Privacy Policy

This Privacy Policy is effective as of 2026 and was last revised on 18 June 2026. Auris Nexus Sdn Bhd reserves the right to update this Policy periodically. The latest version will always be accessible on our Platform.

1. WHO WE ARE AND WHY THIS POLICY EXISTS

1.1 About Movo

Movo Platform is owned and operated by Auris Nexus Sdn Bhd and its related entities (referred to throughout this document as “Movo,” “we,” “us,” or “our”). Our Platform encompasses our website, mobile application, and all related services made available to users (collectively referred to as the “Services” or the “Platform”).

1.2 Our Commitment to Your Privacy

At Movo, safeguarding the privacy and personal data of every individual who interacts with our Platform is not merely a legal obligation — it is a core value that underpins everything we do. We understand that when you share your personal data with us, you are placing your trust in us, and we take that responsibility seriously. This Privacy Policy has been prepared to give you a clear, honest, and transparent account of how we handle your personal data from the moment it is collected to the moment it is no longer needed.

1.3 Who This Policy Applies To

This Policy applies to all individuals who access, browse, register on, or transact through our Platform, including:

Buyers who browse and purchase products or services through the Platform;
Sellers and Merchants who list and sell products or services through the Platform;
Delivery Partners who are registered under the Movo Delivery Partners Terms of Service;
Visitors who access our Platform without registering an account.

All of the above are collectively referred to in this Policy as “Users,” “you,” or “your.”

1.4 What This Policy Covers

This Privacy Policy explains:

The circumstances under which we collect your personal data;
The categories of personal data we collect;
The purposes for which your personal data is used;
The parties with whom your personal data may be shared;
How we keep your personal data safe and secure;
How long we hold onto your personal data;
The rights you have over your own personal data;
How you can get in touch with us about privacy matters.

1.5 Your Acceptance of This Policy

By accessing our Platform, creating a user account, completing a purchase, registering as a merchant, or otherwise using any of our Services, you confirm that you have read this Privacy Policy in its entirety, that you understand its contents, and that you give your informed consent to the collection, use, and processing of your personal data as described herein. You also expressly consent to the collection and processing of sensitive personal data where applicable and as described in this Policy. If you do not agree with any part of this Privacy Policy, you must stop using our Platform and Services immediately.

1.6 Changes to This Policy

We reserve the right to revise, update, or replace this Privacy Policy at any time to reflect changes in our business practices, technological developments, or applicable legal requirements. Where changes are material, we will bring them to your attention through a notification on our Platform, via your registered email address, or through an in-app alert. Your continued use of the Platform after any revision takes effect will be treated as your acceptance of the updated Policy.

1.7 Relationship with Other Notices

This Privacy Policy works alongside and complements other terms, notices, and agreements that govern your use of our Platform, including our Terms of Service, Merchant Agreement, and Cookie Policy. Unless we explicitly state otherwise, this Policy does not override those other documents.

2. WHEN AND HOW WE COLLECT YOUR PERSONAL DATA

2.1 Direct Collection from You

We collect personal data directly from you across a range of interactions, including when you:

Create a buyer or seller account on our Platform;
Sign up as a Merchant Partner under our movo programme;
Complete and submit any form on our Platform, whether online or in hard copy;
Enter into a contract or provide supporting documentation in connection with our Services;
Make a purchase, place an order, or conduct any transaction through our Platform;
Communicate with us through any channel, including telephone (calls may be recorded for quality and training purposes), email, live chat, social media, or face-to-face meetings, including interactions with our customer service team;
Use our mobile application or digital services, or navigate our website (including through the use of cookies and other tracking technologies we may deploy);
Grant our application permission to access certain functions or data on your device;
Connect your Movo account with a third-party social media or external account;
Participate in surveys, promotions, contests, or campaigns hosted on or by the Platform;
Submit feedback, file complaints, or initiate a return or dispute;
Provide us with your personal data for any other reason or purpose.

This list is not exhaustive and is intended to illustrate the most common situations in which we may collect personal data from you directly.

2.2 Data Collected from Third Parties

In addition to data collected directly from you, we may receive personal data about you from external sources, which may include:

Our affiliated companies and related corporate entities;
Business partners, including payment processors, logistics companies, and fulfilment providers;
Credit rating or financial scoring agencies;
Marketing service providers and advertising partners;
Referral, loyalty, or rewards programme operators;
Other users of our Platform;
Publicly available sources and government databases.

There may be occasions where you provide us with personal data relating to other individuals, for example when entering a delivery address for someone else or referring a friend. In such cases, you confirm and warrant that you have obtained the necessary consent from those individuals for their personal data to be processed in accordance with this Policy.

3. WHAT PERSONAL DATA WE COLLECT

3.1 Categories of Personal Data

Depending on how you interact with our Platform and Services, we may collect the following categories of personal data:

Identity & Contact Information: Full name; Email address; Mobile phone number; Date of birth and gender; Residential or business mailing address; Government-issued identification documents (e.g., MyKad, passport) for identity verification, due diligence, or fraud prevention purposes.

Financial & Payment Information: Bank account details; Payment card information (processed securely through our payment gateway partners); Billing address and payment history; Credit or risk profile information where applicable for pay-later or financing products.

Account & Platform Activity: Username and encrypted password; Profile photograph and display preferences; Search history, browsing behaviour, and product interaction data; Shopping cart contents, wishlists, and purchase history; Advertising and content engagement data; Reviews, ratings, and feedback submitted.

Device & Technical Information: IP address; Device type, model, and operating system; Browser type and version; Unique device identifiers (UDID or MEID); Mobile network information; Cookie data and similar tracking identifiers; Referring website address.

Location Data: Approximate location derived from IP address; Precise GPS location (only where you have granted explicit permission through your device settings); Delivery address geolocation.

Communications & Preferences: Records of communications between you and Movo, including support interactions and dispute correspondence; Marketing preferences and opt-in or opt-out history; Notification preferences.

Multimedia Content: Photographs, audio recordings, or video content submitted by you in connection with your account, product listings, or reviews.

Driver Partner-Specific Information (applicable only to registered Delivery Partners): Driver’s licence and road tax details; Vehicle registration number and ownership documentation; Health declaration; Declaration of any prior or ongoing court proceedings or regulatory investigations.

Aggregated & Anonymised Data: Statistical and demographic data derived from user activity which does not identify any individual.

3.2 Accuracy of Information

You are responsible for ensuring that all personal data you submit to us is truthful, accurate, and up to date. You agree to notify us promptly if any of your information changes. We reserve the right to request additional supporting documentation to verify any information you provide.

If you choose to register or sign in to our Platform using a third-party social media account, such as Google or Facebook, we may receive certain profile information from that provider in accordance with their own privacy policies and your privacy settings with them. Any such information received will be handled in accordance with this Privacy Policy.

3.4 Your Right to Opt Out of Data Collection

You may opt out of certain categories of data collection at any time by notifying our Data Protection Officer in writing. Please be aware that withdrawing your consent or opting out of certain data collection may limit or affect your ability to access certain features of the Platform or the Services we can provide to you. For example, disabling location permissions will result in location-based features being unavailable.

4. AUTOMATICALLY COLLECTED DATA

4.1 Server & Device Data

Each time you visit or interact with our Platform, your device automatically transmits certain technical information to our servers. This includes your IP address, browser type and version, operating system, device model, unique device identifiers, the address of the page that directed you to our Platform, and records of the pages you visit along with the time and duration of each visit. Where you are signed into your account, this information is linked to your profile. We also use this data in aggregate, anonymised form to understand overall traffic patterns and improve the Platform.

4.2 Location Information

Our mobile application may collect precise real-time location data using technologies such as GPS and Wi-Fi positioning systems. We use this information to provide you with location-based services, surface relevant content based on where you are, and enable location-sharing features where applicable. You may revoke location permissions at any time through your device settings. For guidance on how to do this, please refer to your device manufacturer or mobile service provider.

4.3 Content & Advertising Interaction Data

When you view, interact with, or engage with content, advertisements, or other media on our Platform or through our Services, information about those interactions (such as your IP address, operating system, and the content or advertisement you engaged with) may be transmitted to us or to relevant third-party partners.

5. COOKIES AND TRACKING TECHNOLOGIES

5.1 What We Use and Why

We and our authorised partners use cookies, web beacons, pixels, and other tracking technologies on our Platform to enhance your user experience, remember your preferences, understand how you use our Services, and serve you with relevant advertising content both on and off the Platform. These technologies help us operate the Platform effectively, develop new features, and improve the overall quality of our Services.

5.2 Types of Cookies We Use

Cookie Type	Purpose
Essential Cookies	Required for the Platform to function properly. Cannot be disabled.
Functional Cookies	Remember your settings and preferences, such as language and delivery address.
Analytics Cookies	Help us understand how users navigate the Platform so we can improve it.
Advertising Cookies	Used to deliver targeted and relevant advertisements based on your interests.
Third-Party Cookies	Set by integrated external services such as payment gateways and analytics tools.

5.3 Managing Cookies

You can control and manage cookies through your browser or device settings. Most browsers allow you to block or delete cookies. However, please note that disabling certain cookies, particularly essential ones, may impair the functionality of the Platform or prevent you from accessing certain features entirely.

6. HOW WE USE YOUR PERSONAL DATA

6.1 Purposes of Processing

We collect and process your personal data for a range of legitimate business and legal purposes, including:

a) Account & Relationship Management — To create and verify your account, authenticate your identity, manage your ongoing relationship with us, remember your preferences, and communicate important account-related information to you.

b) Transaction Processing & Order Fulfillment — To process your orders, facilitate payments, arrange delivery of your purchases, issue receipts and invoices, manage returns and refunds, and handle any issues arising in connection with your transactions.

c) Customer Support & Dispute Resolution — To respond to your questions, complaints, and feedback; to manage disputes between buyers and sellers; to investigate reports of fraud or misconduct; and to take appropriate action in the event of policy violations.

d) Safety, Security & Fraud Prevention — To detect, investigate, and prevent fraudulent transactions, identity theft, unauthorised account access, and other unlawful or harmful activities on the Platform. To verify the credentials and compliance status of merchants.

e) Legal & Regulatory Compliance — To comply with all applicable Malaysian laws and regulations, including the Personal Data Protection Act 2010, Consumer Protection Act 1999, CPETTR 2024, Income Tax Act 1967, Sales Tax Act 2018, and Companies Act 2016. To respond to lawful requests from courts, government agencies, and regulatory authorities.

f) Credit & Financial Assessments — Where applicable, to evaluate your eligibility for pay-later arrangements, credit facilities, or other financial products offered through or in connection with the Platform.

g) Marketing & Promotions — With your consent, to send you promotional offers, newsletters, product recommendations, and information about campaigns and events via email, SMS, push notifications, or other communication channels. You may withdraw your consent to receive marketing communications at any time using the unsubscribe option provided in each communication, or by updating your notification preferences in your account settings.

h) Loyalty & Partner Programmes — To administer loyalty rewards, referral schemes, co-branded promotions, and partnership offers in collaboration with our business partners.

i) Platform Improvement & Analytics — To conduct internal research, monitor Platform performance, analyse user behaviour, and continuously improve the features, usability, and content of our Platform and Services.

j) Audit & Reporting — To carry out internal and external audits, prepare statistical reports, and satisfy statutory reporting and record-keeping requirements.

k) Business Transactions — To facilitate any merger, acquisition, restructuring, or sale of assets involving Movo or its affiliated entities, where your personal data may form part of the transferred assets subject to equivalent privacy protections.

l) Delivery Partner Operations — For registered Delivery Partners, to match you with Users requiring pick-up and delivery services and to manage your engagement with the Movo Delivery Partner programme.

m) Any Other Notified Purpose — For any other purpose that we bring to your attention at the time your consent is obtained.

6.2 Lawful Access & Disclosure

You acknowledge and agree that Movo may access, retain, and disclose your account data and platform content where required to do so by law, by court order, or by any competent governmental or regulatory authority, or where Movo has a genuine and reasonable belief that such access or disclosure is necessary to: (a) fulfill a legal obligation; (b) comply with a regulatory direction; (c) enforce our Terms of Service or this Privacy Policy; (d) defend against legal claims; (e) respond to your customer service requests; or (f) protect the safety, rights, or property of Movo, our Users, or the general public.

7. HOW WE PROTECT AND RETAIN YOUR PERSONAL DATA

7.1 Security Measures

The security of your personal data is a priority at Movo. We employ a comprehensive range of technical and organisational security measures designed to prevent unauthorised access, loss, misuse, alteration, or destruction of your personal data. These measures include, but are not limited to:

End-to-end encryption of data transmitted between your device and our servers using SSL/TLS protocols;
Cryptographic hashing of account passwords;
Strict role-based access controls limiting data access to authorised personnel only;
Firewalls, intrusion detection systems, and continuous network monitoring;
Regular internal security audits and third-party penetration testing;
Secure, redundant data storage with disaster recovery capabilities;
Mandatory data protection training for all relevant staff.

While we take every reasonable precaution to protect your personal data, no system can be guaranteed to be completely secure. We therefore cannot warrant absolute security in all circumstances, particularly where a breach results from sophisticated or malicious external acts beyond our control.

