Privacy Policy for PCode Rewards.

PCode Rewards values your privacy and is committed to protecting the personal information you provide when you register an account, purchase products, encode or activate a PCode, earn or manage VPoints, contact support, or use any feature of our website and rewards program.

This Privacy Policy explains what information we collect, why we collect it, how we use it, how it may be shared, how long we keep it, and what choices or rights may be available to you. This policy applies to activities connected with our rewards program, including purchases made through our website and purchases made through our official e-commerce marketplace channels such as Shopee, Lazada, TikTok Shop, or other platforms that we may use in the future.

By using our website, creating an account, purchasing a Digital PCode, buying eligible products from our official shops, encoding a PCode, participating in VPoints-related activities, or communicating with us, you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy applies to personal data and transaction-related information processed in connection with the following:

• Account registration, email verification, login, profile management, and account maintenance.
• PCode issuance, encoding, validation, activation, approval, cancellation, refund review, and fraud prevention.
• VPoints earning, wallet records, invite rewards, matrix-related reward tracking, reward claiming, and account status monitoring.
• Website purchases, Digital PCode checkout, payment confirmation, order history, payment records, and customer support.
• Purchases made through official e-commerce platforms, including Shopee, Lazada, TikTok Shop, or other marketplace channels.
• Email notifications, account alerts, reward notices, support replies, product updates, service announcements, and security communications.
• Website analytics, device logs, cookies, security monitoring, and system troubleshooting.

This policy does not replace the privacy policies of third-party marketplaces, payment gateways, couriers, banks, e-wallet providers, or other external services. Those providers may collect and process information under their own privacy terms.

Depending on how you use our website, rewards program, product offers, and support channels, we may collect the following categories of information:

Account Information

• Account ID, name, email address, password hash, account status, account expiry, verification status, registration date, and login activity.
• Referral or invite-related details, including the account ID of the user who invited you, if applicable.
• Profile information that you voluntarily provide or update in your account.

PCode and Rewards Information

• PCode, PIN validation status, card ID, order references, activation date, approval date, expiry date, platform source, and transaction status.
• VPoints wallet records, credited amounts, missed rewards, reward eligibility, invite rewards, matrix bonus records, reward claims, and related audit logs.
• Account status changes, Premium or Basic status, account extension records, downgrade records, and reward eligibility records.

Purchase and Order Information

• Website order details, product selected, quantity, price, payment status, payment reference, billing or contact details, and order history.
• Marketplace order details that you provide to us for validation, such as order number, proof of purchase, platform name, item details, and refund or dispute details.
• Digital PCode purchase records, payment confirmation, delivery status, and email delivery records.

Support and Communication Information

• Messages, inquiries, screenshots, proof of purchase, uploaded files, chat content, email correspondence, and other information you send to support.
• Communication preferences and delivery status of system-generated emails or account notices.

Technical and Security Information

• IP address, device type, browser type, user agent, session data, login timestamp, page activity, and security logs.
• Cookies, similar technologies, and analytics information used to improve website functionality and security.

When you purchase from our official e-commerce stores such as Shopee, Lazada, TikTok Shop, or similar platforms, those marketplaces may collect and control certain personal information needed to process your order. This may include your marketplace username, recipient name, delivery address, contact number, payment status, order ID, product purchased, shipping updates, courier information, return requests, refund requests, and customer messages.

We may receive or access limited order-related information from these platforms to fulfill your order, verify eligibility for PCode issuance, respond to customer inquiries, validate proof of purchase, resolve disputes, confirm refund status, and prevent fraud or abuse of our rewards program.

For physical product purchases, PCode eligibility may depend on order value, product eligibility, payment status, cancellation status, refund status, and validation of the order. If you contact us about a missing or invalid PCode, we may ask for your order number, marketplace platform, proof of purchase, product details, and other information needed to confirm your purchase.

