Privacy Policy

1. Introduction

Bintang ("we", "us", "our") is committed to protecting the personal data of everyone who interacts with our services. This Privacy Policy explains what information we collect, how we use it, and the rights you have over your data.

This policy applies to all personal data collected through our website at bintanios.pro and through direct engagement with our residential placement services. We operate under Malaysia's Personal Data Protection Act 2010 (PDPA) and handle all personal data accordingly.

2. Data We Collect

We collect personal data only where it is necessary to deliver our services or respond to your enquiries. This may include:

• Full name and preferred name
• Email address and telephone number
• Current location or country of residence
• Budget range and residency preferences
• Employer or professional context (where provided voluntarily)
• Technical data collected via cookies (see Section 5)

We do not collect sensitive personal data such as passport numbers, financial account details, or health information unless specifically required for a placement and explicitly consented to.

3. How We Use Your Data

Personal data is used for the following purposes:

• Responding to initial enquiries and discussing your residency requirements
• Conducting and managing the property search process on your behalf
• Coordinating with property owners and building managers during placement
• Preparing and reviewing lease documentation
• Maintaining contact through the tenancy and at renewal
• Improving our website and understanding how visitors use it (analytics, where consented)

The legal basis for processing is primarily contract performance (where you have engaged our services), legitimate interest (for enquiry handling and communications), and consent (for optional cookie categories and marketing).

4. Data Sharing

We share personal data only in the following circumstances and only to the extent necessary:

• Property owners and building managers — to facilitate viewings and lease negotiations on your behalf
• Legal professionals — where lease drafting or review requires external input
• Analytics providers — anonymised website usage data (where analytics cookies are accepted)

We do not sell personal data. We do not share data with advertising networks or marketing partners without explicit consent.

5. Cookies

Our website uses cookies to support basic functionality and, where consented, to understand how visitors navigate the site. You may manage cookie preferences at any time via our Cookie Policy page.

Essential cookies cannot be disabled as they are required for the site to operate correctly. Analytics and marketing cookies are optional and require your consent before being set.

6. Data Retention

We retain personal data for as long as is necessary for the purposes described in this policy:

• Enquiry records — up to 12 months from last contact, unless a service is engaged
• Active client records — for the duration of the engagement plus 3 years
• Lease-related documentation — 7 years in accordance with standard practice
• Website analytics data — up to 26 months (anonymised)

7. Data Protection Measures

Personal data is stored on secured systems with access restricted to the Bintang team members directly involved in your engagement. We do not use unsecured channels to transmit sensitive personal information. Physical documentation is stored securely and disposed of in accordance with our data handling procedures.

8. Your Rights Under the PDPA

Under Malaysia's Personal Data Protection Act 2010, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Withdraw consent where processing is based on consent
• Request that we stop processing your data for direct marketing purposes
• Raise a complaint with the Personal Data Protection Commissioner

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

9. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

10. Children's Privacy

Our services are directed at adults aged 18 and above. We do not knowingly collect personal data from individuals under 18.

11. Changes to This Policy

We may update this policy from time to time. Where changes are material, we will notify active clients by email. The current version is always available at this address, with the date of last update shown above.