How we handle your data
Under Malaysia's Personal Data Protection Act 2010, this page explains what we collect, what we use it for, who we share it with and what rights you have. A formal English notice and a Bahasa Melayu version are included below.
Summary (English) · Full notice (English) · Bahasa Melayu
BookKeeper only collects the data needed to reply to your enquiry and provide bookkeeping services. To quote and provide the service, your data is shared with our partner professional bookkeeping and accounting team, and, where tax filing is involved, with our partner licensed tax agent. You can ask to access or correct your data, or withdraw your consent, at any time by emailing [email protected].
- This website is operated by O2O Alliance Sdn. Bhd. (202001017909 / 1374229-M), which handles personal data under the PDPA 2010.
- Your data is shared with the partner bookkeeping and accounting team handling your case, and with our partner licensed tax agent.
- Employee data you provide for payroll services is used only to provide that service, and you must make sure you have the right to share it.
- Accounts and document records that the law requires to be kept are retained for at least 7 years.
- Under section 7(3) of the PDPA, this notice is available in English and Bahasa Melayu, further down this page.
Last updated: 25 October 2026
Who does this policy apply to?
This website, bookkeeper.com.my ("BookKeeper" or "we"), is operated by O2O Alliance Sdn. Bhd. (company registration number 202001017909 / 1374229-M). This policy explains how we handle your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA) and its later amendments.
By using this website, contacting us by WhatsApp or email, or filling in a form on the website, you confirm that you have read this policy. Under section 7(3) of the PDPA, this notice is also provided in English and Bahasa Melayu, further down this page.
What data do we collect?
Data you give us
- Contact details: name, phone number, WhatsApp number, email address
- Company details: company name, type of business, industry, location, transaction volume, number of staff
- What you write in messages or forms
- Documents you provide for a quote or the service, such as bank statements, invoices, receipts and employee salary details
Data generated automatically when you browse the website
For example, browser type, pages visited, referring URL and approximate location. This data may be collected through cookies or website analytics tools to understand how the website is used and improve its content. You can refuse or delete cookies in your browser settings.
What is the data used for?
- To reply to your enquiry and understand what you need
- To assess your needs and give you a quote
- To refer your enquiry to our partner bookkeeping and accounting team and, where tax filing is needed, to our partner licensed tax agent, so they can quote and provide the service
- To follow up on service progress and handle client communication
- To comply with legal requirements
- To improve the website's content and user experience
Without your consent, we will not use your data for purposes unrelated to the above, and we do not sell your personal data.
Who is the data shared with?
Please take particular note of this. BookKeeper itself runs the website, handles enquiries and communicates with you. The actual bookkeeping, payroll and accounting work is carried out by our partner professional bookkeeping and accounting team, and tax computation and filing are handled by our partner licensed tax agent. To quote and provide the service, your enquiry and related data will be shared with the partner service provider handling your case.
Apart from this, data may be disclosed in the following situations:
- To third parties that provide technical services to us, such as website hosting, email and messaging tools, only as needed to provide that service
- Where required by law, or when a government authority lawfully requests it
- Where you have separately given written consent
We require partners who receive data to use it only for the purposes above and to take reasonable steps to protect it.
How is the employee data you give us handled?
When you use the payroll service, you provide personal data of employees or other third parties, such as names, IC numbers, salaries, bank accounts, and EPF, SOCSO and tax numbers. This data is used only to provide the service you engaged us for, such as calculating salaries and statutory deductions, issuing payslips, and preparing EPF, SOCSO, EIS and PCB contribution files.
Before providing this data, you must make sure you have the right to share it with us and our partner service providers, and that you have given the required notice to, or obtained the required consent from, the employees or third parties concerned under the PDPA. This data is kept as required by law. Where it forms part of records the law requires to be kept, it is retained for at least 7 years.
How long is data kept?
Enquiry data is deleted or anonymised after the enquiry and a reasonable follow-up period. Once you become a client, service-related data is kept during the engagement and afterwards as required by law. Malaysian law requires company accounts and documents to be kept for at least 7 years (Income Tax Act 1967 section 82; Companies Act 2016 section 245). This responsibility rests mainly with your own company.
How do we protect data?
We take reasonable administrative and technical measures, such as limiting access to the people who need it to handle your case, and using secured communication and storage tools. However, no transmission or storage over the internet can be completely secure. If a data breach occurs that may affect you, we will notify the relevant authority and the people affected as required by law.
What are your rights?
Under the PDPA, you can:
- Ask to access the personal data we hold about you
- Ask us to correct data that is inaccurate, incomplete or out of date
- Withdraw your consent, or ask us to stop processing your data (after which we may not be able to continue providing the service)
- Ask us to stop sending you promotional messages
- Where the law allows, ask us to transfer your data to another service provider you name
When you make a request, we may first need to verify your identity. We will reply within the time set by law.
