Privacy Policy

Last Updated: August 2026

At Kokok Shop, we respect your privacy and are committed to protecting your personal data.

This Privacy Policy explains how Kokok Shop (“Kokok Shop”, “we”, “us” or “our”) collects, uses, stores, processes, discloses and protects personal data when you access or use our website, marketplace, applications, services and related features (“Platform”).

This Privacy Policy applies to customers, registered users, Sellers, Vendors, Delivery Personnel and other individuals who interact with Kokok Shop.

By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy.

1. Personal Data We May Collect

Depending on how you interact with Kokok Shop, we may collect personal data including the following.

Account Information

When you register or maintain an account, we may collect:

1. Full name;
2. Username;
3. Email address;
4. Mobile phone number;
5. Password or authentication credentials;
6. Profile photograph;
7. Date of birth, where required;
8. Gender, where voluntarily provided;
9. Account preferences; and
10. Other information submitted during registration.

Passwords are intended to be stored using appropriate security mechanisms and are not intended to be accessible in plain text.

2. Customer Information

When you make a purchase, we may collect:

1. Name;
2. Telephone number;
3. Email address;
4. Billing address;
5. Delivery address;
6. Order information;
7. Products purchased;
8. Transaction history;
9. Delivery instructions;
10. Voucher and promotional usage;
11. Refund information;
12. Reviews and ratings; and
13. Communications relating to orders.

3. Seller and Vendor Information

If you register as a Seller or Vendor, additional information may be collected including:

1. Individual or business name;
2. Business registration information;
3. Identification information where necessary;
4. Business address;
5. Contact information;
6. Bank account or settlement information;
7. Product and inventory information;
8. Relevant licences, certifications or permits;
9. Tax-related information where applicable;
10. Transaction and settlement records; and
11. Documents submitted for Seller verification.

Certain information may be required to verify the identity, legitimacy and eligibility of Sellers using the Platform.

4. Delivery Personnel Information

Where delivery services are provided through Kokok Shop, information relating to delivery personnel may include:

1. Name;
2. Contact number;
3. Identification information where required;
4. Vehicle information;
5. Delivery history;
6. Delivery status;
7. Location information while providing delivery services, where applicable; and
8. Payment or settlement information.

5. Payment Information

Payments made through Kokok Shop may be processed by third-party payment gateways, banks or other authorised payment service providers.

Depending on the payment method used, payment-related information may include:

1. Transaction reference;
2. Payment method;
3. Payment status;
4. Payment amount;
5. Bank or payment provider information; and
6. Information necessary to process refunds.

Kokok Shop does not intend to directly store complete payment card credentials such as full credit or debit card numbers where such information is processed securely by an authorised third-party payment provider.

Payment providers may process your information according to their own privacy policies and applicable regulatory requirements.

6. Automatically Collected Information

When you access the Platform, certain information may be automatically collected, including:

1. IP address;
2. Browser type;
3. Device type;
4. Operating system;
5. Device identifiers;
6. Date and time of access;
7. Pages viewed;
8. Referring website;
9. Search activity;
10. Click and navigation activity;
11. Session information;
12. Error logs;
13. Security logs; and
14. General usage information.

This information may be used for security, analytics, troubleshooting and improvement of the Platform.

7. Cookies and Similar Technologies

Kokok Shop may use cookies and similar technologies to:

1. Keep users signed in;
2. Maintain shopping carts;
3. Remember preferences;
4. Improve website performance;
5. Understand Platform usage;
6. Prevent fraud;
7. Support security functions;
8. Measure campaigns and promotions; and
9. Provide relevant content.

Some cookies may be necessary for the Platform to function correctly.

Other cookies may relate to analytics, preferences or marketing.

You may be able to manage cookies through your browser settings. However, disabling certain cookies may affect the functionality of the Platform.

8. Social and Third-Party Login

Kokok Shop may allow users to sign in using third-party authentication providers such as Google or other supported services.

Where you choose to use a third-party login service, we may receive certain information from the provider, such as:

1. Your name;
2. Email address;
3. Profile photograph;
4. Unique account identifier; and
5. Other information that you have authorised the provider to share.

Kokok Shop does not receive your password for the third-party service.

Your use of third-party authentication services is also subject to the privacy policies and terms of those providers.

9. How We Use Personal Data

We may process personal data for purposes including:

Account Management

To:

1. Register and maintain user accounts;
2. Verify user identities;
3. Authenticate users;
4. Manage Seller and Vendor accounts;
5. Manage delivery accounts; and
6. Provide account-related services.

Order Processing

To:

1. Receive and process orders;
2. Coordinate orders with Sellers;
3. Arrange fulfilment and delivery;
4. Provide order status updates;
5. Process cancellations;
6. Process refunds and returns; and
7. Maintain transaction records.

Payment Processing

To:

1. Process payments;
2. Confirm transactions;
3. Facilitate Seller settlements;
4. Issue refunds;
5. Reconcile transactions;
6. Prevent payment fraud; and
7. Resolve payment disputes.

Customer Support

To:

1. Respond to enquiries;
2. Manage complaints;
3. Investigate order disputes;
4. Provide technical assistance; and
5. Maintain customer service records.

Marketplace Operations

To:

1. Manage Sellers and Vendors;
2. Manage product listings;
3. Monitor Platform activity;
4. Administer promotions;
5. Process commissions and Seller settlements;
6. Manage ratings and reviews; and
7. Improve marketplace operations.

Security and Fraud Prevention

To:

1. Protect user accounts;
2. Detect suspicious activity;
3. Prevent fraud;
4. Investigate abuse;
5. Detect cybersecurity threats;
6. Maintain audit and security logs;
7. Protect our systems and users; and
8. Enforce our Terms and Conditions.

Platform Improvement

To:

1. Analyse Platform usage;
2. Monitor performance;
3. Identify technical issues;
4. Develop new features;
5. Improve user experience; and
6. Understand marketplace trends.

10. Communications

We may use your contact information to send transactional communications relating to:

1. Account registration;
2. Email verification;
3. Password resets;
4. Orders;
5. Payments;
6. Delivery;
7. Refunds;
8. Seller activities;
9. Security alerts;
10. Customer service; and
11. Changes affecting your account.

These communications may be necessary for operating your account or completing transactions.

11. Marketing Communications

Where permitted and appropriate, Kokok Shop may send information relating to:

1. Promotions;
2. Discounts;
3. Vouchers;
4. New products;
5. New Sellers;
6. Marketplace campaigns;
7. Special offers; and
8. Other marketing communications.

Users may be provided with a method to unsubscribe or opt out from non-essential marketing communications.

Opting out of marketing communications does not prevent Kokok Shop from sending essential transactional, security or account-related communications.

12. Push Notifications

If supported and enabled, Kokok Shop may send push notifications relating to:

1. Order status;
2. Delivery;
3. Promotions;
4. Messages;
5. Seller activity;
6. Marketplace updates; and
7. Security notifications.

You may normally manage push notification permissions through your device, browser or Platform settings.

13. Disclosure of Personal Data

We do not sell personal data merely for the purpose of allowing third parties to independently market their products to you.

However, personal data may be disclosed where reasonably necessary to operate Kokok Shop.

Recipients may include the following.

Sellers and Vendors

Relevant customer information may be provided to the Seller responsible for fulfilling an order, including:

1. Customer name;
2. Contact information;
3. Ordered items;
4. Delivery information; and
5. Order instructions.

Sellers should only use this information for legitimate purposes related to the transaction and their legal obligations.

Delivery and Logistics Providers

Delivery information may be provided to delivery personnel, courier services or logistics providers for the purpose of completing an order.

This may include:

1. Recipient name;
2. Telephone number;
3. Delivery address;
4. Delivery instructions; and
5. Relevant order information.

Payment Providers

Relevant transaction information may be provided to:

1. Payment gateways;
2. Banks;
3. E-wallet providers;
4. Payment processors; and
5. Other financial service providers.

Technology and Service Providers

We may use third parties to provide services such as:

1. Website hosting;
2. Cloud infrastructure;
3. Email delivery;
4. SMS or notification services;
5. Analytics;
6. Authentication;
7. Cybersecurity;
8. Backup;
9. Customer support; and
10. Other technology services.

Such providers may process data only to the extent necessary to provide their services.

14. Disclosure Required by Law

Kokok Shop may disclose personal data where reasonably necessary to:

1. Comply with applicable law;
2. Respond to lawful requests from authorities;
3. Comply with court orders;
4. Assist law enforcement investigations;
5. Meet regulatory requirements;
6. Investigate suspected criminal activity;
7. Protect the rights and safety of users; or
8. Establish, exercise or defend legal claims.

15. Personal Data Between Buyers and Sellers

Because Kokok Shop operates as a marketplace, certain information must be exchanged between Buyers and Sellers for transactions to be completed.

Sellers must not misuse customer information received through Kokok Shop.

Customer information obtained through the Platform must not be used for unrelated purposes such as:

1. Unauthorised marketing;
2. Selling customer databases;
3. Unauthorised disclosure;
4. Spam;
5. Harassment; or
6. Any unlawful purpose.

Misuse of customer information may result in suspension or termination of a Seller account and other appropriate action.

16. Data Security

Kokok Shop takes reasonable technical and organisational measures intended to protect personal data from:

1. Unauthorised access;
2. Accidental loss;
3. Misuse;
4. Unauthorised modification;
5. Unauthorised disclosure;
6. Destruction; and
7. Cybersecurity threats.

Measures may include, where appropriate:

1. Secure HTTPS connections;
2. Encryption;
3. Password hashing;
4. Access controls;
5. Role-based permissions;
6. Security logging;
7. Firewall protection;
8. System monitoring;
9. Software security updates;
10. Backups;
11. Account authentication; and
12. Other appropriate cybersecurity controls.

However, no internet-based system can guarantee absolute security.

Users are also responsible for protecting their passwords and account credentials.

17. Data Breach Management

Where Kokok Shop becomes aware of a personal data breach, we may investigate and take appropriate measures to:

1. Contain the incident;
2. Determine the nature and impact of the breach;
3. Protect affected systems and users;
4. Restore affected services;
5. Reduce the likelihood of recurrence; and
6. Maintain appropriate records.

Where notification is required under applicable Malaysian data protection law, Kokok Shop will take reasonable steps to notify the relevant regulatory authority and/or affected individuals as required.

18. Retention of Personal Data

Kokok Shop will retain personal data only for as long as reasonably necessary for the purposes for which the information was collected or as required by applicable laws and legitimate business requirements.

Retention periods may depend on factors such as:

1. Active user accounts;
2. Transaction history;
3. Accounting requirements;
4. Tax requirements;
5. Fraud prevention;
6. Security requirements;
7. Disputes;
8. Legal claims;
9. Regulatory requirements; and
10. Backup retention.

When personal data is no longer required, it may be securely deleted, destroyed or anonymised where appropriate.

19. Account Closure

Users may request closure of their Kokok Shop account subject to applicable legal and operational requirements.

Closing an account does not necessarily result in immediate deletion of all associated data.

Certain information may need to be retained for legitimate purposes including:

1. Completed transactions;
2. Financial records;
3. Tax and accounting requirements;
4. Fraud prevention;
5. Dispute resolution;
6. Regulatory compliance; and
7. Legal obligations.

20. Access and Correction of Personal Data

Subject to applicable law and reasonable verification requirements, users may request access to or correction of certain personal data held by Kokok Shop.

Certain information may also be updated directly through the user's account.

We may require identity verification before processing requests involving personal data.

Requests may be subject to limitations permitted under applicable law.

21. Withdrawal of Consent

Where processing is based on consent and applicable law permits, users may withdraw their consent by contacting Kokok Shop through the official contact channels.

Withdrawal of consent may affect our ability to provide certain services where the relevant information is necessary to operate those services.

For example, we may be unable to process an order if the Buyer does not permit us to provide the delivery address to the Seller or delivery provider.

22. Accuracy of Personal Data

Users are responsible for ensuring that personal information submitted to Kokok Shop is accurate and up to date.

Users are encouraged to promptly update information such as:

1. Telephone numbers;
2. Email addresses;
3. Delivery addresses;
4. Business information; and
5. Payment or settlement information.

23. Children's Privacy

Kokok Shop is not intended to knowingly collect personal data from children who are not legally capable of entering into transactions without appropriate parental or guardian involvement.

Where a minor uses the Platform, the involvement and consent of a parent or legal guardian may be required as appropriate.

24. Cross-Border Processing

Some technology providers or service providers used by Kokok Shop may operate infrastructure in jurisdictions outside Malaysia.

Where personal data is transferred or processed outside Malaysia, Kokok Shop will take reasonable steps to ensure that such transfer and processing complies with applicable Malaysian data protection requirements.

Where reasonably practicable, appropriate contractual, technical or organisational safeguards may be used to protect personal data.

25. Analytics

Kokok Shop may use analytics technologies to understand how users interact with the Platform.

Analytics information may include:

1. Pages visited;
2. Session duration;
3. Device information;
4. Browser information;
5. Referral sources;
6. General geographic information;
7. Click activity; and
8. Platform performance.

This information assists us in improving functionality, performance and user experience.

26. Advertising and Marketing Technology

Kokok Shop may use marketing or advertising technologies to measure campaigns and understand the effectiveness of promotions.

Where such technologies involve cookies or personal data, their use will be subject to applicable privacy requirements and available user preferences.

27. Third-Party Links

Kokok Shop may contain links to third-party websites or services.

These third parties operate independently and may have their own privacy policies.

Kokok Shop is not responsible for the privacy practices, security or content of third-party websites that are outside our control.

Users are encouraged to review the privacy policies of third-party services before providing personal information.

28. Business Transfers

If the ownership or operation of Kokok Shop changes as a result of a merger, restructuring, acquisition, sale of business or similar transaction, personal data may be transferred as part of that transaction where permitted by law.

Any successor organisation will be expected to process the transferred information in accordance with applicable data protection requirements.

29. Your Privacy Choices

Depending on the services used and applicable law, users may have choices relating to:

1. Updating personal information;
2. Correcting inaccurate information;
3. Managing marketing preferences;
4. Managing cookies through browser settings;
5. Managing push notifications;
6. Changing passwords;
7. Closing an account;
8. Requesting access to personal data; and
9. Contacting Kokok Shop regarding privacy concerns.

30. Personal Data Protection Act 2010

Kokok Shop is committed to handling personal data in accordance with applicable Malaysian personal data protection requirements, including the Personal Data Protection Act 2010 [Act 709], as amended from time to time.

Our handling of personal data is guided by applicable principles relating to:

1. Lawful and appropriate processing;
2. Notice and choice;
3. Disclosure;
4. Security;
5. Retention;
6. Data integrity; and
7. Access.

31. Changes to This Privacy Policy

Kokok Shop may update this Privacy Policy from time to time due to:

1. Changes to our services;
2. New Platform features;
3. Changes in technology;
4. Changes in business operations;
5. Regulatory requirements; or
6. Changes in applicable law.

The updated version will be published on the Platform with the latest revision date.

Users are encouraged to review this Privacy Policy periodically.

32. Contact Us

If you have questions, concerns or requests regarding this Privacy Policy or the handling of your personal data, please contact us through the official contact information provided on the Kokok Shop Platform.

Privacy-related enquiries may include requests concerning:

1. Access to personal data;
2. Correction of personal data;
3. Account closure;
4. Marketing preferences;
5. Suspected misuse of personal data; or
6. Personal data security concerns.

Kokok Shop

Dari Penternak, Untuk Semua.