Dasar Privasi | Privacy Policy

Tarikh kuat kuasa: 13 Jun 2026 | Kemas kini terakhir: 13 Jun 2026

Notis ini disediakan dalam Bahasa Melayu dan Bahasa Inggeris selaras dengan Seksyen 7(3) Akta Perlindungan Data Peribadi 2010.

1. Pengenalan

Dasar Privasi ini menerangkan bagaimana OMNITEK RESOURCES (No. SSM: 202503311365 (NS0315993-M)) ("kami") yang mengendalikan platform SME-Point (https://sme-point.my) mengumpul, menggunakan, menyimpan dan melindungi data peribadi anda selaras dengan Akta Perlindungan Data Peribadi 2010 (PDPA).

2. Data Yang Kami Kumpul

Kategori	Contoh
Data akaun	Nama, alamat e-mel, kata laluan (disulitkan), gambar profil (jika log masuk Google)
Data syarikat	Nama syarikat, no. pendaftaran SSM, TIN, alamat, logo, maklumat hubungan
Data perniagaan	Rekod pelanggan, pembekal, invois, sebut harga, transaksi, maklumat pekerja & gaji (untuk modul payroll)
Data transaksi langganan	Rekod pembayaran langganan melalui FPX (kami TIDAK menyimpan maklumat kad atau kelayakan perbankan anda)
Data teknikal	Alamat IP, jenis pelayar, log akses, kuki sesi

3. Tujuan Pengumpulan

Menyediakan dan mengendalikan perkhidmatan SME-Point;
Memproses pembayaran langganan dan mengaktifkan plan;
Menghantar e-Invois ke LHDN MyInvois atas arahan anda;
Memberi sokongan teknikal melalui Helpdesk;
Menambah baik keselamatan, prestasi dan ciri sistem;
Menghubungi anda mengenai akaun, langganan atau perubahan perkhidmatan.

Kami tidak menjual, menyewa atau berkongsi data peribadi anda kepada mana-mana pihak ketiga untuk tujuan pemasaran.

4. Pendedahan Kepada Pihak Ketiga

Data didedahkan hanya setakat perlu untuk mengendalikan perkhidmatan:

Pihak	Tujuan
ToyyibPay / Billplz	Pemprosesan pembayaran FPX (langganan & kutipan invois anda)
LHDN (MyInvois)	Penghantaran e-Invois — hanya apabila anda mengaktifkan & menghantar
Google	Log masuk Google (jika anda memilih kaedah ini)
Penyedia pengehosan	Penyimpanan data di pelayan yang selamat
Pihak berkuasa	Jika dikehendaki oleh undang-undang Malaysia

5. Keselamatan & Pengasingan Data

Setiap syarikat (tenant) diasingkan sepenuhnya — pengguna syarikat lain tidak boleh mengakses data anda;
Kata laluan disimpan dalam bentuk disulitkan (hashed) dan tidak boleh dibaca oleh sesiapa;
Sambungan dilindungi HTTPS/TLS;
Data disandarkan secara berkala di peringkat pelayan;
Akses pekerja kami kepada data adalah terhad atas dasar keperluan sahaja.

6. Pengekalan & Pemadaman Data

Data kekal selama akaun anda aktif (termasuk plan percuma);
Selepas langganan berbayar tamat, akaun bertukar ke plan percuma dan data tidak dipadam;
Anda boleh memohon eksport data dan/atau pemadaman kekal melalui Helpdesk; pemadaman dilaksanakan dalam tempoh 30 hari selepas pengesahan;
Rekod tertentu mungkin dikekalkan lebih lama jika dikehendaki undang-undang (cth: rekod cukai).

7. Hak Anda Di Bawah PDPA

Anda berhak untuk:

Mengakses data peribadi anda yang kami simpan;
Membetulkan data yang tidak tepat atau tidak lengkap;
Menarik balik persetujuan pemprosesan (tertakluk kepada keperluan perkhidmatan);
Memohon pemadaman data anda.

