Privacy Policy

What this policy covers

This policy explains what personal data PlateX.my ("PlateX", "we", "us") collects when you use our valuation tool, marketplace, or seller account system, how we use it, and how you can contact us about it.

Information we collect

Depending on how you use PlateX, we may collect:

• Vehicle plate numbers you search to check an estimated value — used only to show you a price estimate, not stored against your identity.
• Your name and WhatsApp number — if you create a marketplace listing (selling or wanting a plate), or register a seller account. Your WhatsApp number is used as your unique account identifier and shown to buyers/sellers who want to contact you about a listing.
• Account password — stored in encrypted (hashed) form, never in plain text. We cannot see or recover your actual password.
• State/region — provided when posting a listing, used to categorise and filter listings.
• Basic technical data — such as browser type and IP address, collected automatically by standard web server logs for security and troubleshooting purposes.

How we use your information

• To display your marketplace listing to potential buyers or sellers.
• To let interested buyers/sellers contact you directly via WhatsApp.
• To calculate and display seller trust signals (such as star ratings and confirmed sale counts) based on completed transactions.
• To operate your seller account (login, password reset, session management).
• To improve our valuation estimates using aggregated, anonymised market data.

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

Who can see your information

Your name, state, and WhatsApp number on an active marketplace listing are publicly visible to anyone browsing PlateX, because that is necessary for buyers and sellers to contact each other. If you'd prefer not to have your WhatsApp number public, please do not post a listing.

Reviews and ratings linked to your seller account (based on confirmed transactions) are shown publicly to help build trust between buyers and sellers.

How we protect your information

• Passwords are stored using industry-standard hashing (PHP's password_hash()) — never stored or transmitted in plain text.
• Login sessions use randomly generated tokens with a 30-day expiry.
• We limit repeated failed login attempts to reduce the risk of unauthorised access.
• Data is stored on our hosting provider's servers with standard access controls.

No system is 100% secure, and we cannot guarantee absolute security, but we take reasonable technical measures to protect your data.

Your rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the right to:

• Ask what personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated listings.
• Withdraw consent for us to process your data (which may mean we can no longer display your listings).

To exercise any of these rights, contact us using the details on our Contact Us page.

Changes to this policy

We may update this policy as PlateX adds new features (such as identity verification or bank account checks). Material changes will be reflected with an updated "Last updated" date at the top of this page.