How BizCloud Asia Sdn Bhd collects, uses, and protects your personal data
in connection with iCRM and all related services.
For this Privacy Policy, "BizCloud Asia", "we", "us" or "our" means BizCloud Asia Sdn Bhd and its authorised personnel, representatives, service providers and business units operating icrm.com.my, iCRM, BizCloud App, Queue System (QMS), WhatsApp Business API solutions and related software or support services.
This Policy applies to:
Name, company name, job title, phone number, email address, WhatsApp number, and business address — collected when you contact us, register for a trial, or subscribe to iCRM.
Username, role, access permissions, login records, and system activity logs for iCRM accounts.
Contact profiles, service cases, membership records, quotations, appointments, marketing campaign data, and other customer relationship records entered by iCRM subscribers.
WhatsApp message content, chatbot conversation history, SMS content, and email content processed through iCRM's messaging modules and WhatsApp Business API (WABA).
Name, phone number, queue requests, service type, and queue session data collected when customers use the QMS (WhatsApp QMS or Cloud QMS).
Student name, parent contact, class enrollment, attendance records, fee payment records, and academic data entered by tuition centre operators.
IP address, browser type, device information, cookies, usage logs, diagnostic data, and security logs collected automatically when you use icrm.com.my or iCRM.
Subscription plan, payment references, billing records, and commercial records necessary for service administration.
We process personal data for the following purposes:
We do not sell customer data. We may disclose personal data only where reasonably necessary, including to:
When you use iCRM's WhatsApp Business API features, customer message content is processed via iSMS and the WhatsApp Business API platform. You are responsible for ensuring your customers are informed that their messages may be processed through these systems.
When a customer sends a WhatsApp message and iCRM's AI auto-reply is enabled, the message content may be transmitted to and processed by third-party AI model providers (such as OpenAI, Google, Anthropic, or similar) to generate a response. This transmission may occur outside Malaysia.
We use commercially reasonable efforts to:
However, we cannot fully control or guarantee how third-party AI providers process, store, retain, or use data once it is transmitted to their systems. iCRM subscribers are responsible for ensuring that their use of AI Features complies with the Malaysian PDPA and any other applicable data protection laws, including obtaining necessary consents from customers whose messages may be processed by AI systems.
When customers join a queue via QMS, their name, phone number, and queue request are collected and stored within iCRM. For WhatsApp QMS, this data is also transmitted via WhatsApp Business API. Queue data is used solely for managing the queue session and notifying customers when their number is called.
We apply reasonable technical and organisational measures to protect personal data against accidental loss, misuse, unauthorised access, disclosure, alteration, and destruction. Measures may include HTTPS/TLS access, access controls, role-based permissions, backup procedures, audit logging, and restricted internal access.
No website, cloud service, internet transmission, WhatsApp communication, email, or storage system can be guaranteed completely secure. iCRM subscribers are responsible for managing authorised users, passwords, internal access approvals, device security, and data accuracy within their accounts.
We retain personal data for as long as reasonably necessary to provide services, support customer accounts, meet legal and accounting obligations, resolve disputes, enforce agreements, maintain backups, and protect legitimate business interests.
For Cloud Services, upon written request made within 30 days after termination of subscription, we will provide a reasonable method to export your data. After this period, we may delete or anonymise your data from active systems. Backup data may remain for a limited additional period due to technical backup cycles and disaster recovery practices.
Some service providers, cloud infrastructure, AI model providers, messaging providers, or support tools may process data outside Malaysia. This may include AI providers located in the United States or other countries. Where this occurs, we will take reasonable steps to ensure personal data is handled consistently with applicable Malaysian PDPA requirements and with appropriate contractual safeguards where available.
icrm.com.my may use cookies, session storage, logs, and similar technologies to operate the website, remember user preferences, improve performance, analyse traffic, secure sessions, and support enquiry and marketing workflows.
You may adjust your browser settings to reject cookies, but some website functions may not work correctly as a result. We do not use cookies to identify you personally without your knowledge or to share your personal data with third-party advertisers.
Subject to applicable Malaysian law and the PDPA, you may request:
We may need to verify your identity and may decline requests where permitted by law — for example, where data belongs to a customer-controlled account, where disclosure would affect another person, or where legal privilege applies.
If your data is controlled by your employer or an iCRM subscriber (for example, your details are in their CRM), please contact that organisation first. We may redirect your request to the relevant account administrator.
To submit a data request, contact us at sales@bizcloud.asia.
icrm.com.my and iCRM may link to or integrate with third-party websites, WhatsApp, email providers, payment providers, government portals, or external services. We are not responsible for the privacy practices, security, or content of third-party platforms. Please review their privacy policies separately.
We may update this Privacy Policy from time to time to reflect changes in our services, data practices, or applicable laws. The "Last updated" date at the top of this page will be revised accordingly.
Continued use of icrm.com.my or iCRM after changes are posted means you acknowledge the updated Policy. We encourage you to review this page periodically.
For any privacy-related enquiries, data access or correction requests, or concerns about your personal data: