Privacy Policy & PDPA Notice | Art Dream Works Sdn. Bhd.

1

Statutory PDPA Notice, Lawful Bases & Scope Notis Berkanun APDP, Asas Sah & Skop Pemakaian

Statutory Notice pursuant to Section 7 of the Personal Data Protection Act 2010 (PDPA):
This Personal Data Protection Notice ("Notice") is issued by Art Dream Works Sdn. Bhd. [Company Registration No. 202001012469 (1368789W)] ("Art Dream Works", "we", "us", or "our"), an incorporated company under the laws of Malaysia with principal operations in Selangor Darul Ehsan, Malaysia. This Notice explains how we collect, use, record, hold, store, disclose, and otherwise process personal data in the course of our commercial transactions and digital operations, in compliance with the Personal Data Protection Act 2010 (Act 709) and the Personal Data Protection (Amendment) Act 2024 (Act A1727).

Lawful Bases for Processing (No Blanket Consent): We do not treat mere browsing of our website (https://artdreamworks.com) as blanket consent to every form of data processing. Rather, we process personal data under defined lawful bases in accordance with Malaysian law:

Contractual Necessity & Pre-Contractual Requests: Processing required to evaluate your inquiry, prepare quotations, provide scope estimates, communicate regarding proposed digital agency services, and perform agreed deliverables under a project contract.
Legal & Statutory Compliance: Processing necessary to comply with statutory accounting, invoicing, financial auditing, and tax obligations under Malaysian legislation, including the Companies Act 2016 and the Income Tax Act 1967.
Legitimate Business & Security Interests: Processing necessary to maintain website network security, mitigate malicious automated spam bots through Google reCAPTCHA v3 and server-side honeypots, diagnose server errors, and protect our systems against fraud.
Consent: Where required by applicable law (such as for optional personalized advertising cookies served by Google AdSense or any direct marketing updates), we seek specific consent. Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

gavel

Recognition of the Personal Data Protection (Amendment) Act 2024 (Act A1727): The Malaysian Parliament enacted Act A1727 (gazetted 17 October 2024), establishing a phased modernization of Act 709 across 2025. This introduces updated terminology transitioning "data user" to "data controller", imposes direct statutory obligations on third-party "data processors", establishes mandatory Personal Data Breach Notifications (DBN) to the Commissioner, formalizes statutory Data Protection Officer (DPO) standards, modernizes cross-border transfer criteria, and recognizes data portability subject to technical feasibility. Art Dream Works monitors ministerial commencement orders and regulatory guidelines issued by the Department of Personal Data Protection (JPDP).

Notis Berkanun menurut Seksyen 7 Akta Perlindungan Data Peribadi 2010 (APDP):
Notis Perlindungan Data Peribadi ini ("Notis") dikeluarkan oleh Art Dream Works Sdn. Bhd. [No. Pendaftaran Syarikat 202001012469 (1368789W)] ("Art Dream Works", "kami"), sebuah syarikat yang diperbadankan di bawah undang-undang Malaysia dengan pusat operasi di Selangor Darul Ehsan, Malaysia. Notis ini menerangkan bagaimana kami mengumpul, menggunakan, merekod, memegang, menyimpan, menzahirkan, dan memproses data peribadi dalam urus niaga komersial dan operasi digital kami, selaras dengan Akta Perlindungan Data Peribadi 2010 (Akta 709) dan Akta Perlindungan Data Peribadi (Pindaan) 2024 (Akta A1727).

Asas-Asas Sah Pemprosesan (Tiada Keizinan Menyeluruh Tanpa Asas): Kami tidak menganggap pelayaran semata-mata di laman web kami (https://artdreamworks.com) sebagai keizinan menyeluruh (blanket consent) bagi semua jenis pemprosesan. Sebaliknya, kami memproses data peribadi berdasarkan asas sah yang ditetapkan menurut undang-undang Malaysia:

Keperluan Kontrak & Langkah Pra-Kontrak: Pemprosesan yang diperlukan untuk menilai pertanyaan anda, menyediakan sebut harga, memberikan anggaran skop kerja, berkomunikasi mengenai perkhidmatan agensi digital, dan melaksanakan kontrak projek yang dipersetujui.
Pematuhan Statutori & Perundangan: Pemprosesan yang diperlukan bagi mematuhi obligasi perakaunan berkanun, penginvoisan, audit kewangan, dan percukaian di bawah undang-undang Malaysia, termasuk Akta Syarikat 2016 dan Akta Cukai Pendapatan 1967.
Kepentingan Perniagaan & Keselamatan yang Sah: Pemprosesan yang diperlukan bagi memelihara keselamatan rangkaian laman web, menangkis bot spam berbahaya melalui Google reCAPTCHA v3 dan penapis honeypot pelayan, mendiagnosis ralat teknikal, dan melindungi sistem kami daripada penipuan.
Keizinan (Consent): Apabila dikehendaki oleh undang-undang (seperti kuki iklan diperibadikan pilihan oleh Google AdSense atau sebarang komunikasi promosi langsung), kami meminta keizinan yang nyata. Bagi pemprosesan yang berasaskan keizinan, anda berhak menarik balik keizinan tersebut pada bila-bila masa tanpa menjejaskan keesahan pemprosesan yang telah dilaksanakan sebelum penarikan balik.

gavel

Pengiktirafan Akta Perlindungan Data Peribadi (Pindaan) 2024 (Akta A1727): Parlimen Malaysia telah meluluskan Akta A1727 (diwartakan pada 17 Oktober 2024) yang menetapkan pemodenan berperingkat Akta 709 sepanjang 2025. Pindaan ini mengemas kini istilah "pengguna data" kepada "pengawal data", mengenakan obligasi statutori langsung ke atas "pemproses data", mewajibkan Notifikasi Ketirisan Data Peribadi (DBN) kepada Pesuruhjaya, menetapkan garis panduan pelantikan Pegawai Perlindungan Data (DPO), memodenkan pemindahan data rentas sempadan, dan mengiktiraf hak kebolehalihan data tertakluk kepada kebolehlaksanaan teknikal. Art Dream Works memantau perintah kuat kuasa menteri dan garis panduan Jabatan Perlindungan Data Peribadi (JPDP).

2

Personal Data We Collect & Collection Methods Data Peribadi yang Kami Kumpul & Kaedah Pengumpulan

"Personal Data" refers to any information in respect of commercial transactions that relates directly or indirectly to an identified or identifiable natural person. Based on our actual website architecture, code configuration, and client engagement workflows, we collect and process the following specific categories of data:

Category	Specific Data Elements	Collection Method & Source	Obligatory vs. Voluntary & Consequence
Direct Inquiry & Quotation Submissions	Full Name, corporate or personal email address, telephone/WhatsApp contact number, company name, selected service interest (e.g. E-Commerce, CMS, Brand Identity), estimated budget tier, and project specifications in the message body.	Submitted voluntarily by you via the website Contact Form (index.html#contact) and processed server-side via `contact.php`.	Obligatory for Quote: Voluntary to submit, but providing accurate contact and project details is obligatory if you require a formal proposal, quotation, or service delivery. Without it, we cannot respond.
Interactive Scope Estimator Data	Service module selections, page volume ranges, e-commerce catalog complexity, maintenance tier, and resulting cost estimate.	Calculated purely client-side in your web browser memory using `js/main.js`. No personal data is transmitted to our servers from the estimator alone until you deliberately choose to submit the details via the contact form or WhatsApp.	Voluntary: Exploring the interactive Scope Estimator is entirely optional.
Direct Communications Metadata	Sender email address, email routing headers, message content, telephone number, WhatsApp profile display name, and any attachments voluntarily supplied.	Direct electronic mail sent to `contactus@artdreamworks.com` or `htng@artdreamworks.com`, phone calls, or WhatsApp chats initiated by you.	Voluntary: Necessary to communicate with you and maintain commercial records.
Technical & Web Server Logs	Internet Protocol (IP) address, date and time of server request, HTTP request method, requested URL path, HTTP status code, browser user-agent string, operating system, and HTTP referrer header.	Generated automatically by web servers hosting `artdreamworks.com` upon HTTP/HTTPS requests.	Technical Necessity: Essential for internet transmission, security logging, and diagnostic stability. You cannot disable basic server access logs.
Security & Bot Defense Telemetry	Browser environment metrics, mouse interaction cues, screen resolution, and reCAPTCHA challenge response tokens.	Collected directly by Google LLC via the integrated Google reCAPTCHA v3 script (Site Key: `6LfyFnkpAAAAAC2tiQxG_7QX3wN-FvVhSnFnKi8O`) upon form load and submission.	Obligatory for Form Use: Necessary to prevent automated bot attacks and script injections. Controlled by Google Privacy Policy.
Advertising & Cookie Identifiers	Google AdSense advertising cookies, publisher ad interaction signals, and browser device identifiers.	Google AdSense script (ads.txt publisher: `ca-pub-8592535691086559`).	Optional: Non-essential. You can toggle advertising preferences via our or manage ad settings via Google.
Local Storage Settings	`adw_legal_lang` (stores chosen language: 'en', 'bm', 'both') and `adw_cookie_preferences` (stores cookie consent state).	Stored locally within your browser's Web Storage (localStorage) by `js/main.js`. No server transmission.	Functional: Essential to remember your language and privacy preferences across page reloads.
External CDN Asset Requests	IP address and HTTP referrer transmitted to Google servers during stylesheet/asset loading.	Triggered when your browser retrieves web fonts from `fonts.googleapis.com`, `fonts.gstatic.com`, and Material Symbols.	Technical Delivery: Required to display brand typography. Governed by Google's CDN privacy terms.

"Data Peribadi" merujuk kepada sebarang maklumat berkaitan transaksi komersial yang berhubungan secara langsung atau tidak langsung dengan seseorang individu yang dikenal pasti. Berdasarkan seni bina laman web sebenar, konfigurasi kod, dan aliran kerja penglibatan pelanggan kami, kami mengumpul dan memproses kategori data berikut:

Kategori	Elemen Data Khusus	Kaedah Pengumpulan & Sumber	Wajib lwn Sukarela & Akibat
Maklumat Pertanyaan Langsung & Sebut Harga	Nama penuh, alamat e-mel korporat atau peribadi, nombor telefon/WhatsApp, nama syarikat, perkhidmatan yang diminati (cth: E-Dagang, CMS, Penjenamaan), julat bajet, dan perincian projek dalam mesej.	Dikemukakan secara sukarela oleh anda melalui Borang Hubungan laman web (index.html#contact) dan diproses melalui skrip pelayan `contact.php`.	Wajib untuk Sebut Harga: Penyerahan adalah sukarela, namun pemberian maklumat hubungan dan spesifikasi adalah wajib sekiranya anda memerlukan cadangan sebut harga atau khidmat kami. Tanpanya, kami tidak dapat membalas.
Data Penganggar Skop Interaktif	Pilihan modul servis, anggaran jumlah halaman web, kerumitan katalog e-dagang, pilihan SLA penyelenggaraan, dan anggaran kos.	Dikira sepenuhnya dalam memori pelayar web anda melalui `js/main.js`. Tiada data peribadi dihantar ke pelayan kami dari penganggar ini melainkan anda memilih untuk menghantarnya melalui borang hubungan atau WhatsApp.	Sukarela: Penggunaan penganggar interaktif ini adalah pilihan semata-mata.
Metadata Komunikasi Langsung	Alamat e-mel penghantar, pengepala routing e-mel, kandungan mesej, nombor telefon, nama paparan profil WhatsApp, dan lampiran yang dihantar.	E-mel terus ke `contactus@artdreamworks.com` atau `htng@artdreamworks.com`, panggilan telefon, atau perbualan WhatsApp yang anda mulakan.	Sukarela: Diperlukan untuk berkomunikasi dengan anda dan menyimpan rekod komersial projek.
Log Teknikal & Pelayan Web	Alamat Protokol Internet (IP), masa dan tarikh permintaan pelayan, kaedah HTTP, laluan URL yang diminta, kod status HTTP, rentetan user-agent pelayar, sistem operasi, dan perujuk HTTP.	Dijana secara automatik oleh pelayan web yang mengehos `artdreamworks.com` semasa setiap permintaan sambungan HTTP/HTTPS.	Keperluan Teknikal: Penting untuk penghantaran data internet, log keselamatan, dan kestabilan diagnostik. Anda tidak boleh menyahaktifkan log asas ini.
Telemetri Keselamatan & Pencegahan Bot	Metrik persekitaran pelayar, interaksi tetikus, resolusi skrin, dan token cabaran tindak balas reCAPTCHA.	Dikumpul terus oleh Google LLC melalui skrip Google reCAPTCHA v3 (Site Key: `6LfyFnkpAAAAAC2tiQxG_7QX3wN-FvVhSnFnKi8O`) semasa pemuatan dan penghantaran borang.	Wajib untuk Borang: Diperlukan bagi menghalang serangan bot spam dan suntikan berniat jahat. Tertakluk kepada Dasar Privasi Google.
Pengenal Kuki & Pengiklanan	Kuki pengiklanan Google AdSense, isyarat interaksi iklan penerbit, dan pengenal peranti pelayar.	Skrip Google AdSense (ads.txt ID penerbit: `ca-pub-8592535691086559`).	Pilihan: Bukan penting. Anda boleh melaraskan keutamaan melalui kami atau melalui tetapan Google.
Tetapan Storan Setempat (localStorage)	`adw_legal_lang` (mengingati bahasa: 'en', 'bm', 'both') dan `adw_cookie_preferences` (mengingati pilihan persetujuan kuki).	Disimpan setempat dalam pelayar web anda oleh `js/main.js`. Tiada penghantaran ke pelayan luaran.	Fungsi: Diperlukan untuk mengekalkan pilihan bahasa dan privasi anda semasa melayari laman web.
Permintaan Aset CDN Luaran	Alamat IP dan perujuk HTTP yang dihantar ke pelayan Google semasa memuatkan aset fon/ikon.	Berlaku apabila pelayar memuat turun fail fon daripada `fonts.googleapis.com`, `fonts.gstatic.com`, dan Google Material Symbols.	Penghantaran Teknikal: Diperlukan bagi memaparkan tipografi jenama kami. Tertakluk kepada terma CDN Google.

3

Purposes of Personal Data Processing Tujuan Pemprosesan Data Peribadi

Art Dream Works processes your personal data strictly for defined, lawful commercial purposes. We do not conduct unsolicited commercial robocalls, nor do we run automated bulk marketing newsletters unless you specifically opt in. Our processing purposes are categorized as follows:

Responding to Inquiries & Preparing Quotations: Reviewing project briefs submitted through our contact channels, calculating estimates, drafting Statements of Work (SOW), and holding commercial pre-contract consultations.
Service Delivery & Project Management: Designing, engineering, building, testing, launching, and maintaining client websites, custom CMS systems, e-commerce engines, web portals, branding collateral, and motion media assets pursuant to agreed contracts.
Accounting, Invoicing & Malaysian Tax Compliance: Issuing formal tax invoices, tracking milestone payments, maintaining statutory bookkeeping, and complying with audits under the Companies Act 2016 and the Inland Revenue Board of Malaysia (Lembaga Hasil Dalam Negeri - LHDN).
Cybersecurity & Spam Prevention: Protecting web infrastructure, contact endpoints, and server resources against unauthorized script automated attacks, spamming, and vulnerabilities using Google reCAPTCHA v3 and honeypot filtering.
Website Advertising Monetization: Hosting commercial advertising slots powered by Google AdSense (ca-pub-8592535691086559). Ad personalization is subject to your cookie preferences.
Legal Claims & Regulatory Duties: Defending our legal rights, enforcing contract terms, managing formal disputes, or complying with lawful warrants, court orders, or statutory directives from Malaysian authorities.

Art Dream Works memproses data peribadi anda secara ketat bagi tujuan komersial yang sah dan khusus. Kami tidak menjalankan panggilan jualan automatik tanpa kebenaran, dan kami tidak mengendalikan senarai buletin pemasaran pukal melainkan anda mendaftar secara nyata. Tujuan pemprosesan kami dikategorikan seperti berikut:

Menjawab Pertanyaan & Menyediakan Sebut Harga: Menilai taklimat projek yang dihantar melalui borang, mengira anggaran, merangka Skop Kerja (SOW), dan mengadakan perbincangan pra-kontrak komersial.
Penyampaian Perkhidmatan & Pengurusan Projek: Mereka bentuk, membangunkan, menguji, melancarkan, dan menyelenggara laman web pelanggan, sistem CMS tersuai, enjin e-dagang, portal web, bahan penjenamaan, dan aset video menurut kontrak yang dimeterai.
Perakaunan, Penginvoisan & Pematuhan Cukai Malaysia: Mengeluarkan invois rasmi, merekod pembayaran berperingkat, menyimpan lejar perakaunan berkanun, dan mematuhi audit di bawah Akta Syarikat 2016 serta Lembaga Hasil Dalam Negeri Malaysia (LHDN).
Keselamatan Siber & Pencegahan Spam: Melindungi infrastruktur web, borang hubungan, dan pelayan daripada bot automatik berniat jahat, serangan spam, dan kelemahan sistem menggunakan Google reCAPTCHA v3 dan penapis honeypot.
Pengewangan Pengiklanan Laman Web: Menempatkan slot iklan komersial melalui Google AdSense (ca-pub-8592535691086559). Pemperibadian iklan adalah tertakluk kepada keutamaan kuki anda.
Tuntutan Undang-Undang & Tanggungjawab Kawal Selia: Mempertahankan hak undang-undang kami, menguatkuasakan syarat kontrak, menguruskan pertikaian rasmi, atau mematuhi waran mahkamah atau arahan statutori daripada pihak berkuasa Malaysia.

4

Third-Party Disclosures & Cross-Border Transfers Penzahiran Pihak Ketiga & Pemindahan Rentas Sempadan

Non-Sale Guarantee: Art Dream Works Sdn. Bhd. does never sell, rent, lease, or trade your personal contact information to any commercial data brokers.

To operate our digital agency and deliver web services, we engage reputable third-party service providers who may process certain data elements solely to perform their contracted functions:

Brevo (Sendinblue SAS): Provides enterprise SMTP relay infrastructure (smtp-relay.brevo.com, Port 587) configured in contact.php to transmit lead notification emails securely. Brevo servers are located within the European Union (France), operating under EU GDPR data protection standards.
Google LLC: Provides Google reCAPTCHA v3 (anti-bot security telemetry) and Google AdSense (advertising services). Google processes data across international data centers (including the United States) under Google's corporate Privacy Policy and Data Processing Terms.
Web Hosting & Server Infrastructure Providers: Host our web server environments and databases within accredited data centers in Malaysia, Singapore, or designated cloud regions.
Meta Platforms, Inc. (WhatsApp): When you click direct WhatsApp links to chat with our team, communication data is processed through WhatsApp's encrypted platform under Meta's terms.
Professional Advisers & Statutory Authorities: Appointed chartered accountants, auditors, tax agents, or legal counsel under professional duties of confidentiality, and statutory bodies (e.g. LHDN, Royal Malaysia Police - PDRM, Malaysian Communications and Multimedia Commission - MCMC, or Department of Personal Data Protection - JPDP) where strictly compelled by valid legal process.

flight_takeoff

Cross-Border Data Transfers under Amended Section 129 of PDPA 2010: Certain third-party service providers (such as Brevo in the European Union and Google in the United States) store or process data on servers located outside Malaysia. We transfer personal data internationally only where: (a) the destination jurisdiction maintains an adequate standard of data protection; (b) the transfer is necessary for pre-contractual measures or performance of your service contract; (c) the provider is bound by appropriate contractual data protection safeguards; or (d) you have explicitly consented to the transfer.

Jaminan Tanpa Penjualan: Art Dream Works Sdn. Bhd. tidak sekali-kali menjual, memajak, menyewa, atau memperdagangkan maklumat peribadi anda kepada mana-mana broker data komersial pihak ketiga.

Bagi mengendalikan agensi digital kami dan menyampaikan perkhidmatan web, kami melantik penyedia perkhidmatan pihak ketiga yang dipercayai yang mungkin memproses data tertentu semata-mata untuk melaksanakan fungsi perkhidmatan mereka:

Brevo (Sendinblue SAS): Menyediakan infrastruktur geganti SMTP perusahaan (smtp-relay.brevo.com, Port 587) yang dikonfigurasikan dalam contact.php untuk menghantar e-mel notifikasi pertanyaan secara selamat. Pelayan Brevo berpusat di Kesatuan Eropah (Perancis) di bawah standard perlindungan data GDPR EU.
Google LLC: Menyediakan perkhidmatan Google reCAPTCHA v3 (telemetri keselamatan anti-bot) dan Google AdSense (perkhidmatan pengiklanan). Google memproses data merentasi pusat data antarabangsa (termasuk Amerika Syarikat) menurut Dasar Privasi dan Terma Pemprosesan Data Google.
Penyedia Pengehosan Web & Pelayan Awan: Mengehoskan persekitaran pelayan dan pangkalan data web kami di pusat data bertauliah di Malaysia, Singapura, atau rantau awan yang ditetapkan.
Meta Platforms, Inc. (WhatsApp): Apabila anda mengklik pautan WhatsApp untuk berbual dengan kami, data komunikasi diproses melalui platform WhatsApp yang disulitkan di bawah terma Meta.
Penasihat Profesional & Pihak Berkuasa Berkanun: Juruaudit bertauliah, ejen percukaian, atau peguam kami di bawah obligasi kerahsiaan profesional, serta badan berkanun (cth. LHDN, Polis Diraja Malaysia - PDRM, Suruhanjaya Komunikasi dan Multimedia Malaysia - SKMM, atau Jabatan Perlindungan Data Peribadi - JPDP) apabila diperintahkan secara sah oleh undang-undang.

flight_takeoff

Pemindahan Data Rentas Sempadan di bawah Pindaan Seksyen 129 APDP 2010: Sesetengah penyedia perkhidmatan pihak ketiga (seperti Brevo di Kesatuan Eropah dan Google di Amerika Syarikat) memproses atau menyimpan data di luar Malaysia. Kami hanya memindahkan data peribadi ke luar negara apabila: (a) bidang kuasa destinasi mempunyai standard perlindungan data yang mencukupi; (b) pemindahan diperlukan bagi langkah pra-kontrak atau pelaksanaan kontrak perkhidmatan anda; (c) pembekal terikat dengan klausa perlindungan data kontraktual yang sewajarnya; atau (d) anda telah memberi keizinan nyata kepada pemindahan tersebut.

5

Data Security Safeguards & Technical Measures Langkah Keselamatan Data & Kawalan Teknikal

Pursuant to the Security Principle under the PDPA 2010 and updated standards under Act A1727, Art Dream Works implements practical administrative, technical, and physical security measures to safeguard personal data against loss, misuse, unauthorized access, modification, or accidental destruction:

Transport Layer Security (TLS/HTTPS): All web communication between your browser and our website is protected using industry-standard HTTPS encryption (TLS 1.2 / TLS 1.3 cryptographic protocols).
Encrypted SMTP Email Routing: Inquiries submitted via contact.php are dispatched across encrypted TLS connections (Port 587) to Brevo's mail servers.
Input Sanitization & Injection Defense: Form inputs are sanitized on the server side using PHP filters (strip_tags(), FILTER_SANITIZE_EMAIL) to mitigate cross-site scripting (XSS) and header injections.
Automated Bot Filtering: Form submissions incorporate hidden honeypot validation fields (contact_hp) alongside Google reCAPTCHA v3 risk scoring to intercept automated script payloads.
Restricted Administrative Access: Access to hosting control panels, mail accounts, and staging environments is strictly restricted to designated personnel with authenticated credentials.

info

Realistic Security Acknowledgment: While we employ reasonable technical and organizational safeguards to protect your personal data, no internet transmission or digital storage system can be guaranteed to be 100% invulnerable. In the event of a confirmed personal data breach affecting your rights, we will take immediate remedial steps and provide statutory notifications in accordance with applicable Malaysian regulatory guidance.

Menurut Prinsip Keselamatan di bawah APDP 2010 dan standard terkini di bawah Akta A1727, Art Dream Works melaksanakan langkah keselamatan pentadbiran, teknikal, dan fizikal yang praktikal bagi melindungi data peribadi daripada kehilangan, penyalahgunaan, akses tanpa kebenaran, pengubahsuaian, atau pemusnahan tidak sengaja:

Penyulitan TLS/HTTPS: Semua komunikasi antara pelayar web anda dan laman web kami dilindungi menggunakan penyulitan protokol kriptografi HTTPS (TLS 1.2 / TLS 1.3) yang terkini.
Penghantaran E-mel SMTP Disulitkan: Pertanyaan borang melalui contact.php dihantar melalui sambungan selamat TLS (Port 587) ke pelayan mel Brevo.
Pembersihan Input & Pertahanan Suntikan: Input borang dibersihkan pada pelayan menggunakan penapis PHP (strip_tags(), FILTER_SANITIZE_EMAIL) untuk menghalang serangan rentas laman (XSS) dan suntikan pengepala.
Penapisan Bot Automatik: Borang kami menggabungkan penapis honeypot tersembunyi (contact_hp) bersama skor risiko Google reCAPTCHA v3 untuk memintas bot automatik.
Kawalan Akses Pentadbir Terhad: Akses kepada panel kawalan pengehosan, akaun e-mel, dan persekitaran ujian dihadkan secara ketat kepada kakitangan yang diberi kuasa dengan bukti kelayakan yang disahkan.

info

Pengakuan Keselamatan Realistik: Walaupun kami melaksanakan kawalan keselamatan yang munasabah bagi melindungi data peribadi anda, tiada penghantaran internet atau sistem storan digital yang boleh dijamin 100% kebal daripada sebarang risiko. Sekiranya berlaku ketirisan data peribadi yang disahkan yang memberi kesan kepada hak anda, kami akan mengambil langkah pembetulan serta-merta dan memberi notifikasi statutori selaras dengan garis panduan kawal selia Malaysia.

6

Data Retention Schedule & Deletion Jadual Penyimpanan Data & Pemadaman

Pursuant to the Retention Principle of the PDPA 2010, Art Dream Works does not retain personal data longer than is necessary to achieve the lawful purposes for which it was collected, or as required by applicable statutory obligations:

Data Category	Retention Period	Statutory / Operational Rationale
Unconverted General Inquiries	Up to 24 months from the date of last communication.	Permits commercial follow-up regarding requested quotations. After this period, records are purged or anonymized.
Active Client Projects & SOWs	Duration of the active engagement plus active warranty / Maintenance SLA contract period.	Necessary for project delivery, bug fixes, scope verification, and contractual performance.
Completed Deliverables & Code Archives	Maintained in disaster-recovery archives as mutually agreed in writing with the client.	Maintained to facilitate future upgrades, recovery from client server loss, or code handover.
Statutory Accounting & Tax Records	Seven (7) years following the end of the relevant financial year.	Mandatory compliance with Section 82 of the Malaysian Income Tax Act 1967 and Section 245 of the Companies Act 2016.
Web Server & Diagnostic Logs	Rolling period of 30 to 90 days.	Standard server log rotation for cybersecurity diagnostics, attack mitigation, and traffic auditing.
System Backups & Snapshots	Retained in rolling backup cycles until overwritten in the ordinary course of the backup rotation schedule.	Immediate granular deletion from existing immutable backup snapshots is technically impracticable; data is overwritten systematically.
Statutory Compliance & Rights Logs	Two (2) years following resolution of the request.	To demonstrate regulatory compliance with PDPA data access, correction, or withdrawal requests.

Menurut Prinsip Penyimpanan APDP 2010, Art Dream Works tidak menyimpan data peribadi lebih lama daripada yang diperlukan bagi memenuhi tujuan sah ia dikumpul, atau sebagaimana yang ditetapkan oleh undang-undang:

Kategori Data	Tempoh Penyimpanan	Rasional Statutori / Operasi
Pertanyaan Umum yang Tidak Ditukar	Sehingga 24 bulan dari tarikh komunikasi terakhir.	Membolehkan susulan komersial mengenai sebut harga. Selepas tempoh ini, rekod dipadam atau dianonimkan.
Projek Pelanggan Aktif & SOW	Sepanjang tempoh projek aktif ditambah tempoh jaminan / kontrak penyelenggaraan SLA.	Diperlukan untuk penyampaian projek, pembaikan ralat, dan pelaksanaan kontrak.
Arkib Kod & Projek Siap	Disimpan dalam arkib pemulihan bencana seperti yang dipersetujui secara bertulis dengan pelanggan.	Bagi membantu peningkatan sistem pada masa hadapan atau sandaran pemulihan kecemasan pelanggan.
Invois & Rekod Percukaian Berkanun	Tujuh (7) tahun selepas tamat tahun kewangan yang berkenaan.	Pematuhan wajib di bawah Seksyen 82 Akta Cukai Pendapatan 1967 dan Seksyen 245 Akta Syarikat 2016 Malaysia.
Log Pelayan Web & Diagnostik	Tempoh kitaran 30 hingga 90 hari.	Kitaran standard log pelayan untuk diagnostik keselamatan siber dan pemantauan trafik.
Sandaran Data (Backups)	Disimpan dalam kitaran sandaran berjadual sehingga ditulis ganti secara automatik.	Pemadaman serta-merta daripada sandaran data legasi tidak boleh dilaksanakan secara teknikal; data akan ditulis ganti mengikut kitaran sandaran.
Rekod Pematuhan Hak Statutori	Dua (2) tahun selepas permohonan diselesaikan.	Bagi membuktikan pematuhan statutori terhadap permohonan akses, pembetulan, atau penarikan balik persetujuan.

7

Cookies, Advertising Technologies & Preference Controls Kuki, Teknologi Pengiklanan & Kawalan Keutamaan

Our website utilizes browser cookies, local storage, and third-party scripts to maintain functionality, verify anti-spam tokens, and serve advertising. These technologies are categorized as follows:

Strictly Necessary & Security Technologies: Essential for the core operation and security of the website. Includes Google reCAPTCHA v3 anti-bot verification tokens and local storage keys (adw_legal_lang, adw_cookie_preferences). These technologies cannot be disabled as the website cannot function securely without them.
Advertising & AdSense Technologies (Optional): We host display advertising served by Google AdSense (ads.txt publisher: ca-pub-8592535691086559). Google and its advertising partners use cookies and device identifiers to measure ad impressions and serve ads based on prior visits to our site or other websites.

tune

Interactive Cookie Preference Interface: You can control your advertising preferences at any time. Clicking the button below or using the "Cookie Preferences" link in the footer opens our interactive preferences manager. When advertising cookies are disabled, our site configures requestNonPersonalizedAds = 1 so that Google AdSense is instructed to serve only contextual, non-personalized advertising.

