Privacy Policy

1. Information We Collect

We collect the following categories of personal data:

• Identity Data: Full name, NRIC/passport number, nationality.
• Contact Data: Email address, phone number, mailing address.
• Financial Data: Bank account details, proof of funds, and transaction records relevant to property acquisitions.
• Professional Data: Company name, designation, and professional licence numbers (for agents and lawyers).
• Usage Data: Login timestamps, page views, feature interactions, IP address, and browser type.
• Document Data: Agreements, deal-related documents, and any files uploaded to the platform.

2. How We Use Your Information

We process your personal data for the following purposes:

• To create and manage your account on the iTanah platform.
• To facilitate buyer representation services, including deal management and agent coordination.
• To conduct Know Your Customer (KYC) verification as required for property transactions.
• To communicate with you regarding your deals, platform updates, and support requests.
• To process platform fees, subscription payments, and generate invoices.
• To comply with applicable Malaysian laws and regulatory requirements.
• To improve the platform through aggregated, anonymised analytics.

3. Legal Basis for Processing

Under the PDPA, we process your personal data on the following bases: (a) your consent, provided at registration or during specific platform actions; (b) the performance of a contract to which you are a party; (c) compliance with a legal obligation; and (d) our legitimate interests in operating a secure and efficient property transaction platform, where such interests are not overridden by your rights.

4. Disclosure of Your Information

We may share your personal data with:

• Platform Advisors and Lawyers: Assigned to your deal to facilitate the transaction.
• External Property Agents: Where necessary to progress a deal, subject to your prior authorisation via an LOA.
• Service Providers: Including cloud hosting, payment processors, document signing, and communication services, bound by confidentiality obligations.
• Regulatory Authorities: Where required by law, court order, or governmental request.

We do not sell your personal data to third parties.

5. Data Retention

We retain your personal data for as long as your account is active and for a period of seven (7) years following the conclusion of any deal or termination of your account, as required for legal and audit purposes. Document data forming part of completed transactions may be retained for longer periods where required by Malaysian property or tax law.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include encrypted data transmission (TLS), access controls, audit logging, and regular security assessments. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

7. Your Rights Under the PDPA

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete personal data.
• Withdraw consent for processing, where consent is the legal basis.
• Request information about how your data has been used or disclosed.

To exercise these rights, contact us at privacy@itanah.com. We will respond within twenty-one (21) days.

8. Cookies

We use cookies and similar tracking technologies to maintain your session, remember your preferences, and understand platform usage. You may disable cookies in your browser settings; however, this may affect certain platform functionality.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on the platform. Continued use of the platform after such notice constitutes your acceptance of the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact our Data Protection Officer at: