Privacy Policy Statement

1. Introduction

Mobiweb Sdn Bhd (Company No. 760405-K) ("we", "our", "us") is committed to protecting the personal data we collect from you. This Privacy Policy serves as our External Privacy Notice to individuals (data subjects) and outlines how we collect, use, disclose, and protect your personal information in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. This policy applies to all products, platforms, websites, and services operated by Bulk SMS Philippines · Powered by iSMS Malaysia · MobiWeb Sdn Bhd, including but not limited to iSMS, VocoText, and any other current or future services under the MobiWeb brand.

By using any MobiWeb product or service, registering an account, or submitting your information through any of our platforms, you consent to the collection and use of your personal data as described in this policy.

2. About Mobiweb Sdn Bhd

Since our establishment in 2007, Mobiweb has evolved to provide a one-stop, total business solution including telecommunications services (VoIP, bulk SMS, WhatsApp Business API, IDD cards) and business management solutions (CRM, POS, membership systems, bulk email). iSMS is our flagship SMS and messaging platform, offering international SMS service covering more than 700 mobile operators worldwide.

3. Data We Collect

iSMS collects only personal information that is necessary to provide our services. We collect your information when you:

• Register an account on any of our websites or domain names
• Request a proposal for products and/or services
• Place an order for products and/or services
• Fill out a support request or technical support query
• Provide feedback in an online survey
• Participate in promotional offers
• Subscribe to our newsletter or mailing service
• Upload contact lists or mobile numbers for SMS or WhatsApp messaging

In each instance, we may collect your full name, company name, address, contact number, email address, occupation, payment and transactional information, and other details necessary to process your request.

4. Cookies and Analytics

Our websites use cookies and similar tracking technologies to improve your browsing experience and analyse site usage. This includes:

• Essential cookies — required for login sessions, security tokens (CSRF), and basic site functionality
• Analytics cookies — we use third-party analytics tools (such as Google Analytics) to understand how visitors use our website. These tools may collect anonymised data about pages visited, time spent, and browser type. Google's privacy policy governs how this data is processed
• Preference cookies — to remember your settings and preferences

You may disable cookies through your browser settings, but doing so may affect the functionality of our services. By continuing to use our website, you consent to the use of cookies as described above.

5. How We Use Your Information

iSMS uses your personal information only for the following specific purposes:

• To process your purchase or provide requested services
• To fulfil requests for products and services
• To improve our products and services via feedback and usage analysis
• To send service-related notices, account updates, and security alerts
• To send newsletters, product updates, and relevant offers — only where you have provided consent
• To comply with legal and regulatory obligations
• To detect, investigate, and prevent fraudulent or illegal activity

Your personal information is kept confidential and collected for legitimate purposes only as described by applicable Malaysian law.

6. Disclosure of Information

We only share your personal information with our affiliates, agents, or contractors who perform services for iSMS — and only in connection with the functions they perform for us. All such parties are contractually bound to handle your data in accordance with this policy and applicable law.

iSMS will never sell or disclose your personal information to outside organisations for their marketing purposes.

We may disclose your personal information only in the following circumstances:

• Where required or authorised by applicable Malaysian law
• Where ordered to do so by a court or governmental authority
• Where necessary to protect the rights, property, or safety of MobiWeb, our users, or the public
• Where you have provided explicit consent

7. International Data Transfers

Your personal data may be transferred to and processed in countries other than Malaysia in connection with the provision of our services (for example, cloud infrastructure or payment processing). Where such transfers occur, we ensure that appropriate safeguards are in place, including contractual data protection clauses consistent with Malaysian law and, where applicable, the standards of the receiving country.

8. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or regulatory requirements:

• Account data — retained for the duration of your account and for up to 3 years after account closure
• Payment and transaction records — retained for a minimum of 7 years as required under Malaysian tax and accounting law
• Support communications — retained for up to 2 years
• Uploaded contact lists — deleted from our servers upon your request or within 90 days of account termination

Once data is no longer required, we will securely delete or anonymise it.

9. Your Rights as a Data Subject

Under the PDPA 2010, you have the following rights regarding your personal data held by MobiWeb:

• Right of access — request a copy of the personal data we hold about you (within 30 days)
• Right of correction — request correction of inaccurate, incomplete, or outdated data
• Right to withdraw consent — withdraw consent for marketing communications at any time
• Right to limit processing — request that we restrict the use of your data in certain circumstances

To exercise any of these rights, please submit a written request to sales@mobiweb.com.my. We will respond within 30 days.

10. Data Breach Notification

In the event of a personal data breach that is likely to result in significant harm to affected individuals, MobiWeb will take the following steps:

• Contain and investigate the breach as soon as it is identified
• Notify affected data subjects within a reasonable timeframe where required by law
• Report to relevant authorities as required under applicable Malaysian law
• Document the breach, its effects, and the remedial actions taken

If you suspect any unauthorised access to your account or personal data, please contact us immediately at sales@mobiweb.com.my.

11. Minors

iSMS services are intended for use by businesses and individuals who are 18 years of age or older. We do not knowingly collect personal data from persons under the age of 18. If we become aware that we have inadvertently collected personal data from a minor without appropriate consent, we will take steps to delete such data promptly.

12. Third-Party Websites

Our website may contain links to third-party websites. This Privacy Policy applies only to MobiWeb's websites and services. We are not responsible for the privacy practices or content of any third-party sites. We encourage you to review the privacy policies of any external sites you visit.

13. Online Security

MobiWeb employs reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse, including:

• HTTPS encryption for all data transmitted to and from our websites
• Password protection and session management for all user accounts
• SQL injection and cross-site scripting (XSS) protections in all web applications
• Access controls limiting staff access to personal data on a need-to-know basis
• Logging and review of all access and changes to personal data

14. Marketing Opt-Out

If you no longer wish to receive marketing communications from iSMS, you may opt out at any time by:

• Clicking the "unsubscribe" link in any marketing email we send you
• Sending a written request to sales@mobiweb.com.my

Please note that opting out of marketing communications does not affect service-related communications such as account notices, payment confirmations, or security alerts.

15. Changes to This Policy

MobiWeb reserves the right to update this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other factors. The "Last Updated" date at the top of this page will be revised accordingly. We encourage you to review this policy periodically. Your continued use of our services after any changes constitutes acceptance of the updated policy.