This Privacy Policy explains how Berjaya AI Labs Sdn. Bhd. (“Berjaya AI Labs”, “we”, “us”, or “our”) collects, uses, discloses, stores, and protects personal data when you visit our website, contact us, use our services, interact with our AI solutions, or communicate with us through channels including WhatsApp, email, web forms, and other digital platforms.
This Privacy Policy is intended to comply with applicable privacy and data protection laws, including the Personal Data Protection Act 2010 of Malaysia (“PDPA”), and to support our role in providing technology services, including WhatsApp Business Platform automation and related Meta business messaging integrations.
1. About Us
Berjaya AI Labs provides applied enterprise AI solutions for business operations, customer engagement, workflow automation, private AI deployment, conversational agents, document intelligence, social listening, analytics, and related technology services.
Our services may include the design, deployment, management, integration, and support of AI-powered automation systems, including WhatsApp automation solutions for businesses.
2. Personal Data We Collect
We may collect and process personal data that you provide to us directly, that is generated through your use of our website or services, or that is provided by our business customers in connection with their use of our solutions.
This may include:
Contact and identity information, such as your name, company name, job title, phone number, WhatsApp number, email address, and business contact details.
Communication information, such as messages, enquiries, support requests, WhatsApp conversations, chatbot interactions, form submissions, email correspondence, call records, and other communications with us.
Business and service information, such as company requirements, project details, workflow information, system configuration details, customer support needs, and implementation records.
Technical information, such as IP address, browser type, device information, operating system, website usage data, cookies, log files, and analytics data.
WhatsApp Business Platform data, where applicable, such as WhatsApp user identifiers, phone numbers, message metadata, message content, opt-in and opt-out records, template message records, delivery status, and interaction history, to the extent required to provide WhatsApp automation and messaging services.
AI interaction data, such as prompts, inputs, outputs, knowledge-base queries, conversation logs, user instructions, and system usage records, where you or our customers use AI-enabled systems provided or supported by us.
We do not intentionally collect personal data that is unnecessary for the purposes described in this Privacy Policy.
3. How We Collect Personal Data
We may collect personal data when you:
- Visit or interact with our website.
- Submit an enquiry, contact form, demo request, or service request.
- Communicate with us through WhatsApp, email, phone, social media, or other channels.
- Use an AI chatbot, WhatsApp automation flow, or customer engagement system powered or supported by us.
- Become our customer, supplier, partner, contractor, or business contact.
- Attend our events, meetings, consultations, demonstrations, or training sessions.
- Authorise a business, platform, or third-party service to share information with us.
Where we process personal data on behalf of a business customer, that customer is responsible for ensuring that it has obtained all required notices, permissions, consents, and lawful bases to provide such data to us.
4. Purposes of Processing Personal Data
We may collect, use, process, and disclose personal data for the following purposes:
- To respond to enquiries, requests, and communications.
- To provide consultations, proposals, quotations, demonstrations, and customer support.
- To deliver, operate, maintain, and improve our AI solutions, automation systems, workflow tools, and customer engagement platforms.
- To provide WhatsApp automation, messaging, notification, chatbot, customer support, and integration services.
- To configure and manage Meta Business, WhatsApp Business Platform, Cloud API, embedded signup, message templates, webhooks, system integrations, and related technical services.
- To authenticate users, manage accounts, verify business information, and support customer onboarding.
- To send service-related communications, including notifications, confirmations, reminders, alerts, support messages, and administrative updates.
- To monitor, troubleshoot, secure, audit, and improve our website, systems, services, and integrations.
- To develop and improve our AI models, tools, knowledge bases, workflows, and automation processes, where permitted by contract and applicable law.
- To comply with legal, regulatory, contractual, tax, audit, security, and compliance obligations.
- To prevent fraud, misuse, unauthorised access, security incidents, spam, or unlawful activity.
- To enforce our agreements, policies, and legal rights.
We will not use WhatsApp user data obtained through Meta or WhatsApp for unrelated purposes, such as unauthorised advertising, profiling, or resale. Such data will be used only as reasonably necessary to provide, secure, support, and improve messaging services between the relevant business and the WhatsApp user.
5. WhatsApp Automation and Meta Technology Provider Services
Where we provide WhatsApp automation or act as a technology provider, service provider, processor, sub-processor, integration partner, or technical implementation provider, we may process personal data for and on behalf of our business customers.
This may include:
- Enabling businesses to send and receive WhatsApp messages.
- Supporting customer service, sales, booking, notification, reminder, marketing, and transactional messaging workflows.
- Managing message templates, opt-ins, opt-outs, automation rules, routing, escalation, and chatbot logic.
- Integrating WhatsApp with CRM systems, helpdesk platforms, databases, payment systems, booking systems, analytics tools, or other approved business systems.
- Monitoring delivery status, message quality, errors, and platform performance.
- Supporting compliance with applicable WhatsApp, Meta, and business messaging policies.
Our business customers are responsible for ensuring that WhatsApp users have provided the required consent or opt-in before receiving messages, especially marketing or promotional messages. Users must also be provided with a clear and easy way to opt out of receiving further messages.
If you receive WhatsApp messages from a business using technology provided by Berjaya AI Labs, you should contact that business directly for questions about its use of your personal data. You may also contact us using the details below if you believe your data has been processed through our systems.
6. Consent, Opt-In, and Opt-Out for WhatsApp Communications
Where required, we or our business customers will obtain consent before sending WhatsApp messages to users.
Consent may be obtained through website forms, checkout forms, lead forms, QR codes, sign-up forms, customer support interactions, written agreements, verbal confirmations, or other lawful opt-in methods.
You may opt out of WhatsApp messages by following the instructions provided in the message, replying with a recognised opt-out keyword such as “STOP”, or contacting the relevant business directly.
After an opt-out request is received, further non-essential WhatsApp messages should stop, except where messages are necessary for legal, security, transactional, or service-related purposes.
7. Disclosure of Personal Data
We may disclose personal data to the following parties where necessary for the purposes described in this Privacy Policy:
- Our employees, officers, directors, contractors, consultants, and authorised representatives.
- Berjaya group companies, affiliates, or related entities, where relevant to the provision of services.
- Business customers on whose behalf we process personal data.
- Technology service providers, cloud hosting providers, software vendors, analytics providers, cybersecurity providers, payment providers, CRM providers, and communication service providers.
- Meta, WhatsApp, and related platform providers where required for WhatsApp Business Platform services.
- Professional advisers, auditors, insurers, lawyers, banks, and financial institutions.
- Regulators, law enforcement agencies, government authorities, courts, or other parties where required by law.
- Parties involved in a merger, acquisition, restructuring, financing, sale of assets, or corporate transaction.
We do not sell personal data.
8. International Transfers
Your personal data may be processed, stored, or transferred outside Malaysia where our technology providers, cloud infrastructure, communication platforms, support providers, or business partners operate in other countries.
Where we transfer personal data internationally, we will take reasonable steps to ensure that such transfers are carried out in accordance with applicable data protection laws and appropriate safeguards.
9. Cookies and Website Technologies
Our website may use cookies, pixels, analytics tools, and similar technologies to:
- Operate and secure the website.
- Understand website traffic and visitor behaviour.
- Improve user experience and website performance.
- Support marketing, remarketing, and campaign measurement, where applicable.
You may disable cookies through your browser settings. However, some website features may not function properly if cookies are disabled.
10. AI Systems and Automated Processing
Some of our services may involve AI-powered tools, chatbots, assistants, workflow automation, document processing, or analytics systems.
Where AI systems process personal data, we take reasonable steps to ensure that such processing is limited to the relevant business purpose, subject to applicable contractual controls, and protected using appropriate security measures.
Unless expressly agreed in writing, customers should not submit unnecessary sensitive personal data, confidential information, passwords, financial credentials, medical information, or legally privileged information into AI systems.
Where our AI services are deployed privately or within a customer-controlled environment, the applicable data processing terms may be governed by the relevant service agreement.
11. Data Security
We take reasonable administrative, technical, and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, disclosure, or destruction.
These measures may include access controls, authentication, encryption, secure hosting, logging, monitoring, staff training, confidentiality obligations, vendor controls, and security review processes.
However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.
12. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, to provide our services, to comply with legal and regulatory obligations, to resolve disputes, to enforce agreements, and to maintain business records.
WhatsApp message records, chatbot logs, technical logs, and automation records may be retained for operational, support, audit, compliance, and security purposes, subject to applicable agreements and laws.
When personal data is no longer required, we will take reasonable steps to delete, anonymise, or securely dispose of it.
13. Your Rights
Subject to applicable laws, you may have the right to:
- Request access to your personal data.
- Request correction of inaccurate, incomplete, or outdated personal data.
- Withdraw consent, where processing is based on consent.
- Object to or limit certain types of processing.
- Request deletion of personal data, where applicable.
- Opt out of direct marketing communications.
- Ask questions or make a complaint about how your personal data is handled.
To exercise your rights, please contact us using the details below.
We may request verification of your identity before responding to your request.
14. Personal Data of Minors
Our services are intended primarily for businesses and professional users. We do not knowingly collect personal data from children or minors without appropriate consent from a parent, guardian, or responsible adult where required by law.
If you believe that a minor has provided personal data to us without appropriate consent, please contact us so that we can take appropriate action.
15. Third-Party Websites and Platforms
Our website or services may contain links to third-party websites, applications, platforms, or services, including Meta, WhatsApp, cloud providers, analytics providers, CRM systems, or customer systems.
We are not responsible for the privacy practices, content, or security of third-party websites or platforms. You should review their privacy policies before providing personal data to them.
16. Business Customer Responsibilities
Where a business customer uses our services to communicate with its own customers, employees, users, or contacts, the business customer is responsible for:
- Providing appropriate privacy notices.
- Obtaining required consents, opt-ins, and permissions.
- Ensuring that message recipients have agreed to receive WhatsApp or other communications.
- Ensuring that message content complies with applicable laws and platform policies.
- Handling data subject requests from its own users.
- Ensuring that personal data submitted to our systems is lawful, accurate, relevant, and necessary.
We may act as a data processor or service provider for such business customers, depending on the applicable agreement and processing activity.
17. Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements, platform requirements, or business operations.
The updated version will be posted on our website with the revised “Last Updated” date. Continued use of our website or services after the updated Privacy Policy is posted means that you acknowledge the updated terms.
18. Contact Us
For questions, requests, complaints, or concerns about this Privacy Policy or our handling of personal data, please contact:
Berjaya AI Labs Sdn. Bhd.
Address: Berjaya AI Labs Sdn. Bhd.
Email: ai.labs@berjaya.com.my
Phone: +603-2149 1999
Website: berjayaailabs.my