Privacy Policy

RIMAU 1925 The Founder's Edition · Last Updated: 1 June 2026

1. Introduction

This Privacy Policy explains how Kr8iv Sdn Bhd, through Imaginaria Studios, collects, uses, stores, processes, discloses, protects, and manages personal data in connection with RIMAU 1925 The Founder's Edition.

This Privacy Policy applies to personal data collected through the official RIMAU 1925 website, pre-order and reservation forms, payment processes, authentication and verification website, ownership registration system, transfer requests, enquiry forms, email communications, event registration, supporter recognition, and any other related channels.

By accessing the website, submitting a reservation, making a payment, registering an edition, using the verification website, requesting ownership transfer, or communicating with us, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

For the purposes of this Privacy Policy, the data controller is:

Kr8iv Sdn Bhd 201801038578 (1300609-V) D2-04-03 Tamarind Square, Persiaran Multimedia, Cyber 10, 63000 Cyberjaya, Selangor, Malaysia. connect@rimau1925.com

3. Personal Data We May Collect

We may collect personal data directly from you or through authorised representatives, payment providers, event partners, verification systems, or related project platforms.

The personal data we may collect includes:

  • Full name
  • Identification details, where required for verification
  • Email address
  • Mobile number
  • Billing address
  • Delivery address
  • Country
  • State
  • Company, foundation, institution, organisation, or family name
  • Designation or role, where applicable
  • Payment and transaction details
  • Reservation category
  • Edition category
  • Serial number allocation
  • Certificate details
  • Recognition name
  • Privacy preference
  • Authentication and verification records
  • Collector Access Key or account login details
  • Ownership registration information
  • Ownership transfer information
  • New owner details for transfer purposes
  • Institutional display details
  • Communication records
  • Enquiry details
  • Event attendance details
  • Preference for anonymity or public recognition
  • Website usage data, cookies, device information, and technical logs
  • Any other information you voluntarily provide to us

4. Purpose of Collection and Processing

We may collect and process your personal data for the following purposes:

  • To process pre-order reservations
  • To manage contribution and payment records
  • To allocate serial numbers
  • To issue Certificates of Authenticity
  • To manage edition categories and recognition records
  • To verify ownership and authenticity
  • To operate the official RIMAU 1925 verification website
  • To create and manage authentication records
  • To manage Collector Access Key access or other approved verification methods
  • To process ownership transfer requests
  • To update ownership records and provenance notes
  • To communicate with patrons, collectors, purchasers, institutions, and supporters
  • To arrange delivery, fulfilment, and logistics
  • To provide receipts, invoices, confirmations, and administrative updates
  • To manage supporter recognition and public listing preferences
  • To manage event invitations, private screenings, previews, or official communications
  • To respond to enquiries, requests, complaints, or support matters
  • To comply with legal, regulatory, tax, audit, accounting, and administrative obligations
  • To detect, prevent, or investigate fraud, counterfeit claims, suspicious activity, unauthorised access, or misuse of the verification system
  • To improve website functionality, user experience, security, and project administration
  • To provide updates relating to RIMAU 1925 The Founder's Edition and related project developments, where permitted

5. Public Recognition and Authentication Information

Certain non-confidential information may be displayed on the official RIMAU 1925 verification website or supporter recognition page, subject to your consent, privacy preferences, and edition category.

This may include:

  • Edition number
  • Edition category
  • Authentication status
  • Certificate status
  • Approved recognition name
  • State
  • Country
  • Institutional name, where applicable
  • Recognition category

Sensitive ownership details will not be publicly displayed by default.

Owners may choose to display their name, family name, company name, foundation name, institution name, organisation name, private collector status, or remain anonymous, subject to approval and administrative requirements.

6. Protected Ownership Information

Privileged editions may include registered provenance features. Protected ownership information may include:

  • Registered owner name
  • Authorised contact person
  • Private contact details
  • Ownership history
  • Transfer records
  • Institutional custody details
  • Private provenance notes
  • Administrative verification records

Such information will only be accessible through approved verification methods, such as a Collector Access Key, registered account login, one-time access code, or other verification method made available by the RIMAU 1925 team.

7. Payment Information

Payments may be processed through third-party payment gateways, banking channels, invoicing systems, or other approved payment methods.

We do not store full payment card details unless expressly permitted by law and handled through secure payment providers. Payment information may be processed by third-party providers according to their own terms, privacy policies, and security standards.

We may retain transaction references, payment status, invoice details, receipt records, billing information, and related administrative payment data for accounting, fulfilment, audit, legal, and verification purposes.

