Date: 24 March 2023



This Policy is applicable when you are engaging with us including websites, applications, software, hiring our service (including but not limited to Gamification, Game Development and Game Art Assets), using our product(s) or service(s), commercial transactions and all of our related services, which collectively referred to as the “Services”. Whenever referred to us, our and we shall refer to Why Knot Sdn. Bhd., our group of companies and our affiliates. Whenever referred to you, your or user shall refer to those who engage with us. This policy will be applicable once you start to engage with us. By subscribing to our Services, you hereby give your express consents to us to generate, process, transfer and share your data in accordance with this privacy policy. We reserve our rights to change and/ or update this policy at any time and from time to time without prior notice by providing the new version on our websites, applications and/or other platforms. You are encouraged to keep updated with our change from time to time.


Limitation of Our Privacy Policy

We may develop and/ or provide product or service to other businesses. In this situation, we will encourage our affiliates, business clients and customers to have and enforce privacy policies. However, take notice that our privacy policies and practice is only applicable or limited to those who engage us directly. If you are an end consumer, please check with other sellers, service providers, or other businesses that you engage with to inquire about their privacy policies. We are not responsible and we disclaim any liability of privacy obligations of end consumers related to other businesses.


Compliance with Jurisdictional Privacy Law

Change of Jurisdiction: We are primarily complying with the Malaysian Personal Data Protection Act 2010 where our company is based at. However, from time to time, our Services may be engaged by you in a jurisdiction outside of our local law. We endeavour to comply with the local law of our clients and customers subject to our vicinity and power. Change of Requirements: From time to time, any privacy law local or external may be updated and there will be new requirements. We endeavour to take step and initiative to fulfil with the updated requirements. If you are resident of any external jurisdiction or if you are aware of any updated requirements, you may issue us a notice to inquire about our compliance with jurisdictional and updated privacy laws.


Data in our Services

As we provide range of products and services, your data is to be used for the complete and effective delivery of our Services to you. In example, we may collect your data to create a registration of internal or viewable account, to have your contact information accessible for any updates or to arrange payments matters. Note that the use of your personal data may change from time to time depending on the particular Services that you are engaged with us. In the event that you are engaging us for specific commercial purpose, we may also use your data to fulfil our contractual and legal obligation to you or compliance of other legal obligation.


Data in our Websites

We may use standard procedure in the operation of our websites by using the log files. The information collected by log files include internet protocol (IP) addresses, browser type, Internet Service Provider (ISP), date and time stamp, referring/exit pages, and possibly the number of clicks. Generally, these are not linked to any information that is personally identifiable. The purpose of the information is for analysing trends, administering the site, tracking your movement on the website, and gathering demographic information. We may also use cookies to store information including visitors’ preferences, and the pages on the website that the visitor accessed or visited. The information may be used to optimize your experience by customizing our web page content based on visitors’ browser type and/or other information.


Data in Third Party Service Providers

We may share or transfer your data within our group of companies, with or to our affiliates, licensees and business partners. We may appoint third party service provider to perform functions on our behalf, like sending out and distributing our administrative and promotional mail, emails or text messages. We may share your data including personally identifiable information with such service providers to process payment, fulfil orders, deliver packages, send postal or email materials, administer contests, remove repetitive information on customer lists, analyse data, provide marketing assistance, provide search results and links, process credit card payments, operate the Services, troubleshoot, and provide customer service. Our websites, applications and/or platforms may from time to time contain links to and from the third party(ies). You may follow a link to any of these places but these places may have their own privacy practices and policies, and are independent from our privacy policies. We encourage third party service providers to have and enforce their own privacy policies. However, the use of your data by such parties is governed by their privacy policies and their actual privacy practice and is not subject to our control. We do not accept any responsibility or liability for third party(ies)’ policies.


Data in Advertising Partners

We may have advertising partners on our platforms used by you in engaging with our Services. Our advertising partners may collect information regarding to Cookies and IP Address for the effectiveness or having feedback of their advertisement. We encourage our advertising partner to have and enforce privacy policies. However, the use of your data by such advertising partners is governed by their privacy policies and their actual privacy practice and is not subject to our control.


Inquiry on Third Party Service Providers and Advertising Partners

Our third-party service providers and advertising partners may change from time to time in accordance with our business and commercial needs. We may also change them for the purpose of our effective operation and delivery of our obligations to you. If you need to inquire on our service providers and advertising partners, you may issue us a notice and we may assist you if there’s no legal restriction to direct you to them. You may also otherwise inquire any third party service providers and advertising partners directly, if you already know or we already disclose the list of third-party service providers and advertising partners.


