TropiGo 服务者（骑手）隐私政策

TRIFIVE SDN. BHD.（以下简称"平台"）作为 PDPA 项下的资料控制者。本隐私政策说明平台如何收集、使用、存储、披露及保护骑手个人资料，同时列明骑手依据 PDPA 享有的各项权利。

骑手完成注册、登录及持续使用骑手 App，即代表您已阅读、理解并同意本隐私政策全部条款。若您不接受本政策，请停止使用平台所有服务。

TRIFIVE SDN. BHD. (hereinafter referred to as the "Platform") acts as the Data Controller under PDPA. This Privacy Policy describes how the Platform collects, uses, stores, discloses and protects riders' personal data, and sets out your rights under PDPA.

By completing registration, logging in and continuously using the Rider App, you acknowledge that you have read, understood and agreed to all clauses of this Privacy Policy. If you do not accept this Policy, please cease all use of Platform services.

平台收集信息分为【必填信息】、【自愿提交信息】、【设备自动采集信息】。详情可查阅附件《个人信息收集清单》。

2.1 必填信息（不提供则无法开通接单权限）

1. 身份资质信息：姓名、身份证 / 护照号码、联系电话、电子邮箱、居住地址；
2. 从业资质：马来西亚有效驾照、车辆注册证、车辆保险、路税凭证；
3. 结算信息：银行账户名称、银行账号，用于配送服务费结算；
4. 人脸识别影像：用于实名核验、账号安全校验。

2.2 自愿提供信息（可选）

紧急联系人姓名与电话、个人头像、相关从业资格证书。

2.3 App 自动采集设备与日志信息

登录 IP 地址、设备型号、操作系统、应用操作日志、定位信息（接单、配送轨迹）。

Information collected by the Platform includes Mandatory Data, Voluntarily Submitted Data and Automatically Collected Device Data. Please refer to attached Personal Data Collection List for full details.

2.1 Mandatory Data (Order access will not be activated without provision)

1. Identity information: Full name, ID/Passport number, contact mobile number, email, residential address;
2. Delivery qualification: Valid Malaysian driving license, vehicle registration document, vehicle insurance, road tax certificate;
3. Settlement data: Beneficiary name and bank account number for delivery fee settlement;
4. Facial recognition image: For real-name verification and account security authentication.

2.2 Voluntarily submitted data (Optional)

Emergency contact name and contact number, profile photo, relevant vocational certificates.

2.3 Automatically collected device & log data

Login IP address, device model, operating system, operation logs, geolocation (for order acceptance and delivery tracking).

平台仅基于以下合法目的处理个人资料：

• 骑手注册实名审核、资质核验、开通 / 管理接单权限；
• 展示订单、记录配送轨迹、完成履约、处理客诉与纠纷；
• 配送服务费结算、扣款、保证金管理、资金提现；
• 账号安全风控，识别异常登录、虚假订单、违规行为稽查；
• 推送订单提醒、系统通知、平台规则更新；
• 平台系统优化、匿名化数据分析，改善配送服务；
• 遵守马来西亚税法、PDPA、司法机关、监管机构法定调查要求；
• 执行《服务者注册协议》《账号注销协议》以及平台各项运营规则。

未经骑手书面许可，平台不会将个人资料用于本政策载明范围以外的用途。

The Platform processes personal data solely for the following legitimate purposes:

• Rider registration review, qualification verification, activation and administration of order access;
• Display orders, record delivery tracking, fulfil orders and handle customer complaints & disputes;
• Delivery fee settlement, penalty deduction, security deposit administration and fund withdrawal;
• Account risk control, detection of abnormal login, fake orders and violation audits;
• Send order alerts, system notifications and platform rule updates;
• Platform system optimisation and anonymised data analysis to improve delivery services;
• Comply with Malaysian tax laws, PDPA, and statutory requests from courts and regulatory authorities;
• Enforce Service Provider Registration Agreement, Account Cancellation Agreement and all platform operational rules.

Personal data will not be used for purposes outside this Policy without your written consent.

4.1 平台不会出售、出租骑手个人资料。仅在以下情形有限共享信息：

1. 获得骑手书面同意；
2. 为完成支付、消息推送、地图导航、客服通讯、安全风控，向合作服务商提供最小必要信息；全部第三方名单详见《第三方 SDK 共享清单》；
3. 依据法院命令、政府监管机构法定要求进行披露；
4. 处理订单纠纷、理赔争议，向消费者、仲裁机构出示必要资料。

4.2 所有第三方合作方必须遵守 PDPA 数据保护义务。

4.1 The Platform shall not sell or rent rider personal data. Limited data sharing is permitted only under the circumstances below:

1. Written consent obtained from the rider;
2. Disclose minimum necessary data to service partners to facilitate payment, push notification, map navigation, customer service communication and risk control. Refer to Third-Party SDK Sharing List for full list of partners;
3. Disclosure required by court orders or statutory requests from government regulators;
4. Provide necessary documents to consumers or arbitration bodies to resolve order disputes and claims.

4.2 All third-party partners must comply with data protection obligations under PDPA.

数据主要存储于马来西亚境内合规服务器；跨境传输严格遵循 PDPA 跨境数据转移条款。

留存期限：

• ① 账号正常使用期间：持续保存身份、资质、交易、配送数据；
• ② 账号注销完成后：身份资质信息在 30 日内匿名化或删除；
• ③ 财务交易记录、违规记录，依法最长留存 7 年，用于税务、纠纷举证；
• ④ 存在未完结纠纷、司法调查的相关资料，保存至案件终结。

Data is primarily stored on compliant servers within Malaysia. Any cross-border transfer shall strictly comply with PDPA cross-border data transfer provisions.

Retention period:

• ① While account remains active: Identity, qualification, transaction and delivery data will be retained;
• ② After account cancellation: Identity and qualification data will be anonymised or erased within 30 days;
• ③ Financial transaction records and violation logs will be retained for maximum 7 years for taxation and evidence preservation;
• ④ Data related to unresolved disputes or judicial investigations will be kept until case closure.

您有权随时向平台发送书面邮件申请：

• 查询权：获取平台所持有的您个人资料副本；
• 更正权：要求修正不准确、不完整信息；
• 删除权：满足条件时申请删除个人资料（账号注销规则参照《账号注销协议》）；
• 撤回同意权：撤回后续数据处理授权，不影响此前合法的数据处理行为；
• 限制处理权：在法定条件下申请限制资料处理。

权利申请请发送至 info@tropigo.my，并附上身份核验材料，平台按照 PDPA 法定时限响应。

You may submit a written request via email to the Platform at any time to exercise:

• Right of access: Obtain a copy of your personal data held by the Platform;
• Right of correction: Request amendment of inaccurate or incomplete data;
• Right of erasure: Request deletion subject to applicable conditions (refer to Account Cancellation Agreement for account termination);
• Right to withdraw consent: Withdraw consent for future data processing without affecting prior lawful processing activities;
• Right to restrict processing: Request limitation of data processing under statutory conditions.

Please send your request to info@tropigo.my together with identity verification documents. The Platform will respond within PDPA statutory timelines.

• 保证提交给平台的证件、信息真实有效，信息变更及时更新；
• 通过订单获取的消费者姓名、电话、地址仅限本次订单履约使用；禁止私自保存、转发、售卖；账号注销前，必须彻底删除本地设备存储的全部消费者信息；
• 严禁泄露商家商业信息；
• 因骑手违规泄露信息造成损失，由骑手独立承担全部法律责任。

• Warrant all submitted documents and information are true and valid, and update information promptly upon changes;
• Consumer name, phone number and address obtained from orders may only be used to fulfil the corresponding order. Unauthorised storage, forwarding or sale is prohibited. All locally stored consumer data must be fully erased before account cancellation;
• Unauthorised disclosure of merchant commercial information is forbidden;
• The rider shall bear full independent legal liability for losses caused by unlawful data leakage.

平台不会主动收集种族、宗教、健康、婚姻、指纹等 PDPA 定义下的敏感个人资料。平台面向成年配送服务者提供服务，不主动收集未成年人信息。

The Platform does not proactively collect sensitive personal data defined under PDPA such as race, religion, health records, marital status or fingerprints. Services are intended for adult delivery service providers; minor data will not be collected voluntarily.

平台有权依据马来西亚法律法规修订本隐私政策。更新版本将在骑手 App 公示生效。您持续登录使用 App 即视为接受新版隐私政策。重大修订平台将通过邮件通知骑手。

The Platform reserves the right to revise this Privacy Policy in accordance with Malaysian laws. Updated versions take effect once published on the Rider App. Continued use of the App constitutes acceptance of revised terms. Material amendments will be notified to riders by email.

• 公司名称：TRIFIVE SDN. BHD.
• 邮箱：info@tropigo.my
• 客服热线：+601112395789

• Company: TRIFIVE SDN. BHD.
• Email: info@tropigo.my
• Hotline: +601112395789

因本隐私政策引发一切争议优先友好协商；协商不成，提交马来西亚雪兰莪州有管辖权法院审理。

All disputes arising from this Privacy Policy shall first be resolved amicably. If settlement fails, disputes shall be referred to competent courts of Selangor, Malaysia.