This Privacy Policy explains how G100 Network Sdn. Bhd. collects, uses, stores, discloses, and protects personal data when you use the PG5G web application, related websites, mobile-accessible services, the PGO by G100 Google Chrome Extension, and the PG2U Boards mobile app and keyboard.
By using our services, creating an account, submitting a form, making a payment, or signing in through the Chrome Extension or the PG2U Boards app, you acknowledge that your personal data will be handled as described in this Privacy Policy.
Who We Are
The service is operated by G100 Network Sdn. Bhd., Malaysia. In this policy, "we", "us", and "our" refer to G100 Network Sdn. Bhd. and the systems we operate for PG5G services.
Our website is accessible from https://pg5g.my and related application routes or domains that we operate.
Personal Data We Collect
Depending on the feature you use, we may collect the following categories of personal data:
- Account information: name, email address, phone number, username, password hash, account status, subscription status, role, team, dealer profile, PG code, sub-user details, and account preferences.
- Dealer and business profile information: profile photo, speaker information, social media links, locality, upline details, training or event participation, customer labels, customer records you upload or manage, and related business information.
- Transaction and payment information: invoice details, payment status, payment reference IDs, package or service purchased, billing records, and callback information from payment providers. We do not store full card details.
- Forms and submissions: information submitted for registrations, webinars, workshops, academy, referrals, room bookings, claims, reports, access card applications, Baitul Muslim applications, quizzes, assessments, support requests, and other application modules.
- Communications data: email, WhatsApp or notification delivery status, broadcast preferences, unsubscribe status, and messages or attachments you submit to us.
- Technical and usage data: IP address, browser type, device type, operating system, visited pages, request logs, timestamps, cookies, session data, diagnostic logs, security logs, and error information.
How We Collect Personal Data
- Directly from you when you register, log in, update your profile, upload files, submit forms, join events, make payments, or contact us.
- Automatically when you use our website, application, APIs, or Chrome Extension.
- From authorized account owners, administrators, dealers, referrers, sub-users, or team members who submit information as part of using the service.
- From service providers such as payment gateways, email delivery providers, hosting providers, security tools, and CAPTCHA verification services.
How We Use Personal Data
We use personal data for the following purposes:
- To create, authenticate, secure, and manage user, dealer, referrer, staff, and sub-user accounts.
- To provide website, application, subscription, Chrome Extension, customer management, training, event, academy, referral, claim, room booking, reporting, and other platform features.
- To process payments, confirm purchases, generate invoices, verify subscriptions, handle callbacks, and keep transaction records.
- To send service messages, reminders, receipts, registration confirmations, security notices, renewal notices, and support responses.
- To send marketing or promotional communications where permitted, and to honor unsubscribe or opt-out requests.
- To prevent fraud, abuse, unauthorized access, spam, and security incidents.
- To troubleshoot, monitor performance, improve reliability, develop features, and maintain business records.
- To comply with legal, tax, accounting, audit, regulatory, and enforcement obligations.
Chrome Extension Data Collection and Usage
We provide a Google Chrome Extension known as "PGO by G100". The extension is designed to support authorized PG5G users and sub-users by connecting the browser extension to our platform.
Extension Authentication
The extension may ask you to sign in using your existing account email and password. Authentication is performed through our API endpoints hosted by our platform. When login is successful, the system may generate an extension session token, PG code, display name, profile thumbnail URL, login type, expiry time, and related session metadata.
Current extension sessions are designed to expire after a limited period. The platform stores a hashed version of the session token, account identifiers, PG code, login type, expiry time, last used time, and revocation status for security and verification.
Information Processed by the Extension
The extension may process:
- Email address and password submitted for login.
- User ID, sub-user ID where applicable, PG code, login type, account status, subscription status, display name, and profile thumbnail.
- Authentication tokens and token expiry details used to keep the extension connected during an active session.
- Technical information required for API communication, including IP address, browser information, timestamps, and diagnostic logs.
