Privacy Notice

What we collect and why

We receive the name, email and password you provide to create an account. Passwords are stored as hashes. We store session records, email-verification status and hashed recovery tokens to manage access and account security. Advertising submissions include your brand, image, link, category, description, any deal or promo code, pixel selection and ownership. Orders include payment references, status, amount, currency, placement start and end dates, renewals and the policy version and acceptance time, to fulfil purchases and resolve problems. We use your account email for account messages and to remind you before a placement ends.

We record visit identifiers, click-event identifiers and per-brand totals to count activity and avoid duplicate events. When you like a brand, we store a hashed browser identifier with the brand and time so each browser counts once; you can remove your like. When you open a brand page through a shared link, we store a hashed browser identifier with the brand and time to credit the advertiser once per browser; network addresses are checked temporarily in memory so a network counts once per brand per day. For advertiser analytics, a random page-load identifier records qualified billboard impressions, clicks, referral source and approximate country/first-level region derived from IP. The raw IP is not stored in the analytics table. IP addresses are also processed temporarily for request-rate limiting. Location may be inaccurate, including where a VPN or mobile network is used. Small geographic groups are withheld from advertiser reports. These counters do not establish unique people.

Site analytics

First-party browser storage also keeps a random visitor identifier for 90 days since the last visit and a session identifier reused for page loads within 30 minutes. We store hashed visitor, session and page identifiers with server timestamps while operating the site's all-time analytics, subject to deletion or retention review. These measure page views, unique browsers and single-page-session bounce rate. Authorized administrators can view aggregate site, account registration and successful payment statistics by selected calendar periods. Clearing storage or changing devices creates a different visitor. These are estimates, not verified counts of people; blocked tracking and automated activity can affect results.

What becomes public

After confirmed payment, submitted brand names, images, destination links, descriptions, categories, deals and promo codes, occupied pixels, displayed purchase information, click and like totals and Launch Brand badges are visible publicly while the placement runs, on the billboard and on a brand page that search engines may index. Account emails, passwords, unpaid submission images and payment credentials are not public billboard content. Unpaid submission images are available only to the submitting account.

Providers and external websites

Hosting and database providers process information needed to run the service. Stripe handles payment and billing details on its checkout; BILLBADS does not receive or store your full card number or security code. Our configured email provider processes email addresses and account messages. The site loads Google Fonts and Google Analytics. Google may receive browser and device information, page activity, cookie or similar identifiers, and network information such as IP address to provide aggregated analytics. BILLBADS does not send your BILLBADS account password, submitted advertisement image or full payment-card details to Google Analytics. Clicking an advertiser link takes you to an independent website. Providers may process information outside Malaysia under their own infrastructure and privacy arrangements.

Cookies and browser storage

A first-party HttpOnly cookie maintains sign-in. Persistent sign-in lasts up to 30 days when selected; short sessions expire after 24 hours. Local storage remembers day/night preference, site-analytics identifiers and a pending checkout reference. Session storage holds a visit identifier. Google Analytics may set or read analytics cookies and similar identifiers. Clearing storage can remove preferences and affect counting; blocking cookies prevents normal sign-in and blocking analytics may prevent Google Analytics measurement.

Retention and your choices

Advertiser audience events are retained for up to 90 days. We retain account and placement records to operate your account and ongoing placement, and payment and security records as needed for support and applicable obligations. Some expiry and cleanup are automatic, but there is no automatic account-deletion schedule. We review access, correction, deletion and retention requests through support; legal or active-placement records may need to be retained. You can browse and follow brand links without registering. Providing account, image and order information is necessary to submit and purchase space.

For access, corrections, questions, complaints or to request deletion or withdraw permission for relevant processing, email billbadsbid@gmail.com. We may verify your identity. Withdrawal or deletion can affect your account or placement; it does not automatically create a refund entitlement. Do not email passwords or card details. Updates to this notice will carry a new version date.

Notis Privasi — Bahasa Melayu

Pengendali: Zeinn Legacy. Hubungi billbadsbid@gmail.com. Versi 2026-09-26.

Data dan tujuan pemprosesan

Kami menerima nama, email dan kata laluan yang anda berikan untuk akaun. Kata laluan disimpan sebagai hash. Rekod sesi, status pengesahan email dan hash token pemulihan digunakan untuk akses dan keselamatan. Penyerahan iklan mengandungi jenama, gambar, pautan, kategori, penerangan, sebarang tawaran atau kod promo, petak pilihan dan pemilikan. Rekod pesanan termasuk rujukan pembayaran, status, jumlah, mata wang, tarikh mula dan tamat penempatan, pembaharuan, versi polisi dan masa persetujuan untuk memenuhi pembelian dan menyelesaikan masalah. Email akaun digunakan untuk mesej akaun dan peringatan sebelum penempatan iklan tamat.

Pengecam lawatan, pengecam klik dan jumlah klik setiap jenama direkodkan untuk statistik serta mengelakkan kiraan berulang. Apabila anda menyukai (like) sesuatu jenama, hash pengecam pelayar disimpan bersama jenama dan masa supaya setiap pelayar dikira sekali; anda boleh membatalkan like. Apabila anda membuka halaman jenama melalui pautan yang dikongsi, hash pengecam pelayar disimpan bersama jenama dan masa untuk mengkreditkan pengiklan sekali bagi setiap pelayar; alamat rangkaian disemak sementara dalam memori supaya sesuatu rangkaian dikira sekali sehari bagi setiap jenama. Untuk analitik pengiklan, pengecam rawak setiap muatan halaman merekodkan impression billboard yang layak, klik, sumber rujukan dan anggaran negara/region peringkat pertama berdasarkan IP. IP mentah tidak disimpan dalam jadual analitik. Alamat IP turut diproses sementara untuk had permintaan. Lokasi mungkin tidak tepat, termasuk apabila VPN atau rangkaian mudah alih digunakan. Kumpulan lokasi kecil disembunyikan daripada laporan pengiklan. Statistik ini bukan pengesahan individu unik.

Maklumat awam dan penyedia perkhidmatan

Selepas bayaran disahkan, nama jenama, gambar, pautan, petak dimiliki, penerangan, kategori, tawaran dan kod promo, maklumat pembelian yang dipaparkan, jumlah klik dan like serta lencana Launch Brand boleh dilihat umum sepanjang tempoh penempatan, di billboard dan di halaman jenama yang boleh diindeks oleh enjin carian. Email akaun, kata laluan, gambar penyerahan belum dibayar dan kelayakan pembayaran bukan kandungan awam billboard. Gambar penyerahan belum dibayar hanya tersedia kepada pemilik penyerahan.

Penyedia hosting dan database memproses maklumat untuk operasi. Stripe mengendalikan butiran pembayaran dan bil; BILLBADS tidak menerima atau menyimpan nombor kad penuh atau kod keselamatan. Penyedia email yang dikonfigurasi memproses alamat dan mesej akaun. Laman memuatkan Google Fonts dan Google Analytics. Google mungkin menerima maklumat pelayar/peranti, aktiviti halaman, cookie atau pengecam serupa serta maklumat rangkaian seperti alamat IP untuk menyediakan analitik agregat. BILLBADS tidak menghantar kata laluan akaun BILLBADS, gambar iklan yang diserahkan atau butiran penuh kad pembayaran kepada Google Analytics. Pautan pengiklan membawa anda ke laman bebas. Penyedia mungkin memproses data di luar Malaysia mengikut infrastruktur dan aturan privasi mereka.

Analitik laman

Storan pelayar pihak pertama turut menyimpan pengecam pelawat rawak selama 90 hari sejak lawatan terakhir dan pengecam sesi yang digunakan semula bagi muatan halaman dalam 30 minit. Hash pengecam pelawat, sesi dan halaman serta masa pelayan disimpan sepanjang operasi analitik sepanjang masa laman, tertakluk pada permintaan pemadaman atau semakan penyimpanan. Ini mengukur page views, pelayar unik dan bounce rate sesi satu halaman. Admin yang dibenarkan boleh melihat statistik agregat laman, pendaftaran dan pembayaran berjaya mengikut tempoh kalendar yang dipilih. Storan yang dikosongkan atau peranti berbeza menghasilkan pelawat berbeza. Statistik merupakan anggaran, bukan pengesahan individu; sekatan penjejakan dan aktiviti automatik boleh mempengaruhi kiraan.

Cookies dan storan pelayar

Cookie HttpOnly pihak pertama mengekalkan sesi masuk. Pilihan kekal masuk boleh bertahan sehingga 30 hari; sesi pendek luput selepas 24 jam. Storan setempat menyimpan pilihan siang/malam, pengecam analitik laman dan rujukan checkout tertangguh. Storan sesi menyimpan pengecam lawatan. Google Analytics mungkin menetapkan atau membaca cookie analitik dan pengecam serupa. Mengosongkan storan boleh membuang pilihan serta menjejaskan kiraan; menyekat cookies menghalang sign-in biasa dan menyekat analitik boleh menghalang pengukuran Google Analytics.

Penyimpanan, pilihan dan hak anda

Acara audiens pengiklan disimpan sehingga 90 hari. Rekod akaun dan iklan disimpan bagi operasi akaun dan penempatan berterusan; rekod pembayaran serta keselamatan disimpan mengikut keperluan sokongan dan kewajipan berkaitan. Sesetengah pembersihan dan pelupusan token berlaku automatik, tetapi tiada jadual pemadaman akaun automatik. Permintaan akses, pembetulan, pemadaman dan penyimpanan disemak melalui sokongan; rekod undang-undang atau penempatan aktif mungkin perlu dikekalkan. Anda boleh melayari dan mengklik jenama tanpa akaun. Maklumat akaun, gambar dan pesanan diperlukan untuk penyerahan dan pembelian ruang.

Email kami untuk akses, pembetulan, pertanyaan, aduan, permintaan pemadaman atau penarikan kebenaran pemprosesan berkaitan. Kami mungkin mengesahkan identiti anda. Penarikan atau pemadaman boleh menjejaskan akaun atau penempatan dan tidak memberikan hak refund secara automatik. Jangan email kata laluan atau butiran kad. Kemas kini notis akan menggunakan tarikh versi baharu.