Privacy Notice

Last updated: 12 October 2026. Versi Bahasa Melayu di bawah.

This notice is given under Malaysia's Personal Data Protection Act 2010 (PDPA). It explains what personal data is collected on JomSponsor, why, who sees it, how long it is kept and how to ask for it to be corrected or removed.

Who is responsible

The organiser of each page (the school, alumni group, mosque, club or family that runs it) decides what the page collects and publishes, and is responsible for the sponsor and donor data on their page. JomSponsor provides the platform that stores this data for them, and is responsible for organisers' account data.

What is collected

Sponsors and donors: name, email address, phone number (optional), the amount and type of your payment, the payment reference, any receipt you upload, and anything you choose to add — business name, logo, photos, video links, social links, a tagline or an offer, and a message to the organiser. Card and online-banking details are entered on the payment gateway's page (toyyibPay), never on ours, and we never see them.

Organisers and committee members: email address, name and profile picture if you sign in with Google, and records of the fees you have paid.

Visitors: no account is needed to view a page. We keep your language choice in your browser. Page visits are counted with Cloudflare Web Analytics, which uses no cookies and doesn't identify you.

Why it is used

To record your payment or pledge and match later payments to it (by your email).
To send your payment confirmation, receipt and thank-you card by email.
To show your name, logo and support on the page when you choose to be listed. Donations can be anonymous.
To let the committee contact you about your pledge or payment.
To prevent fraud and abuse, and to comply with the law.

We don't use your data for advertising and we never sell it.

What is public and what is private

Public (on the page, if you are listed): your name or business name, logo, tagline, photos, video and social links, and the amount if the organiser shows amounts. Private (only the page's committee sees it): your email, phone number, uploaded receipt, payment references and your message to the organiser. Receipts are kept in private storage that is never published.

Who it is shared with

The committee of the page you supported, and the service providers that run JomSponsor: Cloudflare (website hosting), Supabase (database and file storage), Resend (email delivery), toyyibPay (payments) and Google (sign-in, only if you choose it). Some of these providers store data on servers outside Malaysia, with safeguards in line with the PDPA. We will disclose data to the authorities only when the law requires it.

Is it compulsory?

A name and an amount are needed to record a sponsorship. An email is needed to sponsor or pledge, so your payments can be matched to you. For a donation, email is optional; without it you won't get a receipt or a thank-you card. If you don't give the information needed, the payment can't be recorded on the page.

How long it is kept

Page, sponsor and payment records: while the page exists, and for up to 12 months after the page expires, so the organiser can download their records. Then they are deleted.
Files uploaded with a payment that was rejected or never completed: deleted after 30 days.
An organiser can remove a sponsor or delete their whole page at any time.

How it is protected

All connections are encrypted (HTTPS). Database rules let each committee see only their own page's private data. Receipts are kept in private storage, and payment-gateway secret keys never reach the browser.

Your rights

You may ask to see or correct your personal data, ask for it to be removed from a page, or withdraw your consent. Please contact the page's organiser first (their contact is on the page), or email us at . We will reply within 21 days.

Changes

If this notice changes, the new version will be posted here with a new date.

Notis Privasi

Dikemas kini: 12 Oktober 2026. Notis ini diberikan di bawah Akta Perlindungan Data Peribadi 2010 (PDPA). Ia menerangkan data peribadi yang dikumpul di JomSponsor, tujuannya, siapa yang melihatnya, tempoh ia disimpan dan cara meminta ia dibetulkan atau dibuang.

Siapa yang bertanggungjawab

Penganjur setiap halaman (sekolah, kumpulan alumni, masjid, kelab atau keluarga yang menguruskannya) menentukan apa yang dikumpul dan dipaparkan, dan bertanggungjawab ke atas data penaja dan penderma di halaman mereka. JomSponsor menyediakan platform yang menyimpan data ini bagi pihak mereka, dan bertanggungjawab ke atas data akaun penganjur.

Apa yang dikumpul

Penaja dan penderma: nama, alamat e-mel, nombor telefon (pilihan), jumlah dan jenis bayaran, rujukan bayaran, resit yang dimuat naik, dan apa sahaja yang anda pilih untuk tambah — nama perniagaan, logo, gambar, pautan video dan media sosial, slogan atau tawaran, serta mesej kepada penganjur. Butiran kad dan perbankan dalam talian dimasukkan di halaman gerbang pembayaran (toyyibPay), bukan di halaman kami, dan kami tidak pernah melihatnya.

Penganjur dan ahli jawatankuasa: alamat e-mel, nama dan gambar profil jika log masuk dengan Google, dan rekod yuran yang telah dibayar.

Pelawat: tiada akaun diperlukan untuk melihat halaman. Pilihan bahasa anda disimpan dalam pelayar anda. Lawatan halaman dikira dengan Cloudflare Web Analytics yang tidak menggunakan kuki dan tidak mengenal pasti anda.

Tujuan penggunaan

Merekod bayaran atau ikrar anda dan memadankan bayaran seterusnya (melalui e-mel anda).
Menghantar pengesahan bayaran, resit dan kad terima kasih melalui e-mel.
Memaparkan nama, logo dan sokongan anda di halaman jika anda memilih untuk disenaraikan. Derma boleh dibuat tanpa nama.
Membolehkan jawatankuasa menghubungi anda tentang ikrar atau bayaran anda.
Mencegah penipuan dan salah guna, serta mematuhi undang-undang.

Data anda tidak digunakan untuk pengiklanan dan tidak sesekali dijual.

Apa yang umum dan apa yang peribadi

Umum (di halaman, jika anda disenaraikan): nama atau nama perniagaan, logo, slogan, gambar, pautan video dan media sosial, dan jumlah jika penganjur memaparkannya. Peribadi (hanya jawatankuasa halaman melihatnya): e-mel, nombor telefon, resit yang dimuat naik, rujukan bayaran dan mesej anda kepada penganjur. Resit disimpan dalam storan peribadi yang tidak pernah dipaparkan.

Dengan siapa ia dikongsi

Jawatankuasa halaman yang anda sokong, dan penyedia perkhidmatan yang menjalankan JomSponsor: Cloudflare (hos laman web), Supabase (pangkalan data dan storan fail), Resend (penghantaran e-mel), toyyibPay (pembayaran) dan Google (log masuk, jika anda memilihnya). Sesetengah penyedia ini menyimpan data di pelayan di luar Malaysia, dengan perlindungan selaras dengan PDPA. Data hanya didedahkan kepada pihak berkuasa jika dikehendaki oleh undang-undang.

Adakah ia wajib?

Nama dan jumlah diperlukan untuk merekod tajaan. E-mel diperlukan untuk menaja atau berikrar supaya bayaran anda dapat dipadankan. Untuk derma, e-mel adalah pilihan; tanpanya anda tidak akan menerima resit atau kad terima kasih. Jika maklumat yang diperlukan tidak diberikan, bayaran tidak dapat direkod di halaman.

Tempoh simpanan

Rekod halaman, penaja dan bayaran: selagi halaman wujud, dan sehingga 12 bulan selepas halaman tamat tempoh supaya penganjur boleh memuat turun rekod mereka. Selepas itu ia dipadam.
Fail yang dimuat naik bersama bayaran yang ditolak atau tidak selesai: dipadam selepas 30 hari.
Penganjur boleh membuang penaja atau memadam keseluruhan halaman pada bila-bila masa.

Cara ia dilindungi

Semua sambungan disulitkan (HTTPS). Peraturan pangkalan data membenarkan setiap jawatankuasa melihat data peribadi halaman mereka sahaja. Resit disimpan dalam storan peribadi, dan kunci rahsia gerbang pembayaran tidak pernah sampai ke pelayar.

Hak anda

Anda boleh meminta untuk melihat atau membetulkan data peribadi anda, memintanya dibuang dari halaman, atau menarik balik persetujuan anda. Sila hubungi penganjur halaman dahulu (maklumat mereka ada di halaman), atau e-mel kami di . Kami akan membalas dalam tempoh 21 hari.

Perubahan

Jika notis ini berubah, versi baharu akan disiarkan di sini dengan tarikh baharu.