Third-Party Ad Opt-Out Links: In addition to our website preference manager, you can customize or opt out of personalized Google advertising directly through:

Laman web kami menggunakan kuki pelayar, storan setempat, dan skrip pihak ketiga bagi mengekalkan fungsi, mengesahkan keselamatan anti-spam, dan menyiarkan iklan. Teknologi ini dikategorikan seperti berikut:

Teknologi Perlu & Keselamatan: Penting untuk operasi asas dan sekuriti laman web. Merangkumi token anti-bot Google reCAPTCHA v3 dan storan setempat (adw_legal_lang, adw_cookie_preferences). Teknologi ini tidak boleh dimatikan kerana laman web tidak dapat beroperasi secara selamat tanpanya.
Teknologi Pengiklanan & AdSense (Pilihan): Kami menyiarkan slot iklan paparan melalui Google AdSense (ads.txt penerbit: ca-pub-8592535691086559). Google dan rakan kongsi pengiklanannya menggunakan kuki untuk mengukur prestasi iklan dan menyiarkan iklan berdasarkan lawatan anda ke laman web ini atau laman lain.

tune

Antara Muka Keutamaan Kuki Interaktif: Anda boleh mengawal keutamaan kuki pengiklanan anda pada bila-bila masa. Mengklik butang di bawah atau pautan "Keutamaan Kuki" di bahagian bawah halaman akan membuka pengurus keutamaan interaktif kami. Apabila kuki pengiklanan dinyahaktifkan, laman web kami mengarahkan requestNonPersonalizedAds = 1 supaya Google AdSense hanya menyiarkan iklan kontekstual yang tidak diperibadikan.

Pautan Penarikan Balik Iklan Pihak Ketiga: Selain daripada pengurus keutamaan kami, anda boleh melaraskan atau menarik diri daripada iklan Google diperibadikan secara terus melalui:

8

Statutory Data Subject Rights & Procedures Hak Berkanun Subjek Data & Tatacara Permohonan

Under the Malaysian Personal Data Protection Act 2010 (Act 709) and the Personal Data Protection (Amendment) Act 2024 (Act A1727), you have specific statutory rights as a data subject in relation to your personal data:

Right of Access (Section 30): You may submit a written data access request to receive confirmation whether we process your personal data and to receive a copy of such data, subject to identity verification. Under Section 31(1), we must comply not later than twenty-one (21) days from receipt of your request, or notify you in writing of an extension of not more than fourteen (14) days where permitted by Section 31(2). A statutory fee may apply under the Personal Data Protection (Fees) Regulations 2013 for hardcopy data requests.
Right of Correction (Section 34): Where personal data held by us is inaccurate, incomplete, misleading, or not up-to-date, you may request that it be corrected. Under Section 35(1), we will make the necessary correction not later than twenty-one (21) days from receipt of your request.
Right to Withdraw Consent (Section 38): You may withdraw your consent to the processing of your personal data at any time by giving written notice. Upon receiving your notice, we will cease processing the relevant personal data, provided that withdrawal does not affect processing necessary for contractual obligations, statutory record-keeping, or legal defense.
Right to Prevent Processing Likely to Cause Damage or Distress (Section 42): You may serve a written notice requiring us to cease or not begin processing your personal data if the processing causes unwarranted substantial damage or distress.
Right to Prevent Processing for Direct Marketing (Section 43): You may at any time require us in writing to cease using your personal data for direct marketing purposes.
Right to Data Portability (under Act A1727): Subject to ministerial commencement and technical feasibility under regulatory standards, you may request the transmission of your personal data directly to another data controller in a commonly used format.
Right to Lodge a Regulatory Complaint: If you believe your personal data has been mishandled or that we have failed to comply with statutory requirements, you have the right to lodge a complaint with the Personal Data Protection Department (Jabatan Perlindungan Data Peribadi - JPDP) at: www.pdp.gov.my • Aras 6, Kompleks Kementerian Komunikasi, Lot 4G9, Presint 4, Pusat Pentadbiran Kerajaan Persekutuan, 62100 Putrajaya, Malaysia.

verified_user

How to Exercise Your Rights: Please send a written request to our designated privacy contact at contactus@artdreamworks.com. To protect your privacy and prevent unauthorized disclosure, we may request reasonable proof of identity before releasing or correcting personal data.

Di bawah Akta Perlindungan Data Peribadi 2010 (Akta 709) dan Akta Perlindungan Data Peribadi (Pindaan) 2024 (Akta A1727) Malaysia, anda mempunyai hak-hak statutori berikut sebagai subjek data berhubung data peribadi anda:

