Privacy Policy.

We, PRESTO TECHNOLOGY SDN. BHD. [Registration No.: 201501034702 (1160022-T)] (“Presto”, “PTCMY”, “us”, “we”, “our” or the “Company”) are committed to safeguarding and protecting the personal data of our customers, vendors, suppliers, service providers, visitors, and contractors (collectively, “you” or “your”) that have been provided to us when you have communicated with us either by visiting, accessing or browsing our website (the “Platform”) or contact our customer service and the information that we have collected from you may be used. To protect your private information, we have established this Privacy Policy (the “Policy”), in accordance with the applicable laws and regulations, which describes how we handle your personal information that we have collected from you on the Platform.

By visiting, accessing and/or browsing our Platform (including content, features, links, services and tools), you represent that you have read, understood, accepted and agreed to be bound by all the terms and conditions stipulated in this Policy. If you do not agree with any terms and conditions in this Policy, we strongly advise against the utilisation of this Platform.

Provision of your personal data is voluntary. However, if you do not provide us your personal data, your access to and/or use of the Platform may be restricted or limited. Should you provide insufficient information, inaccurate information or decline to provide obligatory information that we request for, we may not be able to process your requirements and/or requests.

Table of Contents

1. Collection of Personal Information
2. Personal Data of Minors and Third Parties
3. Purpose of Data Collection
4. Marketing
5. Cookies
6. Retention of Personal Data
7. Sharing and Disclosure of Personal Data
8. Security
9. Account Protection
10. Your Rights to Your Personal Data
11. Third Parties
12. Data Integrity
13. Legal Effects
14. Applicable Law and Dispute Resolution
15. Changes to the Privacy Policy
16. English Version to Prevail

1. Collection of Personal Information

1.1 You may choose to browse the Platform without telling us who you are or revealing any personal information about yourself, however once you give us your personal information, you are not anonymous to us.

1.2 “Personal Data” means any personal information which you have disclosed to us as defined under the Personal Data Protection Act 2010 which can be used to identify you or from which you are identifiable. This includes but is not limited to your name, nationality, telephone number, bank and credit card details, personal interests, email address, your image, government-issued identification numbers, biometric data, race, date of birth, marital status, religion, health information, employment information and financial information. Personal Data is provided on a voluntary basis.

1.3 We may collect and store your Personal Data under various circumstances, including but not limited to when you: —

1. access the Platform or use the services provided within the Platform;
2. register for an account or profile on the Platform;
3. submit any forms including but not limited to, application forms, feedback forms, or other forms relating to any services made available in the Platform or by the Company;
4. engage with our customer service team, or communicate with us via chats, emails, telephone calls, letters or other similar form of correspondences;
5. provide us with feedback, suggestions or complaints; and/or
6. submit your Personal Data for any reason.

The above does not purport to be exhaustive and sets out some common instances of when Personal Data about you may be collected.

1.4 You should note that we may collect the following Personal Data in order to enable your utilisation of the features and functionality of Platform (and for any other additional purposes that may be set out in this Policy: —

1. email address, physical contact information, the date of birth and gender information, and (depending on the service used) sometimes financial information, such as credit card or bank account numbers;
2. transactional information based on your activities on the Platform;
3. postage, billing and other information you provide to purchase or dispatch an item;
4. community discussions, chats, dispute resolution, correspondence through our Platform, and correspondence sent to us;
5. other information from your interaction with or on our Platform, services, content and advertising, including computer and connection information, statistics on page views, traffic to and from the Platform, ad data, IP address and standard web log information;
6. additional information we ask you to submit to authenticate yourself or if we believe you are violating Platform’s Policy (for example, we may ask you to send us an ID or bill to verify your address, or to answer additional questions online to help verify your identity or ownership of an item you list);
7. information from other companies, such as demographic and navigation data; and
8. other supplemental information from third parties (for example, if you incur a debt to PTCMY, we will generally conduct a credit check by obtaining additional information about you from a credit bureau, as permitted by law).

1.5 All Personal Data shall be provided by you voluntarily unless it is indicated as mandatory. Where the Personal Data is mandatory to be provided, failure to provide such information may result in us not being able to process your request.

1.6 As with most websites, your device sends information which may include data about you that gets logged by web server when you use or browse the Platform. This typically includes without limitation your device’s Internet Protocol (IP) address, computer / mobile device operating system and browser type, type of mobile device, the characteristics of the mobile device, the unique device identifier (UDID) or mobile equipment identifier (MEID) for your mobile device, the address of a referring website (if any), the pages you visit on the Platform and the times of visit, and sometimes a “cookie” to help us remember your last visit. If you are logged in, this information is associated with your account. The information may be included in anonymous statistics.

1.7 We may collect precise information about the location of your mobile device using technologies such as GPS, Wi-Fi, etc. after obtaining your consent. You are entitled to refuse provision of such information. For questions about how to disable your mobile device’s location services, please contact your mobile device service provider or the device manufacturer.

2. Personal Data of Minors and Third Parties

2.1 As a parent or legal guardian, please do not allow minors under your care to submit Personal Data to us. In the event that such Personal Data of a minor is disclosed to us, you hereby consent to the processing of the minor’s Personal Data and accept and agree to be bound by this Privacy Policy and take responsibility for his actions.

2.2 In the event that you provide us with Personal Data relating to other individuals (including but not limited to your spouse, family members, friends), you warrant and confirm that you have obtained their explicit consent to share their information for the purpose set out in the Policy, informed the other individuals of the Company’s identity, and ensure that the data provided is accurate, complete and up to date.

3. Purpose of Data Collection

3.1 We may use and process the Personal Data you have provided for one or more of the following purposes: —

1. to provide you with a safe, smooth, efficient and customised experience on the Platform;
2. to manage, operate, provide and/or administer your use of and/or access to the Platform;
3. for identification, verification, due diligence or know-your-customer purposes;
4. to personalise your Platform experience (such as to recommend products and services relevant to you or identify your preferences);
5. to respond to, process, deal and/or fulfil your request;
6. to provide customer support, resolve dispute and troubleshoot problems or for such other communication purposes to facilitate our services;
7. to prevent potentially prohibited or illegal activities and enforce this Policy or other published policies of the Platform;
8. to communicate with our service providers and business associates;
9. to customise, measure and improve our services, content and advertising;
10. to send you targeted marketing, service updates, and promotional offers;
11. to compare information for accuracy, and verify it with third parties;
12. to comply with the applicable laws and regulations;
13. to allow for audits and surveys to, among other things, validate the size and composition of the target audience of the Platform;
14. to respond to legal processes, threatened or actual claims;
15. to produce statistics and research for internal and statutory reporting and/or record-keeping requirements;
16. for any other purposes as and may be required under the relevant law and legislation or which we will notify you of at the time of obtaining your consent.

You agree and grant consent to us to use and process your Personal Data in the manner as stated within this Policy.

4. Marketing

4.1 We will not disclose your Personal Data to unaffiliated third parties without your consent unless such Personal Data is required by law or in good faith and such action is necessary to comply with any law enforcement agency requirements, court orders or legal processes. If we disclose any of your Personal Data to our authorised agents or service providers, we will require them to appropriately safeguard the Personal Data provided to them.

4.2 However, we may combine your Personal Data with the information we collect from other companies, and use it to improve and personalise our services, content and advertising to further cater to your personal preferences on the Platform. In the event you do not wish to receive our ad-customisation programmes, please contact us at [email protected].

4.3 We do not sell, rent or share your Personal Data with non-affiliated companies and/or people for direct and/or indirect marketing purposes without your express consent.

5. Cookies

5.1 We use “cookies” (small files placed on your hard drive) on certain of our pages in our Platform to help analyse our web page flow, customise our services, content and advertising, measure promotional effectiveness, and promote trust and safety.

5.2 A few important things you should know about cookies are: —

1. we offer certain features that are available only through the use of cookies;
2. we use cookies to help identify you and maintain your signed-in status;
3. most cookies are “session cookies,” meaning that they are automatically deleted from your hard drive at the end of a session;
4. you are always free to decline our cookies if your browser permits, although doing so may affect your experience when utilising the features and functionality of the Platform; and
5. you may encounter cookie from third parties on certain pages that we do not control (for example, if you view a web page created by another user, there may be a cookie placed by that web page).

6. Retention of Personal Data

6.1 We retain your Personal Data for the period necessary to fulfil the purposes outlined in this Policy unless a longer retention period is required or allowed by law. Once your Personal Data is no longer necessary for the purposes, or we no longer have a legal or business purpose for retaining your Personal Data, we take steps to erase, destroy, anonymise or prevent access or use of such Personal Data for any purpose other than compliance with this Policy, or for purposes of safety, security, fraud prevention and detection, in accordance with the requirements of applicable laws.

7. Sharing and Disclosure of Personal Data

7.1 We need to share Personal Data with various parties for the Platform. These parties include: —

1. our subsidiaries, affiliates and related corporations;
2. our vendors, consultants and marketing partners, research firms and other service providers or business parts which may include but not limited to payment processors and facilitators, debt collectors, credit bureaus and credit reporting organisations, background check and anti-money laundering service providers, cloud storage providers, data analytics providers, advertising and marketing partners and platform providers, research partners, insurance and financing partners;
3. our legal advisors, law enforcement officials, government authorities and other third parties to fulfil the legal purposes or where it is necessary to respond to an emergency that threatens the life, health or safety or a person or in the public interest;
4. a buyer or other successor in the event of a merger, acquisition, consolidation, divestiture, restructuring, reorganization, financing, dissolution, other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation or similar proceeding.