Legal Basis under EU Privacy Requirement

We may process your information based on the following legal basis: (i) that you have given consent and have not chosen to opt-out from our Services (except in any jurisdiction or regulation in that particular state otherwise); (ii) wherever it is needed to fulfil our contractual performance and compliance of other legal obligation with you or other party that we are obligated to, including but not limited to the operation and maintenance of the Services, creation of account in our Services or management of your relationship with other users; (iii) that is required for public interest or for official authority; (iv) that we or any third party may pursue legitimate interest or purpose; (v) that is necessary to maintain safe and lawful use of our Services by all users and to probably take necessary step to inhibit, restrict or deter any unsafe and unlawful use; (vi) that is necessary to have accurate and correct information provided by you so that we could contact you for any administrative or legal issue related to the Services;  (vii) verifying on any changes or updates on your account or other information while using the Services; or (vii) fulfilling our performance and obligation by troubleshooting and improving our Services. If you wish to clarify with us on the legal basis regarding how we process your information, you may issue us a notice to inquire.


For EU, UK or Switzerland Resident

If you are located in the EEA, UK or Switzerland, you may have the rights (pursuant to Art. 15-18 and Art. 19-21 General Data Protection Regulation (GDPR)) and you may issue notice to us and we may assist you to the extent legitimately possible for the following purposes: (i) to access (including a copy of) your Collected Data (as defined in the GDPR) (Art. 15 GDPR); (ii) to correct, delete or restrict (stop any active) processing of your Collected Data (Art. 16-18 GDPR); (iii) to obtain the Collected Data you have provided to us for a contract or with your consent in a structured, machine-readable format, and to ask us to share (port) your Collected Data to another controller (Art. 20 GDPR); (iv) to object to the processing of your Collected Data in some circumstances (in particular, where we don’t have to process the data to meet a contractual or other legal requirement, or where we are using the data for direct marketing – Art. 21 GDPR); (v) where we have asked for your consent, you may withdraw consent at any time (Art. 7 para 3 GDPR), this will not affect any processing which has already taken place at that time or prior to withdrawal of consent; and (vi) you also have the right to lodge a complaint to a supervisory authority for data protection (Art. 77(1) GDPR) in the country/region where you live, where you work, or where you consider that a breach of data protection has occurred – although we hope that we can assist with queries or concerns you may have about our use of your Collected Data.


Protection of Other Users

We may share your information for our protection and the protection of others. We reserve the right to disclose your information as required by law and when we believe that disclosure is necessary to protect our rights and/or comply with a judicial proceeding, court order, authority or legal process served on our website or on our company; enforce or apply this Privacy Policy, our Website Terms of Use or other agreements; or protect the rights, property or safety of the website, its users or others.


Data Security

We employ internally a system to keep your data safe from security breach. However, we are unable to guarantee the whole safety of your data. Regardless, we endeavour to take step to keep current our security system, make regular maintenance and inspect for any breach. If you are aware of any potential or actual breach, please provide us with notices so that we could investigate and if necessary repair the breach immediately to the best extent that we can. You are encouraged not to disclose any data more than what is required or requested by us.


Data Integrity

We strive to have the correct, complete and accurate data in our system whenever you are engaged with our Services. You shall always ensure that the data that you provide to us are correct, complete and accurate so that we could comply with privacy law requirements and our contractual obligation to you. You may update your correct, complete and accurate data by providing us notice. However, we make no guarantee whatsoever to the correctness, completeness and accuracy of the data collected.


Data Retention

We may be required by law to retain data for record purpose. In this situation, even after you delete your account or terminate your service with us, we may still keep your data. If you wish to delete your data in whole, please issue us a notice and we may consider your request. Your requests or notices of deletion to us may be processed and/or considered by us. While we endeavour to respond to you, your rights may be limited under the laws if we are so required to keep or have compelling legitimate interests in keeping.


Notices and Option to Opt-Out

You may issue us a notice to our address information in Contact Us column on our website or you may submit your questions in Business Enquiry box in the Contact Us segment of our website. The notices are as mentioned in this policy for example, notice to update your data or notice to inquiry compliance with jurisdictional law. You may also choose to opt-out from providing data to us. However, in some cases, whenever you choose to opt-out we may not operate and deliver our Services to you. In that case, you may be required to delete your account with us or terminate your engagement with us subject to any prior obligations regarding deletion and termination.


Children’s Information

Another part of our priority is adding protection for children while using the internet. We encourage parents and guardians to observe, participate in, and/or monitor and guide their online activity. We might not knowingly collect any personal identifiable information from children under the age of 13. If you think that your child provided this kind of information while using our Services, we strongly encourage you to contact us immediately and we will do our best efforts to promptly remove such information from our records.