Privacy Policy

Privacy Policy
Last updated: October 14, 2026

This Privacy Policy describes Our policies and procedures on the collection, use, disclosure, and protection of Your Personal Data when You use Our Service. This policy is prepared in accordance with the Personal Data Protection Act 2010 of Malaysia (â€œPDPAâ€).

By using the Service, You consent to the collection and use of Your Personal Data in accordance with this Privacy Policy.

Interpretation and Definitions

Interpretation

Words with capitalized initial letters have meanings defined under the following conditions. These definitions shall apply regardless of whether they appear in singular or plural.

Definitions

For the purposes of this Privacy Policy:

Account means a unique account created for You to access Our Service or parts of Our Service.
Company (referred to as â€œthe Companyâ€, â€œWeâ€, â€œUsâ€ or â€œOurâ€) refers to First Online (M) Sdn Bhd, 17A, Jalan Dedap 4, Taman Johor Jaya, 81100 Johor Bahru, Malaysia.
Cookies are small files placed on Your device containing browsing data and usage information.
Country refers to Malaysia.
Device means any device that can access the Service such as a computer, mobile phone, or tablet.
Personal Data means any information that relates to an identified or identifiable individual.
Service refers to the Website.
Service Provider means any third party who processes data on behalf of the Company.
Usage Data refers to data collected automatically from the Service.
Website refers to First Online Official Website: https://www.firstonline.com.my/
You means the individual or entity accessing or using the Service.

Legal Basis for Processing (PDPA Compliance)

We collect and process Your Personal Data based on:

Your consent
The performance of a contract
Compliance with legal obligations
Our legitimate business interests, where such interests do not override Your rights

Types of Data Collected

Personal Data

We may collect the following information:

Email address
First name and last name
Phone number
Address, State, Postal code, City
Any other information You provide voluntarily

Usage Data

Usage Data is collected automatically and may include:

IP address
Browser type and version
Pages visited and time spent
Date and time of visits
Device identifiers and diagnostic data

When accessing via mobile devices, additional data may include:

Mobile device type and ID
Operating system
Mobile browser type

Tracking Technologies and Cookies

We use Cookies and similar tracking technologies (such as web beacons, tags, and scripts) to improve and analyze Our Service.

Cookies: You may choose to disable Cookies via browser settings, but some features may not function properly.
Web Beacons: Used to monitor user interaction and performance metrics.

Cookies may be session-based or persistent.

Purpose of Collecting Personal Data

We may use Your Personal Data for the following purposes:

To provide and maintain Our Service
To manage Your Account
To process transactions and fulfill contracts
To communicate with You (email, calls, SMS, WhatsApp, or other platforms)
To send updates, promotions, and marketing materials (unless You opt out)
To respond to inquiries and customer support requests
To improve Our services, products, and user experience
For billing, invoicing, and payment processing via third-party providers
For internal analysis, audits, and administrative purposes
To comply with legal and regulatory requirements

Consent

By providing Your Personal Data, You:

Consent to its collection, use, and processing
Confirm the accuracy of the information provided
Acknowledge that You have read and understood this Privacy Policy

Where required, explicit consent will be obtained for sensitive data.

Sharing and Disclosure of Personal Data

We may share Your Personal Data in the following situations:

With Service Providers (hosting, analytics, IT support)
With payment gateway providers for secure transactions
With affiliates and related companies
With business partners where necessary
With professional advisors (lawyers, auditors)
With authorities where required by law
During business transfers (merger, acquisition, or sale)
With Your consent

All third parties are required to protect Your Personal Data.

Retention of Your Personal Data

We will retain Your Personal Data only for as long as necessary:

To fulfill the purposes stated in this policy
To comply with legal obligations
To resolve disputes and enforce agreements

Usage Data is generally retained for a shorter period unless required for security or legal reasons.

Cross-Border Data Transfer

Your Personal Data may be transferred to and processed outside Malaysia.

We will ensure appropriate safeguards are in place in accordance with PDPA requirements.

Your Rights Under PDPA

You have the right to:

Access Your Personal Data
Request correction of inaccurate data
Withdraw consent at any time
Request deletion of Your data (subject to legal obligations)
Limit processing where applicable

We may charge a reasonable administrative fee for access requests where permitted.

Withdrawal of Consent

You may withdraw Your consent by contacting Us.

Please note that doing so may:

Affect Our ability to provide services
Result in termination of Your account or services

Security of Your Personal Data

We implement reasonable security measures to protect Your Personal Data. However, no method of transmission over the Internet is completely secure.

Childrenâ€™s Privacy

Our Service is not intended for individuals under 13 years old. We do not knowingly collect Personal Data from children.

Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for their content or privacy practices.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised "Last updated" date.

Where appropriate, We will notify You via email or website notice.

Domain Registration Data and WHOIS Disclosure

When you register or manage a domain name through First Online (M) Sdn Bhd, we collect and process domain registration information as necessary to provide domain registration, administration, renewal and related services, and to comply with applicable registry policies and legal requirements.

Public Availability of Domain Registration Information

Certain domain registration information may be made available through the relevant domain registry's WHOIS or other domain registration lookup services. The information displayed depends on the domain extension and the applicable registry policies.

For .MY domain names, MYNIC's WHOIS service provides information such as the domain name, registration dates, domain status, registrar information and nameservers. Personal contact information is restricted from public display in accordance with MYNIC's applicable privacy and data protection policies.

For .SG domain names and other domain extensions, the information made publicly available is determined by the relevant registry's policies and applicable requirements.

Disclosure of Non-Public Information

Domain registration information that is not publicly displayed may be disclosed to the relevant registry, authorised service providers or other parties where necessary for domain registration and management, or where permitted or required by applicable law and registry policies.

Requests for non-public domain registration information will be handled in accordance with applicable legal requirements, registry policies and relevant data protection obligations.

First Online takes reasonable steps to handle domain registration information in accordance with applicable privacy and data protection requirements.