7.2 Data Retention

We retain your personal data for as long as is reasonably necessary to fulfill the purposes for which it was collected, or as required under applicable Malaysian law. We will delete or anonymise your data once we are satisfied that: (i) the original purpose for which it was collected has been fully served; (ii) there is no continuing legal or business need to retain it; and (iii) no other legitimate interest justifies its further retention. If your account is closed, suspended, or your access to the Platform is withdrawn or terminated, we may continue to hold your personal data for a period thereafter in accordance with applicable law and this Policy. We may dispose of your personal data securely and without prior notice to you once the applicable retention period has expired.

We do not sell your personal data. We do not trade it, rent it, or exploit it for commercial gain outside of the purposes described in this Policy. Any sharing of your personal data with third parties is done solely to facilitate the operation of our Platform and Services, to comply with legal obligations, or where you have expressly directed or authorised us to do so.

a) Affiliated Entities — Our subsidiaries, holding companies, and related corporate entities within the Movo group may access your personal data for internal operational, reporting, or compliance purposes.

b) Sellers and Buyers — When you complete a transaction on our Platform, limited personal data (such as your delivery name, address, and contact number) will be shared with the relevant seller or buyer for the sole purpose of fulfilling that transaction.

c) Service Providers & Operational Partners — We engage third-party companies to assist us in delivering our Services. These include logistics and courier companies, payment gateway operators, cloud hosting and data storage providers, customer support software providers, marketing and analytics firms, telecommunications companies, and information technology vendors. These parties process data on our behalf and are contractually bound to maintain appropriate data protection standards.

d) Artificial Intelligence & Content Services — Where applicable, your inputs and information may be processed by AI model providers or content generation services integrated into our Platform. These providers operate under their own privacy policies and data processing terms.

e) Advertising & Marketing Partners — We may share aggregated, anonymised, or pseudonymised data with advertising platforms and marketing partners to measure campaign performance and serve you with relevant advertising. We do not share your personally identifiable information with advertisers without your explicit consent.

f) Government Authorities & Law Enforcement — We may disclose your personal data to Malaysian government agencies, regulatory bodies, courts, or law enforcement authorities where required or permitted by law, including but not limited to the Royal Malaysia Police (PDRM), KPDN, LHDN, SSM, MCMC, and the Personal Data Protection Commissioner.

g) Professional Advisors — Our lawyers, auditors, insurers, and other professional advisors may access limited personal data on a strictly confidential basis where necessary for legitimate legal, regulatory, or business advisory purposes.

h) Business Succession Parties — In the event of a merger, acquisition, corporate restructuring, bankruptcy, or sale of business assets involving Movo, your personal data may be transferred to the relevant successor entity as part of the transaction, subject to appropriate privacy safeguards.

8.3 Sellers’ Specific Obligations Regarding Buyer Data

All Sellers operating on the Movo Platform, including their employees, agents, and representatives, are strictly required to comply with all applicable Privacy Laws in relation to any buyer personal data they receive through our Platform. Specifically, Sellers:

May only use buyer personal data to respond to enquiries and to process, fulfill, or complete the specific transaction for which the data was disclosed — and for no other purpose — without the prior written consent of both the buyer and Movo;
Must not contact buyers through channels outside the Movo Platform using data obtained through the Platform;
Must not disclose buyer personal data to any unauthorised third party without the express prior written consent of both the buyer and Movo;
Must implement adequate security measures to safeguard buyer personal data in their possession, retain it only for as long as necessary, and securely delete or return it to Movo upon request or upon completion of the transaction;
Must notify Movo’s Personal Data Protection Officer at hello@movo.com.my without undue delay upon becoming aware of any actual or suspected breach or loss of buyer personal data.

8.4 YouTube Content Integration (if applicable)

Our Platform enables Users to share YouTube videos through the Movo Livestream feature. This functionality is powered by YouTube API Services provided by Google. By using this feature, you acknowledge and agree to be bound by Google’s Privacy Policy, available at http://www.google.com/policies/privacy.

8.5 Security Limitations

While we take all reasonable measures to safeguard your personal data, we acknowledge that no digital environment is entirely immune to threats. We cannot be held responsible for unauthorised interception, access, or misuse of your personal data arising from circumstances outside our reasonable control, including sophisticated cyberattacks, hacking, or malicious conduct by third parties.

9. CHILDREN’S PRIVACY

9.1 Age Restriction

Our Platform and Services are intended solely for individuals who are 13 years of age and above. We do not knowingly collect, process, or store personal data from children under the age of 13. No part of our Platform is designed or intended for use by children in that age group.

9.2 Parental Responsibility

Parents and legal guardians are responsible for monitoring and supervising their children’s use of digital platforms. Please do not permit any child under your care to submit personal data to Movo without appropriate oversight.

9.3 Data Belonging to Minors Under 18

In the event that personal data of a minor under the age of 18 is shared with us, the parent or legal guardian who provides or permits such disclosure hereby consents to the processing of that data on the minor’s behalf and accepts the terms of this Policy accordingly. Upon becoming aware that personal data has been submitted by or on behalf of a minor without proper parental consent, we will take immediate steps to delete such data and close any account associated with it.

10. THIRD-PARTY TOOLS AND SERVICES

10.1 Google Analytics

Our Platform uses Google Analytics, a service provided by Google, Inc., which employs cookies to track and report on how users interact with our Platform. Information gathered through this service, including your IP address, is transmitted to and stored on Google’s servers, which may be located in the United States. Google uses this data to generate website activity reports and provide other internet usage analytics services. Google may share this information with third parties where required by law or where those parties process data on its behalf. Your IP address will not be combined with any other data held by Google. For more information, please refer to Google’s Privacy Policy.

10.2 Third-Party Applications

From time to time, third-party software applications may be made available through our Platform. These applications may independently collect identifiable information from your device, such as your name, user ID, IP address, or cookie data. They may also request additional information from you directly. Movo does not own or control these third-party applications, and we encourage you to review their respective terms of use and privacy policies before engaging with them.

11. OVERSEAS DATA TRANSFERS

11.1 Cross-Border Processing

As a digital platform with infrastructure and operational partners that may be based outside Malaysia, it is possible that your personal data will be transferred to, stored in, or processed in jurisdictions other than your own. In such cases, Movo will ensure that any overseas transfer of your personal data is carried out strictly in accordance with applicable Privacy Laws and with appropriate safeguards in place to protect your data to a standard equivalent to that which applies in Malaysia.

12. THIRD-PARTY WEBSITES AND LINKS

12.1 External Links

Our Platform may contain hyperlinks to third-party websites or resources that are not operated, owned, or controlled by Movo. The inclusion of any such link does not constitute an endorsement of the linked site by Movo. Each linked site operates under its own independent privacy and data security policies, and we bear no responsibility or liability for the content, practices, or privacy standards of those external sites.

12.2 Co-Branding & Partner Sites

We may from time to time engage in co-branding relationships or offer features that involve integration with third-party partners. Even where such partnerships involve companies affiliated with Movo, each party operates its own independent data collection and privacy practices. We therefore strongly encourage you to read the privacy policies of any third-party platform you visit or engage with.

13. YOUR PRIVACY RIGHTS AND HOW TO EXERCISE THEM

You have the right to withdraw your consent to the collection, use, or disclosure of your personal data at any time. To exercise this right, please send a written request to our Data Protection Officer at hello@movo.com.my. We will process your request in accordance with applicable law and this Policy. Please note that withdrawing your consent may affect the Services available to you. In some cases, we may not be able to continue providing certain features or services without access to your personal data, and we may need to close or suspend your account as a result.

13.2 Accessing and Correcting Your Personal Data

Registered Users: You may access and update most of your personal data directly through the Account Settings section of your Movo account at any time.

Non-Registered Individuals: If you do not hold an account with us but wish to access or correct personal data we may hold about you, please submit a written request to our Data Protection Officer at hello@movo.com.my. Please include sufficient detail for us to verify your identity and understand the nature of your request.

A reasonable administrative fee may apply to data access requests. If a fee is applicable, we will notify you in writing with an estimate before processing your request. We are not obligated to proceed with your request until the applicable fee has been agreed upon and paid. We reserve the right to decline correction requests where we are legally permitted or required to do so under the applicable Privacy Laws.

14. CONTACT OUR DATA PROTECTION OFFICER

If you have any questions, concerns, feedback, or complaints regarding our privacy practices or this Policy, or if you wish to exercise any of your data subject rights, please do not hesitate to reach out to our dedicated Data Protection Officer:

Data Protection Officer, Movo, No 52, Jalan 10/32 Jinjang Baru, Kuala Lumpur 52000, Malaysia.

Email: hello@movo.com.my.

Telephone: +60 18-252 7267.

Office Hours: Monday to Friday, 9:00 AM – 6:00 PM (Excluding Malaysian public holidays).

We will acknowledge receipt of your enquiry or request within 3 business days and endeavour to provide a full response within 21 business days. For complex matters, this period may be extended by a further 21 days, and you will be informed accordingly.

15. GOVERNING LAW

This Privacy Policy is governed by and shall be construed in accordance with the laws of Malaysia. Any dispute arising out of or in connection with this Privacy Policy, including any question regarding its existence, validity, or termination, shall be subject to the exclusive jurisdiction of the courts of Malaysia.