MUDOH Privacy Policy

1. Introduction / Pengenalan

Majlis Bandaraya Kuala Terengganu (MBKT) operates the MUDOH platform — MBKT Urban Digital One-Stop Hub — comprising the public app, officer enforcement app, and web portal. We are committed to protecting your personal data in accordance with the Personal Data Protection Act 2010 (PDPA).

2. Personal Data We Collect / Data Peribadi Yang Kami Kumpul

Depending on which application you use, we may collect the following data:

Public App (MUDOH)

• Full name, phone number, email address
• National identification number (MyKad / passport) — for identity verification
• Residential address and postcode
• Registered vehicle plate numbers
• GPS location (with your permission) — for nearby parking features
• Payment records and wallet transactions
• Device information (model, OS version) — for technical support

Officer App (MUDOH Officer)

• GPS location — recorded at the time of summons issuance
• Vehicle photographs (parking offence evidence)
• MBKT officer details: name, department, zone, officer code
• Work session logs and enforcement activity records

3. Purpose of Processing / Tujuan Pemprosesan

• Processing and managing parking summons payments
• Providing online parking services
• Enforcement of local parking by-laws
• Verifying user identity and preventing fraud
• Sending notifications related to summons, payments and accounts
• Improving and supporting the MUDOH platform
• Complying with legal and regulatory requirements

4. Legal Basis / Asas Undang-Undang

We process your personal data on the basis of: (a) performance of a public service contract, (b) compliance with legal obligations under the Local Government Act 1976 and MBKT by-laws, and (c) the legitimate public interest in parking enforcement.

5. Disclosure of Personal Data / Pendedahan Data Peribadi

We do not sell or disclose your personal data to third parties for marketing. Data may be shared with:

• Payment service providers (PayNet / InfinPay) — to process transactions
• Government ministries or agencies — when required by law
• Technical infrastructure providers (Supabase) bound by data processing agreements
• Courts or law-enforcement authorities — under court order

6. Data Retention / Tempoh Penyimpanan Data

Summons and payment records are retained for a minimum of seven (7) years for audit purposes, in line with local government accounting requirements. Inactive user accounts may be deleted after three (3) years upon request. Evidence photographs are retained for the relevant appeal period or three (3) years, whichever is longer.

7. Security / Keselamatan

We protect your personal data using: HTTPS encryption for all data transmission, role-based access controls (RBAC), data storage on secure servers in Malaysia, session-based logins with expiry, and audit logs for sensitive data access.

8. Your Rights Under PDPA / Hak Anda Di Bawah PDPA

Under the PDPA 2010, you have the right to:

• Access the personal data we hold about you
• Correct personal data that is inaccurate or outdated
• Withdraw consent where processing is consent-based
• Object to processing for direct marketing purposes
• Lodge a complaint with Malaysia's Personal Data Protection Commissioner

To exercise these rights, please contact us using the details below. We will respond within 21 working days.

9. Cookies & Analytics / Kuki & Analitik

The MUDOH web portal uses session cookies required for login and security. We do not use third-party tracking or advertising cookies.

10. Children's Privacy / Privasi Kanak-Kanak

MUDOH services are not directed to children under 18 years of age. We do not knowingly collect personal data from children.

11. Changes to This Policy / Perubahan Kepada Dasar Ini

We may update this policy from time to time. The updated effective date will be displayed at the top of this page. Continued use of the app or portal after such changes constitutes acceptance of the updated policy.

12. Contact Us / Hubungi Kami

For any privacy enquiries or to exercise your PDPA rights:

This policy is effective as of 22 May 2026. © 2026 Majlis Bandaraya Kuala Terengganu (MBKT)