Privacy Policy

Effective: 8 May 2026 — Reflects the Personal Data Protection (Amendment) Act 2024

Who We Are

BursaEdge is operated by Edge Digital, a sole proprietorship registered under the Companies Commission of Malaysia (SSM). We provide market information and analytical tools for Bursa Malaysia. This policy explains how we collect, use, and protect your personal data when you use our platform.

What We Collect

We collect only what is necessary to operate the service:

• Email address — used for account creation and transactional communications.
• Password — stored as a one-way cryptographic hash; we never store it in plain text and cannot retrieve it.
• Usage data — pages visited, features accessed, and session timing, collected in anonymised or pseudonymised form to improve the product.
• Device metadata — browser type, operating system, and screen size, collected automatically for compatibility and error-monitoring purposes.

We do not collect payment card details. Any payment processing is handled by the relevant payment processor directly.

How We Use Your Data

• Deliver and maintain the BursaEdge platform and your account.
• Send transactional emails — account confirmation, invite, password reset, and service notices.
• Diagnose bugs and improve platform performance.
• Meet our legal and compliance obligations under Malaysian law.

What We Do Not Do

• We do not sell, rent, or trade your personal information to any third party.
• We do not use your data to build advertising profiles or share it with advertising networks.
• We do not send unsolicited marketing without your consent.

Data Retention

Your account data is retained while your subscription is active. If you request account deletion, your personal data will be removed within 30 days, except where retention is required by law (e.g. financial transaction records).

Third-Party Services

We use the following categories of third-party services to operate BursaEdge:

• Cloud hosting and database — to store and serve platform data securely.
• Anonymised analytics — to understand aggregate usage patterns and improve the product.
• Error monitoring — to detect and fix platform issues.
• Transactional email — to deliver account and service emails.

These providers are bound by their own privacy policies and are not permitted to use your data for their own commercial purposes. Where any provider processes data outside Malaysia, we ensure equivalent protections are in place, consistent with the cross-border transfer framework introduced under the PDPA Amendment 2024.

Your Rights

Under the Personal Data Protection Act 2010 (as amended by the Personal Data Protection (Amendment) Act 2024) you have the right to:

• Request a copy of the personal data we hold about you.
• Correct inaccurate information.
• Request deletion of your account and associated data.
• Data portability — request your personal data in a structured, machine-readable format, or ask us to transmit it directly to another data controller where technically feasible (Section 43A, PDPA Amendment 2024).
• Withdraw consent, which will result in account termination.

To exercise any of these rights, email us at hello@bursaedge.com. We will respond within 14 business days.

Security

We use industry-standard measures including HTTPS encryption, hashed credentials, and access controls to protect your data. No method of transmission over the internet is 100% secure. Under the PDPA Amendment 2024, if a breach is reasonably likely to cause significant harm, we are required to notify affected users within 72 hours and report to the Personal Data Protection Commissioner.

Changes to This Policy

We may update this policy from time to time. Material changes will be communicated by email or by a prominent notice on the platform at least 14 days before taking effect.

Contact

Edge Digital (SSM sole prop), Malaysia
Email: hello@bursaedge.com