Effective Date: 15 October 2025
Last Updated: 15 October 2025

1. Introduction

This Privacy Policy explains how Kr8iv Sdn Bhd (“we”, “our”, or “us”) collects, uses, stores, and protects personal information when you visit, browse, contribute, or make a purchase through https://rimau1925.com (the “Website”).

This Website includes:

• The RIMAU 1925 Contribution Platform, where visitors can make voluntary contributions through Stripe, and
• The upcoming RIMAU 1925 Heritage Shop, which will offer official merchandise and products for sale, powered by Shopify.

We are committed to protecting your privacy and ensuring that your personal data is handled securely and transparently in accordance with the Personal Data Protection Act 2010 (PDPA Malaysia) and relevant international data protection standards. By using this Website, you agree to the terms described in this Privacy Policy.

2. Data Controller

Kr8iv Sdn Bhd
D1-05-03A Tamarind Square, Persiaran Multimedia, Cyber 10,
63000 Cyberjaya, Selangor, Malaysia.
Email: connect@rimau1925.com

Kr8iv Sdn Bhd is the data controller responsible for the collection, processing, and protection of all personal information gathered through this Website, including transactions made via Stripe and Shopify.

3. Information We Collect

a. Information You Provide Voluntarily

When you interact with our Website—whether contributing, purchasing, or contacting us—you may provide:

• Full name
• Email address
• Mobile number
• Country of residence
• Billing and shipping address (for merchandise orders)
• Payment details (processed via Stripe or Shopify Payments)
• Organisation name (if applicable)
• Optional message, note, or recognition preference

b. Payment Information

• All financial transactions on rimau1925.com/contribute are securely processed by Stripe.
• All merchandise sales on the RIMAU 1925 Heritage Shop are processed through Shopify Payments (or authorised Shopify payment partners).
• We do not collect, store, or have access to your full credit/debit card details.
• Both Stripe and Shopify are certified PCI DSS-compliant payment processors, ensuring that all payment data is encrypted and handled securely.

c. Automatically Collected Information

We may automatically collect information about your device and usage when you access the Website, including:

• IP address and location (city/country level)
• Browser type and version
• Device type, operating system, and referral source
• Date, time, and pages viewed
• Interaction patterns for analytics and performance

d. Cookies and Tracking Technologies

We may use cookies and similar technologies to improve website functionality, track preferences, and analyse visitor activity.
You can adjust your browser settings to refuse cookies, but some parts of the Website (especially the shop and checkout pages) may not function correctly without them.

For more on how Shopify uses cookies, visit: https://www.shopify.com/legal/cookies

4. Purpose of Data Collection

We collect and use personal data for the following purposes:

1. To process and verify your contributions and purchases.
2. To issue receipts, confirmations, or acknowledgements.
3. To deliver merchandise orders, process refunds or exchanges (if applicable).
4. To manage communication preferences and respond to enquiries.
5. To recognise contributors publicly, if opted in (or maintain anonymity, if preferred).
6. To comply with accounting, audit, and legal obligations.
7. To improve website experience, functionality, and customer service.
8. To send project updates, news, or marketing (with your consent).

5. Legal Basis for Processing

We process personal data under the following lawful bases:

• Consent – for voluntary contributions, purchases, and communications.
• Contractual necessity – to fulfil merchandise orders or process payments.
• Legal obligation – to meet Malaysian tax, accounting, and reporting requirements.
• Legitimate interests – to manage and improve operations and maintain project transparency.

6. Data Sharing and Disclosure

We will never sell, rent, or trade your personal data. However, your data may be shared with:

• Stripe Payments (for contributions): https://stripe.com/privacy
• Shopify (for Heritage shop operations): https://www.shopify.com/legal/privacy
• Authorised third-party vendors providing hosting, analytics, delivery, or customer support services (bound by confidentiality agreements)
• Regulatory or legal authorities where required by law or court order

7. Data Retention

We retain personal and transaction data only for as long as necessary for the purposes outlined above, or as required by Malaysian law (e.g., tax and audit retention periods).

When data is no longer required, it will be securely deleted, anonymised, or archived.

8. Data Transfers

Your information may be transferred and stored outside Malaysia (for example, on Shopify’s or Stripe’s global servers). Both providers comply with international privacy frameworks such as GDPR, ensuring appropriate levels of protection for your data. By using this Website, you consent to such transfers where necessary for processing or hosting.

9. Data Security

We employ administrative, technical, and physical safeguards to protect personal data from loss, theft, or misuse, including:

• SSL encryption on all transaction pages
• Secure hosting infrastructure
• PCI DSS-compliant payment gateways (Stripe and Shopify Payments)
• Access restricted to authorised personnel only

While we take reasonable steps to protect your data, no method of transmission over the internet is entirely secure. You acknowledge that providing data online carries inherent risks.

10. Your Rights

Under Malaysia’s Personal Data Protection Act 2010, you have the right to:

• Request access to your personal data.
• Request correction or deletion of inaccurate or outdated data.
• Withdraw consent for data processing (subject to legal or contractual restrictions).
• Request details on how your data is processed or shared.

To exercise these rights, please contact connect@rimau1925.com

We may need to verify your identity before fulfilling certain requests.

11. Marketing and Communication

You may opt to receive occasional updates about the RIMAU 1925 project, new initiatives, or merchandise.
You can unsubscribe at any time via the “unsubscribe” link in emails or by contacting us directly.

We will not send promotional material without your consent.

12. Children’s Privacy

Our Website and Heritage shop are not directed at children under 13 years of age, and we do not knowingly collect personal information from them. If such data is discovered, it will be promptly deleted.

13. Third-Party Links

This Website may contain links to third-party sites, including payment processors, social media platforms, or affiliate pages.
We are not responsible for their privacy practices or content. We encourage you to review their privacy policies before interacting or providing personal data.

14. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, operations, or technology.
Any updates will be posted at https://rimau1925.com/privacy-policy, with the revised “Effective Date” shown above.
Your continued use of the Website after such updates indicates acceptance of the revised terms.

15. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or how we handle your data, please contact:

Kr8iv Sdn Bhd
D1-05-03A Tamarind Square, Persiaran Multimedia, Cyber 10,
63000 Cyberjaya, Selangor, Malaysia
Email: connect@rimau1925.com
Website: https://rimau1925.com