Legal
Privacy & PDPA Notice
Effective 23 August 2026. This is a prototype-stage policy for design review — final wording should be reviewed by counsel before launch.
1. What this notice covers
This notice explains how MotorVandy collects, uses, stores and discloses personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). It applies to visitors, registered members, sellers, and buyers using the MotorVandy platform.
2. What we collect
Account details (name, email); seller verification details (IC/passport number and a photo of your ID); vehicle registration card (Geran) images submitted with a listing; phone numbers; listing content and photos; and messages sent through the platform. We collect only what's needed to verify sellers, prevent scams, and connect buyers with sellers.
3. Why we collect it
To verify seller identity before a first listing goes live; to verify a car's registration details against its listing; to screen listings for fraud (including AI-assisted checks); to enable buyer-seller contact while keeping phone numbers private by default; to process make/model catalogue requests; and to operate the optional Export Desk and JPJ/Puspakom transfer assistance services.
4. Who we share it with
IC/passport and registration card images are used for verification only and are never published. Phone numbers are only shown to other signed-in members after you choose to reveal them. We share data with: JPJ/Puspakom transfer agent partners and Export Desk logistics partners, but only for deals you've actively opted into; and administrators reviewing listings, verification requests, and reports. We do not sell personal data to third parties.
5. How long we keep it
Verification documents are retained only as long as needed to keep your seller status current, plus a reasonable period for fraud investigation and dispute resolution, after which they're deleted. You can request earlier deletion — see Section 7.
6. Security
Verification documents (IC/passport, registration cards) are treated as sensitive data with restricted access, limited to trust & safety review. As with any online service, no method of storage or transmission is 100% secure, but we apply reasonable technical and organisational safeguards proportionate to the sensitivity of the data involved.
7. Your rights under the PDPA
You may request access to the personal data we hold about you, request correction of inaccurate data, withdraw consent for processing (which may limit your ability to list or verify as a seller), and request deletion of your account and associated data, subject to legal/record-keeping requirements. To exercise these rights, contact privacy@motorvandy.my.
8. Children
MotorVandy is not directed at individuals under 18. We do not knowingly collect personal data from minors.
9. Changes to this notice
We may update this notice as the platform evolves. Material changes will be highlighted on this page with an updated effective date.