1. About this policy
This Privacy Policy explains how BINA RESIT collects, uses, stores, shares and protects personal data when you visit binaresit.com, create an account, use the platform, contact us or use related services.
BINA RESIT is owned and operated by Originald Legacy (IP0539997-V), 95, Regat Sri Cempaka, Taman Cempaka, 31400 Ipoh, Perak, Malaysia.
2. Compliance with Malaysian data-protection law
BINA RESIT is committed to handling personal data responsibly in line with the Personal Data Protection Act 2010 [Act 709] (the Personal Data Protection Act or PDPA), including applicable requirements introduced under the Personal Data Protection (Amendment) Act 2024 [Act A1727], and other applicable laws of Malaysia.
This policy should be read together with our Terms & Conditions. It does not reduce rights that cannot lawfully be excluded under applicable law.
3. Who controls the data
For your BINA RESIT account, subscription, payment, service communications, security controls and platform operations, BINA RESIT acts as the data controller.
When you save your own customer, supplier, employee or business contact information in a document, you decide why and how that information is used in your business. In that context, you are responsible for that information and BINA RESIT processes it only to provide, secure, maintain and support the service for you.
If you are a customer of a BINA RESIT user and have a question about information in that user's document, please contact that business directly first.
4. Personal data we may collect
Depending on how you use BINA RESIT, we may process your name, Google sign-in identity, email address, language preference, account and workspace identifiers, subscription status, payment references, support messages, security reports and activity records.
If you choose to save business records, we may also process company information, customer names, contact details, addresses, item or service details, document content and payment details that you enter.
We may collect limited technical information such as IP address, browser or device information, session identifiers, access times, pages used and security logs.
5. Where the data comes from
We collect data directly from you when you sign in, create a document, save a profile, make a payment, submit a support request, report a concern or use account-security functions.
We may receive payment status and transaction references from BayarCash, email-delivery events from our email service provider, and authentication information from Google when you choose to sign in with Google.
6. Why we use personal data
We use personal data to create and maintain your account, provide your workspace, generate and save documents, process subscriptions, respond to support requests, protect the platform, prevent fraud or misuse, comply with legal obligations, improve service reliability and communicate important account or policy updates.
We do not sell personal data or use saved document content for advertising to other users.
7. When data is required or optional
Some information is required to provide a registered account, such as a Google sign-in identity and email address. Without it, we may not be able to provide an account workspace or saved records.
Company, customer and document fields are generally entered at your choice, but certain information may be required for a document format that you choose to create.
8. Google sign-in
BINA RESIT uses Google sign-in to authenticate registered users. We receive only the account information needed to identify your BINA RESIT account, such as your name, email address and Google account identifier.
We do not receive or store your Google password. Protect your Google account and report suspected unauthorised access to security@binaresit.com.
9. Payments and subscriptions
Subscription payments are processed by BayarCash. BINA RESIT stores the order number, payment status, payment channel, transaction reference, amount, promotion or voucher information and subscription period needed to confirm and manage access.
We do not receive or store your full bank credentials, card number, CVV or banking password. Do not send these details to BINA RESIT by email or support channels.
10. Service providers
We use carefully selected service providers where needed to operate BINA RESIT. These may include Cloudflare for website, application and data infrastructure; Google for sign-in; BayarCash for payment processing; Resend for service email delivery; and providers used for lawful analytics, monitoring, backup or security.
These providers may process personal data only as needed to provide their service to us, subject to appropriate contractual, technical or organisational safeguards.
11. International processing
Some service providers may process or store information outside Malaysia. Where this happens, we take reasonable steps to use reputable providers and appropriate safeguards consistent with applicable data-protection requirements.
12. Cookies, sessions and analytics
We use essential cookies or similar technologies to keep you signed in, protect sessions, remember language preferences and keep the service working securely.
We may use limited analytics and performance information to understand reliability and usage trends. We do not use saved document content to build advertising profiles.
13. Express Receipt
Express Receipt is designed for use without registration. We do not store the generated PDF or the receipt content as a BINA RESIT account record.
We may record anonymous aggregate measures, such as Express PDF-download count, total receipt value, language and item count, to understand product usage. These measures do not include the issuer, customer or item details entered into the Express receipt.
14. Document verification and Integrity Seal
Registered paid-access documents may include QR Document Verification and a Document Integrity Seal. These functions compare the displayed record with the official version stored by BINA RESIT.
Before an official document preview is opened, the viewer may be asked for the final four digits of either the issuer's or customer's phone number shown on the document. This is an additional privacy check. We do not expose phone numbers through this check.
To protect the public verification service, we record limited verification-event metadata: result, time, opaque verification ID, route, a one-way IP hash with a coarse network prefix, country, Cloudflare colo and ASN where Cloudflare provides them, browser category and referrer origin. We do not store the submitted four-digit detail, a raw IP address, document content or the referrer path/query. These events expire after 90 days.
15. Authorised support and security access
Support Mode and admin review may be used by authorised BINA RESIT personnel only when reasonably necessary for support, security review, recovery, legal compliance or anti-scam enforcement. Access is controlled, limited to the task and recorded internally.
Support access is read-only by default. We do not access a workspace merely for curiosity, marketing or unrelated purposes. We never ask for your Google password, OTP, banking password or full card details.
16. How we protect data
We use reasonable technical and organisational safeguards, including encrypted transport, authenticated access, workspace separation, role-based restrictions, session controls, audit records, security monitoring and backups.
No internet service can guarantee absolute security. Please protect your Google account, use trusted devices and contact security@binaresit.com promptly if you suspect unauthorised access.
17. Retention, deletion and backups
We retain account, document, payment, security and support information for as long as reasonably necessary to provide the service, meet legal, accounting, dispute-resolution, backup and security requirements, or enforce our policies.
When you delete a record, it may remain in a recoverable state for a limited period and in protected backups before permanent deletion. We may retain limited records where reasonably necessary to prevent fraud, resolve disputes, comply with law or preserve evidence.
18. Your privacy rights
Subject to applicable law and reasonable identity verification, you may request access to your personal data, correction of inaccurate data, information about how your data is used, withdrawal of consent where consent applies, or deletion where we no longer need to retain the information.
To make a privacy request, email legal@binaresit.com with enough information for us to verify your identity and understand your request. If the request concerns a business document created by another BINA RESIT user, contact that business first.
19. Data incidents
If we identify a personal-data incident, we will investigate, contain and assess it. Where notification is required by applicable law, we will notify the relevant authority and affected individuals within the required timeframe.
20. Contact and changes to this policy
For privacy, personal-data or legal matters, contact legal@binaresit.com.
For general questions, contact hello@binaresit.com.
For product support, contact support@binaresit.com.
For security or scam reports, contact security@binaresit.com.
We may update this policy when our service, legal obligations or data practices change. The latest version and revision date will be published on this page.