← Back to appBahasa Melayu

Privacy Policy

Last updated: 24 October 2026

This English version is provided for convenience. If there is any difference, the Bahasa Melayu version applies.

This policy explains how BAIT AL SALIHIN RESOURCES (202603283326 (JR0197121-H)) (“we”) collects, uses and protects your personal data when you use Madrasah Online, in line with Malaysia's Personal Data Protection Act 2010.

1. Data we collect

  1. Account details: name, phone number and email address.
  2. PIN: stored in one-way encrypted form. We cannot see your PIN.
  3. Subscription and payment records: plan, amount, date, status and transaction reference number.
  4. Learning records: videos watched and the minute you stopped, so you can continue watching.
  5. Community content: questions or comments you submit.
  6. Technical data: IP address, used for security and to limit login attempts.
  7. Donors: name, email, phone number (optional) and message, for receipts and donation records. Your name is not displayed if you choose to hide it.
  8. App settings: your language, prayer time area and notification choices.
  9. Location (Qibla direction): calculated on your phone only and not sent to or stored by us.
  10. Prayer log and tasbih count: stored on your phone only and not sent to us. They are lost if you clear your browser data or change phones.

We do not store your bank card number. Card details are processed directly by the licensed payment gateway.

2. How we use it

  1. To manage your account, login and subscription.
  2. To send PIN reset codes, receipts, subscription reminders and class notices.
  3. To let you continue watching videos where you left off.
  4. To keep accounts secure and prevent misuse.
  5. To improve our classes and service.

3. Sharing of data

We do not sell your data. Data is only shared with service providers needed to run this app:

  1. Cloudflare: app hosting and database.
  2. Bunny.net: class video streaming.
  3. Licensed payment gateway: payment processing.
  4. Email service provider: sending codes and notices.
  5. Zoom: when you join a Zoom class, subject to Zoom's privacy policy.

Data may also be disclosed when required by law.

4. Storage outside Malaysia

Some of the providers above process data on servers outside Malaysia. We choose providers with reasonable data protection measures.

5. Retention

Account data is kept for as long as your account exists. You can delete your account in the app (Account → Delete my account) or without opening the app on the Delete account page. When you delete your account, your account details, viewing records and questions are deleted immediately. Transaction records are kept for up to 7 years for accounting and tax purposes, no longer linked to your account.

6. Security

Connections are encrypted (HTTPS), PINs are stored as hashes, login sessions are protected, and accounts are temporarily locked after several wrong PIN attempts.

7. Your rights

  1. Access and correction: update your email and PIN in the Account menu, or contact us for other changes.
  2. Delete your account: through Account → Delete my account.
  3. Withdraw consent or make a complaint: contact us using the details below.

8. Cookies and browser storage

We only use the cookies needed to keep you logged in. Your theme, text size and language settings are stored in your browser. There are no advertising or third-party tracking cookies.

9. Students under 18

Students under 18 must be registered with the permission of a parent or guardian.

10. Changes to this policy

This policy may be updated. Important changes will be announced in the app.

11. Contact us