Privacy Policy

Last updated: 2 November 2026

This policy explains how Junior Chamber International Sibu ("JCI Sibu", "we", "us") collects, uses, shares and protects personal data in the JCI Sibu app and the JCI Sibu members website (together, "the services"). We handle personal data in line with Malaysia's Personal Data Protection Act 2010 (PDPA).

1. What we collect

We collect only what we need to run JCI Sibu's membership and activities.

Type	What
Membership application	Full name, Mandarin name (optional), email, phone, IC number, date of birth, gender, race, address, education, occupation, employment, company, position, industry, interests, T-shirt size, who referred you, and membership fee payment proof.
Profile	Profile photo, and the details above that you update later.
Business directory	Business name, description, industry, address, logo, photos, phone, email, website and social media links that you choose to list.
Claims	Claim amounts, dates, descriptions, receipts, and the bank or e-wallet details you give for payment.
Activities	Event registrations and attendance (including when your membership card is scanned), meeting attendance, points and rewards, course results, trainer records, training hours and evidence, election nominations and votes, and Board of Directors (BOD) monthly reports and their photos.
Messages	Notifications we send you, and whether you have read them.
Technical	Device name, phone type and app version, a push notification token (so we can send alerts to your phone), sign-in times, IP address, and a record of important actions (for example, approving a claim), kept for security.

We do not collect your location, contacts, or card payment details, and the app has no advertising and no tracking. The camera and photo library are used only when you choose to take or attach a photo (for example, a receipt) or scan a membership card.

2. How we use it

To process your membership application and manage your membership
To show the member and business directories
To organise events, training, meetings and elections, and to record attendance, points and results
To process and pay claims, and to keep the club's financial records
To send you notifications, reminders (such as birthdays, meetings and events) and important emails
To keep accounts secure, prevent misuse, and meet our legal and constitutional obligations

We use your IC number, date of birth, gender and race only for membership administration and eligibility (for example, JCI's age requirement), and for records we must keep as a registered society.

3. Who can see your data

Other members (signed in) can see your name, Mandarin name, photo, position, trainer titles, badges and points ranking.
The Board of Directors can see your contact details, for club administration.
Officers see what their role needs: for example, the Honorary Treasurer and Local President see claims and payment details; the Secretary sees membership records; election chairmen see who has voted.
The public can see business listings you choose to publish in the Business directory.

We never sell your personal data, and we don't share it for marketing. We may disclose data if the law requires it, or to JCI Malaysia when needed for national membership or event administration.

These companies help us run the services. They process data only for that purpose:

Our web hosting provider stores the website, app data and files.
Google Firebase Cloud Messaging delivers push notifications to your phone. It receives your device's push token and the notification text. See Firebase privacy information.
Our email provider delivers emails such as sign-in codes and claim updates.

Links to Google Maps, WhatsApp, websites and social media open those services, which have their own privacy policies.

5. How long we keep it

Your profile and membership details: while you are a member, or until you delete your account.
Claims, receipts and membership fee records: for as long as required for the club's financial records and audits, normally 7 years.
Votes, attendance and results: kept as part of the club's records. After account deletion, they are no longer linked to your personal details.
Security and activity records: normally up to 12 months.

6. How we protect it

All connections use encryption (HTTPS).
Passwords are stored only in hashed form, and sign-in codes expire after 15 minutes.
Access to data depends on each member's role, and sensitive keys are stored outside the public website.
You can see the phones signed in to your account, and sign out any of them, in the app (Me, then Signed-in Devices).

No system is perfectly secure. If a data breach affects you, we will tell you and take steps to limit the harm.

7. Your rights and choices

Under the PDPA, you can:

Access and correct your data. Most details can be changed in the app (Me, then Edit Profile). For your name, email or IC number, contact the Secretary.
Withdraw consent or limit how we use your data, by contacting us. Some services may then no longer be possible.
Turn off alerts at any time in your phone's settings.
Delete your account, as described below.

We will reply to requests within 21 days.

8. Deleting your account

You can delete your account at any time, in the app (Me, then Delete Account) or on our website at www.jcisibu.org/members/delete-account.php, even without the app.

Deletion is immediate and permanent. We erase your personal details, photos and business listings, and sign you out on every phone. We keep the records described in section 5 (such as claims), but without your personal details.

9. Age

JCI membership is for people aged 18 and over, and the services are not intended for children. If we learn that we hold data about someone under 18 without proper consent, we will delete it.

10. Changes to this policy

If we make important changes, we will tell members in the app or by email. The date at the top shows when it was last updated.

11. Contact us

For questions or requests about your personal data, contact:

JCI Sibu
Sibu, Sarawak, Malaysia
Email: [email protected]