Under the PDPA, MyRentAssist is the Data User responsible for the personal data collected through our platform at myrentassist.com.my.
You may contact our data officer at:
We collect only the personal data necessary to provide our services. The table below describes what we collect and why:
| Data Collected | From Whom | Purpose |
|---|---|---|
| Full name | Landlord, Tenant | Identity verification, receipts, tax documents |
| IC number (MyKad) | Landlord, Tenant | Identity verification, tenancy records |
| Mobile number | Landlord, Tenant | WhatsApp reminders, account communication |
| Email address | Landlord | Account management, receipts (if provided) |
| Property address | Landlord | Unit identification, utility bill matching |
| Bank account details | Landlord | Rental income disbursement |
| Tenancy agreement | Landlord | Tenancy record, auto-extraction of details |
| Utility account numbers | Landlord | Utility bill monitoring and payment |
| Payment records | System-generated | Transaction records, receipts, tax filing |
| Utility bill amounts | System-generated (from TNB, Air Selangor, IWK) | Monthly collection calculation, payment |
We do not collect sensitive personal data as defined under the PDPA, including racial or ethnic origin, political opinions, religious beliefs, health information, or biometric data.
We collect personal data through the following means:
Under the PDPA, we process your personal data on the following lawful bases:
We use your personal data exclusively for the following purposes:
We will not use your personal data for direct marketing purposes without your separate, explicit consent.
We do not sell, rent, or trade your personal data to third parties. We may share your personal data only in the following circumstances:
We share data with trusted third-party service providers who assist us in delivering our services, including payment processors (operating under BNM licence), WhatsApp Business API providers, and cloud hosting providers. These parties are bound by confidentiality obligations and may only use your data for the specified purpose.
Utility account numbers and payment references are shared with TNB, Air Selangor, and IWK solely for the purpose of bill checking and payment on your behalf.
We may disclose your personal data if required to do so by law, court order, or government authority, including LHDN (Inland Revenue Board) and Bank Negara Malaysia.
In the event of a merger, acquisition, or sale of our business, your personal data may be transferred to the acquiring party, subject to equivalent privacy protections.
We retain your personal data for as long as necessary to provide our services and comply with legal obligations:
As a data subject under the Personal Data Protection Act 2010, you have the following rights:
You have the right to request access to the personal data we hold about you.
You have the right to request correction of any inaccurate or incomplete personal data.
You may withdraw your consent at any time. This will not affect the lawfulness of processing before withdrawal.
You have the right to request that we stop processing your data for direct marketing purposes.
To exercise any of these rights, please contact us via WhatsApp at 016-339 3168. We will respond to your request within twenty-one (21) days as required under the PDPA.
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
In the event of a personal data breach that is likely to result in harm to you, we will notify you and the relevant authorities as required under applicable law.
Our website may use cookies and similar tracking technologies to improve your browsing experience and analyse website traffic. You may disable cookies through your browser settings, although this may affect some functionality of our website.
We do not use your data for targeted advertising purposes.
Our platform may contain links to third-party websites, including payment portals and utility provider websites. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal data.
Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18 years of age. If we become aware that we have collected data from a minor, we will delete it promptly.
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes via WhatsApp at least fourteen (14) days before they take effect. The "Last Updated" date at the top of this page will always reflect the most recent revision.
If you believe we have not handled your personal data in accordance with the PDPA, you may:
For any privacy-related queries or to exercise your data subject rights: