Privacy and Cookie Policy
Effective date: 30 July 2026 Version: 1.0
This Policy explains how AM Creative Media, operating Jom Prompt, collects, uses, shares, protects and retains personal data in connection with commercial transactions and website use. We act as the data controller for the processing described here.
1. Who We Are
AM Creative Media, Registration No. 202503256098 (IP0613561-W), is the operator of Jom Prompt and the data controller for the processing described in this Policy. Privacy enquiries: admin@jompromt.com.
2. Personal Data We Collect
- Identity and contact data: name, email, telephone number, account username and address.
- Account data: password hash, account preferences, membership status and support history.
- Order data: products, prices, order status, billing details, invoices and payment references. Payment-card details are generally handled by the payment provider rather than stored by Jom Prompt.
- Creator data: submissions, categories, review notes, status, originality or safety indicators, wallet entries and appeals.
- Payout data: account-holder name, bank name, account number, withdrawal requests and payment records.
- Technical data: IP address, browser, device, security logs, cookie identifiers and website activity.
- Communications: messages, complaints, data requests and responses.
3. Sources and Required Information
We receive data directly from you, automatically from your device, from WooCommerce and website plugins, and from payment, analytics, security, email or hosting providers. Information marked as required is needed to create an account, process an order, review a submission, prevent misuse or complete a withdrawal. If you do not provide it, we may be unable to provide that service. Marketing choices are optional.
4. How We Use Personal Data
- Provide accounts, digital products, Creator Pass and creator tools.
- Process orders, subscription events, support, refunds and payment disputes.
- Receive, test, review, score and administer prompt submissions.
- Maintain creator wallets and process withdrawal requests.
- Detect copied content, fraud, abuse, account compromise and security incidents.
- Meet accounting, tax, legal, regulatory and record-keeping obligations.
- Improve products, website performance and user experience using appropriately controlled data.
- Send service communications and, where permitted, marketing communications.
We process data where necessary to perform a contract or requested service, comply with legal obligations, protect the platform and users, operate legitimate business functions with appropriate safeguards, or act on your consent where consent is required. Withdrawing optional consent does not affect processing already lawfully carried out.
5. Sharing and Service Providers
We may share only the data reasonably needed with hosting, WooCommerce, payment, banking, email, form, analytics, security, backup, customer-support, professional-adviser and regulatory providers. Providers act under their own legal duties or our instructions, depending on the service. We do not sell personal data as a data-broker product.
6. Cross-Border Processing
Some providers may process data outside Malaysia. Before using such processing, we assess the purpose, destination, provider safeguards and applicable legal condition, and take reasonable precautions such as contractual restrictions, security controls and limited access. Contact us for information about relevant transfer safeguards.
7. Retention
We keep personal data only as long as reasonably needed for the purpose collected and applicable legal, tax, accounting, security and dispute requirements. As a working schedule, account and support data is kept while the account is active and for up to seven years where transaction or legal records require it; order, wallet, payout and tax records may be kept for at least seven years; security logs are normally kept for up to twelve months unless an incident requires longer; rejected prompt content is minimised and retained only as needed for duplicate detection, fraud prevention, appeals or legal claims. Data is deleted, anonymised or securely isolated when no longer required.
8. Security and Data Breaches
We use access controls, authentication, software updates, backups, logging and other reasonable administrative and technical safeguards. No system is completely secure. We assess suspected personal-data breaches and notify the Personal Data Protection Commissioner and affected people where required. A qualifying notification to the Commissioner will be made as soon as practicable and no later than the applicable 72-hour deadline.
9. Your Rights
- Request access to personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Withdraw consent where processing relies on consent.
- Object to or stop direct marketing.
- Request deletion or restriction where applicable, subject to lawful retention duties.
- Request data portability in a technically feasible form where the statutory right applies.
- Ask for information about processing and lodge a complaint.
Send a request to admin@jompromt.com. Include your name, account email, request and enough information to locate the relevant record. We may verify your identity before acting. We will acknowledge requests promptly and respond within the period required by applicable law. If we cannot comply fully, we will explain the reason where permitted.
10. Marketing
You may unsubscribe from marketing through the link in the message or by contacting us. Account, order, security, submission, subscription and payout messages are service communications and may still be sent where necessary.
11. Cookies
Cookies are small files or browser-storage items used to operate and understand the website. We use strictly necessary cookies for functions such as security, login, cart, checkout and consent preferences. With your choice where required, we may use analytics, preference or marketing cookies. Non-essential cookies should not be activated before the required consent is obtained.
| Category | Purpose | Control |
|---|---|---|
| Strictly necessary | Security, account login, cart, checkout, payment flow and cookie preferences | Required for requested website functions |
| Analytics | Measure traffic and website performance | Enabled only according to your consent settings where required |
| Preferences | Remember optional choices and display settings | Controlled through cookie settings where available |
| Marketing | Measure campaigns or personalise advertising | Enabled only according to your consent settings where required |
You can accept, reject or change non-essential cookie preferences through the website’s Cookie Settings control. Browser settings can also delete or block cookies, but blocking necessary cookies may stop login, cart or checkout functions. The live cookie inventory in the consent tool forms part of this Policy and must identify the provider and duration of each active cookie.
12. Children
Jom Prompt accounts, purchases, creator submissions and withdrawals are for people aged 18 or older. Contact us if you believe a person under 18 has provided personal data.
13. Complaints and DPO Information
Privacy complaints should first be sent to admin@jompromt.com. You may also contact the Personal Data Protection Commissioner Malaysia through https://www.pdp.gov.my. Jom Prompt will appoint and publish the contact details of a Data Protection Officer when legally required, including when applicable processing thresholds or regular and systematic monitoring conditions are met.
14. Changes
We may update this Policy to reflect legal, service or technology changes. The current version and effective date will be published here. Material changes will be brought to users’ attention where reasonably required.