Privacy Policy

Classmethod Malaysia Sdn. Bhd. ("we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and other applicable laws.

This policy applies to all products, websites, applications, and services we offer. By using our services, you acknowledge that you have read and understood this policy.

Legal entity: Classmethod Malaysia Sdn. Bhd.

Address: Menara Permas, The Horizon Avenue 7, Tower 7, Level 7, Bangsar South, Kuala Lumpur 59200, Malaysia

We act as Data Controller for the personal data we collect and process. We have appointed a Data Protection Officer as required under the PDPA.

We collect personal data in the following ways:

Direct provision: names, addresses, contact details, identification information, and payment information you provide when using our services.

Automatic collection: usage data, device information, IP addresses, and cookies collected when you interact with our websites and applications.

Third-party sources: data received through social login integrations or partner services where you have consented to such sharing.

Sensitive personal data (such as health records, religious beliefs, or biometric data) is collected only with your explicit consent or where required by law, and is protected with enhanced safeguards including encryption and restricted access.

We process your personal data for the following purposes:

• Service delivery, operation, and maintenance

• Payment processing and billing management

• Service customisation and improvement

• Customer communication and inquiry responses

• Fraud prevention and security enforcement

• Legal compliance and regulatory obligations

• Analytics to improve our products and services

We process your personal data on the following legal bases:

• Explicit consent you have provided

• Contractual necessity to fulfil our obligations to you

• Legitimate business interests, provided these do not override your rights

• Compliance with applicable laws and regulations

We do not share your personal data with third parties without your explicit informed consent, except in the following circumstances:

• To protect vital interests when consent is unavailable

• With Classmethod Group affiliates for purposes consistent with this policy

• With service providers who process data on our behalf under contractual data protection obligations

• With law enforcement or regulatory authorities when required by law

All third-party processors are contractually required to implement appropriate protective measures and to process data only in accordance with our instructions.

Your personal data may be jointly used across Classmethod, Inc. (Japan) and its global subsidiaries. The scope of such use is limited to the types of data described in this policy, and the purposes are consistent with those stated herein (service delivery, support, and where applicable, marketing).

Classmethod Malaysia Sdn. Bhd. is responsible for compliance oversight for data jointly used within the group.

We implement appropriate technical and organisational measures to protect your personal data, including encryption, access controls, and secure storage.

We conduct regular security reviews and require all third-party processors to implement equivalent protections and to notify us promptly of any data breaches.

We retain your personal data only for as long as necessary to fulfil the stated purposes or to comply with legal requirements.

When personal data is no longer needed, it is securely deleted or anonymised.

Under the PDPA and applicable law, you have the following rights:

• Access: request access to and obtain a copy of your personal data within twenty-one (21) days

• Correction: request corrections or updates to inaccurate personal data

• Deletion: request deletion of your personal data where applicable

• Withdrawal of consent: withdraw consent at any time; processing will cease within a reasonable timeframe

• Restriction: restrict or object to certain types of processing

• Complaint: lodge a complaint with the Malaysian Personal Data Protection Commissioner

• Portability: request transfer of your data to another controller where technically feasible

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 15.

Your personal data may be transferred outside Malaysia to other Classmethod Group entities or service providers. Where such transfers occur, we ensure that recipient countries provide protections substantially similar to those required under the PDPA.

Legally binding data transfer agreements are in place to ensure the security and confidentiality of your data.

In the event of a personal data breach, we will notify the Personal Data Protection Commissioner as soon as practicable.

Where a breach is likely to result in significant harm to you, we will notify you without undue delay. Such notification will include the nature of the breach, the categories of data affected, the likely consequences, and the remedial measures taken.

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

We may update this Privacy Policy from time to time. Updates will be posted on this page. Significant changes will be communicated through appropriate channels.

We encourage you to review this policy periodically.

If you have any questions, requests, or concerns regarding this Privacy Policy or your personal data, please contact our Data Protection Officer:

Name: Uomi Kentaro, Director

Email: uomi.kentaro@classmethod.my

Address: Menara Permas, The Horizon Avenue 7, Tower 7, Level 7, Bangsar South, Kuala Lumpur 59200, Malaysia