- Information you intentionally submit, export, download, or process through extension features.
Extension Storage
The extension may store authentication tokens, expiry times, PG code, preferences, and similar settings locally in your browser using Chrome storage or comparable browser storage. This local storage is used to keep the extension working between actions and to avoid repeated login prompts during a valid session.
You can remove locally stored extension data by signing out, clearing browser extension storage, removing the extension, or clearing relevant browser data.
Extension Permissions and Limited Use
The extension accesses only the information needed to provide its stated functionality, authenticate your session, communicate with our servers, and perform actions you request. We do not use extension data for advertising targeting, sale to data brokers, credit eligibility, unrelated profiling, or unrelated surveillance.
The extension does not intentionally collect browsing history, personal communications, health information, financial account credentials, or unrelated personal content unless a specific feature clearly requires user-provided data for the service you requested.
PG2U Boards Mobile App and Keyboard
PG2U Boards is our mobile app for Android and iOS. It lets dealers with an active Package PRO use their Servicing scripts on their phone: browse and edit scripts, fill a script with a customer's details, send it through WhatsApp, and insert scripts into any app through the PG2U Boards keyboard.
Sign-In
You sign in with your existing PG5G account email and password. When sign-in succeeds, our servers issue an access token. The app keeps the token in the secure storage of your device (Keychain on iOS, encrypted storage on Android) and uses it to connect to our API. The token is revoked when you sign out.
Information the App Processes
- Account information: your email address and password at sign-in, your dealer name, and your Package PRO status.
- Scripts and folders: the Servicing scripts, folders, and script images you create or edit in PG5G or in the app.
- Customer records: for each customer in your PG5G account, their name, nickname, phone number, tier, rank, labels, last follow-up date, and the values used to fill script placeholders (for example name, salutation, or locality).
- Follow-up records: when you send a script to a customer through WhatsApp from the app, we record the customer, the script used, and the time, in the same way as the WhatsApp Manual feature on the web.
- Photos you choose: if you attach an image to a script, the app reads only the photo you pick from your photo library and uploads it to your account. The app does not access other photos or your camera.
- Technical information: IP address, device and operating system information, timestamps, and server logs needed to run and secure the API.
Customer records belong to the dealer who manages them in PG5G. The dealer is responsible for having a lawful basis to keep those records and to contact those customers. We process customer records on the dealer's behalf to provide the service.
Data Stored on Your Device
So the keyboard can fill scripts quickly, the app saves a copy of your scripts, folders, script images, and each customer's name and placeholder values in storage on your device that only the PG2U Boards app and its keyboard can read (an App Group container on iOS, private app storage on Android). This copy is refreshed each time the app syncs with our servers.
The copy is cleared when you sign out. Uninstalling the app also removes it from your device.
The PG2U Boards Keyboard
The keyboard only inserts the script you choose, together with spaces, new lines, and deletions you tap. It does not record, store, or send anything you type, the text in the field you are typing into, or your clipboard history, and it makes no network connections of its own. It reads only the data the app saved on your device as described above.
On iOS, the keyboard asks for "Allow Full Access". Full Access is used for one purpose: to copy a script's image to the clipboard so you can paste it into a chat, because iOS keyboards cannot insert images directly. Without Full Access the keyboard still inserts script text. You can turn Full Access off at any time in Settings > General > Keyboard > Keyboards > PG2U Boards.
When you send a script from the app, it opens WhatsApp with the customer's number and the filled message. The message is sent by you through WhatsApp and is subject to WhatsApp's own terms and privacy policy. We do not read your WhatsApp messages or contacts.
What the App Does Not Do
The app does not show advertising, does not use third-party analytics, advertising, or crash-reporting SDKs, does not track you across other apps or websites, and does not sell or share app data for advertising. App data is used only to provide the features described above.
Cookies, Sessions, and Similar Technologies
We use cookies, session storage, local storage, tokens, and similar technologies to keep you signed in, protect the service, remember preferences, check member access, prevent abuse, and improve performance.
