Privacy Policy

Your privacy matters to Waspada Digital.

This policy explains how Waspada Digital handles personal data when you read intelligence alerts, suggest a private verification lead, participate in community features, install the PWA, enable notifications, share content, or contact us.

Updated: July 29, 2026

This policy is provided to support privacy practices in Malaysia, including principles under the Personal Data Protection Act 2010 (PDPA). It is not legal advice and may be revised according to Waspada Digital's actual operations.

1. Who We Are

Waspada Digital is a Malaysian scam and cybersecurity information publication. In this policy, "we" refers to the operator of the Waspada Digital website and web app.

You can contact us by WhatsApp at +60 11-1302 1017.

2. Data We Collect

  • Information you provide when contacting us, such as name, phone number, email address, messages, inquiries, or support details.
  • Private verification leads after automatic removal of telephone, account, identity-number, private-address and unsupported-allegation patterns. Optional lead email addresses are stored only as one-way hashes, not as readable addresses.
  • Your email address, consent time, and subscription status when you join the Waspada Digital email digest.
  • Your email address, display name, account status, contributions, Builder Hub posts and project links, votes, reports, saved briefings, followed topics, discussions or projects, recommendation dismissals and opens, digest delivery records, notification preferences, sign-in records, and rule-acceptance time when you use community features.
  • Technical data such as IP address, browser type, device type, operating system, pages visited, access time, referral links, and basic diagnostics.
  • Usage data such as articles or videos opened, audio interactions, outbound link clicks, searches, and sharing actions.
  • PWA and notification data such as installation status, notification preferences, push subscription tokens, and settings stored on your device.
  • Cookie, local storage, or similar technology data for site functionality, analytics, security, and user experience.

3. Processing Purposes

We process personal data for reasonable purposes related to Waspada Digital services, including to:

  • provide the website, intelligence alerts, evidence and correction histories, PWA, search, and sharing features;
  • privately compare redacted reader leads with official evidence without treating those leads as public evidence;
  • respond to inquiries, support requests, partnership messages, or other messages you send;
  • send in-site or email notifications you enable and let you manage those preferences;
  • authenticate community accounts, operate reader discussions and Builder Hub, display participation totals, remember followed topics and projects, provide recommendations and an optional weekly Reader Digest from interests you explicitly express, prevent manipulation, and enforce the Community Guidelines using rule-based and AI-assisted moderation;
  • understand content performance, traffic, technical issues, and site security;
  • prevent abuse, spam, unauthorized access, or unlawful activity;
  • comply with legal obligations, authority requests, or valid claims processes.

4. Consent Basis and Your Choices

When you provide information to us, continue using the site, enable certain cookies, install the PWA, or allow notifications, you consent to processing related to those functions. You may withdraw consent at any time, subject to reasonable legal or operational requirements.

You can disable cookies in browser settings, cancel notifications in browser or device settings, dismiss individual recommendations, turn off the weekly Reader Digest at any time, manage or delete your community account, or contact us for help. Community registration, the weekly Reader Digest, and newsletter consent are separate. Some features may not work fully if certain data is not provided.

5. Disclosure to Third Parties

We do not sell your personal data. We may share only necessary data with:

  • hosting, storage, security, analytics, AI moderation and synthesis, push notification, messaging, and other technical providers; published comment text may be sent to an AI provider for safety classification and Community Brief generation;
  • third-party platforms you choose to use, such as WhatsApp, web browsers, or sharing apps;
  • professional advisers or service providers that help our operations and compliance;
  • authorities, courts, or other parties when required by law or to protect rights and safety.

Outbound links to news sources, videos, or third-party platforms are subject to those parties' privacy policies.

6. Transfers Outside Malaysia

Some of our service providers may process or store data outside Malaysia. Where this occurs, we take reasonable steps to ensure data is protected according to security and confidentiality standards appropriate to the processing.

7. Data Security

We use reasonable administrative, technical, and organizational measures to protect data against unauthorized access, use, disclosure, alteration, loss, or destruction. However, no internet transmission or storage method can be guaranteed completely secure.

8. Data Retention

We retain personal data only as long as needed for the purposes described in this policy, to meet legal requirements, resolve disputes, enforce our rights, or maintain reasonable operational records. When data is no longer needed, we will delete, unlink, anonymize, or store it in a form that no longer identifies you where appropriate.

Private leads remain non-public throughout their lifecycle. Closing or matching a lead does not convert it into evidence or expose the original submission.

9. Data Accuracy

We aim to ensure personal data we use is accurate, complete, not misleading, and updated as needed for processing purposes. Please contact us if your information needs correction or updating.

10. Your Rights

Subject to the PDPA and applicable law, you may request to:

  • access personal data we hold about you;
  • correct data that is inaccurate, incomplete, or changed;
  • withdraw consent for certain processing;
  • limit or object to processing for direct marketing purposes;
  • obtain more information about how your data is processed.

We may need to verify your identity before processing a request. If a request cannot be fully fulfilled, we will explain why to the extent permitted by law.

11. Children

Waspada Digital is not specifically directed to children. If you believe a child has provided personal data without parent or guardian permission, please contact us so we can take reasonable action.

12. Policy Changes

We may update this policy from time to time to reflect changes in law, technology, site functionality, or our operations. The latest update date will be shown at the top of this page.

13. Contact Us

For access requests, corrections, consent withdrawal, privacy complaints, or questions about this policy, contact Waspada Digital by WhatsApp at +60 11-1302 1017.

Mailing address: 2nd Floor, Menara PJH, 2, Jalan Tun Abdul Razak, Presint 2, 62000 Putrajaya, Wilayah Persekutuan Putrajaya.