Untuk melaksanakan hak ini, hubungi kami melalui Helpdesk dalam sistem atau e-mel support@sme-point.my.

8. Kuki (Cookies)

SME-Point menggunakan kuki sesi yang diperlukan untuk log masuk dan keselamatan (perlindungan CSRF). Kami tidak menggunakan kuki penjejakan pihak ketiga untuk iklan.

9. Pindaan Dasar

Kami mungkin meminda Dasar Privasi ini dari semasa ke semasa. Perubahan ketara akan dimaklumkan melalui sistem atau e-mel. Penggunaan berterusan selepas pindaan bermakna anda menerima dasar yang dikemas kini.

10. Hubungi Kami

OMNITEK RESOURCES (No. SSM: 202503311365 (NS0315993-M))
Level 7 Menara Arina UNITI, Jalan Raja Muda Abdul Aziz, 50100 Kuala Lumpur
E-mel: support@sme-point.my

Effective date: 13 June 2026 | Last updated: 13 June 2026

This notice is provided in Bahasa Melayu and English in accordance with Section 7(3) of the Personal Data Protection Act 2010.

1. Introduction

This Privacy Policy explains how OMNITEK RESOURCES (SSM No.: 202503311365 (NS0315993-M)) ("we"), operator of the SME-Point platform (https://sme-point.my), collects, uses, stores and protects your personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

2. Data We Collect

Category	Examples
Account data	Name, email address, password (encrypted), profile picture (if using Google login)
Company data	Company name, SSM registration number, TIN, address, logo, contact details
Business data	Customer, vendor, invoice, quotation and transaction records, employee & salary information (for the payroll module)
Subscription transaction data	FPX subscription payment records (we do NOT store your card or banking credentials)
Technical data	IP address, browser type, access logs, session cookies

3. Purpose of Collection

To provide and operate the SME-Point service;
To process subscription payments and activate plans;
To submit e-Invoices to LHDN MyInvois at your instruction;
To provide technical support via the Helpdesk;
To improve system security, performance and features;
To contact you regarding your account, subscription or service changes.

We do not sell, rent or share your personal data with any third party for marketing purposes.

4. Third-Party Disclosure

Data is disclosed only as necessary to operate the service:

Party	Purpose
ToyyibPay / Billplz	FPX payment processing (subscriptions & your invoice collections)
LHDN (MyInvois)	e-Invoice submission — only when you activate & submit
Google	Google login (if you choose this method)
Hosting providers	Data storage on secure servers
Authorities	Where required by Malaysian law

5. Security & Data Segregation

Each company (tenant) is fully segregated — users of other companies cannot access your data;
Passwords are stored in encrypted (hashed) form and cannot be read by anyone;
Connections are protected by HTTPS/TLS;
Data is backed up regularly at server level;
Our staff's access to data is limited on a need-to-know basis only.

6. Retention & Deletion

Data is retained while your account is active (including on the free plan);
After a paid subscription ends, your account reverts to the free plan and data is not deleted;
You may request data export and/or permanent deletion via the Helpdesk; deletion is carried out within 30 days of confirmation;
Certain records may be retained longer where required by law (e.g. tax records).

7. Your Rights Under the PDPA

You have the right to:

Access the personal data we hold about you;
Correct inaccurate or incomplete data;
Withdraw consent to processing (subject to service requirements);
Request deletion of your data.

To exercise these rights, contact us via the in-system Helpdesk or email support@sme-point.my.

8. Cookies

SME-Point uses essential session cookies for login and security (CSRF protection). We do not use third-party advertising/tracking cookies.

9. Amendments

We may amend this Privacy Policy from time to time. Material changes will be notified via the system or email. Continued use after amendment constitutes acceptance of the updated policy.

10. Contact Us

OMNITEK RESOURCES (SSM No.: 202503311365 (NS0315993-M))
Level 7 Menara Arina UNITI, Jalan Raja Muda Abdul Aziz, 50100 Kuala Lumpur
Email: support@sme-point.my