Privacy Policy Generator Malaysia: PDPA, AdSense, English and BM

Privacy Policy

Last updated: 19 October 2026

About this policy

This privacy policy explains how Ali bin Abu ("we", "us") collects, uses and protects your personal data when you visit Example Blog at https://www.example.com. It is written to meet the notice requirements of the Personal Data Protection Act 2010 (Malaysia) and the EU General Data Protection Regulation (GDPR) for visitors in the European Economic Area. By using this website you acknowledge this policy.

Personal data we collect

We collect the following personal data:

Your name, email address and message when you use the contact form.
Your name, email address, website and comment when you leave a comment.
Technical data collected automatically: IP address, browser and device type, pages visited, time spent, and the website that referred you, through cookies and server logs.

How we collect it

Directly from you, when you fill in a form or leave a comment.
Automatically, through cookies and similar technologies when you browse the website.
From third parties such as Google, which provide our advertising and analytics services.

Why we use your data

To run, secure and improve the website.
To reply to your messages and publish your comments.
To understand how visitors use the website, through Google Analytics.
To show advertising that helps keep this website free.
To comply with the law and respond to lawful requests from authorities.

For visitors in the European Economic Area, our legal bases are your consent (for cookies, advertising and newsletters), our legitimate interests (running and securing the website and replying to you), contract (for orders and accounts) and legal obligations.

Cookies and advertising

Cookies are small files stored on your device. We use them to remember your preferences, measure traffic and show advertising. You can block or delete cookies in your browser settings; some features may then not work.

This website shows ads from Google AdSense. Third party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this website and/or other websites on the Internet.

You may opt out of personalized advertising by visiting Google Ads Settings. You can also opt out of some third-party vendors' use of cookies for personalized advertising at www.aboutads.info. Learn more about how Google uses information from sites that use its services.

Analytics

We use Google Analytics to understand how visitors use this website. Google Analytics uses cookies to collect information such as pages visited, time on site, device and approximate location; it does not tell us who you are. The data is processed by Google under the Google Privacy Policy. You can prevent your data from being used by Google Analytics by installing the Google Analytics opt-out browser add-on.

Who we share your data with

We do not sell your personal data. We share it only with:

Service providers who host and run the website and process data only on our instructions.
Google, for advertising and analytics as described above.
Government agencies, regulators or courts when the law requires it.

Transfers outside Malaysia

Some of our service providers, including Google, store data on servers outside Malaysia. When your data is transferred abroad we take reasonable steps to ensure it is protected to a standard similar to the Personal Data Protection Act 2010.

How we protect your data

We use HTTPS encryption, access controls and reputable service providers to protect your personal data from loss, misuse, unauthorised access and disclosure. No method of transmission over the Internet is completely secure, so we cannot guarantee absolute security.

How long we keep it

We keep personal data only as long as needed for the purposes above. Messages are deleted when no longer needed; published comments stay until you ask us to remove them.

Your rights

You have the right to:

Access the personal data we hold about you and ask us to correct it if it is inaccurate, incomplete or out of date.
Withdraw your consent and ask us to limit or stop processing your data, for example by unsubscribing or blocking cookies.
If you are in the European Economic Area, you also have the right to erasure, restriction, data portability and to object to processing, and to complain to your local data protection authority.

To use these rights, email us at hello@example.com. We may need to verify your identity before acting on your request.

Is giving your data required?

Giving us personal data is voluntary. If you do not provide the details a form asks for, we may not be able to reply to you. You can browse the website without giving us your name or email address. If you do give us personal data, please make sure it is accurate and tell us if it changes.

Children

This website is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.

Links to other websites

This website links to other websites. We are not responsible for their content or privacy practices; please read their privacy policies.

Pages may include embedded content such as YouTube videos or social media posts, which behaves as if you visited the other website and may set its own cookies.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed. Significant changes will be announced on this website.

Contact us

If you have any questions about this policy or your personal data, contact Ali bin Abu at hello@example.com.

Dasar Privasi

Dikemas kini: 19 Oktober 2026

Tentang dasar ini

Dasar privasi ini menerangkan cara Ali bin Abu ("kami") mengumpul, menggunakan dan melindungi data peribadi anda apabila anda melawat Example Blog di https://www.example.com. Dasar ini disediakan bagi memenuhi keperluan notis Akta Perlindungan Data Peribadi 2010 (Malaysia) dan Peraturan Perlindungan Data Am Kesatuan Eropah (GDPR) bagi pelawat di Kawasan Ekonomi Eropah. Dengan menggunakan laman web ini, anda mengakui dasar ini.

Data peribadi yang kami kumpul

Kami mengumpul data peribadi berikut:

Nama, alamat e-mel dan mesej anda apabila anda menggunakan borang hubungan.
Nama, alamat e-mel, laman web dan komen anda apabila anda meninggalkan komen.
Data teknikal yang dikumpul secara automatik: alamat IP, jenis pelayar dan peranti, halaman yang dilawati, tempoh lawatan dan laman web yang merujuk anda, melalui kuki dan log pelayan.

Cara kami mengumpulnya

Terus daripada anda, apabila anda mengisi borang atau meninggalkan komen.
Secara automatik, melalui kuki dan teknologi seumpamanya semasa anda melayari laman web ini.
Daripada pihak ketiga seperti Google, yang menyediakan perkhidmatan pengiklanan dan analitik kami.

Tujuan kami menggunakan data anda

Untuk mengendali, melindungi dan menambah baik laman web ini.
Untuk membalas mesej anda dan menyiarkan komen anda.
Untuk memahami cara pelawat menggunakan laman web ini, melalui Google Analytics.
Untuk memaparkan iklan yang membantu laman web ini kekal percuma.
Untuk mematuhi undang-undang dan menjawab permintaan sah daripada pihak berkuasa.

Bagi pelawat di Kawasan Ekonomi Eropah, asas undang-undang kami ialah persetujuan anda (untuk kuki, iklan dan surat berita), kepentingan sah kami (mengendali dan melindungi laman web serta membalas anda), kontrak (untuk pesanan dan akaun) dan kewajipan undang-undang.

Kuki dan pengiklanan

Kuki ialah fail kecil yang disimpan pada peranti anda. Kami menggunakannya untuk mengingati pilihan anda, mengukur trafik dan memaparkan iklan. Anda boleh menyekat atau memadam kuki melalui tetapan pelayar anda; sesetengah ciri mungkin tidak berfungsi selepas itu.

Laman web ini memaparkan iklan daripada Google AdSense. Vendor pihak ketiga, termasuk Google, menggunakan kuki untuk memaparkan iklan berdasarkan lawatan anda sebelum ini ke laman web ini atau laman web lain. Penggunaan kuki pengiklanan oleh Google membolehkan Google dan rakan kongsinya memaparkan iklan kepada anda berdasarkan lawatan anda ke laman web ini dan/atau laman web lain di Internet.

Anda boleh menarik diri daripada pengiklanan diperibadikan melalui Tetapan Iklan Google. Anda juga boleh menarik diri daripada penggunaan kuki oleh sesetengah vendor pihak ketiga untuk pengiklanan diperibadikan di www.aboutads.info. Ketahui lebih lanjut tentang cara Google menggunakan maklumat daripada laman yang menggunakan perkhidmatannya.

Analitik

Kami menggunakan Google Analytics untuk memahami cara pelawat menggunakan laman web ini. Google Analytics menggunakan kuki untuk mengumpul maklumat seperti halaman yang dilawati, tempoh lawatan, peranti dan anggaran lokasi; ia tidak memberitahu kami siapa anda. Data ini diproses oleh Google di bawah Dasar Privasi Google. Anda boleh menghalang data anda daripada digunakan oleh Google Analytics dengan memasang alat tambah pelayar untuk menarik diri daripada Google Analytics.

Pihak yang menerima data anda

Kami tidak menjual data peribadi anda. Kami hanya berkongsinya dengan:

Penyedia perkhidmatan yang mengehos dan mengendalikan laman web ini dan memproses data hanya atas arahan kami.
Google, untuk pengiklanan dan analitik seperti yang diterangkan di atas.
Agensi kerajaan, pengawal selia atau mahkamah apabila dikehendaki oleh undang-undang.

Pemindahan ke luar Malaysia

Sesetengah penyedia perkhidmatan kami, termasuk Google, menyimpan data pada pelayan di luar Malaysia. Apabila data anda dipindahkan ke luar negara, kami mengambil langkah munasabah untuk memastikan ia dilindungi pada tahap yang setara dengan Akta Perlindungan Data Peribadi 2010.

Cara kami melindungi data anda

Kami menggunakan penyulitan HTTPS, kawalan akses dan penyedia perkhidmatan yang bereputasi untuk melindungi data peribadi anda daripada kehilangan, salah guna, akses tanpa kebenaran dan pendedahan. Tiada kaedah penghantaran melalui Internet yang selamat sepenuhnya, jadi kami tidak dapat menjamin keselamatan mutlak.

Tempoh kami menyimpan data

Kami menyimpan data peribadi selama yang diperlukan untuk tujuan di atas sahaja. Mesej dipadam apabila tidak lagi diperlukan; komen yang disiarkan kekal sehingga anda meminta kami memadamnya.

Hak anda

Anda berhak untuk:

Mengakses data peribadi yang kami simpan tentang anda dan meminta kami membetulkannya jika ia tidak tepat, tidak lengkap atau sudah lapuk.
Menarik balik persetujuan anda dan meminta kami mengehadkan atau menghentikan pemprosesan data anda, contohnya dengan berhenti melanggan atau menyekat kuki.
Jika anda berada di Kawasan Ekonomi Eropah, anda juga berhak meminta data dipadam, mengehadkan pemprosesan, kemudahalihan data dan membantah pemprosesan, serta membuat aduan kepada pihak berkuasa perlindungan data tempatan anda.

Untuk menggunakan hak ini, e-mel kami di hello@example.com. Kami mungkin perlu mengesahkan identiti anda sebelum bertindak atas permintaan anda.

Adakah anda wajib memberikan data?

Memberikan data peribadi kepada kami adalah secara sukarela. Jika anda tidak memberikan butiran yang diminta oleh borang, kami mungkin tidak dapat membalas anda. Anda boleh melayari laman web ini tanpa memberikan nama atau alamat e-mel anda. Jika anda memberikan data peribadi, sila pastikan ia tepat dan maklumkan kepada kami jika ia berubah.

Kanak-kanak

Laman web ini tidak ditujukan kepada kanak-kanak di bawah umur 13 tahun. Kami tidak sengaja mengumpul data peribadi daripada kanak-kanak. Jika anda percaya seorang kanak-kanak telah memberikan data peribadi kepada kami, hubungi kami dan kami akan memadamnya.

Pautan ke laman web lain

Laman web ini mengandungi pautan ke laman web lain. Kami tidak bertanggungjawab atas kandungan atau amalan privasi laman tersebut; sila baca dasar privasi mereka.

Halaman mungkin mengandungi kandungan terbenam seperti video YouTube atau hantaran media sosial, yang berkelakuan seolah-olah anda melawat laman web tersebut dan mungkin menetapkan kukinya sendiri.

Perubahan pada dasar ini

Kami mungkin mengemas kini dasar ini dari semasa ke semasa. Tarikh di bahagian atas menunjukkan bila ia terakhir diubah. Perubahan penting akan dimaklumkan di laman web ini.

Hubungi kami

Jika anda mempunyai sebarang pertanyaan tentang dasar ini atau data peribadi anda, hubungi Ali bin Abu di hello@example.com.

Commissioner's framework of a notice and where the generator covers it
Notice item	Section in your policy
1. Brief information on the company and its data protection practice	About this policy
2. Collection and processing of personal data	How we collect it
3. Description of the personal data collected	Personal data we collect
4. Purposes of collection	Why we use your data
5. Sources of personal data	How we collect it
6. Disclosure to third parties	Who we share your data with
7. Transfer of personal data overseas	Transfers outside Malaysia
8. Security measures	How we protect your data
9. Retention of personal data	How long we keep it
10. Access and correction of personal data	Your rights
11. Consequences of failing to supply personal data	Is giving your data required?
12. Marketing and promotional activities	Why we use your data
13. Data subject's obligations	Is giving your data required?
14. Contact for enquiries	Contact us

Personal Data Protection (Amendment) Act 2024
From	Change
1 January 2025	Administrative changes, including notices served electronically
1 April 2025	"Data user" becomes "data controller"; data processors bound by the security principle; higher penalties; new cross-border transfer rules
1 June 2025	Data breach notification, data protection officers and the right to data portability

Frequently asked questions

Do Malaysian websites need a privacy policy?

If you collect personal data in commercial transactions, such as through an online shop, enquiry forms or a newsletter for your business, the Personal Data Protection Act 2010 requires a written notice telling people what you collect, why, who you share it with and how they can access and correct it. Google AdSense and Google Analytics also require a privacy policy that discloses their cookies, so a monetised blog needs one too.

Does the privacy policy have to be in Bahasa Melayu?

Under section 7(3) of the PDPA, the notice must be in the national language and in English. Choose Both and the generator writes the full policy in English and Bahasa Melayu, one after the other, ready to paste on one page.

What must a privacy policy include for Google AdSense?

Google requires three points: that third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to your site or other sites; that Google's advertising cookies let it and its partners serve ads based on those visits; and that users can opt out of personalised advertising at Ads Settings (or aboutads.info). The generator adds all three, with the links, when you tick Google AdSense.

How do I add the privacy policy to Blogger?

In Blogger, open Pages, create a new page titled Privacy Policy, switch to HTML view, paste the copied HTML and publish. Then link the page in your footer or menu. On WordPress, paste the HTML into a Custom HTML block on a new page and choose it under Settings, Privacy. Keep the link visible on every page.

What changed in the PDPA in 2025?

The Personal Data Protection (Amendment) Act 2024 came into force in three phases in 2025. From 1 April 2025 a "data user" is called a "data controller" and data processors are directly bound by the security principle; from 1 June 2025 controllers must notify data breaches, appoint a data protection officer where required, and give people a right to data portability. Update your policy date when you review it.

Do I need GDPR in my policy?

Only if you target or monitor visitors in the European Economic Area, for example by selling to them or using analytics and personalised ads on their visits. Leaving GDPR ticked adds the legal bases and the extra EU rights (erasure, restriction, portability, objection and complaint). It does no harm for a Malaysian site with international visitors.

Is this generated policy legal advice?

No. It is a clear starting template that follows the PDPA notice framework and Google's requirements, but every business is different. Read it, delete anything that does not apply, add what you really do with data, and ask a lawyer if you handle sensitive data such as health or financial records or run a large online business.