Is data transferred outside Malaysia?
It may be. Some of the technical services we use (such as email, cloud storage and messaging tools) may store data on servers outside Malaysia. We choose service providers with reasonable safeguards and handle cross-border transfers as the PDPA requires.
Will this policy be updated?
We may update this policy from time to time. The updated version will be posted on this page, with the date at the top updated. For major changes, we will try to notify you separately.
How do I contact you?
For enquiries, access requests or correction requests about personal data, please contact:
- Operator: O2O Alliance Sdn. Bhd. (202001017909 / 1374229-M)
- Email: [email protected]
- WhatsApp: +60 12-285 8218
Please also read the disclaimer, about us and contact us pages.
Summary (English) · Full notice (English) · Bahasa Melayu
Privacy Notice (English)
Last updated: 25 October 2026
1. Who this notice applies to
The website bookkeeper.com.my ("BookKeeper", "we", "us" or "our") is operated by O2O Alliance Sdn. Bhd. (Company Registration No. 202001017909 / 1374229-M). This notice explains how we process your personal data in accordance with the Personal Data Protection Act 2010 of Malaysia ("PDPA") and its subsequent amendments.
By using this website, contacting us via WhatsApp or email, or submitting a form on this website, you acknowledge that you have read this notice. In accordance with section 7(3) of the PDPA, this notice is provided in both the national language and English.
2. Personal data we collect
Data you provide to us:
- Contact details: name, telephone number, WhatsApp number and email address
- Business details: company name, type of entity, industry, location, transaction volume and number of employees
- The content of messages or forms you submit
- Documents you provide for quotation or service purposes, such as bank statements, invoices, receipts and employee payroll information
Data generated automatically when you browse this website: such as browser type, pages visited, referring URL and approximate location. This data may be collected through cookies or website analytics tools to understand how the website is used and to improve its content. You may refuse or delete cookies through your browser settings.
3. Purposes of processing
- To respond to your enquiry and understand your requirements
- To assess your needs and provide a quotation
- To refer your enquiry to our partner bookkeeping and accounting team and, where tax filing is required, to our partner licensed tax agent, so that they may provide a quotation and deliver the services
- To follow up on service progress and manage client communications
- To comply with legal requirements
- To improve the content and user experience of this website
We will not use your personal data for purposes unrelated to the above without your consent, and we do not sell your personal data.
4. Disclosure of personal data
Please note this section in particular. BookKeeper is responsible for the website, enquiry handling and communications. The bookkeeping, payroll and accounting work is performed by our partner professional bookkeeping and accounting team, and tax computation and filing are handled by our partner licensed tax agent. For quotation and service delivery purposes, your enquiry and related data will be shared with the partner service provider responsible for your engagement.
Your personal data may also be disclosed:
- To third parties that provide technical services to us, such as website hosting, email and messaging tools, strictly to the extent necessary for those services
- Where required by law or lawfully requested by a government authority
- Where you have separately given written consent
We require partners who receive personal data to use it only for the purposes stated above and to take reasonable steps to protect it.
5. Employee and third-party personal data provided by clients
When you use our payroll service, you will provide personal data of your employees or other third parties, such as names, identity card numbers, salaries, bank account details, and EPF, SOCSO and tax reference numbers. Such data will be used solely to provide the services you have engaged, including payroll and statutory deduction calculations, issuing payslips, and preparing EPF, SOCSO, EIS and PCB contribution files.
Before providing such data, you are responsible for ensuring that you have the right to share it with us and our partner service providers, and that you have given any notice to, or obtained any consent from, the relevant employees or third parties as required under the PDPA. Such data will be retained as required by law and, where it forms part of records required to be kept by law, for at least 7 years.
6. Retention
Enquiry data is deleted or anonymised after the enquiry and a reasonable follow-up period have ended. For clients, service-related data is retained during the engagement and thereafter as required by law. Malaysian law requires company accounts and records to be kept for at least 7 years (section 82 of the Income Tax Act 1967; section 245 of the Companies Act 2016). This obligation rests primarily with your company.
7. Security
We take reasonable administrative and technical measures to protect personal data, such as restricting access to persons who need it to handle your engagement and using secured communication and storage tools. However, no transmission or storage over the internet can be completely secure. In the event of a personal data breach that may affect you, we will notify the relevant authority and affected individuals as required by law.
8. Your rights
Subject to the PDPA, you may:
- Request access to the personal data we hold about you
- Request correction of personal data that is inaccurate, incomplete or out of date
- Withdraw your consent or request that we stop processing your personal data (after which we may be unable to continue providing the services)
- Request that we stop sending you promotional messages
- Where permitted by law, request that your personal data be transmitted to another service provider you designate
We may need to verify your identity before acting on a request. We will respond within the period prescribed by law.
9. Transfer outside Malaysia
Some of the technical services we use (such as email, cloud storage and messaging tools) may store data on servers outside Malaysia. We select service providers with reasonable safeguards and handle cross-border transfers in accordance with the requirements of the PDPA.
10. Changes to this notice
We may update this notice from time to time. The updated version will be published on this page with a revised date. Where changes are material, we will endeavour to notify you separately.
11. Contact us
For enquiries, access requests or correction requests relating to personal data, please contact:
- Operator: O2O Alliance Sdn. Bhd. (202001017909 / 1374229-M)
- Email: [email protected]
- WhatsApp: +60 12-285 8218
Summary (English) · Full notice (English) · Bahasa Melayu
Notis Privasi (Bahasa Melayu)
Kemas kini terakhir: 25 Oktober 2026
1. Pemakaian notis ini
Laman web bookkeeper.com.my ("BookKeeper" atau "kami") dikendalikan oleh O2O Alliance Sdn. Bhd. (No. Pendaftaran Syarikat 202001017909 / 1374229-M). Notis ini menerangkan cara kami memproses data peribadi anda menurut Akta Perlindungan Data Peribadi 2010 Malaysia ("APDP") dan pindaan-pindaannya.
Dengan menggunakan laman web ini, menghubungi kami melalui WhatsApp atau e-mel, atau mengisi borang di laman web ini, anda mengakui bahawa anda telah membaca notis ini. Selaras dengan seksyen 7(3) APDP, notis ini disediakan dalam bahasa kebangsaan dan bahasa Inggeris.
2. Data peribadi yang kami kumpul
Data yang anda berikan kepada kami:
- Butiran perhubungan: nama, nombor telefon, nombor WhatsApp dan alamat e-mel
- Butiran perniagaan: nama syarikat, jenis entiti, industri, lokasi, jumlah transaksi dan bilangan pekerja
- Kandungan mesej atau borang yang anda hantar
- Dokumen yang anda berikan untuk tujuan sebut harga atau perkhidmatan, seperti penyata bank, invois, resit dan maklumat gaji pekerja
Data yang dijana secara automatik semasa anda melayari laman web ini: seperti jenis pelayar, halaman yang dilawati, URL rujukan dan anggaran lokasi. Data ini mungkin dikumpul melalui kuki atau alat analitik laman web bagi memahami penggunaan laman web dan menambah baik kandungannya. Anda boleh menolak atau memadam kuki melalui tetapan pelayar anda.
3. Tujuan pemprosesan
- Untuk menjawab pertanyaan anda dan memahami keperluan anda
- Untuk menilai keperluan anda dan memberikan sebut harga
- Untuk merujuk pertanyaan anda kepada firma simpan kira dan perakaunan rakan kongsi kami dan, jika pemfailan cukai diperlukan, kepada ejen cukai berlesen rakan kongsi kami, supaya mereka dapat memberikan sebut harga dan menyampaikan perkhidmatan
- Untuk membuat susulan kemajuan perkhidmatan dan menguruskan komunikasi pelanggan
- Untuk mematuhi kehendak undang-undang
- Untuk menambah baik kandungan dan pengalaman pengguna laman web ini
Kami tidak akan menggunakan data peribadi anda bagi tujuan yang tidak berkaitan dengan perkara di atas tanpa persetujuan anda, dan kami tidak menjual data peribadi anda.
4. Penzahiran data peribadi
Sila beri perhatian khusus kepada bahagian ini. BookKeeper bertanggungjawab bagi laman web, pengendalian pertanyaan dan komunikasi. Kerja simpan kira, gaji dan perakaunan dilaksanakan oleh firma simpan kira dan perakaunan profesional rakan kongsi kami, manakala pengiraan dan pemfailan cukai dikendalikan oleh ejen cukai berlesen rakan kongsi kami. Bagi tujuan sebut harga dan penyampaian perkhidmatan, pertanyaan anda dan data berkaitan akan dikongsi dengan pembekal perkhidmatan rakan kongsi yang bertanggungjawab ke atas urusan anda.
