# Privacy Policy — PDEG

**Effective date:** 6 August 2026

**Last updated:** 6 August 2026

---

## 1. Application and Developer Identification

This Privacy Policy applies specifically and exclusively to the mobile application identified below, as published on Google Play.

| Item | Detail |

| --- | --- |

| **Application name (Google Play listing)** | PDEG |

| **Application package name / App ID** | `com.speedminer.pdeg` |

| **Google Play developer name** | Unit Teknologi Maklumat |

| **Legal entity that owns and publishes the app (Data Controller)** | Lembaga Getah Malaysia (Malaysian Rubber Board), a statutory body of the Government of Malaysia. "Unit Teknologi Maklumat" is the Information Technology Unit of Lembaga Getah Malaysia and is the unit under which this application is published on Google Play. |

| **Application developer engaged by Lembaga Getah Malaysia (Data Processor)** | Speedminer Sdn. Bhd. |

| **Google Play listing URL** | https://play.google.com/store/apps/details?id=com.speedminer.pdeg |

| **Contact for privacy matters** | zulhilmi@lgm.gov.my |

In this Policy, **"we"**, **"us"** and **"our"** refer to Lembaga Getah Malaysia (Malaysian Rubber Board), publishing on Google Play under the developer name **Unit Teknologi Maklumat**. **"the App"** or **"PDEG"** refers to the application `com.speedminer.pdeg`. **"you"** refers to the user of the App.

**Roles of the parties.** Lembaga Getah Malaysia is the **data controller** — it determines why and how your personal data is processed, and it owns the data. Speedminer Sdn. Bhd. is the **data processor** — it developed and maintains the App on behalf of Lembaga Getah Malaysia and processes personal data only on the documented instructions of Lembaga Getah Malaysia. Speedminer Sdn. Bhd. does not use your personal data for its own purposes and does not sell it.

---

## 2. Scope

PDEG is an internal operational application used to record, submit and review work-related information for Lembaga Getah Malaysia. Access requires a user account issued in connection with Lembaga Getah Malaysia's systems; the App is not a general-purpose consumer service.

This Policy covers only the PDEG mobile application named in Section 1. It does not cover any other application, website or service, including any other application published by Unit Teknologi Maklumat or by Speedminer Sdn. Bhd.

---

## 3. Personal Data We Collect

We collect only the data described below. We do **not** collect anything that is not listed here.

### 3.1 Account and identity data

Collected when you sign in to, register for, or use the App:

- Username

- Password

- User ID assigned by the system

- Full name

- Email address (where provided for account registration or password recovery)

### 3.2 Photos and images

- **Profile photograph.** If you choose to set or change a profile picture, the App opens either your device camera or your device photo gallery, and you select or capture an image. The image may be cropped within the App before it is uploaded. This is optional — the App functions without a profile photograph.

- **Images attached to work records.** Where a form in the App allows an image attachment, the image you capture or select is uploaded with that record.

The App accesses the camera and photo gallery **only at the moment you tap the relevant button**. It does not access, scan, index or upload any other image on your device, and it does not access the camera or gallery in the background.

### 3.3 Work and operational data you enter

Information you type or select in the App's forms, dashboards and task screens in the course of your duties (for example dates, task entries, operational readings, remarks and status updates). This data belongs to Lembaga Getah Malaysia.

### 3.4 App and session data

- Session identifier / session cookie used to keep you signed in

- App version and basic technical information required to communicate with the server

- Server connection settings you or your administrator configure in the App

### 3.5 Data we do NOT collect

The App does **not** collect, access or transmit:

- Precise or approximate **location** data (the App contains no location or GPS functionality)

- Contacts, call logs, SMS messages or phone numbers from your device

- Calendar entries

- Microphone or audio recordings

- Health, fitness or biometric data

- Financial or payment data (the App contains no payment functionality)

- Advertising identifiers

The App contains **no advertising**, **no third-party analytics or tracking SDKs**, and **no in-app purchases**. Your data is not used for advertising, profiling or marketing of any kind, and is never sold.

---

## 4. Device Permissions and Why They Are Needed

| Permission | Android permission name | Why the App needs it |

| --- | --- | --- |

| Internet access | `android.permission.INTERNET` | To sign you in and to send and retrieve your work records to and from Lembaga Getah Malaysia's server. The App cannot function offline-only. |

| Camera | Requested at the moment of use via the Android photo picker | To let you take a photograph for your profile picture or for a form attachment, only when you choose to do so. |

| Photos / media / files | `android.permission.READ_EXTERNAL_STORAGE`, `android.permission.WRITE_EXTERNAL_STORAGE` | To let you select an existing image from your gallery when you choose to, and to save temporary files (such as a cropped image or a downloaded document) on your device so the App can display them. |

You may refuse or later revoke camera and photo permissions in your device settings. If you do, the features that depend on them (profile photograph, image attachments) will not work, but the rest of the App will continue to function.

---

## 5. How We Use Your Personal Data

We use the data in Section 3 only to:

1. Authenticate you and maintain your signed-in session;

2. Display your user profile, including your name and optional profile photograph;

3. Record, submit, retrieve and display the work and operational data you enter, and make it available to authorised Lembaga Getah Malaysia personnel;

4. Enable password recovery when you request it;

5. Operate, support, troubleshoot and improve the App;

6. Maintain records of system access for security and audit purposes;

7. Comply with the legal, regulatory and record-keeping obligations of Lembaga Getah Malaysia.

We do not use your personal data for any purpose that is incompatible with those listed above without first obtaining your consent.

---

## 6. Where Your Data Is Stored

### 6.1 On your device

To let you stay signed in and to display your information, the App stores the following locally on your device:

- Your account details and session information (username, user ID, full name, session token) in the App's private application storage;

- Server connection settings;

- A local database and temporary image or document files used by the App;

- A cached copy of data you have viewed or entered.

This local data is held in the App's private storage area, which other applications cannot read on a normal (non-rooted, non-modified) Android device. **All locally stored data is deleted when you uninstall the App or clear the App's storage from your device settings.**

### 6.2 On Lembaga Getah Malaysia's server

Data you submit is transmitted to and stored on the server operated by or for Lembaga Getah Malaysia. Lembaga Getah Malaysia controls that server, its access controls and its backups. Data is hosted in Malaysia.

---

## 7. Disclosure of Personal Data

We do not sell, rent or trade your personal data, and we do not share it with advertisers or data brokers.

We disclose personal data only:

- To **authorised officers and personnel of Lembaga Getah Malaysia** who need it to perform their duties;

- To **Speedminer Sdn. Bhd.**, the appointed application developer, strictly for the purpose of developing, hosting support, maintaining and troubleshooting the App on Lembaga Getah Malaysia's instructions, and under an obligation of confidentiality;

- Where **required or permitted by Malaysian law**, or in response to a lawful request from a court, regulator, or law enforcement or government authority;

- Where necessary to **protect the rights, safety, property or security** of Lembaga Getah Malaysia, its users or the public.

No personal data is transferred to any third party for that third party's own purposes.

---

## 8. Data Security

We take reasonable steps to protect personal data against loss, misuse, unauthorised access, modification and disclosure, including:

- Access to the App requires a valid user account and password;

- Sessions expire after a period of inactivity and require you to sign in again;

- Data stored by the App on your device is kept in the App's private application storage;

- Server-side access is restricted to authorised Lembaga Getah Malaysia personnel and to the appointed developer under confidentiality obligations;

- The App supports encrypted (HTTPS/TLS) communication with the server, and Lembaga Getah Malaysia configures its servers to use encrypted connections.

No method of transmission or storage is completely secure. You are responsible for keeping your password confidential, for not sharing your account, and for securing your device with a screen lock. If you believe your account has been compromised, contact us immediately at the address in Section 12.

---

## 9. Data Retention

- **Data on your device** is retained until you sign out, clear the App's storage, or uninstall the App.

