Privacy Policy

We use collected information for the following purposes:

• Service Delivery: To facilitate buying and selling of phone numbers, process transactions, and connect buyers with sellers
• Account Management: To create and maintain your account, verify identity, and manage listings
• Communication: To send transaction confirmations, account notifications, and respond to inquiries
• Security: To detect and prevent fraud, unauthorized access, and other malicious activities
• Improvement: To analyze usage patterns, improve our platform, and develop new features
• Marketing: To send promotional emails about new features or offers (you can opt-out anytime)
• Legal Compliance: To comply with Malaysian laws and respond to lawful requests from authorities

We do NOT sell your personal information. We share data only in these limited circumstances:

• With Other Users: When you complete a transaction, we share your contact information with the buyer/seller to facilitate the number transfer
• Service Providers: Trusted third parties who help us operate (e.g., Stripe for payments, Supabase for database, email services). They're contractually obligated to protect your data
• Legal Requirements: When required by Malaysian law, court order, or government regulation
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred (you'll be notified)
• With Your Consent: Any other sharing will only occur with your explicit permission

We implement industry-standard security measures to protect your information:

• Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS
• Password Protection: Passwords are hashed using bcrypt with salt before storage
• Access Control: Only authorized personnel can access user data, and access is logged
• Regular Audits: We conduct security audits and vulnerability assessments regularly
• PCI Compliance: Payment processing through Stripe meets PCI DSS Level 1 standards

However, no system is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Under Malaysia's Personal Data Protection Act (PDPA) 2010, you have the following rights:

• Access: Request a copy of all personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your account and associated data (subject to legal retention requirements)
• Withdrawal of Consent: Withdraw consent for marketing communications or data processing
• Data Portability: Request your data in a machine-readable format
• Objection: Object to certain types of data processing

To exercise these rights, contact us at privacy@numberexchange.my. We'll respond within 21 days as required by PDPA.

We use cookies and similar technologies to enhance your experience:

• Essential Cookies: Required for authentication, security, and basic functionality (cannot be disabled)
• Preference Cookies: Remember your settings and preferences
• Analytics Cookies: Help us understand how users interact with our platform (anonymized data)

You can control cookie settings through your browser, but disabling certain cookies may limit functionality.