Privacy Notice

Effective Date: 26 August 2026

Last Updated: 26 August 2026

HobbyMart.my (“HobbyMart”, “we”, “us” or “our”) is operated by:

HobbyMart Trading

Business Registration No.: 202603196291 (AS0519002-V)

HobbyMart respects the privacy of Buyers, Sellers, visitors and other users of the HobbyMart.my marketplace.

This Privacy Notice explains how HobbyMart collects, records, stores, uses, processes, discloses, protects and otherwise handles personal data when you access or use HobbyMart.my.

This Privacy Notice should be read together with HobbyMart's:

HobbyMart processes personal data in connection with commercial transactions in accordance with applicable Malaysian data-protection laws, including the Personal Data Protection Act 2010 and applicable amendments, regulations, standards and guidelines.

Part A — Introduction and Scope

1. Who Controls Your Personal Data

For personal data collected and processed for the operation of HobbyMart.my, the relevant data controller is:

HobbyMart Trading

Business Registration No.: 202603196291 (AS0519002-V)

HobbyMart determines how and why personal data is processed for purposes including operating the marketplace, maintaining accounts, processing Transactions, facilitating payments, supporting deliveries, conducting verification, preventing fraud and handling disputes.

Certain information may also be disclosed to or processed by Buyers, Sellers and third-party service providers where reasonably necessary for a Transaction or the operation of the Platform.

2. HobbyMart's Marketplace Role

HobbyMart operates an online marketplace where:

Where HobbyMart acts as a Seller, HobbyMart may process personal data both as Platform operator and for the purpose of fulfilling its obligations as Seller.

Part B — Data We Collect

3. Personal Data We May Collect

Depending on how you use HobbyMart, we may collect the following categories of personal data.

3.1 Identity Information

This may include:

3.2 Contact Information

This may include:

3.3 KYC and Verification Information

Where identity or Seller verification is required, HobbyMart or an appointed verification provider may collect:

HobbyMart may require different levels of verification depending on the type of account, Transaction, risk level or marketplace activity.

Where identity verification involves technical processing of facial, physical, physiological or behavioural characteristics to identify or authenticate a person, the resulting biometric data may constitute sensitive personal data. HobbyMart will process such data only where necessary and in accordance with applicable legal requirements, including specific consent where required.

3.4 Minimum Age and Children

HobbyMart is intended only for persons aged 18 years or above. HobbyMart does not knowingly permit persons under 18 to register for or maintain an account.

If HobbyMart becomes aware that a person under 18 has submitted personal data or created an account contrary to the Buyer Terms and Conditions, HobbyMart may restrict or close the account and take reasonable steps to delete, anonymize or otherwise handle the information in accordance with applicable law and any required retention obligations.

If HobbyMart introduces services for persons under 18 in the future, appropriate parental or guardian consent and additional safeguards will be implemented where required by applicable law.

3.5 Payment and Transaction Information

We may process information relating to payments and Transactions, including:

HobbyMart generally does not need to store complete payment-card credentials where those credentials are handled directly by an authorized payment provider.

Payment providers may independently process payment information according to their own legal and security requirements.

3.6 Order and Delivery Information

We may process:

3.7 Auction Information

Where you participate in auctions, we may process:

3.8 Marketplace Communications and Chat Data

HobbyMart may process communications made through the Platform, including:

Messages sent using HobbyMart's communication functions should not be regarded as private communications between only the Buyer and Seller where HobbyMart needs access for legitimate marketplace purposes.

HobbyMart may access and review Platform communications where reasonably necessary for:

4. Images, Videos and Other Content

HobbyMart may collect or process images and other media uploaded to the Platform.

This may include:

Information contained within an image or video may itself constitute personal data.

Users should avoid unnecessarily uploading personal or confidential information that is not relevant to the applicable Listing, Transaction or dispute.

Media uploaded for public Product Listings may be stored, copied, cached, resized, reformatted, displayed or otherwise technically processed where reasonably necessary to operate, secure and present the Platform and its marketplace features.

Public Listing media may also be displayed or shared by HobbyMart in connection with promoting the relevant Listing or the HobbyMart marketplace, subject to the applicable Buyer Terms and Conditions and Seller Terms and Conditions.

This Privacy Notice describes how such content may be processed as personal data. Ownership of user content and any licence granted to HobbyMart to use that content are governed separately by the applicable Buyer Terms and Conditions and Seller Terms and Conditions.

5. Product Listings and Seller Content

Seller information and Product Listings may include:

Certain information submitted for a Product Listing is intended to be publicly displayed to users of HobbyMart.

Sellers should therefore not include unnecessary private information in Product photographs, descriptions or Listing content.

Because Product Listings are intended for public marketplace use, Listing content may remain visible, cached or otherwise retained for a reasonable period where necessary for completed Transactions, disputes, fraud prevention, legal obligations, backups or marketplace records, even after a Listing is removed.

6. Technical and Device Information

When you visit or use HobbyMart, we may automatically collect technical information such as:

We may use this information to operate, secure, troubleshoot and improve the Platform.

7. Cookies and Similar Technologies

HobbyMart may use cookies and similar technologies to:

Some cookies may be necessary for HobbyMart to operate correctly.

Where optional cookies or technologies requiring consent are used, HobbyMart may provide appropriate choices or settings.

Users may also be able to control cookies through their browser settings.

Disabling essential cookies may prevent certain HobbyMart functionality from working correctly.

8. How We Collect Personal Data

HobbyMart may collect personal data:

8.1 Directly From You

For example when you:

8.2 Automatically

Certain technical information may be collected automatically when you access the Platform, including IP address, device information, cookies and usage information.

8.3 From Other HobbyMart Users

HobbyMart may receive personal data about you from another Buyer or Seller.

For example, a Seller may provide information relating to:

A Buyer may similarly submit information regarding a Seller.

8.4 From Service Providers

HobbyMart may receive information from:

Part C — How We Use Personal Data

9. Why HobbyMart Processes Personal Data

HobbyMart primarily processes personal data to provide, operate, protect and administer the HobbyMart marketplace and its related services.

This includes the purposes described below.

9.1 Account Registration and Administration

We may process your information to:

9.2 Identity and KYC Verification

We may process verification information to:

9.3 Processing Transactions

We may process information to:

9.4 Delivery and Fulfilment

We may process and disclose information where necessary to:

9.5 Buyer-Seller Communication

Relevant account information may be used to enable Buyers and Sellers to communicate regarding:

9.6 Dispute Resolution and Buyer Protection

HobbyMart may process substantial Transaction information when investigating a dispute.

This may include:

Information provided during a dispute may be shared with the opposing party where reasonably necessary to allow that party to understand or respond to the claim.

HobbyMart may also retain dispute information to protect against repeated fraud or abuse.

9.7 Fraud Prevention and Marketplace Safety

We may process information to:

9.8 Customer Support

We may process personal data to:

9.9 Platform Security and Technical Operation

Technical information may be processed to:

9.10 Legal and Regulatory Compliance

HobbyMart may process personal data where reasonably necessary to:

10. Direct Marketing

HobbyMart's primary purpose for collecting the personal data described in this Notice is to provide marketplace services.

HobbyMart will not treat registration for the marketplace as unlimited consent for unrelated promotional marketing.

Where consent is legally required for direct marketing, HobbyMart will obtain appropriate consent before sending such communications.

Users may request that HobbyMart stop sending optional marketing communications.

This does not prevent HobbyMart from sending necessary service communications such as:

Part D — Sharing and Disclosure

11. Who May Receive Your Personal Data

HobbyMart may disclose relevant personal data to the following categories of recipients where reasonably necessary for the purposes described in this Notice.

11.1 Buyers and Sellers

Information may be shared between a Buyer and Seller where necessary to complete a Transaction.

For example, a Seller may receive:

A Buyer may receive relevant Seller information associated with the Listing, Transaction, shipment or dispute.

Only information reasonably required for the Transaction should be used.

Buyers and Sellers must not use information obtained through HobbyMart for unrelated purposes such as:

11.2 Payment Providers and Banks

Relevant information may be disclosed to:

These parties may process information to:

11.3 Couriers and Delivery Partners

HobbyMart and Sellers may disclose relevant information to couriers or delivery providers, including:

11.4 KYC and Identity-Verification Providers

HobbyMart may disclose information to appointed identity-verification providers for purposes including:

Identity and KYC documents are not intended to be publicly displayed and will not ordinarily be disclosed to other Buyers or Sellers merely because they are marketplace users.