The privacy practices of Shopee, Lazada, TikTok Shop, couriers, and marketplace payment channels are governed by their own privacy policies. We encourage you to read their respective privacy terms to understand how they process your information.

When you purchase products or Digital PCodes through our website, we may collect and process information necessary to complete the transaction and deliver the purchased item or PCode. This may include your account details, selected product, order amount, payment reference, transaction status, email address, and order history.

For Digital PCode purchases, your registered email address may be used to send the purchased PCode, PIN, confirmation notice, payment confirmation, and related transaction updates. You are responsible for keeping your email account secure and for ensuring that the email address in your account is correct and accessible.

We may keep records of website purchases to verify payment, prevent duplicate issuance, support refund review, investigate failed payments, resolve disputes, maintain accounting records, and comply with legal or regulatory obligations.

Payments made through our website may be processed by third-party payment channels such as payment gateways, banks, e-wallet providers, card processors, or financing providers. We do not intend to store full card numbers, CVV codes, online banking passwords, e-wallet passwords, or other sensitive payment credentials.

Payment providers may collect and process your payment information under their own privacy policies and security standards. We may receive transaction references, payment status, amount paid, payment channel, checkout status, and other confirmation data needed to update your order and account records.

For marketplace purchases, payment information is generally handled by the marketplace platform and its payment partners. We may only receive or review order-level payment status when necessary for order validation, PCode issuance, support, refund review, or fraud prevention.

We may use collected information for the following legitimate business, operational, contractual, security, and legal purposes:

• Create, verify, secure, and maintain your account.
• Process login, password reset, email verification, session validation, and account security checks.
• Process website purchases, Digital PCode orders, payment confirmations, and product-related transactions.
• Validate marketplace purchases and determine eligibility for physical PCode issuance.
• Encode, verify, activate, approve, cancel, refund-review, or restrict PCodes as necessary.
• Credit VPoints, update wallet balances, monitor reward eligibility, process invite rewards, and record missed rewards when eligibility conditions are not met.
• Determine account status, Premium access, account expiry, account extension, or downgrade-related changes.
• Send transactional emails, account notices, reward notifications, support replies, missed reward notices, purchase confirmations, and security alerts.
• Prevent fraud, duplicate claims, invalid PCode usage, refund abuse, unauthorized account access, and other misuse of the platform.
• Improve our website, product catalog, support process, rewards program, and user experience.
• Comply with accounting, tax, dispute resolution, regulatory, legal, and recordkeeping obligations.

The rewards program requires us to process certain account, PCode, purchase, invite, and wallet information so we can determine eligibility, record VPoints, validate rewards, and maintain program integrity.

Your VPoints activity may include records of credited VPoints, missed VPoints, account status at the time of transaction, source of reward, related PCode or order information, inviter information, matrix-related records, and timestamped transaction logs.

If your account is Basic, expired, restricted, inactive, under review, or otherwise not eligible at the time a reward event occurs, we may record that reward as missed, zero-credit, cancelled, or ineligible depending on the applicable program rules. These records may be used for transparency, auditing, dispute review, and customer support.

Invite-related rewards may require the processing of your account ID, the account ID of your inviter or invited member, activation records, eligibility status, and reward status. We do not recommend sharing personal account credentials or private information with other users.

We do not sell your personal information. However, we may share limited information when necessary for business operations, service delivery, legal compliance, or protection of our rights and users.

Information may be shared with:

• Payment gateways and payment service providers to process or verify payments.
• E-commerce marketplaces when needed to validate orders, resolve disputes, or respond to customer concerns.
• Email delivery providers or SMTP services to send verification codes, account notices, purchase confirmations, and reward notifications.
• Hosting providers, database providers, analytics tools, security tools, and technical service providers that help operate the website.
• Couriers or logistics partners when product fulfillment requires delivery-related coordination.
• Professional advisers, legal advisers, accountants, or auditors when reasonably necessary.
• Government authorities, courts, regulators, law enforcement, or other parties when required by law or when necessary to protect rights, safety, or system integrity.