8. Disclosure of Personal Data

We may disclose personal data where necessary to:

  • Payment processors and banks
  • Delivery and logistics providers
  • Website developers and hosting providers
  • Authentication and verification platform providers
  • IT service providers
  • Event organisers and venue partners
  • Professional advisers, including lawyers, auditors, accountants, consultants, and insurers
  • Regulatory authorities, law enforcement agencies, government bodies, or courts where required by law
  • Authorised representatives of Kr8iv Sdn Bhd and Imaginaria Studios
  • Service providers involved in fulfilment, administration, authentication, communication, event management, or project operations

We will only disclose personal data where reasonably necessary for the purposes described in this Privacy Policy, or where required or permitted by law.

9. International Transfer

If you are located outside Malaysia, or if we use service providers located outside Malaysia, your personal data may be transferred, stored, or processed outside Malaysia.

Where such transfers occur, we will take reasonable steps to ensure that the personal data is handled securely and in accordance with applicable data protection requirements.

10. Retention of Personal Data

We will retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including reservation administration, authentication, ownership registration, transfer history, accounting, legal, audit, project records, and dispute resolution.

Certain authentication and provenance records may be retained for an extended period to preserve the integrity of the numbered edition series, verify authenticity, maintain transfer history, prevent counterfeiting, and support future custodianship of registered editions.

Where personal data is no longer required, we will take reasonable steps to securely delete, anonymise, archive, or restrict access to the data in accordance with our internal policies and applicable law.

11. Security

We take reasonable technical, organisational, and administrative measures to protect personal data from unauthorised access, misuse, loss, alteration, disclosure, or destruction.

These measures may include access controls, password protection, secure hosting, encrypted transmission where applicable, administrative controls, verification procedures, audit logs, and restricted access to sensitive ownership information.

However, no online system, website, payment gateway, or electronic communication method can be guaranteed to be completely secure. Users are responsible for keeping their login credentials, Collector Access Key, one-time codes, and account access information confidential.

12. Your Rights

Subject to applicable law, you may have the right to:

  • Request access to your personal data
  • Request correction of inaccurate or incomplete personal data
  • Withdraw consent where processing is based on consent
  • Request changes to public recognition preferences
  • Request updates to contact details
  • Request deletion or restriction of certain personal data, where legally and operationally permissible
  • Request information about how your data is processed
  • Object to certain forms of processing, where applicable

Certain requests may be subject to identity verification, administrative review, legal requirements, fraud prevention, authentication integrity, ownership registry requirements, and project record obligations.

13. Accuracy of Information

You are responsible for ensuring that all personal data submitted to us is accurate, complete, current, and not misleading.

If your details change, including contact information, ownership details, recognition name, institutional contact, or privacy preference, you should update your information through the approved channel or contact the RIMAU 1925 team.

14. Cookies and Website Data

The official website may use cookies, analytics tools, session data, log files, or similar technologies to operate the website, improve user experience, maintain security, monitor traffic, support forms, manage authentication sessions, and analyse website performance.

You may disable cookies through your browser settings, but certain website features, forms, account access, or verification functions may not operate properly without them.

15. Marketing and Project Updates

We may send you updates regarding RIMAU 1925 The Founder's Edition, reservation status, edition allocation, authentication features, event invitations, project progress, publication updates, and related official announcements.

Where required, we will seek your consent before sending marketing communications. You may opt out of non-essential marketing communications at any time by using the unsubscribe option or contacting us.

Administrative, transactional, authentication, security, fulfilment, or ownership-related communications may still be sent where necessary.

16. Children's Personal Data

The website, reservation system, payment process, authentication system, and ownership registry are not intended for use by children.

If a reservation or registration is made on behalf of a minor, the parent or legal guardian must provide the necessary consent and assume responsibility for the submitted information.

17. Third-Party Websites

The RIMAU 1925 website may contain links to third-party websites, payment gateways, delivery providers, social media platforms, or external services.

We are not responsible for the privacy practices, content, security, or data handling practices of third-party websites or services. You should review the privacy policies of those third parties before providing personal data to them.

18. Data Breach and Incident Handling

In the event of a personal data breach or suspected breach, we will take reasonable steps to assess, contain, investigate, and respond to the incident in accordance with applicable legal requirements and internal procedures.

Where required by law, we may notify affected individuals, relevant authorities, or other parties.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, project operations, technology, website features, authentication systems, ownership registry functions, or administrative practices.

The latest version will be published on the official website with the updated date.

Continued use of the website, reservation system, payment process, verification website, or related services after updates are published constitutes acknowledgement of the updated Privacy Policy.

20. Contact Us

For any questions, requests, corrections, privacy preferences, data access requests, withdrawal of consent, or concerns relating to this Privacy Policy, contact:

The Rimau 1925 Team Kr8iv Sdn Bhd connect@rimau1925.com

21. Language

This Privacy Policy may be made available in English and Bahasa Malaysia. In the event of any inconsistency between versions, the English version shall prevail unless otherwise required by law.