This Privacy Policy applies to the D-AUTO mobile application (hereinafter referred to as the "App") operated by Perfect Tec Solution Sdn. Bhd. ("we", "us", "our"). This policy governs the collection, use, processing, storage, disclosure and protection of personal data of all sellers and users ("you", "user", "seller") who access and use our App services. By registering an account and using D-AUTO, you voluntarily acknowledge and agree to this Privacy Policy and consent to all personal data processing activities stated herein, in full compliance with the Malaysia PDPA 2010. If you do not accept these terms, you must discontinue the use of this App immediately.

In accordance with Section 2 of the Personal Data Protection Act 2010, personal data refers to any information that identifies or can be used to identify an individual user, including personal identifiers, contact details, business information, device data, transaction records and communication logs collected through our App.

We collect information you actively submit during account registration and platform usage, including full name, identity document details, business registration information, shop name and address, phone number, email address, store profile information, product and vehicle listing content, order and transaction records, and customer service inquiry records.

Our App automatically collects non-sensitive technical data during usage, including device model, operating system, unique device identifier, IP address, app login records, function usage logs and platform interaction data for service optimization.

With your explicit consent, we may access your device camera, gallery, notification and location permissions to support core seller functions such as product uploading, order alert delivery and local buyer matching. You may revoke these permissions at any time via your device settings.

We process your personal data only for legitimate and notified purposes in compliance with PDPA Section 7:

Basic store and contact information will be disclosed to corresponding buyers to complete transaction communication and delivery arrangements.

We may share minimal necessary data with trusted third-party service providers under strict confidentiality agreements, including cloud hosting providers, payment gateways, logistics service partners and analytics vendors, solely for platform operational support.

We may disclose personal data when required by Malaysian court orders, government regulatory investigations, law enforcement requirements, or to protect the legitimate rights and safety of the platform, users and the public.

In the event of company merger, acquisition or asset transfer, your stored personal data may be transferred as part of business assets, with prior official notification provided to users.

To ensure stable and secure platform operation, your personal data may be stored and processed on overseas encrypted cloud servers. All cross-border data transfers strictly comply with PDPA cross-border regulations. We implement end-to-end encryption and strict access control to ensure your data is protected under equivalent Malaysian data protection standards.

We adopt comprehensive industry-standard technical, physical and administrative security measures to protect your personal data, including HTTPS/TLS end-to-end encryption, irreversible password hash storage, role-based internal access control, full operation audit logs, regular security scanning and systematic data backup. While we ensure maximum data security, no internet data transmission system is completely risk-free. Please contact us immediately if you detect any unauthorized data access or leakage.

We retain personal data only for the shortest period required for service operation and legal compliance:

Our App uses local storage and anonymous tracking tools to optimize operational stability and user experience. Essential tracking data is mandatory for basic platform functions; non-essential analytics tracking can be disabled via your device settings. No sensitive personal data is collected through tracking technologies.

We only send platform service updates, official announcements and promotional notifications with your explicit consent. You may unsubscribe from marketing communications at any time via App settings or opt-out instructions in notification messages.

D-AUTO is a commercial business platform intended for users aged 18 and above. We do not intentionally collect personal data from minors. We will permanently delete minor-related personal data immediately upon discovery and formal notification.

We reserve the right to update this Privacy Policy to comply with legal amendments and business adjustments. Minor policy updates will be published on the App's policy page. Major revisions will be notified to users via in-app alerts or email 7 days prior to the effective date. Your continued use of the App after policy updates constitutes acceptance of the revised terms.

In compliance with Malaysia PDPA 2010, we have appointed a dedicated Data Protection Officer (DPO) to oversee personal data protection, user inquiries, complaints and data rights applications.

This Privacy Policy is governed by the laws of Malaysia, including the Personal Data Protection Act 2010 (Act 709). All disputes arising from personal data processing shall be subject to the exclusive jurisdiction of Malaysian courts.

The D-AUTO Seller App, operated by Perfect Tec Solution Sdn. Bhd., may collect, process and store personal, business, device and usage information necessary to provide and maintain our seller marketplace services.

Depending on the features you use, such information may include:

D-AUTO does not access device permissions without an applicable App function or user authorization where authorization is required.

We collect and use user data only as reasonably necessary for legitimate D-AUTO Seller App functions, including to:

We do not sell or rent users’ personal data for unauthorized commercial purposes.

We may share only the data reasonably necessary to provide D-AUTO services with:

Third-party providers receiving personal data on our behalf are expected to process such information only for authorized purposes and subject to appropriate confidentiality and data-protection requirements.

D-AUTO implements reasonable technical, administrative and organizational measures designed to protect personal and sensitive user data against unauthorized access, disclosure, alteration, loss or misuse.

Depending on the applicable system and service, these measures may include encrypted network transmission, password protection, access controls, security logging, server security controls, system monitoring and data backup procedures.

No internet-based service or electronic storage method can guarantee absolute security. Users should protect their account credentials and notify us promptly if they suspect unauthorized access to their D-AUTO account.

We retain personal data only for as long as reasonably necessary to provide D-AUTO services, fulfill the purposes described in this Privacy Policy, comply with applicable legal and regulatory requirements, resolve disputes, prevent fraud and enforce our agreements.

For active seller accounts, information necessary to provide the service may be retained while the account remains active.

When a seller requests account deletion, personal data associated with the account will be deleted or anonymized unless certain information must be retained for legitimate purposes such as:

Where information must be retained after account deletion, it will be retained only for the applicable purpose and retention period and will no longer be used for ordinary account operation or marketing purposes.

D-AUTO Seller App users may request deletion of their seller account and associated personal data.

Users can initiate account deletion through the D-AUTO Seller App using the account deletion option available under:

Account / Profile → Settings → Delete Account

or another clearly identified account deletion function made available within the App.

Users may also request account deletion without having the App installed by using our designated D-AUTO account deletion webpage:

[INSERT YOUR PUBLIC ACCOUNT DELETION WEBPAGE URL]

Alternatively, where provided on that webpage, users may submit an account deletion request to:

For account security, we may require reasonable verification to confirm that the person requesting deletion is the legitimate account holder.

Upon successful verification and processing of a deletion request:

Account deletion is permanent. A user who wishes to use D-AUTO again after account deletion may be required to register a new account.

Where permitted by applicable law and technically applicable, users may also request deletion of specific personal data without deleting their entire D-AUTO account.

Requests may be submitted through the privacy or account controls available in the App, through our designated web resource, or by contacting:

We may retain information that cannot lawfully or reasonably be deleted because it is required for transaction records, security, fraud prevention, dispute handling or other legitimate legal purposes.

The D-AUTO Seller App may request Android device permissions only where relevant to App functionality.

For example:

Camera / Photos: Used when a seller takes or uploads photographs of vehicles, products, shop information or other listing content.

Notifications: Used to provide relevant order, transaction, account, security and platform notifications.

Location: Used only where location-based D-AUTO features require it and where the user has granted the applicable permission.

Users may manage or revoke applicable device permissions through Android device settings. Revoking a permission may prevent certain App features that depend on that permission from operating properly.

The D-AUTO Seller App is intended for commercial users and persons aged 18 years and above.

We do not knowingly collect personal data from children or minors for the purpose of creating D-AUTO Seller accounts. If we become aware that personal data relating to a minor has been collected contrary to this policy, we will take reasonable steps to remove such data.

For questions, complaints, access requests, correction requests, withdrawal of consent, account deletion requests or other matters relating to personal data, users may contact: