Privacy Policy

01Introduction & Data User Identity

This Personal Data Protection Notice ("Notice") is issued pursuant to the Personal Data Protection Act 2010 ("PDPA") of Malaysia by Master Yean Cultural Consultation (袁弘道文化咨询) ([SSM Registration No. PENDING — e.g. 202603XXXXXX (XXXXXXX-X)]) ("we", "us", or "Master Yean").

In compliance with Section 7 of the PDPA, this Notice is provided in English, Bahasa Melayu, and Chinese to explain how we collect, process, store, and protect your personal data when you use our website or Telegram bot.

02Personal Data We Collect

To compute your Four Pillars (BaZi) solar chart and deliver your requested cultural reading, we collect the following categories of personal data directly from you:

• Birth Data: Civil date of birth, clock time of birth, city/place of birth, geographical longitude, and historical/hospital timezone.
• Profile Attributes: Gender (required for BaZi fortune pillar direction) and preferred reading language.
• Contact & Channel Identifiers: Email address (provided at checkout for reading delivery), current home timezone (for scheduled weekly/monthly emails), and Telegram User ID / username (if you interact via our Telegram bot).
• Transaction & Billing Metadata: Selected plan (Yearly Brief or Monthly Detail), payment status, session/checkout reference IDs, and subscription period dates. We do NOT collect or store your full credit/debit card numbers or online banking (FPX) credentials—all payment credentials are processed directly by Stripe or CHIP.

03Purpose of Processing Personal Data

Your personal data is collected and processed strictly for the following purposes:

• Calculating true solar time and Four Pillars (BaZi) charts on our server.
• Generating and delivering bespoke cultural consultation readings in your chosen language via Web, Telegram, and Email.
• Fulfilling recurring weekly and monthly readings for active Monthly Detail subscribers.
• Processing payments, issuing receipts, preventing duplicate charges, and handling customer support or refund inquiries.
• Complying with legal, tax, and regulatory obligations under Malaysian law.

04Disclosure to Third-Party Processors & Cross-Border Transfer

We do not sell, rent, or trade your personal data to third parties. However, to operate our service, your data is processed by trusted infrastructure providers (which may involve transfers outside Malaysia, such as Singapore or the United States, in accordance with Section 129 of the PDPA):

• Database Hosting: Supabase (PostgreSQL database hosted in AWS ap-southeast-1, Singapore) with Row-Level Security enabled.
• Payment Gateways: Stripe and/or CHIP In Sdn Bhd (Malaysia) for secure payment processing and recurring subscription billing.
• Email Fulfilment: Resend for transactional reading delivery and subscription notifications.
• AI Writing Providers: Enterprise language model APIs (such as Google Gemini / OpenAI-compatible endpoints) used strictly to draft your cultural reading from your computed BaZi pillars.
• Messaging Platform: Telegram Messenger, if you choose to receive readings via our Telegram bot.

05Data Security & Retention

We implement strict technical and organisational security measures, including encrypted database connections (TLS), Row-Level Security (RLS) isolating web checkout sessions by cryptographic UUID, and restricted server-side access.

In accordance with the PDPA Retention Principle, we retain your birth chart and reading records only for as long as necessary to fulfil your active reading or subscription, resolve billing disputes, and satisfy Malaysian statutory record-keeping requirements. Upon request, we will permanently delete your birth data and profile.

06Your Rights Under Malaysia's PDPA (Access, Correction & Withdrawal)

Under the PDPA, you have the right to:

• Request access to a copy of the personal data we hold about you.
• Request correction of any inaccurate, incomplete, or outdated birth or contact data.
• Withdraw your consent to the processing of your personal data or request complete deletion of your records (note that withdrawing consent will terminate any active recurring reading deliveries).
• To exercise any of these rights, please contact our Data Protection Contact at support@masteryean.com. We will respond within twenty-one (21) days of receiving your request.