You may configure your browser to block or delete cookies. Some parts of the service may not work correctly if required cookies or storage are disabled.
Third-Party Services and Processors
We may use third-party service providers to operate our services. These providers may process personal data only as needed to provide their services to us, comply with law, or protect their systems.
- Hosting, infrastructure, storage, security, and logging providers to run and protect the application.
- Payment providers such as Stripe, Razorpay Curlec, CHIP, ToyyibPay, or other enabled payment processors to process payments and payment confirmations.
- Email, WhatsApp, push notification, and messaging providers to deliver service messages, reminders, broadcasts, and marketing communications where applicable.
- Google reCAPTCHA or similar anti-abuse tools to protect public forms from spam and abuse.
- Analytics, diagnostic, or monitoring tools where used to understand usage, detect errors, and improve the service.
When We Share Personal Data
We do not sell or rent your personal data. We may share personal data only in the following situations:
- With service providers that help us operate, secure, host, maintain, communicate, and process payments for the service.
- With account owners, administrators, dealers, referrers, staff, or sub-users where the service feature requires role-based access to records.
- With payment providers, banks, auditors, accountants, or tax advisers where needed for transactions and compliance.
- With authorities, regulators, courts, or law enforcement where required by law or to protect rights, safety, and security.
- In connection with a merger, acquisition, restructuring, financing, or transfer of business assets, subject to appropriate confidentiality and legal safeguards.
- With your consent or at your direction.
International Transfers
Your personal data may be processed in Malaysia or in other countries where our service providers operate. Where data is transferred internationally, we take reasonable steps to protect it according to this Privacy Policy and applicable law.
Data Retention
We keep personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing the service, maintaining accounts, resolving disputes, enforcing agreements, preserving security logs, and meeting legal, accounting, tax, and audit requirements.
PG2U Boards access tokens are kept until you sign out or the token is revoked. Scripts, customer records, and follow-up records are kept in your PG5G account under the same rules as the web application.
Extension session records are retained as needed to verify active sessions, investigate misuse, and maintain security. Some records may remain in backups or logs for a limited period before deletion according to our normal retention practices.
Security
We use reasonable technical and organizational safeguards to protect personal data, including authentication controls, hashed passwords, hashed extension session tokens, hashed app access tokens, encrypted storage of the app token on your device, access controls, secure transport where available, monitoring, and restricted administrative access.
No online service can be guaranteed to be completely secure. You are responsible for keeping your password, account access, device, browser, and extension environment secure. Please contact us immediately if you believe your account or extension session has been compromised.
Your Choices and Rights
Subject to applicable law and account permissions, you may request to access, correct, update, export, restrict, or delete personal data that we hold about you. You may also unsubscribe from marketing communications where an unsubscribe option is provided.
Deleting Your Account
You may ask us to delete your PG5G account, including the data used by the PG2U Boards app, by contacting us using the details in the Contact Us section below from the email address registered to your account. We will confirm the request and delete or anonymise your account data, except records we must keep as described below.
Some information may need to be retained where required for legal, tax, accounting, security, dispute resolution, fraud prevention, or legitimate business purposes.
Children's Privacy
Our services are not intended for children under 13 years old. We do not knowingly collect personal data from children under 13. If you believe a child has provided personal data to us, please contact us so we can take appropriate action.
Links to Other Websites
Our service may contain links to third-party websites, payment pages, social media pages, training tools, or partner resources. We are not responsible for the privacy practices, content, or security of third-party websites. Please review their privacy policies before providing personal data to them.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Changes are effective when posted on this page with an updated "Last updated" date. For material changes, we may provide additional notice through the application, email, or other reasonable methods.
Contact Us
If you have questions, requests, or concerns about this Privacy Policy or how your personal data is handled, you may contact us:
- By email: asgoldgroupsdnbhd@gmail.com