Data peribadi anda juga mungkin dizahirkan:
- Kepada pihak ketiga yang menyediakan perkhidmatan teknikal kepada kami, seperti pengehosan laman web, e-mel dan alat pemesejan, setakat yang perlu bagi perkhidmatan tersebut sahaja
- Jika dikehendaki oleh undang-undang atau diminta secara sah oleh pihak berkuasa kerajaan
- Jika anda telah memberikan persetujuan bertulis secara berasingan
Kami menghendaki rakan kongsi yang menerima data peribadi menggunakannya hanya bagi tujuan yang dinyatakan di atas dan mengambil langkah yang munasabah untuk melindunginya.
5. Data peribadi pekerja dan pihak ketiga yang diberikan oleh pelanggan
Apabila anda menggunakan perkhidmatan gaji kami, anda akan memberikan data peribadi pekerja atau pihak ketiga lain, seperti nama, nombor kad pengenalan, gaji, butiran akaun bank, serta nombor rujukan KWSP, PERKESO dan cukai. Data tersebut akan digunakan semata-mata untuk menyediakan perkhidmatan yang anda langgani, termasuk pengiraan gaji dan potongan berkanun, pengeluaran slip gaji, dan penyediaan fail caruman KWSP, PERKESO, SIP dan PCB.
Sebelum memberikan data tersebut, anda bertanggungjawab memastikan bahawa anda berhak berkongsi data itu dengan kami dan pembekal perkhidmatan rakan kongsi kami, serta telah memberikan notis kepada, atau mendapatkan persetujuan daripada, pekerja atau pihak ketiga berkenaan sebagaimana dikehendaki di bawah APDP. Data tersebut akan disimpan sebagaimana dikehendaki oleh undang-undang dan, jika ia merupakan sebahagian daripada rekod yang wajib disimpan di bawah undang-undang, sekurang-kurangnya 7 tahun.
6. Tempoh penyimpanan
Data pertanyaan dipadam atau dijadikan tanpa nama selepas pertanyaan dan tempoh susulan yang munasabah tamat. Bagi pelanggan, data berkaitan perkhidmatan disimpan sepanjang tempoh urusan dan selepasnya sebagaimana dikehendaki oleh undang-undang. Undang-undang Malaysia menghendaki akaun dan rekod syarikat disimpan sekurang-kurangnya 7 tahun (seksyen 82 Akta Cukai Pendapatan 1967; seksyen 245 Akta Syarikat 2016). Tanggungjawab ini terletak terutamanya pada syarikat anda.
7. Keselamatan
Kami mengambil langkah pentadbiran dan teknikal yang munasabah untuk melindungi data peribadi, seperti mengehadkan akses kepada individu yang memerlukannya untuk mengendalikan urusan anda dan menggunakan alat komunikasi serta penyimpanan yang selamat. Walau bagaimanapun, tiada penghantaran atau penyimpanan melalui internet yang selamat sepenuhnya. Sekiranya berlaku pelanggaran data peribadi yang mungkin menjejaskan anda, kami akan memaklumkan pihak berkuasa berkaitan dan individu yang terjejas sebagaimana dikehendaki oleh undang-undang.
8. Hak anda
Tertakluk kepada APDP, anda boleh:
- Meminta akses kepada data peribadi anda yang kami simpan
- Meminta pembetulan data peribadi yang tidak tepat, tidak lengkap atau tidak terkini
- Menarik balik persetujuan anda atau meminta kami berhenti memproses data peribadi anda (selepas itu kami mungkin tidak dapat terus menyediakan perkhidmatan)
- Meminta kami berhenti menghantar mesej promosi kepada anda
- Jika dibenarkan oleh undang-undang, meminta data peribadi anda dipindahkan kepada pembekal perkhidmatan lain yang anda tetapkan
Kami mungkin perlu mengesahkan identiti anda sebelum bertindak atas sesuatu permintaan. Kami akan menjawab dalam tempoh yang ditetapkan oleh undang-undang.
9. Pemindahan ke luar Malaysia
Sebahagian perkhidmatan teknikal yang kami gunakan (seperti e-mel, storan awan dan alat pemesejan) mungkin menyimpan data di pelayan di luar Malaysia. Kami memilih pembekal perkhidmatan yang mempunyai perlindungan yang munasabah dan mengendalikan pemindahan rentas sempadan menurut kehendak APDP.
10. Perubahan kepada notis ini
Kami boleh mengemas kini notis ini dari semasa ke semasa. Versi terkini akan disiarkan di halaman ini bersama tarikh yang dikemas kini. Bagi perubahan yang ketara, kami akan berusaha memaklumkan anda secara berasingan.
11. Hubungi kami
Bagi pertanyaan, permintaan akses atau permintaan pembetulan berkaitan data peribadi, sila hubungi:
- Pengendali: O2O Alliance Sdn. Bhd. (202001017909 / 1374229-M)
- E-mel: [email protected]
- WhatsApp: +60 12-285 8218
