1. Introduction
This Privacy Policy explains how UrusTempahan ("the platform", "we") collects, uses, discloses and protects your personal information when you use our accommodation booking management service. By using the platform, you agree to the practices described in this policy.
This policy is in line with Malaysia's Personal Data Protection Act 2010 (PDPA) and its amendments.
2. Data Controller
The platform is owned and operated by:
- FY Tech and Digital Solutions
- SSM Registration No.: 202303190841
- No. 118, Jalan Putra D/2, Taman Klebang Putra, 31200, Chemor, Perak, Malaysia.
- Email: info@urustempahan.com
3. Information We Collect
3.1 Account information
Your name, email address, phone number and password (stored encrypted/hashed) when you register.
3.2 Accommodation & business information
Details of the accommodation you list — name, location, prices, photos and booking settings — stored in your own dedicated (tenant) database.
3.3 Guest booking information
When a guest books on your page, we process their name, email, phone number and booking details on your behalf as the accommodation owner.
3.4 Payment information
Payments are processed by licensed third-party gateways (CHIP, ToyyibPay, BayarCash and the FPX network). We do not store full credit/debit card numbers or your banking details — that information is handled directly by the payment gateways under their own security standards.
3.5 Technical data
IP address, browser type and basic usage data, for security and to improve the service.
4. How We Use Your Information
- To provide and operate the booking management service.
- To process your subscription, billing and account renewals.
- To send booking confirmations (email) to guests, and notifications/alerts (email & WhatsApp) to you.
- To provide customer support and answer enquiries.
- To improve security, prevent fraud and improve the platform.
- To comply with legal obligations.
5. Payments Go Directly to You — We Do Not Hold Funds
Guest payments go straight into your account through your own FPX payment gateway. Unlike third-party platforms that hold your funds, UrusTempahan does not hold, withhold or keep your sales proceeds, and we charge no commission (0%) on sales. Settlement depends on the retention period of the payment gateway you use.
6. Sharing of Information
We do not sell your personal data. We only share information with the following parties when necessary:
- Payment gateways (CHIP, ToyyibPay, BayarCash, FPX) — to process transactions.
- Notification providers (Meta/WhatsApp Business, email providers) — to send confirmations and alerts.
- Meta (Facebook) — to measure how well our advertising works, only if you allow it (see Section 10).
- Hosting/infrastructure providers — to store and run the platform securely.
- Authorities — when required by law.
7. Data Retention
We keep your data while your account is active. For accounts whose subscription has ended, data may be retained through a dormancy period (about 90 days) before it is deleted or anonymised, unless a longer retention is required by law.
8. Data Security
We take reasonable technical and administrative measures — including password encryption, HTTPS connections and separation of each tenant's data — to protect your information. However, no system is completely secure.
9. Your Rights
Subject to the PDPA, you have the right to:
- Access and obtain a copy of your personal data.
- Correct inaccurate data.
- Request deletion of your data.
- Withdraw consent for certain processing.
To exercise these rights, contact us at info@urustempahan.com.
10. Cookies and Advertising Measurement
10.1 Essential cookies
We use essential cookies to keep you signed in and for security (for example, CSRF tokens). These are always used because the platform cannot work without them. You can manage cookies in your browser, but blocking essential cookies will stop the platform from working properly.
10.2 First-party attribution cookie
We keep one first-party cookie that records how you found us (for example through an advert, a search or a referral link). This is stored in our own systems to understand how well our marketing works, and is not sent to anyone else.
10.3 Meta Pixel (Facebook) — only with your consent
On your first visit to urustempahan.com we ask whether you allow the Meta Pixel. It does not load until you press "Benarkan" (Allow). If you allow it:
- Meta receives information such as the pages you visit, your IP address, browser details and
Meta's cookie identifiers (
_fbp,_fbc). - When you register an account, we also send your email address and phone number in hashed (unreadable) form, together with your IP address, to Meta.
- The sole purpose is to measure which adverts bring visitors and sign-ups to us.
- Meta processes this information, including outside Malaysia, under Meta's own privacy policy.
If you decline, the Meta Pixel does not load and your registration details are not sent to Meta. Your choice is remembered for six months.
10.4 Changing your choice
You can withdraw or give consent again at any time. Withdrawing does not affect your use of the platform.
10.5 Accommodation booking pages
Each accommodation's booking pages (for example propertyname.urustempahan.com) do not load our Meta Pixel or Google Analytics.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Any material change will be announced on the platform or by email. The effective date above shows the latest revision.
12. Contact Us
Privacy questions can be sent to:
FY Tech and Digital Solutions
No. 118, Jalan Putra D/2, Taman Klebang Putra, 31200, Chemor, Perak.
Email: info@urustempahan.com