Privacy Policy

1. Personal data we collect

We collect information you provide and limited technical records created when you use the booking system.

• Contact and organiser details, including name, email address, telephone number, company name and member account information.
• Booking and event details, including date, time, package, participant count, training type, room layout, catering interest and special requirements.
• Payment records, including amount, payment status, Billplz bill and transaction identifiers and callback records. We do not store your online-banking or card credentials.
• Security-deposit, refund, deduction, cancellation, rescheduling and operational checklist records.
• Technical and security information such as session cookies, IP address, browser or device information, audit logs and failed-login or rate-limit records.
• When you consent to optional tracking, website and advertising events such as page views, booking-funnel steps, campaign attribution and confirmation counts. We do not send customer contact details, order numbers, payment amounts or payment credentials to these analytics tools.
• Communications you send to us and records needed to answer or complete your request.

2. Why we use the data

• To check availability, prevent double-booking, hold a selected slot and complete the booking.
• To process and verify payments, issue confirmations and maintain duplicate-callback protection.
• To prepare the venue, communicate arrival information and manage the event, security deposit and post-event follow-up.
• To provide member booking history and keep each member’s records separate from other customers.
• To prevent fraud or misuse, secure accounts, diagnose failures, keep audit records and comply with legal, tax and accounting obligations.
• To answer enquiries and administer the services you request.
• With your consent, to understand website usage, improve the booking journey, measure advertising and count completed booking stages.

3. Cookies, analytics, advertising and device language

The site uses essential session and security cookies for login, CSRF protection, booking holds and language preference. These are required for the service and cannot be disabled through the optional-tracking control.

If you choose “Allow analytics & ads”, Google Analytics and Meta Pixel may receive page-view and booking-stage events to measure site use and advertising. Optional analytics and advertising tags remain blocked until you consent.

You can reject optional tracking and continue using the booking service. You can also reopen Privacy choices in the footer to change your selection. Withdrawing consent stops future optional events on that browser; it does not erase data already processed by a provider.

If you have not selected a site language, the site reads your browser’s Accept-Language setting to choose English, Bahasa Melayu or Chinese. English is the fallback.

4. When data is shared

We disclose only what is reasonably needed for the stated purpose. Recipients may include:

• Billplz and its payment partners for payment creation, verification and refund handling.
• Our configured email delivery provider and authorised internal booking or operations recipients.
• Hosting, database, security and technical service providers acting for us under appropriate controls.
• Google and Meta for optional analytics and advertising measurement only after you consent.
• Professional advisers, insurers, regulators, courts, law-enforcement bodies or other parties when required or permitted by law.

5. Storage, security and retention

We use access controls, password hashing, CSRF protection, server-side validation, payment-signature verification, audit logging and restricted original-media storage. No internet service can guarantee absolute security.

We keep personal data only for as long as reasonably needed for bookings, venue operations, dispute handling, security, accounting and legal obligations. Data that is no longer required should be securely deleted or anonymised, subject to backup and legal-retention requirements.

6. Your choices and rights

Subject to applicable Malaysian law, you may ask for access to or correction of your personal data, withdraw consent where processing relies on consent, or ask us to stop direct marketing. Use Privacy choices in the footer to change future optional browser tracking. We may need to verify your identity and may retain information where the law or an existing transaction requires it.

7. Children and third-party details

The booking service is intended for adults and business organisers. If you provide details about participants or another contact, you are responsible for having authority to do so and for giving them relevant notice. Do not submit sensitive participant information unless it is necessary for venue safety or accessibility.

8. Changes to this policy

We may update this policy when the service, providers or applicable law changes. The current version and update date will be published on this page.