Skip to main content

Privacy Policy

Last updated: 30 August 2026

This Privacy Policy explains how CreativeMagic Solution (SA0152811-K) ("we", "us", "our") collects, uses and protects personal data in connection with the KasiBook appointment booking service ("the Service"). It is prepared in line with the Malaysian Personal Data Protection Act 2010 (PDPA).

1. What personal data we collect

Depending on how you use the Service, we may collect:

  • Account data — business name, your name, email address, phone number, and account credentials (stored securely as hashed passwords).
  • Booking data — the name, phone number and email address that customers enter when making an appointment through a booking page.
  • Payment data — payment reference details from your plan purchase. Payments are handled by our payment provider SecurePay (securepay.my); we do not store full card details.
  • Technical data — basic logs such as IP address, browser type and usage patterns, used to keep the Service secure and functioning.

2. How we collect personal data

We collect personal data directly from you (when you create an account or update your profile), from your customers (when they book an appointment through your booking page), and automatically (as technical data when you use the Service).

3. How we use personal data

We use personal data for the following purposes:

  • providing and operating the Service, including managing bookings, availability and staff;
  • processing plan payments and managing your billing;
  • sending service-related communications, including booking confirmations and password resets;
  • supporting and improving the Service;
  • complying with legal obligations.

4. Consent

By creating an account and using the Service, you consent to the collection, use and disclosure of your personal data as described in this Policy. You may withdraw your consent at any time by contacting us using the details in section 10, subject to legal and contractual restrictions.

5. Disclosure

We do not sell your personal data. We only share personal data with third parties that help us operate the Service — such as our payment provider SecurePay (securepay.my) — and only to the extent necessary. We may also disclose personal data where required by law or to protect our legal rights.

6. Data users (businesses)

Businesses using the Service are the data users of the customer data they collect through their booking pages. They must inform their customers how that data is used and obtain any consent the PDPA requires. We act as a data processor for that customer data.

7. Retention

We keep personal data only as long as needed for the purposes described in this Policy, to comply with legal obligations, or as otherwise permitted by law. When no longer needed, it is securely deleted or anonymised.

8. Your rights

Under the PDPA, you have the right to:

  • request access to your personal data held by us;
  • request correction of inaccurate or incomplete data;
  • withdraw your consent to the processing of your data;
  • contact us with any complaints about how we handle your data.

To exercise any of these rights, contact us using the details in section 10. We will respond within the timeframes required by law.

9. Security

We take reasonable technical and organisational measures to protect personal data, including HTTPS encryption in transit, hashed passwords, and restricted access to our systems. Payments are processed by SecurePay (securepay.my) on its PCI-DSS-compliant hosted page, so card details are entered on SecurePay's site and never pass through our servers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. Contact us

For questions about this Policy or to exercise your data rights, contact us at:

  • CreativeMagic Solution (SA0152811-K)
  • No 59, Jalan Rentak 2/3, Rentak Perdana, Bandar Puncak Alam
  • +6016 868 9787
  • [email protected]

11. Changes to this Policy

We may update this Policy from time to time. The latest version will always be available on this page, with an updated "Last updated" date. Significant changes will be brought to your attention where practicable.