7.2 For avoidance of doubt, in the event that the applicable laws permit us to collect, use or disclose your Personal Data without your consent, such permission granted by the laws shall continue to apply.

8. Security

8.1 Your Personal Data is stored on our servers located in Malaysia. We do not promise, and you should not expect that, your Personal Data will always remain private as third parties may unlawfully intercept or access transmissions or private communications, and other users may abuse or misuse your Personal Data.

9. Account Protection

9.1 Your password is the key to your account. Use unique numbers and letters and do not disclose your password to anyone. If you do share your password or your personal information with others, remember that you are responsible for all actions taken in the name of your account. If you lose control of your password, you may lose substantial control over your personal information and may be subject to legally binding actions taken on your behalf. Therefore, if your password has been compromised for any reason, you should immediately notify us and change your password.

9.2 We will never ask for your password by phone or e-mail, so if you receive such an inquiry, please report the incident to us at [email protected].

9.3 If you access our Platform from a shared computer or a computer in an internet cafe, a PC room or a library, certain information about you, such as your user ID, activity or reminders from the Platform, may also be visible to other individuals who use the computer after you. To protect your personal information or communication from being disclosed to others, you should log out and close the web browser after using our Platform.

10. Your Rights to Your Personal Data

10.1 You shall have the following rights in respect of the Personal Data which you have provided us voluntarily: —

1. the right to request for a copy of your Personal Data;
2. the right to correct or update your Personal Data to ensure its accuracy and completeness;
3. the right to withdraw your consent from our processing of your Personal Data;
4. the right to restrict how we use your Personal Data.

10.2 For exercising your rights, you can reach out to us at: —

10.3 In respect of your right to access your Personal Data, we endeavour to provide you with an adequate means of accessing it. We reserve the right to impose a fee for fulfilling your request for access of your Personal Data in the amounts as permitted by the applicable law.

10.4 There may be instances where we cannot grant you access to the Personal Data we hold. For example, we may need to refuse access if granting access would interfere with the privacy of others or if it would result in a breach of confidentiality or law. In that event, we will provide you written reasons for any refusal.

11. Third Parties

11.1 Except as otherwise expressly included in this Policy, this document addresses only the use and disclosure of Personal Data we collect from you. If you disclose your Personal Data to others, different rules may apply to their use or disclosure of the information you disclose to them. We do not control the privacy policies of third parties, and you are subject to the privacy policies of those third parties where applicable. We encourage you to ask questions and to review their privacy policies before you disclose your Personal Data to others.

12. Data Integrity

12.1 Personal Data supplied by you shall be accurate, complete and not misleading. It shall be your obligation to notify us of any changes to your Personal Data supplied previously to us.

13. Legal Effects

13.1 This Policy shall be read together with and construed as an essential part of the Platform’s Terms of Use.

13.2 Headings in this Policy are inserted for convenience only and shall not be taken into consideration while construing this Policy. Unless the context otherwise requires, words denoting singular number only shall include the plural and vice versa and words denoting persons shall include corporations and partnerships and vice versa and all words importing the masculine gender shall be deemed to include the feminine and neuter genders and vice versa.

13.3 No rule of construction applies to the disadvantage of a party because that party was responsible for the preparation of this Policy or any part of it.

13.4 Any term, condition, stipulation, provision, covenant or undertaking in this Policy which is illegal, void, prohibited or unenforceable shall be ineffective to the extent of such illegality, voidness, prohibition or unenforceability without invalidating the remaining provisions hereof, and any such illegality, voidness, prohibition or unenforceability shall not invalidate or render illegal, void or unenforceable any other term, condition, stipulated, provision, covenant or undertaking herein contained.

14. Applicable Law and Dispute Resolution

14.1 This Policy shall be governed by and construed in all respect in accordance with the laws of Malaysia. Any controversy, claim or dispute arising out of or relating to this Policy and/or the breach, termination or invalidity thereof shall be referred to and resolved by a court of competent jurisdiction in Malaysia. On this note, you hereby agree to submit to the exclusive jurisdiction of the Malaysian Courts.

15. Changes to the Privacy Policy

15.1 We reserve the right to modify and change the Policy (or any part thereof) at any time. Any changes to this Policy will be published on the Platform. You should check this Policy each time you access our Platform so as to be aware of the most recent applicable version of the Policy.

16. English Version to Prevail

16.1 This Policy is issued in English, Bahasa Malaysia and Mandarin. In the event of any inconsistency, conflict, or discrepancy between the English version and the other versions, the English version shall prevail.

Last Updated: 3 June 2026.