Privacy Policy
How we collect, use, and protect your data.
Last updated: 10 May 2026
1. Introduction
CekapAI (“we”, “us”, or “our”) is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect information when you use our website (www.cekapai.my) and our AML screening platform (“Services”).
We comply with the Personal Data Protection Act 2010 (PDPA) of Malaysia and applicable data protection laws in the jurisdictions we operate.
2. Information We Collect
Information you provide
- Name, email address, phone number, and company name when you register, book a demo, or contact us
- Entity data you submit for AML screening (names, identification details, corporate information)
- Payment and billing information for paid plans
Information collected automatically
- Usage data such as pages visited, features used, and session duration
- Device information including browser type, operating system, and IP address
- Cookies and similar tracking technologies (see Section 7)
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and improve our AML screening Services
- Process screening requests and generate risk reports
- Manage your account and respond to your enquiries
- Send service-related communications and updates
- Comply with legal obligations, including AML/CFT regulatory requirements
- Analyse usage patterns to improve our platform
5. Data Retention
We retain personal data for as long as necessary to fulfil the purposes outlined in this policy, or as required by law.
Developer
30 days
Growth
12 months
Enterprise
Up to 7 years
6. Data Security
We implement appropriate technical and organisational measures to protect your data:
Encryption at rest
AES-256
Encryption in transit
TLS 1.3
Access controls
RBAC + MFA
Monitoring
Continuous
8. Your Rights
Under PDPA Malaysia, you have the right to:
- Access your personal data held by us
- Correct inaccurate or incomplete data
- Withdraw consent for data processing
- Request deletion of your data (subject to legal retention obligations)
To exercise these rights, contact us at hello@cekapai.my.
9. International Data Transfers
Customer data is stored in Malaysia by default. Where data transfers outside Malaysia are necessary, we ensure adequate safeguards are in place as required by PDPA.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised “Last updated” date.
11. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us: