PEPS Ventures

Privacy Policy

PEPS Ventures Berhad ("PEPS Ventures", "we", "us", "our") is committed to protecting your personal data in accordance with the Personal Data Protection Act 2010 of Malaysia ("PDPA"). This policy explains how we collect, use, disclose, and safeguard information when you use our website and services.

Last updated: 3 June 2026

1. Data We Collect

We collect personal data that you provide directly to us and data generated through your use of our website and services, including:

  • Registration data: full name, NRIC or passport number, email address, phone number, profession, and REN/registration number where applicable.
  • Payment data: billing name and payment confirmation details. Full card or bank account numbers are processed solely by Curlec (a Razorpay Malaysia entity) and are not stored on our systems.
  • Communications: emails, enquiries, and other correspondence you send to us.
  • Usage and analytics data: pages visited, referral source, device type, and anonymised IP address, collected via third-party analytics tools (e.g. PostHog or Google Analytics) to improve our website.

2. Purpose of Processing

We process your personal data for the following purposes:

  • Processing course and event registrations, including verification of professional credentials.
  • Issuing certificates, receipts, and CPD records.
  • Facilitating secure payment via Curlec.
  • Communicating with you about your enrolment, upcoming events, and programme updates.
  • Complying with legal and regulatory obligations, including those imposed by the Board of Valuers, Appraisers, Estate Agents and Property Managers Malaysia (BOVAEP) and other authorities.
  • Improving our website and services through anonymised analytics.

3. Legal Basis for Processing

Under the PDPA 2010, we process your personal data on the basis of your consent (given at the point of registration), the performance of a contract (course enrolment and payment), and compliance with legal obligations applicable to professional continuing education providers in Malaysia.

4. Disclosure of Personal Data

We do not sell, rent, or trade your personal data. We may share it with:

  • PEPS (the Association): as the regulatory body overseeing CPD requirements for its members.
  • BOVAEP or other government agencies: where required by law or regulation.
  • Payment processors: Curlec / Razorpay Malaysia, solely for the purpose of processing your payment.
  • Service providers: third-party providers who assist us in operating our website, delivering courses, and sending communications, each bound by confidentiality obligations.

We do not transfer your personal data outside Malaysia except where necessary for payment processing or cloud infrastructure, in which case we ensure adequate safeguards are in place.

5. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described in this policy, and in any case for a minimum of seven (7) years from the date of your last transaction with us, in compliance with Malaysian tax and regulatory record-keeping requirements. CPD attendance records may be retained for longer periods where required by BOVAEP guidelines.

6. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Payment data is handled exclusively by PCI-DSS-compliant processors. However, no transmission over the internet is completely secure, and we cannot guarantee absolute security.

7. Your Rights

Under the PDPA 2010 and subject to applicable exceptions, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete personal data.
  • Withdraw consent for processing where consent is the legal basis, noting that withdrawal may affect your ability to register for courses.
  • Limit processing in certain circumstances, including where you dispute the accuracy of data.

To exercise any of these rights, please write to support@pepsventures.com. We will respond within twenty-one (21) days. We may request proof of identity before fulfilling your request.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The "Last updated" date at the top of this page will reflect the most recent revision. Continued use of our website or services after any changes constitutes your acceptance of the updated policy.

For questions about this policy, contact us at support@pepsventures.com.