Last updated: 5 August 2026
1. About This Policy
Movo ("Movo", "we", "us", or "our") operates the Movo e-commerce platform, including our website and mobile application (together, the "Platform"). We provide this Privacy Policy so that Buyers, Sellers, Delivery Partners, and anyone else who visits or uses the Platform (collectively, "you") can understand what personal data we collect, why we collect it, how it is used and shared, and what choices you have.
"Personal data" means any information that identifies you, or could reasonably be used to identify you, whether on its own or combined with other information we hold.
By creating a Movo account, browsing the Platform, or using any Movo service, you acknowledge that your personal data will be handled as described in this Policy. Where we rely on your consent for a particular activity (for example, marketing communications), we will ask for that consent separately and you may withdraw it at any time as explained in Section 11.
This Policy is intended to align with Malaysia's Personal Data Protection Act 2010 (PDPA) and other applicable data protection laws. It should be read together with the Movo Terms of Service.
2. Who This Policy Covers
This Policy applies to:
- Buyers who browse or purchase on the Platform;
- Sellers, including individual and business merchants who list products on the Platform;
- Delivery Partners who fulfil orders through Movo's logistics network;
- Visitors who interact with our Platform without creating an account (for example, browsing listings); and
- Referral Partners who refer customers to purchase using this Platform.
Where a specific section applies only to one of these groups, this is stated clearly.
3. How We Collect Your Data
We collect personal data in the following ways:
- Directly from you, when you register an account, place an order, list a product, apply to become a Seller or Delivery Partner, contact customer support, complete a survey, or otherwise submit information to us;
- Automatically, through your use of the Platform, including via cookies and similar technologies (see Section 6);
- From third parties, such as payment gateway providers, logistics partners, identity verification services, credit or fraud-screening agencies, marketing partners, and social media platforms (where you choose to log in or link your account through them);
- From other Users, for example when a Buyer and Seller communicate through the Platform, or when someone provides your details as part of a delivery instruction.
If you provide us with someone else's personal data (for example, a gift recipient's delivery address), you confirm that you are authorised to share that information with us for the relevant purpose.
4. What Personal Data We Collect
Depending on how you use the Platform, we may collect the following categories of personal data:
| Category | Examples |
|---|---|
| Identity & Contact | Full name, date of birth, gender, email address, phone number, home/delivery/billing address |
| Verification & Compliance | MyKad/passport number, SSM registration details, selfie for identity verification, and other documents required for KYC, fraud prevention, or regulatory checks |
| Financial | Bank account details, MovoPay wallet balance, card details (tokenised by our payment gateway partner), transaction and payout history |
| Account & Usage | Login credentials, order history, search queries, wishlist items, product reviews, ratings, chat messages with sellers/buyers/support |
| Technical | IP address, device identifiers, browser/app type and version, operating system, cookies and similar tracking technologies |
| Location | Approximate or precise location data (where permitted by your device settings), delivery address geolocation |
| Seller-Specific | Business registration documents, director/beneficial owner identification, supplier invoices, product listings, store performance metrics |
| Delivery Partner-Specific | Driver's licence, vehicle registration, road tax, delivery route and performance data |
You are responsible for ensuring the information you give us is accurate and up to date, and for informing us promptly of any changes. We may ask you for additional documentation to verify information you provide, particularly for identity verification and fraud-prevention purposes.
5. How We Use Your Data
We use personal data for the purposes below. Where required by law, we identify the legal basis we rely on for each purpose.
| Purpose | Typical Basis |
|---|---|
| Creating and managing your Movo account | Performance of contract |
| Processing orders, payments, refunds, and deliveries | Performance of contract |
| Verifying your identity and screening for fraud (KYC/AML) | Legal obligation |
| Providing customer support and resolving disputes | Performance of contract |
| Sending order updates, security alerts, and service notices | Legal obligation / Legitimate interest |
| Sending marketing offers and promotions | Consent |
| Personalising product recommendations and search results | Legitimate interest |
| Detecting, investigating, and preventing fraud or platform abuse | Legitimate interest / Legal obligation |
| Complying with tax, AMLA, and other regulatory reporting obligations | Legal obligation |
| Improving our platform through analytics and research | Legitimate interest |
| Responding to legal requests from courts or authorities | Legal obligation |
We will not use your personal data for a materially different purpose without informing you, unless we are permitted or required to do so by law.
