Privacy Policy

Yay Online Sdn Bhd Personal Data Protection Policy

Yay Online Sdn Bhd (“Yay”), (Company No. 1222028-P), recognizes the importance of your privacy and we are committed to protecting your privacy in accordance with the Personal Data Protection Act 2010 of Malaysia (“PDPA”).

This Policy is to help you understand:

  • What types of personal data we collect
  • How we collect your personal data
  • How your personal data is used
  • Which parties do we disclose your personal data to; and
  • What choices we offer, including how to access and update your personal data.

What Types Of Personal Data We Collect

We at Yay aim to provide you great services that are safe and convenient, and to do that we may collect the following personal data about you which includes:

  1. Personal information to establish your identity and background such as your:
    • full name
    • a copy of your passport and/or identity card including the details found in those documents
    • age
    • nationality
    • religion
  2. Personal contact information such as your:
    • home address,
    • home and/or office telephone number,
    • mobile phone number,
    • fax number
    • email address
  3. Payment information such as your:
    • debit or credit card information, which includes the name of the cardholder, card number, billing address, expiry date and security code
    • bank account details, which includes the bank name and bank account number(s)
  4. Transaction information such as the:
    • details of the item/service being transacted
    • the value of the transaction
    • payment amount
    • delivery address and return address
  5. Business information such as your:
    • business’ name and number
    • copies of your business registration forms
    • business’ payment information, credit card and banking account details
    • business contact information such as premise address, phone number, fax number and email
  6. Resume or CVs when you apply for a job with us
  7. Your browsing data whereby when browsing through Yay’s Website and/or Mobile Apps, we might capture certain technical and statistical information via the use of cookies.
  8. Recording of calls placed by you to our customer services
  9. If in the event that you provide us with any personal data relating to a third party (e.g. information of your spouse, children, parents, and/or employees), you represent to us that you have obtained the consent of the third party to provide us with their personal data for the purposes as listed below.
  10. Any additional information relating to you that you provide to us through use  of the services offered on the Website;

How We Collect Your Personal Data

Your personal data may be obtained directly from you, from your authorized representatives and/or from a variety of sources including, but not limited to:

  1. when you register a user account with Yay and utilize any of Yay’s services
  2. when you create a transaction on Yay’s Web and/or Mobile Apps
  3. when your information is provided to Yay by your counter-party in the process of creating a transaction on Yay
  4. when you browse on Yay’s Web and/or Mobile App(s)
  5. when you initiate contact with us either through verbal or written communication (for example when making enquiries, complaints, comments or feedback)
  6. when you participate in any surveys, questionnaires, competitions, contests, offers, or promotions done internally or via an appointed third party
  7. when you commence a business relationship with us (for example by becoming a registered merchant on Yay)
  8. when you interact with Yay via social media platforms including but not limited to Facebook, Twitter, and Instagram
  9. from such other sources where you have given your consent for the disclosure of personal data relating to you, and/or where otherwise lawfully permitted.

How Your Personal Data is Used

By agreeing with the terms of this Policy, You represent that we may use your personal data for the following purposes:

  • to process your user account registration on Yay and to verify your identity
  • to manage and maintain your account on Yay
  • to notify you of any changes and updates to the services provided by Yay
  • to notify you of any changes to Yay’s Privacy Policy and Terms and Conditions of Use
  • to comply with any legal or regulatory obligations under the applicable laws, regulations and guidelines that apply to Yay
  • to facilitate and assist with the creation, execution, management and completion of your transaction(s) on Yay, including without limitation
    • providing your personal information to Yay’s related bodies corporate, contractors or service providers
    • providing your personal information to counter-parties relevant to a particular transaction on Yay
    • and providing other transaction related information to the parties to a particular transaction facilitated through the Web and/or Mobile App(s)
  • to facilitate payments to and from you, and conduct payment processing including billing, external payment and accounting systems
  • to fulfil audit requirements
  • to carry out your instructions with regards to your active transaction on Yay
  • to respond to any enquiries, complaints, comments or feedback that you have submit to us
  • to protect or enforce our rights to recover any debt owing to us
  • to compile information for analysis and reports to the relevant regulatory authorities
  • to transfer or assign our rights, interests and obligations under any of your agreements with us
  • to conduct competitions, contests, offers, promotions, surveys, questionnaires which we feel may be relevant to you and where you have given consent to be contacted for such purposes
  • to produce data, reports and statistics which have been anonymised or compiled in a manner that does not identify you as a specific individual
  • to conduct research for analytical purposes including but not limited to data mining and analysis of your transactions with us
  • to engage in business transactions in respect of services to be offered and provided to you
  • for internal management of the services being provided to you
  • to maintain records required for security, claims or other legal purposes
  • to provide training for our staff
  • to conduct marketing and information technology activities (for example, market research)
  • to persons who have been identified as being you or your authorised representative(s) pursuant, for the purpose of the relevant transaction or enquiry
  • to third parties with whom we have contracted to provide services to us (such as analysis on our behalf) for any of the purposes described above. Where we disclose your personal data to third parties we shall ensure that such data is used only to provide services to us
  • to conduct anti-money laundering checks; for crime detection, investigation, prevention and prosecution; to comply with any sanction requirements;
  • to enforce and/or defend any of our rights; and/or
  • for any other purpose that is required or permitted by any law, regulations, guidelines and/or relevant regulatory authorities.

Which Parties Do We Disclose Your Personal Data To

There may be situations where we are required to disclose certain information about you to the following third parties, which includes, but is not limited to:

  • federal and state government, ministries and government agencies
  • law enforcement agencies and regulators
  • companies or organisations that act as our agents, contractors, service providers or professional consultants
  • companies or organisations that assist us in processing your transactions and payments and business associates and other parties for purposes that are related to the purpose of collecting and using your personal data
  • other parties in respect of whom you have given your express or implied consent

If Personal Data Provided by You Is Incomplete

In order to process your application and be eligible for Yay’s services, it is required to that you provide us with accurate and complete personal data, failing which we may not be able to process your application and/or provide you with our services

Your Rights to Access and Correct Your Personal Data

If you would like to access or view details of your personal data held by us, or if you would like us to make corrections in your personal data, you may make a request to us by writing to  

How Long We Will Keep Your Personal Data

We will retain your personal data in compliance with this Policy and/or the terms and conditions of your agreement(s) with Yay for the duration of your relationship with us, or for such period as may be necessary to protect the interests of Yay or where otherwise required by the law

How We Protect and Safeguard Your Personal Data

We endeavour to take all reasonable steps to protect your personal data and keep your personal data protected. There may be situations where you are linked to external websites while using Yay, we shall not be held responsible for the data policies, procedures or content of these external sites.

Transfer of Your Personal Data Outside Malaysia

If in the event where it may be necessary for us to transfer your personal data outside Malaysia, or  if any of our service providers or business partners that are involved in providing part of Yay’s services are located in countries outside Malaysia, you hereby consent to us transferring your personal data outside Malaysia in these instances. Reasonable steps will be taken to safeguard your personal data whereby these service providers and business partners will not use the data for any reason other than to provide the services they are contracted to provide.

Your Consent

By submitting your personal data to us, you consent to the use of that personal data as set out in this Policy. If changes are made to this Policy, we will notify you of the changes via Yay’s Web and Mobile Apps. You may also request the latest copy from us by writing to Continued use of Yay’s service will signify that you agree to any such changes.

Our Contact Details

If you have questions or comments about Yay’s use of your personal data, or if you have any questions, comments or suggestions regarding this Policy,  please write to us at and we’ll endeavour to assist you.