Privacy Policy
Last updated: 9 October 2026
maya.my ("maya", "we", "us") is a membership management platform operated by Authenteqa Sdn Bhd. It lets organizations such as clubs, associations and societies manage their members, collect membership fees, issue digital membership cards and communicate with their members by email and WhatsApp. This policy explains what personal data we handle and why, in line with Malaysia's Personal Data Protection Act 2010 (PDPA).
1. Who is responsible for your data
There are two roles:
- The organization you join decides why and how your membership data is used. For that data it is the data user under the PDPA.
- maya.my provides the platform and processes the data on the organization's behalf. We are the data user for the data we collect for ourselves, namely the accounts of organization administrators, billing records, security logs and support requests.
2. What we collect
| Who | Data |
|---|---|
| Members | Name, email address, mobile number, login credentials (passwords are stored hashed), and the details the organization asks for on its registration form (for example identity number, date of birth, address, state, gender, photo). Membership status, number and validity dates. Payment records for membership fees. |
| Organization administrators | Name, email, mobile number, role and the organizations they manage. Activity records for security and audit purposes. |
| WhatsApp messaging | When an organization connects a WhatsApp Business number, we hold the WhatsApp Business Account and phone number identifiers and an access token that Meta issues for that account. For each message we keep the recipient or sender number, the template used, the delivery status (sent, delivered, read, failed) and any error returned. If a member replies, we receive and store the reply text so that the organization can read it. |
| Visitors | Technical data such as IP address, browser type and pages requested, and a session cookie needed to keep you signed in. |
We do not store card numbers. Online payments are processed by our payment gateway, which sends us only the outcome of the payment and a reference.
3. How we use it
- To create and run membership accounts, process registrations, renewals and payments, and issue membership cards.
- To send messages the organization has asked us to send to its members, such as payment reminders, renewal notices and announcements, by email and by WhatsApp.
- To keep the service secure, prevent fraud and misuse, and fix faults.
- To provide support and to meet our legal and accounting obligations.
We do not sell personal data and we do not use members' data for advertising.
4. WhatsApp messages
WhatsApp messages are sent through the WhatsApp Business Platform operated by Meta Platforms. Organizations are responsible for sending messages only to members who have agreed to receive them. A member can stop receiving messages at any time by replying STOP or by contacting the organization or us. When a message is sent, Meta processes the recipient's phone number and the message content under its own terms and privacy policy. maya.my does not have access to a member's other WhatsApp chats or contacts.
5. Who we share data with
- The organization you are a member of, which can see its own members' data. Organizations cannot see other organizations' data.
- Service providers that help us run maya: cloud hosting and database providers, an email delivery provider, our payment gateway, Meta (WhatsApp Business Platform) and, where an organization uses the translation feature, an AI translation provider that receives only the text to be translated, not member records.
- Authorities, where the law requires it.
Some of these providers are located outside Malaysia, so your data may be processed abroad. We only use providers that apply appropriate safeguards.
6. Security
Access to administration areas requires authentication and is restricted by role. Passwords are hashed, connections use HTTPS, and WhatsApp access tokens are stored encrypted. No system is completely secure, but we take reasonable steps to protect data from loss, misuse and unauthorised access.
7. Retention
We keep personal data for as long as the membership or the organization's account is active and for as long afterwards as is needed for the purposes above or required by law, for example accounting records. We then delete or anonymise it. See our data deletion page for how to ask for earlier deletion.
8. Your rights
Under the PDPA you may ask to access the personal data we hold about you, to correct it, and to withdraw your consent to its use. Members should first contact their organization, because it decides how membership data is used. You can also write to us at the address below and we will help or direct your request to the right organization. We may need to verify your identity first.
9. Children
maya is intended for organizations and their members. Where an organization admits members under 18, it is responsible for obtaining the consent of a parent or guardian.
10. Changes
We may update this policy from time to time. The date above shows the latest version, and we will give reasonable notice of material changes.
Contact
Authenteqa Sdn Bhd
No. 79(03), Jalan Pluto U5/AZ, Seksyen U5, Panasuria, 40150 Shah Alam, Selangor, Malaysia
Email: support@maya.my · Tel / WhatsApp: +60 17-491 0755 · Reg. no. 202101023167 (1423467K)