When we work with service providers, we aim to limit shared information to what is reasonably necessary for the specific service being performed.

We may send transactional and service-related emails, including account verification codes, password reset instructions, payment confirmations, PCode activation notices, VPoints credit notices, missed reward notices, account status notices, security alerts, support replies, and policy updates.

These service-related communications are important for account security, transaction confirmation, and rewards program operation. You may not be able to opt out of essential transactional messages while maintaining an active account.

We may also send product updates, announcements, promotional notices, or reward-related opportunities. Where required or appropriate, you may unsubscribe or request to stop receiving non-essential marketing communications.

Our website may use cookies, session storage, local storage, and similar technologies to keep you logged in, protect your session, remember preferences, maintain cart or checkout state, improve performance, and detect suspicious activity.

We may also collect technical information such as IP address, browser type, device type, user agent, page views, referring pages, error logs, and activity timestamps. This information helps us improve the website, troubleshoot issues, prevent abuse, and maintain security.

You can control cookies through your browser settings. However, disabling cookies may affect login, checkout, cart, account management, PCode activation, and other website functions.

We apply reasonable technical, administrative, and organizational measures to protect personal information against unauthorized access, misuse, loss, alteration, or disclosure. These measures may include password hashing, session controls, access restrictions, database controls, audit logs, secure server configuration, and transaction monitoring.

No website, database, payment system, marketplace, or internet transmission can be guaranteed to be completely secure. You are responsible for protecting your login credentials, using a secure email account, avoiding credential sharing, and reporting suspicious account activity immediately.

We keep personal information and transaction records only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or allowed by law.

Some records may need to be retained for account management, reward history, fraud prevention, dispute resolution, accounting, tax, audit, legal compliance, and system integrity. These may include account records, purchase records, payment references, PCode activation logs, VPoints wallet records, reward eligibility logs, refund review records, and support history.

When information is no longer needed, we may delete, anonymize, archive, or securely restrict access to the information depending on operational and legal requirements.

Depending on applicable laws and verification requirements, you may request to access, correct, update, restrict, or delete certain personal information associated with your account. You may also request clarification about how your data is used in connection with the rewards program.

Before processing privacy-related requests, we may need to verify your identity, account ownership, email address, or transaction details. Some information may not be deleted immediately if it is required for legal compliance, accounting, fraud prevention, dispute resolution, reward audit, or legitimate business purposes.

You may update some account details directly through your account page when available. For requests that cannot be completed through the website, please contact support using the official support channel.

Our website, rewards program, and purchase-related services are intended for users who are legally capable of creating accounts, making purchases, and participating in rewards-related activities. If a user is a minor, use of the service should be done with the knowledge and guidance of a parent or legal guardian where required by applicable law.

We do not knowingly request unnecessary personal information from children. If you believe that a minor has provided information without proper consent, please contact us so we can review the concern.

Our website may contain links to third-party websites, marketplaces, payment channels, social media pages, courier tracking pages, or other external services. We are not responsible for the privacy practices, content, security, or policies of external platforms.

When you leave our website or transact through a third-party platform, your information may be handled under that third party's own terms and privacy policy. Please review their policies before submitting personal information or completing transactions.

We may update this Privacy Policy from time to time to reflect changes in our rewards program, products, website features, payment methods, e-commerce channels, legal requirements, or operational practices.

When we make significant changes, we may update the effective date, post a notice on the website, or send an account notice when appropriate. Continued use of the website, account, PCode features, purchase services, or rewards program after an update means you acknowledge the updated Privacy Policy.

If you have questions about this Privacy Policy, your account information, PCode records, purchase records, VPoints records, or privacy-related requests, please contact us through the official support channel available on the website.

For faster assistance, please include your registered email address, account ID if available, order number if the concern is purchase-related, and a clear description of your request. Do not send your password, full payment credentials, OTP, or private PIN through unsecured messages.