Privacy Policy
This Privacy Policy explains how ZYKCO VENTURES MALAYSIA ("ZYK LiveBot", "we", "us") collects, uses, shares and protects personal data when you use the ZYK LiveBot website, dashboard, bidding pages, checkout pages and related services (together, the "Service").
ZYK LiveBot is a live-commerce tool. Businesses ("Sellers") use it to take orders, run auctions and hold lucky draws during their live sessions on social platforms such as Facebook and TikTok. People who buy from those Sellers ("Buyers") interact with the Service by commenting on a Seller's live, messaging the Seller, or using a checkout or bidding page.
- Who is responsible for your data
- Data we collect
- Data from Facebook, Messenger and TikTok
- How we use data
- Who we share data with
- How long we keep data
- Security
- Your rights
- Deleting your data
- Cookies
- International transfers
- Children
- Changes to this policy
- Contact us
1. Who is responsible for your data
Seller data. For information about Sellers and their staff (account details, business details, connected pages), we decide how the data is used, and we are responsible for it.
Buyer data. When a Buyer orders, bids or joins a lucky draw with a Seller, we process the Buyer's data on behalf of that Seller, to provide the Service to them. The Seller decides what they sell, how they use their customers' information, and how they deliver and are paid. Buyers who have questions about how a particular Seller uses their information should also contact that Seller.
We handle personal data in line with Malaysia's Personal Data Protection Act 2010 (PDPA) and other laws that apply to us.
2. Data we collect
From Sellers and their staff
- Account details: name, social login ID, profile picture, email address and contact number.
- Business details: business name, registration number, address, website, payment instructions, bank details and payment QR image that the Seller chooses to show their Buyers.
- Content the Seller adds: products, prices, stock, product images, message templates, shipping rules, membership settings, lucky draw and auction settings.
- Usage and technical data: log-ins, actions in the dashboard, IP address, browser and device type, and error logs.
From Buyers
- Public profile information from the social platform: display name, profile picture and a platform user ID (for example a Facebook page-scoped ID).
- What the Buyer sends: comments on a Seller's live (for example product codes, bids and lucky draw keywords) and messages sent to the Seller's page.
- Order details: items, quantities, amounts, order history, membership points and lucky draw and auction results.
- Delivery and contact details the Buyer enters at checkout: name, phone number, delivery address and notes.
- Payment proof the Buyer uploads, if the Seller asks for it. We do not collect or store full credit or debit card numbers.
- Technical data when using a checkout or bidding page: IP address, browser type and a session cookie.
3. Data from Facebook, Messenger and TikTok
When a Seller connects a Facebook Page or TikTok account, the Seller authorises ZYK LiveBot to access certain data through the platform's official APIs. This can include the connected account's name and picture, the Seller's own posts and live videos, comments on them, and messages sent to the Page. We use this data only to provide the features the Seller uses:
- reading comments on the Seller's own lives to create orders, record bids and enter lucky draws;
- replying to or reacting to a Buyer's comment, and sending the Buyer order confirmations, checkout links and auction or lucky draw results by private message;
- showing the Seller's live video on the Seller's own bidding page.
We do not access accounts that have not authorised the Service. We do not use platform data for advertising, profiling or selling to third parties. We handle it in line with the Meta Platform Terms and the TikTok Developer Terms. Sellers can disconnect a platform account at any time. Its access tokens are then deleted.
4. How we use data
- To provide the Service: capture orders from live comments, keep stock up to date, run auctions and lucky draws, send checkout links and order updates, calculate shipping and membership points, and produce invoices and reports for the Seller.
- Automated replies: if a Seller turns on the AI assistant, a Buyer's message may be processed by an AI language model provider to suggest or send a reply on the Seller's behalf.
- To operate and secure the Service: sign-in, preventing fraud and abuse, fixing errors, keeping backups and monitoring performance.
- To support Sellers: answer questions, handle billing and subscriptions, and send important notices about the Service.
- To meet legal obligations: for example tax and accounting records, and responding to lawful requests.
We process data because it is needed to provide the Service the Seller has asked for, because the user has given consent (for example by connecting an account), because we have a legitimate interest in running a secure, reliable service, or because the law requires it.
5. Who we share data with
We do not sell personal data. We share it only as follows:
- With the Seller. A Buyer's order, delivery, bidding and lucky draw information is shared with the Seller they are buying from.
- With the social platforms (Meta and TikTok), when we send replies, reactions and messages through their APIs on the Seller's behalf.
- With service providers who help us run the Service under confidentiality obligations: web hosting and database providers, email and messaging providers and, when enabled by the Seller, AI language model providers.
- When required by law, or to protect the rights, safety and property of our users, the public or us.
- In a business transfer, such as a merger or sale of assets, subject to this Policy.
6. How long we keep data
- Seller account data is kept while the account is active, and deleted or anonymised within 90 days after the account is closed, except where we must keep records for legal, tax or accounting reasons.
- Buyer order records are kept for as long as the Seller keeps its account, so the Seller can manage orders, deliveries, refunds and accounting, unless deletion is requested as described below.
- Live comments, bids and lucky draw entries are kept to show the Seller the history of each live. Sellers can clear lucky draw participant lists themselves.
- Platform access tokens are deleted when an account is disconnected.
- Server logs are kept for up to 90 days.
7. Security
We protect personal data with reasonable technical and organisational measures. These include encrypted connections (HTTPS), access controls, restricted staff access and secure storage of access tokens. No method of storing or sending data over the internet is completely secure, so we cannot guarantee absolute security. If a data breach affects you, we will notify you and the authorities where the law requires it.
8. Your rights
Subject to the PDPA and other applicable law, you can ask to:
- access the personal data we hold about you;
- correct data that is inaccurate or incomplete;
- delete your data, or stop or limit how it is processed;
- withdraw consent, for example by disconnecting your social account.
To make a request, contact us using the details below. We may need to verify your identity first, and we will reply within the time the law requires. If you are a Buyer, we may pass your request to the Seller concerned, because they decide how your order information is used.
9. Deleting your data
Sellers: disconnect your Facebook Page or TikTok account in the dashboard (Settings → Account). To close your account and delete your data, email admin@zykco.com from your registered email address.
Buyers and anyone else: email admin@zykco.com with the subject "Data deletion request". Include your name and the Facebook or TikTok name you used, and the Seller's page name if you know it. You can also remove ZYK LiveBot's access in your Facebook or TikTok settings. We will confirm once your data has been deleted, usually within 30 days.
10. Cookies
We use essential cookies to keep you signed in, remember your language and keep checkout and bidding pages working (for example remembering your cart or bidding session). The Service embeds content from social platforms, such as a Facebook live video, and those platforms may set their own cookies under their own privacy policies. We do not use advertising cookies.
11. International transfers
Our service providers and the social platforms may store or process data outside Malaysia. When that happens, we take steps required by law to make sure the data stays protected.
12. Children
The Service is not intended for children under 13, or under the minimum age required by the social platform used. We do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.
13. Changes to this policy
We may update this Policy from time to time. We will post the new version on this page and change the "Last updated" date. If the changes are significant, we will notify Sellers through the dashboard or by email.
14. Contact us
ZYKCO VENTURES MALAYSIA (Registration No. 202103263529 (RA0076705-X))
30 Jalan 3B/6, Taman Setapak Indah, 53300 Kuala Lumpur, Malaysia
Email: admin@zykco.com
Phone / WhatsApp: +6011-3960 0646