PRIVACY POLICY

Last updated: 9 November 2026

This notice explains what personal data the TehBeng Bangitown app collects, why, who it is shared with and the choices you have, as required by the Personal Data Protection Act 2010 (PDPA).

1. Who we are

TehBeng Bangitown is operated by FAEZ MEGAT ENTERPRISE (SSM 002727284-X), 19A Jalan 3/69, Seksyen 3, 43650 Bandar Baru Bangi, Selangor. We are responsible for the personal data described here.

2. What we collect

Your phone number, used to sign in.
Your name or nickname, shown on your order at the counter.
Your orders: drinks, add-ons, pickup time, amounts, status and any rating you give.
Payment records: order number, amount, payment channel, status and the BayarCash transaction reference. We never receive your card number or online banking login.
Daun, Tea Garden check-ins, and Ajak Geng records (who invited whom and the vouchers given).
Technical data: a sign-in cookie, your language choice, and your cart, which is saved on your own phone.

3. Why we use it

To sign you in with a one-time code sent by WhatsApp or SMS.
To prepare your order, call your name at pickup and contact you about your order.
To take payments and process refunds.
To run Daun, the Tea Garden and Ajak Geng.
To prevent fraud and misuse, and to keep the business and tax records the law requires.

We do not sell your personal data. We will only send you promotions if you agree to receive them.

4. Who we share it with

We share only what each service needs to do its job:

BayarCash (Web Impian Sdn Bhd), our payment gateway: your name, phone number, order number and amount.
Supabase, which stores our database on servers in Singapore.
Vercel, which runs our app on servers in Singapore.
WhatsApp or an SMS provider, to deliver your sign-in code.
If you joined through Ajak Geng, the friend who invited you can see your first name and whether your first order is done.
Authorities, when the law requires it.

Some of these services keep data outside Malaysia (in Singapore). We only use providers that protect personal data to a standard similar to the PDPA.

5. How long we keep it

We keep your account while you use the app. Order and payment records are kept for 7 years because tax and accounting law requires it. If you delete your account, we delete or anonymise your personal details, except the records we must keep by law.

6. Is it compulsory?

Your phone number and a name are needed to order. Without them, we can't take your order or give you Daun.

7. Your rights

You can ask to see the personal data we hold about you, correct it, withdraw your consent or delete your account. You can change your name in Profile at any time. For anything else, contact us (section 10). We will reply within 21 days.

8. Keeping it safe

Data is sent over encrypted connections and access is limited to the people who need it to run the shop. Payments are handled on BayarCash's secure pages.

9. Changes

If we change this notice, we will update the date above and let you know in the app when the change is significant.

10. Contact us

For questions, requests or complaints about your personal data: WhatsApp 016-977 5748, or visit us at 19A Jalan 3/69, Seksyen 3, 43650 Bandar Baru Bangi, Selangor.

Terms →