1. Who we are and scope
PGI CIPTA SDN. BHD. operates wukong and is responsible for the personal data described in this notice. It covers the wukong app, this website and our handling of related orders and support requests. Our registered address and privacy contact email appear below. This notice is newly prepared for wukong and is the same notice linked from the app.
2. Information you provide
Depending on the features you use, we process your phone number and country calling code for registration and verification; login session information; profile details you choose to enter; saved delivery names, contact numbers, addresses and access instructions; and order items, selected options, notes, amounts, currency and order status. Optional profile or archive details are processed when you choose to save them. Support emails, reviews and evidence you submit are processed to respond to you or display your review as indicated in the app.
3. Searches and privacy declarations
Restaurant/product and address searches send the search text and relevant location/account context to the services needed to return results. Profile and optional archive fields can include a name, phone number, email, date of birth, gender or other information you enter. We process selected uploaded photos, reviews, order remarks, support content, wallet/points information and purchase records for their related functions. The current app declares account/device-linked collection for app functionality and does not include an advertising identifier, advertising SDK or third-party analytics SDK. Public image cache file timestamps stay in the app container and are used only to refresh images. Language preferences and a random installation identifier are stored in the app’s own preferences; the installation identifier is sent with API requests for app operation and security.
4. Device, network and location information
App requests include the selected language, app version, operating system, app package identifier, a persistent device identifier generated for the app, selected city and latitude/longitude used for the delivery context, and a login token when signed in. Servers can receive IP addresses, request timestamps and technical error information. Location permission is requested when you choose location features; you can instead select an address manually. A default Kuala Lumpur coordinate may be used when no supported delivery location is selected. We do not need continuous background location access for these features.
5. How we use information
We use information to verify and secure accounts; identify the delivery city and currency; show relevant merchants; maintain carts and process orders; arrange fulfilment; confirm payment and refund status; maintain balances, points and vouchers where available; respond to support and privacy requests; prevent misuse; and meet applicable recordkeeping obligations. Information needed for login, delivery and payment is necessary for those particular features. Refusing optional information or permissions does not prevent browsing unrelated available features.
6. Merchants, delivery partners and payment providers
We share the order, delivery address, contact details and relevant instructions with the merchant and delivery partners as necessary to fulfil it. Malaysia currently uses a hosted H5 checkout opened in a system browser view. The payment provider processes payment details on its checkout page under its own privacy notice; the app sends the order/payment request and receives transaction references and payment status. The current Malaysia app build does not bundle the Alipay, WeChat or LianLian native payment SDKs. We do not ask you to send full card details, payment passwords or verification codes by support email. Hosting, messaging, address-search and security providers may process necessary information on our behalf. We may disclose information to public authorities where legally required.
7. Apple services and permissions
If you use system location or address search, the relevant Apple services may process location/search inputs under Apple's terms and privacy information. On supported devices, optional display translation uses Apple's Translation framework and may require a language-model download. Translation changes displayed text rather than the original order, price or address parameters. App network access permission is used to connect to our services. You can change system permissions in iOS Settings; disabling them may limit related features.
8. Storage, security and international processing
We use HTTPS for app and website connections and store app login tokens in the iOS Keychain. Access controls and other reasonable technical and organisational safeguards are used to protect information, but no system is risk free. Our infrastructure and service providers may process information outside Malaysia. Where cross-border processing applies, we use safeguards and conditions required by applicable data protection law. We retain data for the purpose for which it was collected and necessary legal, accounting, fraud-prevention or dispute periods, then delete or de-identify it when no longer required.
9. Website storage and logs
This public website does not require an account and does not use advertising trackers or third-party analytics. Standard web-server access and error logs may contain IP address, browser/request information, page path and time for operation and security. Language navigation uses page URLs. The app uses local storage and caches for settings, country calling-code lists, public images and display translations, and Keychain storage for login sessions. These are distinct from advertising tracking.
10. Your choices and rights
You may submit an account deletion request in the app under Account → Settings → Delete account. The confirmation explains the effect, legally retained records and outstanding-order conditions. Requests are reviewed, usually within 24–72 hours. The app confirms that a request was submitted; the account is not deleted immediately by that receipt. Deletable account information and associated user content are removed after processing, except where continued retention is legally required. We explain any exception or unresolved obligation that prevents completing part of a request. Subject to applicable law, you may also request access, correction or withdrawal of consent, or ask about processing, disclosures and complaints using the privacy email below. We may perform reasonable identity checks; do not send your password or verification code. You may complain to the relevant data protection authority.
11. Children and other people's information
The service is intended for people who can lawfully use it or use it under appropriate parental or guardian supervision. We do not knowingly seek personal information from children without the authorisation required by law. Contact us if you believe a child's information has been collected improperly. If you give another person's recipient or contact details, ensure you are authorised to provide them and inform that person of this notice.
12. Updates and contact
The effective date identifies this version. Material changes will be communicated appropriately, and consent will be obtained where required. The app and website link to this same published notice. For privacy questions, rights requests, account closure or support, contact the operator using the details below.
Contact us
- Service operator
- PGI CIPTA SDN. BHD.
- Registered address
- 31 C, Jalan Titiwangsa 2, Taman Tampoi Indah, 81200 Johor Bahru, Johor Darul Ta'zim, Malaysia
- Privacy & support
- kyzrend@pgicipta.pics