Privacy Policy Overview

Key definitions

To ensure clarity, we define core terms used in this policy. These definitions inform how we interpret responsibilities and user interactions across our platform.

Purposes of processing

We process personal data to provide and improve our services, ensure security, facilitate transactions, comply with legal obligations, and communicate with users in a professional manner.

• To create and manage user accounts and profile information required for platform access and identity verification.
• To operate search, matching and listing features so users can discover, evaluate and contact relevant apartment providers.
• To process payments, invoices and related billing operations in coordination with payment service providers.
• To communicate with users about bookings, enquiries, updates and customer support matters.
• To prevent, detect and respond to fraud, abuse, security incidents and other risk management activities.
• To analyze platform usage and performance for product improvement, service optimization and capacity planning.
• To comply with applicable laws, regulatory requests and lawful contribute.
• To provide marketing communications where users have provided consent or where permitted by applicable law, with options to opt out.

Legal basis for processing

Where applicable, we rely on an appropriate legal basis to process personal data, such as contractual necessity, consent, legitimate interests and compliance with legal obligations.

• Contract performance: processing necessary to perform services requested by users, including booking facilitation and account management.
• Consent: where users have explicitly consented to processing for specific purposes such as marketing communications or optional features.
• Legal obligation: processing required to comply with statutory duties, tax, or law enforcement requirements.
• Legitimate interests: processing necessary for fraud prevention, platform security, analytics and improving user experience, balanced against user rights.

Cookies and similar technologies

We use cookies and comparable technologies to enable core functionality, remember preferences and gather analytics. This helps deliver a consistent and efficient user experience across PrimeTopStay.pro.

Common types include session cookies (temporary), persistent cookies (retain settings between visits), and third-party cookies set by analytics or advertising partners.

We categorize cookies as strictly necessary (required for platform operation), performance and analytics (usage measurement), functional (preferences) and targeting (advertising).

You can manage cookie preferences through the cookie settings banner on our site and by adjusting your browser settings to block or delete cookies. Note that disabling certain cookies may affect platform functionality.

Detailed Cookie Policy

Data sharing and disclosure

We share personal data with trusted service providers and partners only as necessary to deliver the service, process transactions, and meet legal obligations. All sharing is governed by contracts and data protection safeguards.

• Service providers: providers of hosting, analytics, customer support, and technical infrastructure under data processing agreements.
• Property owners and agents: to enable communication, verification and booking of listed apartments.
• Payment processors: banks and payment service providers involved in transaction settlement and compliance screening.
• Legal and regulatory authorities: when disclosure is required by law, regulation or lawful request from competent authorities.
• Advertising and analytics partners: where users have consented to marketing or when pseudonymized analytics are shared to improve services.
• Business transfers: in the event of a sale, merger or reorganization, personal data may be transferred as part of business assets under contractual protections.

International data transfers

PrimeTopStay may transfer personal data to service providers and partners located outside Malaysia for hosting, analytics and platform support. Such transfers are carried out in compliance with applicable data protection requirements.

We implement safeguards for cross-border transfers including contractual data protection terms, encryption, access controls and where available, recognized transfer mechanisms to ensure an appropriate level of protection.

Data retention

We retain personal data only for as long as necessary to fulfil the purposes set out in this policy, to comply with legal obligations, resolve disputes and enforce agreements.

Account information is retained for the duration of account activity and for a reasonable period thereafter to address billing, legal and regulatory requirements. Specific retention periods vary by data category and legal obligations.

Communications and messages platform through the platform are retained for service delivery, dispute resolution and security for a period aligned with operational needs, typically up to 24 months unless longer retention is required by law.

System logs and technical records are retained for security, performance analysis and fraud detection purposes. Retention periods for logs commonly range from several months up to 18 months depending on the nature of the data.

When personal data is no longer required, we securely delete or anonymize it. Deletion requests from users are processed in accordance with applicable law, subject to legal holds and backup copy policies which may delay complete removal.

Your rights

You may exercise your data protection rights by contacting PrimeTopStay. We will respond to verifiable requests in accordance with applicable law and the procedures described below.

• How to request: Submit requests by contacting us at our registered address Tingkat Kurau 4, Mukim 1, 13700 Perai, Pinang, Malaysia or by calling +60127974149. Provide sufficient information to verify your identity and specify the nature of the request.
• Verification and response: We will verify the requestor’s identity and respond within a reasonable timeframe, supplying information about any action taken or explaining lawful reasons for refusing a request.
• Escalation and complaints: If you are not satisfied with our response, you may escalate the matter with our support team and, where applicable, lodge a complaint with a relevant supervisory authority.
• Right to restriction of processing — you can request that PrimeTopStay limit processing of your personal data where accuracy is contested, processing is unlawful but you oppose erasure, or where we no longer need the data but you require it for legal claims.
• Right to data portability — where processing is based on consent or contract and handled by automated means, you may request a structured, commonly used, machine-readable copy of personal data you provided to PrimeTopStay.
• Right to object — you may object to processing based on legitimate interests or direct marketing. When you object, PrimeTopStay will assess the request and either stop the processing or explain compelling legitimate grounds for continuing.
• Right to withdraw consent — if processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect lawfulness of processing carried out prior to the withdrawal.
• Right to lodge a complaint — if you consider PrimeTopStay has not complied with applicable data protection law, you may lodge a complaint with the relevant supervisory authority in Malaysia or contact our data protection contact point listed below.

Exercising Your Privacy Rights

To exercise any privacy rights listed above, submit a verifiable request to PrimeTopStay. Provide sufficient information to identify yourself and the request details. We may ask for proof of identity to protect your privacy and the security of your account. Requests are handled according to applicable law and our internal procedures.

[email protected]

We aim to acknowledge receipt of rights requests within 5 business days and to provide a substantive response within 30 calendar days of verification. Complex requests may require additional time; if so, we will notify you explaining the reason and expected timeline.