11.5 Authorities and Legal Recipients

Where permitted or required by law, HobbyMart may disclose relevant information to:

12. Information Visible to Other Users

Certain information is inherently intended to be visible through an online marketplace.

Depending on your account and activities, other users may be able to see information such as:

Users should not place private information into public Listings unless disclosure is genuinely necessary.

13. Use of Data by Buyers and Sellers

Buyers and Sellers may receive limited personal data through the Platform to complete legitimate marketplace activities.

Recipients must use that information only for appropriate purposes connected with the Transaction or as otherwise permitted by law.

HobbyMart prohibits misuse of another user's personal data.

Where a Seller receives personal information to independently fulfil an order or comply with its own legal obligations, that Seller may have separate responsibilities concerning its handling of that information.

HobbyMart may take marketplace enforcement action where a user misuses personal data obtained through HobbyMart.

14. Required and Optional Information

Some information is required for HobbyMart to provide its services.

For example, HobbyMart may require:

If required information is not provided, HobbyMart may be unable to:

Where information is optional, HobbyMart may identify it as such where appropriate.

Part E — Data Quality and Security

15. Data Accuracy

Users are responsible for providing accurate information.

You should update your HobbyMart account when information changes.

HobbyMart may take reasonable measures to verify or correct information where necessary.

Incorrect information may cause problems including:

16. Personal Data Security

HobbyMart will take reasonable technical and organizational measures intended to protect personal data from:

Access to personal data should be limited according to operational need.

However, no internet-connected system or method of electronic storage can guarantee absolute security.

Users are also responsible for maintaining the security of their HobbyMart account credentials.

17. Account Security

You should:

HobbyMart may temporarily restrict an account where suspicious access is detected.

18. Data Breaches

If HobbyMart has reason to believe that a personal-data breach has occurred, HobbyMart will investigate the incident and take reasonable steps to contain, assess and remediate it.

HobbyMart will notify the relevant Malaysian personal-data-protection authority as required by applicable law. Where a breach causes or is likely to cause significant harm to an affected individual, HobbyMart will also notify the affected individual without unnecessary delay or within any applicable statutory timeframe.

Part F — Retention and Cross-Border Transfers

19. Retention of Personal Data

HobbyMart will retain personal data for as long as reasonably necessary for the purposes for which it was collected and for applicable legal, accounting, security, fraud-prevention and regulatory requirements.

Different categories of information may be retained for different periods.

Where Malaysian tax, accounting or other laws require specified business records to be retained for a defined period, HobbyMart will retain the relevant records for that period. For example, certain business, accounting and Transaction records may need to be retained for at least seven years under applicable Malaysian tax requirements.

This does not mean that every category of personal data will be retained for seven years. HobbyMart may apply shorter or longer periods depending on the nature of the information, the purpose for which it is held, legal requirements, disputes, fraud-prevention needs and applicable limitation periods.

For example, HobbyMart may retain certain information after an account is closed where necessary for:

When personal data is no longer reasonably required, HobbyMart will take appropriate steps to delete, destroy, anonymize or otherwise cease retaining it, subject to applicable legal requirements.

20. Closed or Terminated Accounts

Closing or terminating an account does not necessarily result in immediate deletion of all information.

HobbyMart may retain information reasonably necessary to:

Information that is no longer required will be handled in accordance with HobbyMart's retention practices.

Account closure does not override statutory record-retention requirements that apply to particular Transaction, tax, accounting, legal or regulatory records.

21. Cross-Border Processing

Some payment, verification, infrastructure or other service providers may operate systems outside Malaysia.

Where personal data is transferred outside Malaysia, HobbyMart will take steps required under applicable Malaysian data-protection law concerning such transfers.

This may include implementing appropriate contractual, technical or organizational safeguards and obtaining consent where legally required.

Part G — Your Rights

22. Access to Your Personal Data

Subject to applicable law and any permitted exceptions, you may request access to personal data HobbyMart holds about you.

HobbyMart may require sufficient information to verify your identity before processing an access request.

Requests may be submitted to:

[email protected]

23. Correction of Personal Data

If you believe personal data held by HobbyMart is:

you may request correction.

Certain account information may also be corrected directly through your HobbyMart account.

HobbyMart may require supporting information where reasonably necessary to verify the requested correction.

24. Data Portability

Subject to applicable law, technical feasibility and compatibility of the relevant data format, you may request HobbyMart to transmit personal data that is subject to the applicable data-portability right directly to another data controller of your choice.

A data-portability request may be submitted by electronic means to the Privacy / Support Email stated in this Notice. HobbyMart may require reasonable information to verify your identity and process the request in accordance with applicable legal requirements and prescribed timeframes.

25. Withdrawal of Consent

Where processing is based on consent and applicable law permits withdrawal, you may request to withdraw that consent.

Withdrawal may affect HobbyMart's ability to provide certain services.

For example, HobbyMart may not be able to maintain an active marketplace account without information reasonably necessary to:

Withdrawal of consent does not necessarily require HobbyMart to delete information that it is permitted or required to retain for another lawful purpose.

26. Direct Marketing Choices

You may request that HobbyMart stop using your personal information for optional direct-marketing communications.

Marketing preferences do not affect necessary operational communications concerning:

27. Requests to Delete Information

You may contact HobbyMart to request deletion of personal information where appropriate.

Deletion may not always be possible immediately.

HobbyMart may retain information where reasonably necessary or legally permitted for purposes including:

Part H — Automated Processing and Third Parties

28. Automated Fraud and Risk Controls

HobbyMart may use automated or semi-automated systems to identify activity that may indicate:

Where an automated or risk-based process materially affects an account, HobbyMart may conduct additional review where appropriate or required by applicable law.

29. Third-Party Services

HobbyMart may use or integrate third-party websites, platforms and service providers in connection with payments, banking, identity verification, delivery, hosting, security, communications and other marketplace functions.

Some third parties may act as independent data controllers and process personal data for their own purposes under their own terms and privacy practices. Examples may include certain payment providers, banks, couriers or other services with which a user interacts directly.

HobbyMart's Privacy Notice does not control the independent privacy practices of third parties acting as separate data controllers.

Where a third-party service provider processes personal data solely or primarily on HobbyMart's behalf as a data processor, HobbyMart will take reasonable steps to require appropriate contractual, confidentiality, technical and organizational safeguards consistent with applicable law.

The use of a third-party provider does not remove any responsibility that applicable data-protection law places directly on HobbyMart as data controller.

Part I — Changes and Contact

30. Changes to This Privacy Notice

HobbyMart may update this Privacy Notice from time to time to reflect:

The updated version will display a revised “Last Updated” date.

HobbyMart will maintain appropriate document-version records or an internal revision history to support governance, auditability and the identification of material changes.

Where an amendment materially changes how personal data is processed, HobbyMart may provide additional notice or obtain consent where required.

31. Contacting HobbyMart About Privacy

Questions, concerns, complaints, access requests, correction requests, data-portability requests, consent-withdrawal requests or deletion requests regarding personal data may be submitted to:

HobbyMart Trading

Business Registration No.: 202603196291 (AS0519002-V)

Support Email:

[email protected]

Website:

HobbyMart.my

Please provide sufficient information for HobbyMart to identify you and understand the request.

HobbyMart may require identity verification before disclosing or modifying personal information.

32. Complaints

If you have concerns about HobbyMart's processing of your personal data, you should first contact HobbyMart using the privacy contact information above so that the matter can be investigated.

Nothing in this Notice prevents an individual from exercising rights available under applicable Malaysian law, including contacting the relevant Malaysian personal-data-protection authority where applicable.

Part J — Consent and Acknowledgement

33. Consent and Acknowledgement

By registering for or using HobbyMart, you acknowledge that this Privacy Notice has been made available to you and explains how HobbyMart processes personal data for the purposes described in it. An acknowledgement of this Privacy Notice is not intended to operate as blanket consent for every form of personal-data processing.

Where HobbyMart relies on consent for a particular processing activity, HobbyMart will request that consent through an appropriate affirmative and recordable mechanism. Separate or additional consent may be requested for processing that requires specific or explicit consent, including biometric processing where applicable.

Registration with HobbyMart does not constitute unlimited consent for HobbyMart to use personal data for unrelated purposes, and optional consent should not be bundled with acceptance of unrelated contractual terms where separate consent is required.