90s Card Privacy Notice
Effective Date: February 2, 2025
This Privacy Notice describes the practices of 90S CARD SDN. BHD. (Company No. 202501056119 (1657525-X)) (“90s Card,” “we,” “us,” or “our”) regarding the personal information we collect through our website, mobile applications, and any other interactions where we display or link to this Privacy Notice (collectively, the “Services”). By accessing or using the Services, you consent to the practices described in this Privacy Notice.
I. Information We Collect
We collect personal information that varies depending on how you interact with us. Below we describe the types of information we may collect and the sources from which we collect them.
Information You Provide
Account Information: When you create an account, we collect your name, email address, username, password, date of birth, mailing address, and phone number.
Payment and Financial Information: When you purchase virtual packs or request physical card shipments, we collect payment information including credit/debit card details, billing address, and transaction history. Payment processing is handled by third-party payment processors.
Shipping Information: If you request physical delivery of cards, we collect your shipping address and any delivery preferences.
Collection and Inventory Information: We collect information about your digital card collection, including cards revealed from pack openings, cards stored in your digital vault, cards sold back to the platform, and cards shipped to you.
Communications: We collect information contained in your communications with us, including customer support inquiries, feedback, and any other messages you send.
Preferences: We collect your preferences regarding notifications, marketing communications, and platform settings.
Information Collected Automatically
Device and Browser Information: We automatically collect information about your device, including IP address, device type, operating system, browser type, and unique device identifiers.
Usage Information: We collect information about how you interact with our Services, including pages visited, features used, pack opening history, time spent on the platform, click patterns, and search queries.
Transaction Records: We maintain records of all pack purchases, card reveals, buyback transactions, and shipping requests.
Cookies and Similar Technologies: Our Services use cookies, pixels, and similar technologies to collect information about your browsing activity. See our Cookie Statement in Section IV for more details.
Information from Third Parties
Identity Verification Services: We may obtain information from third-party verification services to confirm your identity, age, and prevent fraud.
Payment Processors: Our payment processors may provide us with transaction confirmation and fraud prevention data.
Shipping Partners: Our shipping and logistics partners may provide delivery status and confirmation information.
II. How We Use Information
We process personal information for the following purposes:
Provide and Operate Our Services: To facilitate account creation, process pack purchases, conduct digital pack openings, manage your digital card inventory, process buyback requests, arrange physical card shipments, and provide all platform features and functionality.
Process Transactions: To process payments, verify transactions, maintain transaction records, and provide receipts and confirmations.
Communicate With You: To send transaction confirmations, shipping updates, account notifications, respond to inquiries, and provide customer support. You can opt out of marketing communications at any time.
Verify Identity and Prevent Fraud: To verify your identity, confirm you meet age requirements, detect and prevent fraudulent activity, and protect the security of our platform and users.
Improve and Develop Our Services: To analyse usage patterns, conduct research, improve platform features, develop new products and services, and enhance user experience.
Personalisation: To personalise your experience, including showing you relevant content, pack recommendations, and features based on your preferences and activity.
Marketing: To send promotional communications about new packs, features, and offers, subject to your preferences and applicable law. You can opt out at any time.
Safety and Security: To protect the health, safety, and rights of our users; maintain platform integrity; detect and prevent errors; and address potentially harmful or illegal activity.
Legal Compliance: To comply with legal obligations, respond to legal process, enforce our terms and policies, and establish, exercise, or defend legal claims.
As Otherwise Permitted: For any other purpose disclosed to you at the time of collection or to which you consent.
III. How We Share Information
We may share information with third parties for the purposes described in Section II or as otherwise disclosed to you. This includes sharing with:
Shipping and Fulfillment Partners: When you request physical card delivery, we share your shipping information with our fulfilment centres and shipping carriers.
Payment Processors: We share payment and transaction information with our payment processors to facilitate purchases and prevent fraud.
Analytics Providers: We share usage data with analytics providers to help us understand platform usage and improve our Services.
Advertising Partners: We may share information with advertising networks to deliver relevant advertisements. See Section IV for opt-out options.
Legal and Compliance: We may disclose information to comply with legal obligations, respond to lawful requests from government authorities, enforce our policies, protect our rights or the rights of others, and in connection with legal proceedings.
Business Transfers: We may share or transfer information in connection with a merger, acquisition, reorganisation, sale of assets, or bankruptcy.
With Your Consent: We may share information with other parties when you direct us to do so or provide consent.
We do not sell your personal information for monetary consideration.
IV. Cookies and Similar Technologies
Our Services use cookies and similar technologies to enhance your experience and collect information about your usage.
Essential Cookies: Necessary for the Services to function, including authentication, security, and basic functionality. These cannot be disabled.
Functional Cookies: Enable personalised features and remember your preferences. Disabling these may affect certain functionality.
Analytics Cookies: Help us understand how users interact with our Services, measure performance, and identify areas for improvement.
Advertising Cookies: Used to deliver relevant advertisements and measure advertising effectiveness.
Managing Cookie Preferences: You can manage your cookie preferences through the “Cookie Preferences” or “Your Privacy Choices” link in the footer of our website. You can also configure your browser to reject cookies, though this may impact functionality.
V. Your Privacy Rights and Choices
Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data:
Right of Access: You have the right to request access to your personal data that we hold and to be informed about how it is being processed.
Right of Correction: You have the right to request correction of any personal data that is inaccurate, incomplete, misleading, or not up-to-date.
Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal.
Right to Prevent Processing for Direct Marketing: You have the right to request us to cease processing your personal data for direct marketing purposes.
Right to Limit Processing: You have the right to request that we limit the processing of your personal data in certain circumstances.
Email Preferences: You can opt out of marketing emails by clicking “Unsubscribe” in any marketing email or by contacting us. We will still send transactional communications about your account and orders.
Push Notifications: You can disable push notifications through your device settings or account preferences.
Cookie Preferences: Use the “Cookie Preferences” link in our website footer to manage cookie settings.
Account Information: You can review and update your account information by logging into your account settings.
Delete Your Data: You have the right to request deletion of your account and associated personal data. Learn how to delete your data on our Data Deletion page.
To exercise any of these rights, please contact us at 90scard@proton.me.
VI. SMS Terms and Conditions
By providing your mobile phone number and opting in, you consent to receive SMS messages from 90s Card for account notifications, shipping updates, and promotional messages. Message frequency varies. Standard message and data rates may apply.
To opt out, reply “STOP” to any message. For help, reply “HELP” or contact us at 90scard@proton.me.
Your mobile number will not be shared with third parties for their marketing purposes. Opt-in data and consent will not be shared with third parties.
VII. Data Security
We implement industry-standard security measures to protect your personal information, including encryption, secure data transmission, access controls, and regular security assessments. We limit access to personal information to employees and contractors who need it to perform their job functions.
Despite our efforts, no security measures are completely impenetrable. We cannot guarantee the absolute security of your information.
VIII. Data Retention
We retain personal information for as long as necessary to provide our Services, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary based on the type of information and purpose for collection.
Transaction records and card ownership history may be retained for extended periods to maintain accurate records and comply with legal requirements.
When personal data is no longer required, we will take reasonable steps to destroy or permanently de-identify the data.
IX. Children's Privacy
Our Services are intended solely for users 18 years of age or older. We do not knowingly collect personal information from children under 18. If we learn that we have collected information from a child under 18, we will promptly delete it. If you believe a child has provided us with personal information, please contact us.
X. Cross-Border Data Transfers
Your personal data may be transferred to, stored, and processed in countries outside of Malaysia. When we transfer your data internationally, we take appropriate measures to ensure that your personal data remains protected in accordance with this Privacy Notice and applicable data protection laws, including the Personal Data Protection Act 2010.
XI. Notice of Monitoring
We and our service providers may monitor activity on our Services and retain records of your interactions, including actions taken, items viewed, transactions completed, and communications sent. By using our Services, you consent to this monitoring.
XII. Links to Other Sites
Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.
XIII. Changes to This Privacy Notice
We may update this Privacy Notice from time to time. We will post any changes on this page and update the Effective Date. Your continued use of our Services after changes are posted constitutes acceptance of the updated Privacy Notice. We encourage you to review this Notice periodically.
XIV. Contact Us
If you have questions about this Privacy Notice or our privacy practices, or if you wish to exercise any of your rights under the Personal Data Protection Act 2010, please contact us:
Email: 90scard@proton.me
Company:
90S CARD SDN. BHD.
Company No. 202501056119 (1657525-X)