Effective date: 17 July 2026

This Privacy Policy explains how PK GROUP LOGISTICS SDN BHD (Company Registration No. 1558902-W) ("ParcelKing", "we", "us" or "our") collects, uses, shares and protects your personal data when you use the ParcelKing mobile application, the ParcelKing website at https://myparcelking.com/ and our related services (together, the "Platform"). We handle your personal data in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA). By creating an account or using the Platform, you consent to the practices described in this Policy.

1. Who We Are & What We Do
ParcelKing is a logistics aggregation platform. We facilitate the booking and management of shipping services that are supplied by independent third-party courier partners. Except where we expressly state otherwise, ParcelKing is not the physical carrier of your shipment; we connect you with the courier you select and support the shipment through its lifecycle.

2. Scope
This Policy covers the ParcelKing mobile application, the ParcelKing website, user accounts, shipment quotations and bookings, payment and Parcel Credit top-up activities, customer support and live chat, claims and disputes, identity verification, and related services operated by PK GROUP LOGISTICS SDN BHD.

3. Information We Collect
We collect the following categories of personal data:

(a) Account & contact details — your name, mobile phone number, email address and account password. We verify your mobile number during registration using a one-time password (OTP) sent by SMS.

(b) Identity verification data — your identity card (NRIC) number, and, where you use services that require enhanced verification (such as Cash on Delivery), images of your identity document and a photo of yourself (a "selfie") used to confirm your identity.

(c) Address & shipment details — pickup and delivery addresses, sender and recipient names and contact numbers, parcel contents description, weight and dimensions, delivery instructions, tracking records and invoices.

(d) Payment & Parcel Credit data — records of your transactions, top-ups, Parcel Credit balance and payment method used. Card and banking details you enter are processed by our third-party payment providers; we do not store your full card number, CVV or online-banking credentials on our own servers.

(e) Images you upload — photos you capture with your camera or select from your photo library, such as parcel photos, profile photos, identity documents or claim evidence, together with information contained in those images.

(f) Support communications — the content of your live-chat messages, attachments, timestamps and related support records.

(g) Device & technical data — device information, a push-notification token used to deliver notifications, and technical data generated when you use the Platform. Some technical data (such as identifiers, IP address and usage logs) may be collected automatically by the Platform or our service providers.

4. How We Use Your Information
We use your personal data to: create, manage and secure your account; verify your identity; obtain quotations and book, collect, transport, track and deliver your shipments; process payments, Parcel Credit top-ups and refunds; provide customer support and handle claims and disputes; send you service-related notifications; operate rewards and referral features; detect, prevent and investigate fraud, abuse and security issues; and comply with our legal, tax, accounting and regulatory obligations. We do not use your personal data to send you marketing communications, and we do not use it for third-party advertising.

5. How We Share Your Information
We share your personal data only as needed to provide our services, including with:

Courier partners — to quote, book, collect, transport, track, deliver, investigate and support your shipments. Our courier partners include SPX, Pos Malaysia, J&T Express, DHL, ABX Express, Ninja Van and Line Clear Express. The information shared may include sender and recipient names, contact numbers, addresses, parcel details, delivery instructions and claim evidence, as required for the selected shipment.

Payment & financial-service providers — banks, payment gateways and financial institutions (including Fiuu / Razer Merchant Services) that process your payments, top-ups and refunds.

Identity verification providers — service providers (including Didit) that help us verify your identity and prevent fraud.

Technology & operational providers — providers who support our operations, such as SMS/OTP delivery (Twilio), push notifications (Google Firebase), email delivery (SendGrid), image and file storage (Cloudinary) and cloud hosting. These providers may only use your data to perform services on our behalf.

Authorities — law enforcement, regulators or other government bodies where required by law, regulation, legal process or a lawful request. We do not sell your personal data, and we do not use your data for third-party advertising or cross-app tracking.

6. Payments and Parcel Credit
The Platform supports the following payment and funding methods: Online Banking (FPX), DuitNow, credit card, debit card, Parcel Credit and online transfer. "Parcel Credit" is a prepaid balance you can top up and use to pay for shipments and related charges on the Platform. We keep records of your top-ups, deductions and balance. Payment card and banking details are handled by our payment providers; we do not store complete card numbers, CVV codes or online-banking credentials on our servers.

7. Data Retention
We retain your personal data for as long as necessary to provide our services and to comply with our legal, tax, accounting and regulatory obligations, to resolve disputes and claims, and to prevent fraud. Because we operate a logistics and payment service, your account, shipment, transaction and related records are kept in our database and are not subject to a fixed deletion period. Where personal data is no longer required for these purposes, we take reasonable steps to delete or anonymise it.

8. Account Deletion
You may request to delete your account directly within the mobile app (Profile → Delete Account) or by contacting our customer service using the details below. When your account is deleted, your access is removed and your login is deactivated. We may delay completing a deletion request, or retain certain records after deletion, where there are: outstanding payments, unpaid balances, negative Parcel Credit or other amounts due; pending or incomplete shipments; pending refunds, claims, disputes or chargebacks; ongoing fraud, abuse, security or compliance investigations; or court, regulator, tax, accounting, audit or other legal retention requirements. Once outstanding matters are resolved, your deletion request is processed, while certain transaction, shipment, claim, fraud-prevention or legal records may be retained for the applicable period required by law.

9. Your Rights
Under the PDPA, you may request access to and correction of your personal data, withdraw your consent to certain processing, and limit or object to how we process your data, subject to our legal obligations. To exercise these rights, please contact us using the details below. We may need to verify your identity before acting on your request.

10. Security
We use reasonable technical and organisational measures — such as encryption in transit, access controls and password protection — to protect your personal data against unauthorised access, loss, misuse or alteration. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. Keep your password confidential; you are responsible for activity under your account.

11. Cookies & Website Tracking
Our website uses cookies and similar technologies to keep you signed in, remember your preferences, and understand how the website is used. We use Google Analytics on our website to analyse website traffic and improve our services; Google Analytics sets cookies and processes usage data on our behalf. You can manage or disable cookies through your browser settings, although some features may not work properly if you do. Our mobile app does not use third-party analytics or advertising services.

12. Cross-Border Transfers
Your personal data is primarily stored and processed in Malaysia. Where our service providers or courier partners operate outside Malaysia, your data may be transferred and processed abroad. In such cases we take reasonable steps to ensure your data continues to be protected in accordance with applicable law.

13. Children
The Platform is intended for users aged 12 and above. We do not knowingly collect personal data from children under 12. Minors should use the Platform with the involvement of a parent or guardian. If you believe a child under 12 has provided us with personal data, please contact us and we will take steps to delete it.

14. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised effective date. Please review this Policy periodically so that you are aware of the most recent version.

15. Contact Us
If you have any questions, requests or complaints about this Privacy Policy or your personal data, please contact:
PK GROUP LOGISTICS SDN BHD (Company Registration No. 1558902-W)
Address: 9A Jalan Harmonium 35/3, Taman Desa Tebrau, 81100 Johor, Malaysia
Telephone: +60 10-661 9008
Email: fai@myparcelking.com
Website: https://myparcelking.com/