How we handle your data.

ACCESS Blockchain Association (Malaysia) (“ACCESS”, “we”, “us”) is a platform-agnostic, non-profit industry association for Malaysia’s blockchain and digital-asset community. This policy covers our website, the member portal, membership applications, events, newsletters and the ecosystem directory.

Questions about this policy or your data go to devaccessblockchainmy@gmail.com.

We collect personal data only when you give it to us or when it is needed to provide a service you asked for.

• Membership applications. Name, date of birth, nationality, country of residence, email address, phone number, employment status, company and position, industry, your reason for joining, an optional profile photo, and optional Discord, Telegram, X and LinkedIn handles.
• Enterprise membership. Company name, registration details, website, logo and description, plus the details above for each person in charge on the account.
• Account and login. Your email address and, if you sign in with Google, the identifier Google provides. We never see your Google password.
• Payments. Membership fees are processed by our payment provider. We keep a record of the amount, date, status and a receipt reference. We do not store card or bank details.
• Newsletter. Your email address and subscription status.
• Ecosystem directory listings. Company name, description, category, logo, website and social links, and the contact details of the person submitting.
• Events. Registrations are handled by the event platform linked from each event (usually Luma). Their privacy terms apply to what you enter there.
• Technical data. Standard server logs such as IP address, browser type and pages requested, kept for security and to keep the site running.

• To assess and manage membership applications, renewals and member benefits.
• To run the member portal, including the members-only directory, publications and vouchers.
• To issue receipts and keep the financial records a registered association must keep.
• To send the newsletter and association announcements you have subscribed to.
• To publish approved enterprise members and ecosystem listings on the public partner wall and directory.
• To answer enquiries and to keep the website secure.

We do not sell personal data, and we do not use it for advertising.

Some information is meant to be seen. When an enterprise membership or ecosystem listing is approved, the company name, logo, description and links are shown on the public website. Committee members are listed by name and role on the committee page.

Individual member profiles are visible only to other signed-in members inside the member portal, never on the public site. You can update or remove profile details from your account.

We share data only with the providers that help us run the association, and only what each one needs:

• Hosting and database providers that store member and website data.
• Payment provider for membership fees.
• Email provider for the newsletter, invites and transactional email.
• Google when you choose to sign in with Google.
• Event platforms such as Luma, when you register for an event.

We may also disclose data where the law requires it, or where it is needed to protect the association, its members or the public.

Membership and payment records are kept for as long as you are a member and for the period after that required for our accounts and by law. Newsletter addresses are kept until you unsubscribe. Applications that are not completed or are rejected are removed after a reasonable period. Server logs are kept briefly and then discarded.

We use only the cookies needed to keep you signed in to the member portal and the admin area, and to protect forms against misuse. We do not run advertising or cross-site tracking cookies. Third-party services linked from the site, such as Luma or Medium, set their own cookies under their own policies.

Under the Personal Data Protection Act 2010 you can:

• ask for a copy of the personal data we hold about you;
• ask us to correct data that is inaccurate or out of date;
• withdraw consent for the newsletter at any time using the unsubscribe link in any email;
• ask us to delete your account and data, subject to records we are required to keep.

Most profile details can be changed from your account. For anything else, email devaccessblockchainmy@gmail.com and we will respond within a reasonable time.

Data is stored with reputable providers, transmitted over encrypted connections and restricted to the committee members and staff who need it to do their work. No system is perfectly secure; if we become aware of a breach that affects you, we will tell you.

We may update this policy as the association’s services change. The date at the top shows the current version. Material changes will be announced to members by email or in the member portal.