Hak Akses kepada Data Peribadi (Seksyen 30): Anda berhak mengemukakan permohonan akses data secara bertulis untuk mengesahkan sama ada data peribadi anda diproses dan mendapatkan sesalinan data tersebut, tertakluk kepada pengesahan identiti. Di bawah Seksyen 31(1), kami hendaklah mematuhi permohonan dalam tempoh dua puluh satu (21) hari dari tarikh penerimaan, atau memaklumkan pelanjutan tidak melebihi empat belas (14) hari jika dibenarkan oleh Seksyen 31(2). Fi statutori ditetapkan di bawah Peraturan-Peraturan Perlindungan Data Peribadi (Fi) 2013 bagi salinan fizikal.
Hak untuk Membetulkan Data Peribadi (Seksyen 34): Sekiranya data peribadi yang kami pegang tidak tepat, tidak lengkap, mengelirukan, atau tidak terkini, anda boleh meminta pembetulan. Di bawah Seksyen 35(1), kami akan membuat pembetulan dalam tempoh dua puluh satu (21) hari dari tarikh penerimaan permohonan.
Hak Menarik Balik Keizinan (Seksyen 38): Anda boleh menarik balik keizinan anda untuk pemprosesan data peribadi pada bila-bila masa melalui notis bertulis. Setelah menerima notis, kami akan menghentikan pemprosesan berkenaan, dengan syarat penarikan balik tidak menjejaskan pemprosesan yang diperlukan bagi obligasi kontrak atau pematuhan undang-undang.
Hak Menghalang Pemprosesan yang Menyebabkan Kerosakan atau Kesusahan (Seksyen 42): Anda berhak mengemukakan notis bertulis meminta kami menghentikan pemprosesan data peribadi sekiranya ia menyebabkan kerosakan atau kesusahan ketara yang tidak wajar.
Hak Menghalang Pemprosesan bagi Pemasaran Langsung (Seksyen 43): Anda boleh mengarahkan kami secara bertulis pada bila-bila masa untuk menghentikan penggunaan data peribadi bagi tujuan pemasaran langsung.
Hak Kebolehalihan Data (di bawah Akta A1727): Tertakluk kepada kuat kuasa menteri dan kebolehlaksanaan teknikal di bawah garis panduan kawal selia, anda boleh memohon pemindahan data peribadi anda terus kepada pengawal data lain dalam format yang lazim digunakan.
Hak Mengemukakan Aduan kepada Pengawal Selia: Sekiranya anda percaya data peribadi anda telah disalah kendalikan, anda berhak membuat aduan rasmi kepada Jabatan Perlindungan Data Peribadi (JPDP) di: www.pdp.gov.my • Aras 6, Kompleks Kementerian Komunikasi, Lot 4G9, Presint 4, Pusat Pentadbiran Kerajaan Persekutuan, 62100 Putrajaya, Malaysia.

verified_user

Cara Melaksanakan Hak Anda: Sila kemukakan permohonan bertulis kepada pegawai perhubungan privasi kami di contactus@artdreamworks.com. Bagi melindungi privasi anda dan menghalang pendedahan tanpa kebenaran, kami mungkin meminta pengesahan identiti yang munasabah sebelum mendedahkan atau membetulkan data peribadi.

9

Data Protection Liaison & Contact Inquiries Pegawai Perhubungan Perlindungan Data & Maklumat Perhubungan

Art Dream Works Sdn. Bhd. has designated a privacy contact liaison to oversee inquiries, address statutory data subject requests, and manage personal data governance:

Art Dream Works Sdn. Bhd. telah melantik pegawai perhubungan privasi bagi mengendalikan pertanyaan, memproses permohonan hak statutori subjek data, dan memantau tadbir urus data peribadi:

security

Data Protection Liaison / Privacy Officer Pegawai Perhubungan Perlindungan Data

Art Dream Works Sdn. Bhd. [Registration No. 202001012469 (1368789W)]

Operating Location: Selangor Darul Ehsan, Malaysia Lokasi Operasi: Selangor Darul Ehsan, Malaysia

Email: contactus@artdreamworks.com • htng@artdreamworks.com

Telephone / WhatsApp: +6010 214 7188 / +6012 434 2502

Inquiries Response Hours: Monday – Friday, 9:00 AM – 6:00 PM (Malaysia Standard Time, UTC+8) Waktu Maklum Balas: Isnin – Jumaat, 9:00 Pagi – 6:00 Petang (Waktu Piawai Malaysia, UTC+8)

10

Policy Updates & Language Precedence Kemas Kini Dasar & Tafsiran Bahasa

Policy Revisions: We may review and update this Notice periodically to reflect changes in our business operations, technology infrastructure, service providers, or Malaysian statutory regulations. Any revisions will be published directly on this page with an updated "Last Updated" date. Where revisions are material, we will post a conspicuous notice on our website homepage or notify active clients directly via electronic communication.

Bilingual Interpretation: In compliance with Section 7(3) of the Personal Data Protection Act 2010, this Notice is issued in both the national language (Bahasa Melayu) and the English language. Both versions are designed to convey identical meaning. In the event of any linguistic discrepancy or ambiguity between the English text and the Bahasa Melayu text, the English text shall serve as the operational commercial reference, without prejudice to any mandatory statutory requirements under Malaysian law.

Semakan Dasar: Kami mungkin menyemak dan mengemas kini Notis ini dari semasa ke semasa bagi mencerminkan perubahan dalam operasi perniagaan kami, infrastruktur teknologi, penyedia perkhidmatan, atau peraturan undang-undang Malaysia. Sebarang pindaan akan diterbitkan terus di halaman ini dengan tarikh "Dikemas Kini" yang dipinda. Sekiranya pindaan adalah ketara, kami akan memaparkan notis jelas di laman utama atau memaklumkan pelanggan aktif secara langsung melalui komunikasi elektronik.

Tafsiran Dwibahasa: Selaras dengan Seksyen 7(3) Akta Perlindungan Data Peribadi 2010, Notis ini dikeluarkan dalam bahasa kebangsaan (Bahasa Melayu) dan Bahasa Inggeris. Kedua-dua versi dirangka untuk membawa maksud yang sama. Sekiranya berlaku sebarang ketidaksamaan makna atau kekaburan linguistik antara teks Bahasa Inggeris dan Bahasa Melayu, teks Bahasa Inggeris akan menjadi rujukan komersial operasi, tanpa menjejaskan sebarang keperluan statutori wajib di bawah undang-undang Malaysia.

Privacy Policy & PDPA Notice Dasar Privasi & Notis APDP