6. Cookies and Similar Technologies
Our Platform uses cookies and similar technologies to keep you logged in, remember your shopping cart and preferences, understand how the Platform is used, and show you more relevant content and advertising, including through analytics tools such as Google Analytics.
You can control or disable cookies through your browser or device settings. If you do, some features of the Platform — such as staying logged in or location-based recommendations — may not work as intended.
7. Sharing Your Data
We do not sell your personal data. We do share personal data with the following categories of recipients, only as needed to operate the Platform and provide our services:
- Payment gateway and financial service providers, to process payments, refunds, and payouts;
- Logistics and delivery partners, to fulfil and track your orders;
- Sellers and Buyers, to the extent necessary to complete a transaction (for example, a Seller receiving a Buyer's delivery address and order details);
- Identity verification, credit, and fraud-screening providers, for KYC/AML and risk-management purposes;
- Cloud hosting, IT, and customer support service providers, who process data on our behalf under confidentiality obligations;
- Marketing and analytics partners, where you have consented to receive marketing or where permitted by law;
- Regulators, law enforcement, or courts, where required by law or where we believe in good faith that disclosure is necessary to comply with a legal obligation, protect our rights, or protect the safety of our Users or the public;
- A buyer or successor entity, in the event of a merger, acquisition, restructuring, or sale of all or part of Movo's business.
Sellers who receive a Buyer's personal data through the Platform (for example, to fulfil an order) may only use that information for the purpose of the transaction, must not contact Buyers outside the Platform for unrelated purposes, and must protect that information in line with applicable data protection law. Similar obligations apply to Delivery Partners in respect of any personal data they access while fulfilling deliveries.
8. Data Security
We apply reasonable technical and organisational measures — such as encryption, access controls, and restricted employee access — to protect personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security, particularly against sophisticated or malicious attacks that occur despite our reasonable safeguards.
9. Data Retention
We keep personal data only for as long as it is needed for the purposes described in this Policy, including to meet legal, accounting, tax, or regulatory requirements. Notably, records connected to identity verification and anti-money laundering checks are retained for a minimum of seven (7) years as required under applicable Malaysian law. When personal data is no longer needed, we securely delete or anonymise it.
10. Cross-Border Data Transfers
Because we use service providers such as cloud hosting and payment processing partners, your personal data may be transferred to, stored, or processed in countries other than Malaysia. Where this occurs, we take reasonable steps to ensure the receiving party provides a comparable standard of protection to that required under Malaysian data protection law.
11. Your Rights and Choices
11.1 Access and Correction
You can view and update most of your personal data directly through your Account Settings on the Platform. For information not accessible this way, you may submit a written request to our Data Protection contact (Section 15).
11.2 Withdrawing Consent
Where we rely on your consent (for example, for marketing communications), you may withdraw it at any time by using the "unsubscribe" link in our emails, adjusting your notification settings in the app, or contacting us directly. Withdrawing consent for certain data uses — such as location access — may limit or disable related features of the Platform.
11.3 Deletion Requests
You may request that we delete personal data we hold about you. We will action such requests except where we are legally required or permitted to retain the data (for example, transaction records subject to the retention period in Section 9).
11.4 Fees
Access requests are generally free of charge. Where a request is manifestly unfounded, excessive, or repetitive, we may charge a reasonable administrative fee, which we will disclose to you in advance.
12. Children's Privacy
The Platform is not directed at, and we do not knowingly collect personal data from, individuals under the age of 18. If you are a parent or guardian and believe your child has provided us with personal data without your consent, please contact us so we can remove the relevant information and close any associated account.
13. Third-Party Links and Services
The Platform may contain links to third-party websites, plugins, or services (for example, social media sharing features or embedded video content) that are not operated by Movo. These third parties have their own privacy policies, and we are not responsible for their content or privacy practices. We encourage you to review the privacy policy of any third-party service before providing your personal data to it.
14. Changes to This Policy
We may update this Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. Material changes will be notified through the Platform or by email, and the "Last Updated" date at the top of this Policy will be revised. Your continued use of the Platform after such changes take effect constitutes acceptance of the updated Policy, to the extent permitted by law.
15. Contact Us
If you have questions, concerns, or requests relating to this Policy or how we handle your personal data, please contact our Data Protection contact at:
- Email: customerservice@movo.com.my
We aim to respond to all privacy-related enquiries within a reasonable timeframe, and in any event within any timeframe required under applicable law.
