Privacy Policy & PDPA Notice
Malaysia PDPA 2010 (Act 709)
Effective: January 1, 2024
Updated: March 2026
PDPA Notice Statement: This Privacy Policy is issued by Learning Tigers Sdn. Bhd. in compliance with the Personal Data Protection Act 2010 of Malaysia ("PDPA"). It explains how we collect, use, process, disclose, protect, and retain your personal data and your child's data in connection with our educational services.
1. Introduction & Statutory Compliance
Learning Tigers Sdn. Bhd. ("LearningTigers", "we", "us", or "our") is committed to safeguarding personal data in accordance with the seven (7) Data Protection Principles set forth under the Personal Data Protection Act 2010 ("PDPA"), namely:
- General Principle: Lawful, fair, and transparent data processing with explicit consent.
- Notice and Choice Principle: Written notice of data collected, purpose, and rights.
- Disclosure Principle: No unauthorized disclosure outside stated purposes.
- Security Principle: Robust technical and organizational measures to prevent unauthorized access or loss.
- Retention Principle: Data retained only as long as necessary for business and statutory purposes.
- Data Integrity Principle: Ensuring data is accurate, complete, and kept up-to-date.
- Access Principle: Right for individuals to access and correct their personal records.
2. Personal Data We Collect
In operating our learning marketplace and tutoring services, we may collect and process personal data including:
- Parent / User Data: Full name, national identity card (NRIC) / passport number (where required for identification/tutors), email address, mobile/WhatsApp telephone number, billing address, account login credentials, and transaction histories.
- Learner (Student) Data: Learner's full name, date of birth, age, gender, grade/education level, native/target language proficiency, learning requirements, attendance records, homework submissions, teacher evaluations, and private feedback.
- Teacher / Educator Data: Full name, NRIC/passport, contact details, resume/curriculum vitae, academic qualifications, teaching certifications, banking information for payout disbursement, profile photographs, introduction videos, availability schedules, and student review ratings.
- Technical & Usage Data: IP address, device type, browser specifications, login timestamps, live class connection logs, cookie identifiers, and interaction history on our platform.
3. Protection of Minors & Child Learner Data
Parental Consent Requirement: Because our services include online educational programs for children under the age of 18 ("Minors"), we do not knowingly collect personal data directly from minors without verifiable consent from their parent or legal guardian.
By adding a child learner profile to your account and enrolling them in classes, you, as the parent or legal guardian, explicitly consent to the collection, processing, and use of your child's educational data as described in this policy.
4. Purpose of Data Processing
We process personal data strictly for commercial and educational purposes directly related to our services, including:
- Creating, authenticating, and administering your parent, learner, or teacher account.
- Facilitating course searches, class bookings, trial sessions, and 1-on-1 private tutoring matches.
- Delivering live interactive online classes, video lesson links, lesson plans, learning materials, and student assignment reviews.
- Processing digital wallet reloads, order checkouts, coupon discounts, auto-renewal subscriptions, invoices, and teacher payouts.
- Sending operational notifications, class schedules, automated WhatsApp and email reminders, renewal alerts, and customer support updates.
- Conducting quality assurance, monitoring teacher performance, student feedback, and platform security.
- Complying with statutory, tax, legal, and regulatory obligations under Malaysian law.
5. Third-Party Disclosures
We do not sell, rent, or trade your personal data. We disclose personal data only to the following classes of third parties strictly on a need-to-know basis:
- Teachers / Tutors: Enrolled teachers receive necessary learner details (such as learner name, age/grade, learning level, and submission files) to deliver classes effectively.
- Payment Processors: Licensed payment gateway providers (including Billplz, eGHL, and FPX banking networks) to process transactions securely.
- Communication Service Providers: Verified SMS, WhatsApp API, and transactional email infrastructure providers to send booking confirmations, renewal notices, and class reminders.
- Cloud Infrastructure & Hosting: Secure cloud database, storage (e.g., AWS, Dropbox, or equivalent secure servers), and video conferencing providers.
- Regulatory & Law Enforcement Authorities: Government bodies, law enforcement agencies, or courts of law where required by statutory compliance or court order.
6. Cross-Border Data Transfers
In order to provide seamless cloud hosting, database redundancy, and video conferencing, personal data may be stored or processed on secure cloud servers located outside Malaysia. We ensure that any overseas service providers adhere to data protection standards at least equivalent to the requirements under Section 129 of the Malaysia PDPA 2010.
7. Security & Safeguards (Security Principle)
We implement comprehensive administrative, technical, and physical security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction:
- SSL/TLS cryptographic encryption for all web communications and sensitive data in transit.
- Role-based access controls ensuring only authorized personnel have access to user data.
- Encrypted password hashing and tokenized authentication sessions.
- Regular security monitoring, firewall protections, and vulnerability patching.
8. Data Retention (Retention Principle)
Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, or to satisfy legal, tax, accounting, or reporting requirements under Malaysian law. When personal data is no longer required, it will be securely erased, anonymized, or destroyed in accordance with our data retention guidelines.
9. Your Rights Under the PDPA (Access & Correction)
Under the Malaysia Personal Data Protection Act 2010, you have the following rights regarding your personal data:
- Right to Access: Request a copy of the personal data we hold about you or your registered child learner.
- Right to Correction: Request the correction or updating of any inaccurate, incomplete, misleading, or outdated personal data.
- Right to Withdraw Consent: Withdraw your consent for the processing of personal data (note that withdrawal of essential processing may affect our ability to continue providing learning services to you).
- Opt-Out of Marketing: Opt out of promotional newsletters or promotional WhatsApp broadcasts at any time by following the unsubscribe instructions or contacting our DPO.
10. Cookies & Tracking Technologies
Our website utilizes standard HTTP cookies, session tokens, and analytics tools (such as Google Tag Manager and TruConversion) to maintain user login sessions, remember language preferences, track bag/cart items, and analyze website traffic performance. You may adjust your browser settings to refuse cookies, though certain features of the platform may not function as intended.
11. Data Protection Officer (DPO) Contact Details
To exercise your rights to access or correct your personal data, submit an inquiry, or make a privacy-related complaint, please contact our designated Data Protection Officer:
Data Protection Officer
Learning Tigers Sdn. Bhd.
Email: info@learningtigers.my
Customer Support Hotline / WhatsApp: +6016-8237163
Operating Hours: Monday – Friday, 9:00 AM – 6:00 PM (MYT / UTC+8)
Official Website: https://learningtigers.my