Effective Date: 20 May 2026 Last Updated: 15 May 2026 Please take a moment to read this Privacy Policy before using the I-FIKR Portal (“Portal”) or submitting any Personal Data through the Portal. By using this Portal, your Personal Data may be collected, processed, stored, and disclosed by us in accordance with this Privacy Policy. This Privacy Policy describes the information collection, usage, disclosure, and protection practices applicable to the Portal. By accessing or using the Portal, you consent to the collection and use of your information as described in this Privacy Policy, as may be amended from time to time. We reserve the right to modify, update, and/or amend this Privacy Policy from time to time by providing reasonable prior notice to you. Any amendments will be communicated through announcements on the Portal or via other appropriate means. The revised Privacy Policy shall apply to all information previously collected and all information subsequently collected by us. You are encouraged to review this Privacy Policy periodically for any updates or changes. By continuing to communicate with us, use our services, purchase our products, and/or continue to access the Portal after being notified of any amendments, you are deemed to have accepted such amendments. We will process your Personal Data in accordance with the Personal Data Protection Act 2010 (“PDPA”), including all applicable regulations, guidelines, statutory amendments, and this Privacy Policy. For the purpose of this Privacy Policy, “Personal Data” refers to any information that relates directly or indirectly to an identifiable individual. We process Personal Data based on your consent, contractual necessity, compliance with legal obligations, and other lawful bases permitted under applicable laws. If you are acting on behalf of a corporate entity, references to “you” and “your” shall include your employees, representatives, and agents. The PDPA requires us to inform you of your rights regarding your Personal Data that is being processed or that may be collected and further processed by us, including the purposes of such processing. The PDPA also requires us to obtain your consent to the processing of your Personal Data. In compliance with the PDPA, we are committed to protecting and safeguarding your Personal Data. By providing your Personal Data to us and/or continuing to access the Portal, you confirm that you have read, understood, and agreed to the processing of your Personal Data in accordance with this Privacy Policy. 1. INFORMATION COLLECTED ONLINE AND ITS USAGE 1.1 Collection of Personal Data When you register an account with us or subscribe to our portal, we may collect and process your Personal Data such as: 1. your name, username, address, email address, contact details, and Internet Protocol (IP) address; and 2. payment-related information such as billing address and transaction details. Payment card information may be processed securely by authorised third-party payment service providers. The Personal Data requested by us (unless stated otherwise) is mandatory. If you fail to provide the required information, you may not be able to register an account, access the Portal, purchase our products or services, or receive updates from us. Additional information that personally identifies you may also be collected through comments, enquiries, feedback, suggestions, or other communications submitted through the Portal. If you choose to register through or grant access to a third-party social networking or integrated service (“Integrated Service”), such as Google, Apple, Microsoft or similar single sign-on services, the Portal may collect Personal Data already associated with your Integrated Service account. If you choose to provide such information during registration or otherwise, the Portal will treat such information as Personal Data and use it in accordance with this Privacy Policy. We are not responsible for the privacy or security practices of such Integrated Services, and you are encouraged to review their respective privacy policies before using such services. 1.2 Purpose of Acquiring and Processing Your Personal Data Any Personal Data that you provide to us may be used for the following purposes: 1. to communicate with you; 2. to assess, process, and provide products, services, and/or facilities to you; 3. to provide, maintain, protect, and improve the Portal and develop new services; 4. to provide you with information, updates, promotions, and marketing materials relating to our products and services, and those of our related companies, where permitted by applicable law and unless you have opted out of receiving such communications; 5. to provide academic and educational services to you; 6. to provide you with regular communications relating to the Portal; 7. to manage your account and provide customer support; 8. to develop and display content tailored to your interests on the Portal; 9. to improve user experience, search functionality, content recommendations, and digital services available through the Portal; 10. to enforce any applicable Terms and Conditions; 11. for research, statistical, and historical purposes; 12. for the operation, administration, and maintenance of the Portal, including audit purposes; 13. to respond to your enquiries, complaints, or disputes; 14. to administer and process payments related to products, services, and/or facilities requested by you; 15. to facilitate your participation in events including meetings, seminars, conferences, contests, promotions, or campaigns; 16. to conduct due diligence, screening, or background checks as required by law or internal risk management procedures; 17. to monitor, review, and improve our events, promotions, products, and services; 18. to process and analyse your Personal Data individually or collectively with other individuals; 19. to share your Personal Data where necessary for obtaining legal or financial advice or commencing legal proceedings; 20. to share your Personal Data with third parties involved in preparing legal documents or contracts; and 21. to investigate complaints, suspicious transactions, fraud, security incidents, or conduct service improvement research. We may disclose your Personal Data to authorised third parties such as: 1. service providers engaged to assist with our business operations including payment processing, fraud investigations, analytics, customer support, and system administration; 2. third-party service providers, including those located outside Malaysia, who provide data hosting, storage, analytics, payment processing, or other support services; 3. credit reference agencies or debt collection agencies where applicable; and 4. any person under a duty of confidentiality who has undertaken to keep such data confidential. We reserve the right to disclose your Personal Data if required by law or if we reasonably believe that such disclosure is necessary to: * comply with legal obligations or legal processes; * protect our rights, property, or safety; * protect the rights, property, or safety of our employees, customers, or the public; or * investigate fraud, security issues, or suspected unlawful activities. Where permitted by law, we will notify you of such disclosure. In the event of a merger, acquisition, restructuring, or sale of assets, your Personal Data may be transferred to the relevant third party as part of the transaction. Your access to certain services and content may be password protected. You are responsible for maintaining the confidentiality of your username and password and should not disclose them to others. Unfortunately, no method of transmission over the Internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee absolute security. 1.3 E-Mail Addresses We collect e-mail addresses as part of providing our services. We may send you e-mails from time to time relating to customer service, account administration, Portal updates, or marketing communications where permitted by applicable law. We do not sell your e-mail address to third parties. Your e-mail address may only be disclosed to authorised service providers or partners where necessary for the purposes stated in this Privacy Policy. 1.4 Aggregate Information We may collect aggregate information about users and their use of the Portal, whether or not users have an account. This may include clickstream information such as IP addresses, referring URLs, search terms, page views, operating systems, browser types, and usage statistics. Such aggregate information generally does not personally identify you unless combined with other information. We may use aggregate information for internal analysis, service improvement, research, reporting, and marketing purposes. 1.5 Cookies We may use cookies and similar technologies on the Portal. Cookies are small text files stored on your device to help improve your experience on the Portal. Cookies may be used to: * remember your login information; * customise content and user preferences; * analyse Portal traffic and usage patterns; * improve Portal functionality and performance; and * support security and fraud prevention measures. The information collected through cookies may include your IP address, browser type, device information, date and time of access, and browsing activities on the Portal. Such information collected through cookies generally does not directly identify you personally unless combined with other information. We may also use analytics and tracking technologies, including third-party analytics providers, to analyse Portal traffic, user behaviour, and improve user experience. By continuing to use the Portal, you consent to our use of cookies in accordance with this Privacy Policy. Where applicable, users may manage cookie preferences through browser settings or cookie consent tools made available on the Portal. However, disabling cookies may affect certain functionalities of the Portal. Third-party advertising or analytics providers may also place cookies on your device subject to their own privacy policies. a) YouTube and Vimeo The Portal may use YouTube and Vimeo to display video content. These services may incorporate tracking technologies that collect information when you interact with embedded video content, including device identifiers and cookie information. Such information is collected directly by YouTube, Vimeo, or their partners. We do not control such collection activities and do not provide your Personal Data such as usernames or email addresses to these providers. 2. EXTERNAL LINKS The Portal may contain links to third-party websites or services that are not operated or controlled by us. The inclusion of any external links does not imply endorsement or approval by us of the linked websites, their operators, or their content. We are not responsible for the privacy practices, content, security, or policies of third-party websites. You are encouraged to review the applicable privacy policies before providing any Personal Data to such websites. 3. PERSONAL DATA OF THIRD PARTIES If you provide us with Personal Data relating to another individual, including your employees, directors, shareholders, officers, representatives, or family members, you represent and warrant that you have obtained the necessary consent from such individuals for the disclosure and processing of their Personal Data in accordance with this Privacy Policy. 4. UPDATING AND ACCESS TO YOUR INFORMATION You may update your account information through the Portal at any time. You are responsible for ensuring that your Personal Data is accurate, complete, and up to date. We reserve the right to reject requests that are impractical, made in bad faith, or that may compromise the privacy or security of other individuals. We may retain transaction records and historical information where required for legal, regulatory, audit, or operational purposes. 5. ACCURACY OF YOUR PERSONAL DATA You represent and warrant that all Personal Data provided to us is accurate, complete, current, and not misleading. You agree to promptly notify us of any changes to your Personal Data. 6. YOUR RIGHTS Subject to applicable laws, you have the right to: 6.1 Access Request access to your Personal Data and obtain a copy of the Personal Data held by us. We may charge a reasonable administrative fee as permitted under the PDPA. 6.2 Correction Request correction of any inaccurate, incomplete, or outdated Personal Data. 6.3 Objection Object to the processing of your Personal Data for direct marketing or where processing is based on legitimate interests. 6.4 Erasure Request deletion of your Personal Data where there is no lawful basis for continued processing. 6.5 Data Portability Request transfer of your Personal Data in a structured, commonly used, machine-readable format where applicable. 6.6 Withdrawal of Consent Withdraw your consent to the processing of your Personal Data at any time subject to legal or contractual restrictions. Withdrawal of consent may affect our ability to continue providing services to you. 7. RETENTION OF YOUR PERSONAL DATA We will retain your Personal Data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy and to comply with applicable legal, regulatory, tax, accounting, or operational requirements. When your Personal Data is no longer required, we will take reasonable steps to destroy, delete, or anonymise such Personal Data in accordance with our internal retention policies and applicable laws. 8. SECURITY OF YOUR PERSONAL DATA 8.1 We are committed to ensuring that your Personal Data is stored securely. We implement reasonable administrative, technical, physical, and procedural safeguards to protect your Personal Data against unauthorised access, disclosure, alteration, misuse, destruction, or loss. 8.2 We may implement fraud detection, cybersecurity monitoring, access control measures, and automated security systems to protect the Portal and users against unauthorised access, cyber threats, fraud, misuse, or suspicious activities. 8.3 Access to Personal Data is restricted to authorised personnel who require access for legitimate business purposes and who are subject to confidentiality obligations. 8.4 We will review and update our security measures from time to time and ensure that authorised third parties processing your Personal Data are subject to appropriate confidentiality and security obligations. 8.5 While we take reasonable precautions to protect your Personal Data, the Internet is not a completely secure environment and we cannot guarantee absolute security of information transmitted through the Portal. 8.6 Communications over the Internet, including emails, may pass through multiple jurisdictions and may not always be secure unless encrypted. 8.7 We are not responsible for unauthorised access, interception, or loss of Personal Data that is beyond our reasonable control. 8.8 In the event of a data breach affecting your Personal Data, we will take reasonable steps to contain, investigate, assess, and mitigate the impact of the breach and notify affected individuals and relevant authorities where required under applicable laws and regulations. 9. PERSONAL DATA FROM MINORS AND OTHER INDIVIDUALS 9.1 If you provide Personal Data relating to your family members, dependents, or other individuals, you confirm that you have obtained their consent for the processing of such Personal Data in accordance with this Privacy Policy. 9.2 For minors or individuals not legally capable of giving consent, you confirm that you are authorised to act on their behalf and provide consent for the processing of their Personal Data. 10. TRANSFER OF YOUR PERSONAL DATA OUTSIDE MALAYSIA Your Personal Data may be stored, processed, or transferred to locations outside Malaysia where our service providers, data centres, or related entities are located. Such jurisdictions may not provide the same level of protection as Malaysian laws. By using the Portal and providing your Personal Data, you expressly consent to such transfer. We will take reasonable steps to ensure that any overseas recipients are subject to appropriate confidentiality and data protection obligations. 11. CANCELLATION AND REFUND POLICY 11.1 No Cancellation Policy All purchases, subscriptions, registrations, and payments made through the I-FIKR Portal are final. Once payment has been successfully processed, cancellation of orders, subscriptions, access rights, digital content, services, or related transactions will not be permitted. Users are advised to carefully review all order details, subscription plans, pricing information, and applicable terms before proceeding with payment. 11.2 Refund Policy All payments made through the Portal are non-refundable. No refunds, whether full or partial, will be provided after payment has been successfully processed, including but not limited to situations involving: 1. change of mind; 2. accidental purchases; 3. failure to use or access the Portal or services; 4. dissatisfaction with personal preference; 5. incorrect selection of subscription plan or product; or 6. user misunderstanding of the features, functionalities, or compatibility of the Portal. Refunds will only be considered where required by applicable laws or where expressly determined by us at our sole discretion under exceptional circumstances 11.3 Technical Issues In the event of technical issues affecting access to the Portal or services, users are encouraged to contact our support team for assistance. We will make reasonable efforts to investigate and resolve verified technical issues within a reasonable timeframe. However, such issues shall not automatically entitle users to cancellation or refunds. 11.4 Contact for Billing or Payment Issues For enquiries relating to billing, payment transactions, or technical payment issues, please contact: Email: ifikr@inceif.edu.my We reserve the right to update or amend this Cancellation and Refund Policy from time to time without prior notice, subject to applicable laws and regulations. |