- **Data on the server** — including your account record and the work records you submitted — is retained for as long as your account remains active and thereafter for the period required by Lembaga Getah Malaysia's record-retention rules and by Malaysian law applicable to public-sector records. Work records created in the course of official duties are the records of Lembaga Getah Malaysia and may need to be retained for audit and statutory purposes even after your account is closed.

---

## 10. Account Deletion and Data Deletion Requests

**The App does not provide an in-app account deletion function.** To request deletion of your PDEG account and the personal data associated with it, follow these steps:

1. Send an email to **zulhilmi@lgm.gov.my**.

2. Use the subject line: **"PDEG — Request to Delete Account and Personal Data"**.

3. In the email, state your **full name**, your **PDEG username**, and whether you are requesting deletion of (a) your account only, or (b) your account together with the personal data associated with it.

4. We may ask you for information to verify your identity before we act on the request. This is to prevent someone else deleting your account.

**What happens next.** We will acknowledge your request and aim to complete it within **thirty (30) days** of verifying your identity. On completion, your account is disabled and can no longer be used to sign in, and your personal data — including your profile photograph and account details — is deleted or irreversibly anonymised.

**What may be retained after deletion, and why.** Work and operational records you created in the course of your duties are official records of Lembaga Getah Malaysia. Where such records must be kept for audit, statutory, or legal-obligation reasons, they are retained, but they are disassociated from your personal identifiers where it is lawful and practicable to do so. Minimal records of the deletion request itself are kept to evidence that it was carried out. We will tell you in our response if any data is being retained on this basis.

**Deleting data from your own device.** You can remove all data the App has stored on your device at any time by uninstalling the App, or by going to your device **Settings → Apps → PDEG → Storage → Clear storage**. This does not delete your account or your data on the server — use the email process above for that.

---

## 11. Your Rights Under the Personal Data Protection Act 2010

Subject to the Personal Data Protection Act 2010 (Act 709) of Malaysia and its exemptions, you may:

- **Request access** to the personal data we hold about you;

- **Request correction** of personal data that is inaccurate, incomplete, misleading or out of date;

- **Withdraw consent** to the processing of your personal data, or **limit** the processing, noting that doing so may mean you can no longer use the App;

- **Request deletion** of your personal data, as described in Section 10;

- **Enquire** about how your personal data has been used or disclosed.

To exercise any of these rights, contact us at **zulhilmi@lgm.gov.my**. We may need to verify your identity first, and we will respond within the period prescribed by law.

---

## 12. Children's Privacy

PDEG is intended for use by adults in a professional and operational capacity in connection with Lembaga Getah Malaysia. It is not directed at, designed for, or marketed to children under the age of 13, and we do not knowingly collect personal data from children. If you believe a child has provided personal data to us, contact us at **zulhilmi@lgm.gov.my** and we will delete it.

---

## 13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to the App, to our practices, or to legal requirements. When we do, we will revise the "Last updated" date at the top of this page and publish the updated Policy at the same URL that is linked from the App's Google Play listing. Material changes will be communicated to users through the App or by email where appropriate. Your continued use of the App after an update takes effect means you accept the revised Policy.

---

## 14. Contact Us

For any question, complaint or request about this Privacy Policy or about how your personal data is handled in the PDEG application (`com.speedminer.pdeg`), contact:

**Data Controller**

Lembaga Getah Malaysia (Malaysian Rubber Board)

Unit Teknologi Maklumat

Email: **zulhilmi@lgm.gov.my**

Website: https://www.lgm.gov.my

**Application Developer (Data Processor)**

Speedminer Sdn. Bhd.

Enquiries about the App should be directed to Lembaga Getah Malaysia at the address above in the first instance.

---

*This Privacy Policy applies to the PDEG mobile application, package name `com.speedminer.pdeg`, published on Google Play by Unit Teknologi Maklumat, Lembaga Getah Malaysia (Malaysian Rubber Board), and developed by Speedminer Sdn. Bhd.*