Legal & Privacy
Privacy Policy
We take data privacy seriously. This policy explains what personal information Bestari AI collects, why we collect it, and the rights available to you under applicable Malaysian law.
Last Updated: 8 May 2025 · Effective Date: 8 May 2025
01
Introduction
Bestari AI ("we", "us", "our") operates as an online AI development school based at Jalan Ampang 142, 50450 Kuala Lumpur, Malaysia. We offer structured learning programmes in Python, machine learning, and deep learning to individuals across Malaysia and beyond.
We are committed to handling personal information with care and transparency. This policy describes the personal data we collect from visitors to our website and from learners who enrol in our programmes, how that data is used, and the choices available to you.
This policy applies to our website at bestariamx.pro and all related services operated by Bestari AI. If you have questions, contact us at [email protected].
02
Data We Collect
Information You Provide
- Name and contact details (email address, phone number) submitted via enquiry forms
- Messages and questions you send through the contact section
- Programme enrolment details where applicable
Information Collected Automatically
- Browser type, device type, and operating system
- Pages visited, time spent, and navigation path through the website
- Referring website (the page you came from before visiting ours)
- IP address and approximate geographic location
- Cookie data as described in our Cookie Policy
Legal Basis for Processing
We rely on consent for analytics and marketing cookies, legitimate interest for improving our website experience and responding to enquiries, and contractual necessity when processing data related to enrolments and programme delivery. You may withdraw consent at any time.
Retention: Contact form data is retained for up to 24 months. Website analytics data is retained for up to 13 months. Enrolment records are kept for a minimum of 7 years as required by applicable financial regulations in Malaysia.
03
How We Use Your Data
We use personal information only for the purposes described at the time of collection. The main purposes are:
- Responding to enquiries — to reply to questions submitted through our contact form
- Programme administration — to manage enrolments, communicate course schedules, and deliver learning materials
- Service improvement — to understand how learners navigate our website so we can improve page clarity and content
- Communication — to send information about our programmes if you have opted in, and to send transactional messages (such as enrolment confirmations) where relevant
- Legal compliance — to meet obligations under Malaysian law, including the Personal Data Protection Act 2010 (PDPA)
We do not sell your personal data. We do not share it with third parties for their independent marketing purposes without your consent.
Third-party service providers (such as analytics platforms) may process data on our behalf, but are bound by data processing agreements that restrict their use of the information.
04
Protection Measures
Encryption
Our website uses HTTPS throughout. Data transmitted between your browser and our servers is encrypted using TLS.
Secure Storage
Personal data is stored on servers with access controls. Storage systems are reviewed periodically to check for vulnerabilities.
Access Controls
Access to personal data is limited to team members who need it to carry out their role. Staff handling data are made aware of their responsibilities.
Breach Response
If a data breach affecting your personal information occurs, we will notify you and the relevant authority as required under Malaysian PDPA guidelines.
06
Your Rights
Under the Malaysian Personal Data Protection Act 2010 (PDPA) and related regulations, you have the following rights in relation to your personal data:
Right to Access — You may request a copy of the personal data we hold about you.
Right to Correction — You may ask us to correct inaccurate or incomplete personal data.
Right to Withdraw Consent — Where processing is based on consent, you may withdraw it at any time. This does not affect processing that occurred before withdrawal.
Right to Object — You may ask us to stop processing your data for direct marketing purposes.
Right to Erasure — You may request deletion of your personal data where we are no longer legally required to retain it.
Right to Lodge a Complaint — You may direct complaints to the Personal Data Protection Department (Jabatan Perlindungan Data Peribadi) of Malaysia if you believe your rights have been infringed.
To exercise any of these rights, contact us at [email protected]. We will respond within 21 days as required under the PDPA.
07
Third-Party Links
Our website may contain links to external websites, resources, or tools. Once you leave our site, this privacy policy no longer applies. We are not responsible for the privacy practices or content of those external sites.
We encourage you to review the privacy policy of any external site before submitting personal information to it.
08
Children's Privacy
Our programmes and services are intended for individuals aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18.
If you believe a minor has submitted information through our website, please contact us at [email protected] and we will remove it promptly.
09
Policy Updates
We may update this policy from time to time to reflect changes in our practices, legal requirements, or how our website operates. When we make changes, the "Last Updated" date at the top of this page will be revised.
For significant changes, we will make reasonable efforts to notify users — for example, by posting a notice on our website. Continuing to use our site after changes are posted means you have read and acknowledged the updated policy.
10
Contact the Data Controller
Response Times
We aim to respond to data-related requests within 21 days as required under the Malaysian Personal Data Protection Act 2010. For general privacy enquiries, we typically respond within 5 working days.