription form.

3. Purposes Of Processing

• Processing subscription orders, renewals and module additions;
• Creating the association account and administrator user accounts in the system;
• Issuing subscription invoices and receipts;
• Processing payments through third-party payment gateways;
• Contacting the responsible officer regarding the subscription, technical support and system notices;
• Compliance with legal, accounting and tax requirements;
• Fraud detection, system security and dispute resolution.

4. Source Of Data And Whether Obligatory

All data is obtained directly from you through the online order or renewal form.

Data marked mandatory is required to create the subscription and user accounts. If it is not supplied, we cannot process your order.

5. Disclosure To Third Parties

• Payment gateways (toyyibPay, senangPay and associated banks) — name, email, telephone number and transaction details;
• Email and hosting service providers — for email delivery and system data storage;
• Auditors, legal advisers and authorities — where required by law.

We do not sell your data and do not use it for third-party marketing.

6. Transfers Outside Malaysia

Certain supporting services (email hosting and cloud infrastructure) may involve transfer or storage of data outside Malaysia, only where protection comparable to Act 709 is in place through binding contractual terms.

7. Data Security

We implement reasonable technical and organisational measures, including encrypted connections (HTTPS/TLS), hashed password storage, login rate limiting, role-based access control and regular backups.

8. Retention Period

Subscription and payment records are not deleted automatically, as they form accounting records that must be kept for at least 7 years under the Income Tax Act 1967 and the Companies Act 2016.

Incomplete or cancelled orders that were never paid may be deleted once no longer needed.

9. Your Rights

• Access — request a copy of the personal data we hold about you;
• Correction — request correction of inaccurate or out-of-date data;
• Data portability — request transmission of your data in a machine-readable format;
• Restrict processing — request that we cease processing that causes damage or distress;
• Withdraw consent — subject to subsisting contractual and legal obligations.

Requests will be answered within 21 days of receipt.

10. Complaints And Contact

Any enquiry, access/correction request, or complaint relating to subscription data may be addressed to our Data Protection Officer (DPO):

Pegawai Perlindungan Data, MJ Solutions
Email: dpo.mjsolutions@gmail.com

The commercial terms of the subscription are set out separately in the Terms & Conditions.

If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Department (JPDP), Ministry of Digital Malaysia — www.pdp.gov.my.

11. Amendments To This Notice

This notice may be amended from time to time. The current version is always published on this page. The version you consented to at the time of order is recorded for reference.

---