Privacy Policy

Personal Information

• Account Information: Name, mobile/WhatsApp number, email address, and date of birth (optional)
• Identity Information: Identification (IC/passport) details where required for membership verification
• Profile Information: Referral ID, membership tier, user preferences, and app settings

Technical Information

• Device Information: Device type, operating system, app version
• Usage Data: App interactions, feature usage, session duration
• Log Data: Error reports, performance metrics, security logs

Automatically Collected Information

• IP address and device identifiers
• App performance and crash reports
• Analytics data about app usage patterns
• Security and fraud detection data

We use your personal information to:

• Provide App Services: Enable core app functionality, including loyalty points, cashback, and QR code check-in at participating merchants
• Manage Your Rewards: Track your points balance, cashback, and referral activity, and process redemptions
• Personalize Your Experience: Customize app content and offers based on your preferences
• Communication: Send important app updates, notifications, and service announcements
• Security and Safety: Protect your account and detect potential security threats
• Analytics and Improvements: Enhance app performance and improve user experience
• Legal Compliance: Meet regulatory requirements and data protection obligations
• Customer Support: Provide technical assistance and respond to your inquiries

We may share your information with:

Service Providers

Third-party companies that help us operate our services, including:

• Cloud hosting and secure data storage providers
• Participating merchants, for the purpose of validating loyalty points, cashback, and QR code transactions
• Messaging providers (for example, WhatsApp) used to deliver OTPs and notifications
• Customer support platforms
• Security and compliance monitoring services
• Payment processors (for premium features or top-ups)

Legal Requirements

We may disclose your information when required by law, regulation, or legal process, or to protect our rights, property, or safety, or that of our users or the public.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, subject to the same privacy protections.

We implement robust technical and organizational measures to protect your personal information, including:

• Encryption of sensitive data in transit and at rest
• Industry-standard security measures and protocols
• PIN and biometric authentication for account access
• Regular security audits and vulnerability assessments
• Staff training on data protection and privacy
• Secure data centers with physical security measures

While we implement industry-leading security measures, no system is completely secure. We continuously monitor and improve our security practices to protect your personal information.

Subject to Malaysia's Personal Data Protection Act 2010 (PDPA) and other applicable laws, you have the following rights regarding your personal information:

• Access: Request a copy of all personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information and account (subject to legal retention requirements)
• Portability: Request transfer of your data to another service provider
• Consent Withdrawal: Withdraw consent for data processing where applicable
• Restriction: Request limitation of processing in certain circumstances
• Opt-out: Unsubscribe from non-essential communications

To exercise these rights, please contact us using the information provided below.

We retain your information for as long as necessary to:

• Provide ongoing app services and maintain your user profile and rewards balance
• Comply with legal obligations and regulatory requirements
• Resolve disputes and enforce our agreements
• Prevent fraud and maintain security
• Improve our services while maintaining privacy protections

When information is no longer needed, we securely delete or anonymize it in accordance with our data retention policies.

Your information is primarily processed within Malaysia. Where information is processed outside Malaysia, we ensure appropriate safeguards are in place, including:

• Adequacy decisions by relevant data protection authorities
• Standard contractual clauses for data protection
• Binding corporate rules
• Your explicit consent for cross-border transfers when required

Harimau Rewards is intended for users aged 13 and above. We do not knowingly collect personal information from children under 13. If we become aware of such collection, we will delete it promptly and notify parents/guardians if required by law.

Our app may integrate with third-party services, APIs, or external platforms, such as WhatsApp for OTP delivery and participating merchant systems for rewards redemption. This Privacy Policy does not apply to these external services. We encourage you to review their privacy policies and ensure they meet your privacy expectations.

Important Notice: Loyalty points, cashback, and other rewards earned through the app are provided for informational and promotional purposes and are calculated based on transaction data shared by participating merchants.

• Points and cashback balances shown in the app reflect the latest data available at the time of viewing and may take time to update
• Rewards have no cash value unless expressly stated and cannot be exchanged for cash except through approved redemption channels
• Users should verify their points, cashback, and redemption history independently if discrepancies are suspected
• Referral IDs and referral rewards are subject to our Terms & Conditions and may be adjusted to prevent fraud or abuse
• The rewards program, including point values and redemption options, may be updated from time to time

We use cookies and similar technologies to:

• Maintain secure user sessions and preferences
• Analyze app performance and user experience
• Provide personalized content and recommendations
• Ensure security and prevent unauthorized access

You can manage cookie settings through your device, though this may affect app functionality.

We may update this Privacy Policy to reflect changes in our practices, technology, or applicable data protection regulations. When we make significant changes, we will:

• Post the updated policy in the app and on our website
• Notify you via email, WhatsApp, or app notification
• Request additional consent where required by law
• Provide a summary of key changes

The updated policy becomes effective on the date specified in the revision.