1. Introduction

Millenium Malaysia Resources ("we", "us", "our") operates websites, web platforms, and mobile applications. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our products and services. By accessing or using our services, you agree to this Privacy Policy.

2. Information We Collect

We may collect the following types of information:

• Personal Information: Name, email address, organisation, and other details provided via contact forms, registration, or in-app input.
• Application Data: Information you enter into our applications to use their features, such as company details, employee data, training parameters, and assessment responses.
• Purchase Information: Payments are processed through Google Play, Apple App Store, or other payment providers. We do not store your payment card details directly. Third-party services manage purchase verification.
• Usage Data: Login timestamps, pages accessed, features used, browser type, IP address, and device information.

3. How We Use Your Information

We use collected information for the following purposes:

• To provide, maintain, and improve our products and services.
• To generate reports, calculations, assessments, and recommendations within our applications.
• To manage your account, purchase status, subscriptions, and access tiers.
• To process billing, invoices, and subscription management.
• To respond to enquiries and provide customer support.
• To comply with legal obligations and regulatory requirements.

4. AI-Powered Features

Some of our products use artificial intelligence (AI) to analyse data and generate recommendations. Your data may be processed by AI models to produce insights, suggestions, and reports. AI-generated outputs are advisory in nature and should be reviewed alongside professional judgement.

5. Data Sharing & Disclosure

We do not sell your personal information. We may share your data in the following circumstances:

• Authorised Users: Where applicable, company administrators or authorised personnel may access data related to their organisation.
• Service Providers: We may engage third-party service providers (e.g., cloud hosting, payment processing, analytics) who process data on our behalf under strict confidentiality obligations.
• Legal Requirements: We may disclose information if required by law, regulation, or legal process.

6. Data Security

We implement appropriate technical and organisational measures to protect your data, including:

• Encrypted data transmission (SSL/TLS).
• Secure authentication and access control mechanisms.
• Role-based access ensuring users only access data relevant to their role.
• Regular security reviews and updates.

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your data for as long as necessary to provide our services or as required by applicable law. Some of our applications store data locally on your device. Upon account deletion or service termination, your data will be securely deleted or anonymised within a reasonable period.

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal and contractual obligations.
• Objection: Object to certain processing activities.
• Data Portability: Request your data in a structured, machine-readable format.

To exercise any of these rights, please contact us at support@milleniumrx.biz.

9. Malaysia Personal Data Protection Act 2010 (PDPA)

We are committed to compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. We process personal data based on legitimate business purposes and with appropriate consent. We adhere to the seven data protection principles under the PDPA: General, Notice and Choice, Disclosure, Security, Retention, Data Integrity, and Access.

10. Cookies & Tracking

Our products may use local storage and session-based tokens for authentication and user experience purposes. We do not use third-party tracking cookies or advertising trackers. Usage analytics are collected solely for product improvement and are not shared with third parties for marketing purposes.

11. Business & Talent Management Newsletter (Website and App)

This section explains what we collect when you use the Business & Talent Management Newsletter on our website or through the “Business & Talent Newsletter” app for Android.

• Email address and name: collected when you subscribe or log in, to manage your account, send your one-time login codes, and email you when a new article is published.
• Subscription status (free or paid): paid subscriptions are purchased on our website and processed by Stripe. We never see or store your card details (see stripe.com/privacy).
• Article views: which articles are read, to understand which topics are useful to readers.
• Notification token: only if you turn on new-article notifications, so we can deliver them to your device through your browser’s push service (for example Google’s). You can turn notifications off at any time on your My Account page or in your device settings.
• Offline reading: articles saved for offline reading are stored only on your own device and are removed when you log out.

We do not sell your data, show advertising, or share newsletter data with third parties for their own purposes. Service providers (our web host, Stripe for payments, and the push service for notifications) process data only on our behalf. You can unsubscribe from emails using the link in any newsletter email, turn off notifications, or delete your newsletter account and its data yourself at milleniumrx.biz/delete-account.html (or ask us by emailing support@milleniumrx.biz; we delete it within 30 days).

12. Training Grant Estimator Access for Paid & VIP Subscribers

Paid and VIP newsletter subscribers receive a personal access code for the Training Grant Estimator (TGE), a separate product that we also operate. To create and manage that code we share the following with the TGE server, which is run by us:

• Your email address and name, so the code is tied to your subscription and can be re-sent to you.
• Your subscription state: your plan (monthly, yearly or VIP), whether it is currently paid, and whether it has been cancelled, refunded, blocked or deleted. The TGE uses this to decide whether your code is active and how many AI brochure uploads you may make each month. We do not share card details; we never hold them (Stripe does).

This data stays between our own newsletter and TGE systems and is not shared with anyone else for their own purposes. How the TGE handles data is described in the TGE Privacy Policy.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically. Continued use of our products after changes constitutes acceptance of the revised policy.

14. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us: