Policy version mytongshu-privacy-v2-20260814
MyTongShu applies data minimisation and owner-scoped access globally while respecting mandatory local rights. Your locale helps present a page and currency format; it does not decide entitlement, tax or legal eligibility.
We provide PDPA-style transparency, access and correction requests, optional-consent withdrawal and deletion requests where applicable. Optional analytics is off until you choose it and, if enabled, uses only coarse first-party funnel signals with no birth data, email, payment identifier or token URL. Use the authenticated account privacy controls for a request; records needed for accounting, disputes, fraud prevention or legal compliance may be retained.
Where applicable, you may request access, correction, deletion, restriction, portability or objection, and withdraw optional consent. Cross-border processors may be used with appropriate contractual or other lawful safeguards. You may contact the relevant supervisory authority.
Where applicable, you may request access, correction or deletion and opt out of sale or sharing. MyTongShu does not sell or share birth data, report data or account data for cross-context behavioural advertising.
Checkout uses server-authoritative USD pricing. The current reviewed launch phase is NONE_PRE_THRESHOLD: no automatic tax or manual Tax Rate is sent before the approved Malaysian taxable-services threshold, and an unexpected non-zero tax is rejected. This is not a universal exemption, SST-registration claim or tax advice. A registered phase requires a new legal and tax review before activation.
Start an export, deletion or consent request from account privacy controls. If you cannot access the account, use the support route shown on your receipt or contact page. We will verify ownership before disclosing or deleting private data.