Privacy Policy for MalayStory

Last Updated: January 5, 2026

Introduction

Welcome to the DramaLink Platform ("MalayStory"). MalayStory is provided and controlled by Xfaceline Limited. We respect and protect the personal information and privacy of all MalayStory users in accordance with applicable privacy laws worldwide. This policy is closely related to your use of our products or services. When you download, install, browse, register, log in, or use our products or services, we will process and protect your personal information in accordance with this policy. We have used bold font to distinguish the terms in this policy that are (possibly) significantly related to your rights and interests. Please read them carefully.

By using or continuing to use the products and services provided by us, you fully understand and agree to the entire content of this Privacy Policy.

About Us

This policy sets out the basis for our handling of any personal data collected from you or provided to us by you. If you have any other questions about how we use your personal data, please contact us at [email protected].

Our mailing address: OFFICE F, 12/F, YHC TOWER, 1 SHEUNG YUET RD, KOWLOON BAY KLN, HONG KONG

1. How We Collect and Use Your Personal Information

We collect and use personal information that you voluntarily provide or that is generated from your use of our services for the purposes stated in this policy.

1.1 Registration and Login

When you register with a third-party account (e.g., Facebook, Apple ID), you authorize us to access your public information (nickname, avatar) from that account. You can also choose to fill in or change your information such as gender and country, but not providing this will not affect your use of the service.

1.2 When You Use Our Platform Services

We automatically collect certain data from you, including your Open ID, IP address, device information (Device ID, model, manufacturer, Android ID), registration time, login time, and records about your use of the services, such as your viewing history, likes, comments, and subscription status.

• Information you provide voluntarily: Nickname, profile picture, age, gender, and country.
• Transaction Information: If you make any transaction (e.g., for a subscription), we collect information to facilitate the transaction, such as Open ID, purchase history, IP address, and transaction details. We do not store your full payment card details.
• Viewing and Interaction Data: We collect information about the content you watch, your progress, likes, and comments to personalize your experience and recommend content.
• Customer Support: If you contact our support team, we will collect your name, Open ID, device ID, app version, and any information you provide in your message to resolve your issue.

1.3 Safe Operation

To ensure the safe operation of the software and services, we collect technical information about your device, such as device model, operating system version, login IP address, network access method, and product version number. This helps us protect your account from malicious use and detect abnormal logins.

1.4 Summary of Device Permission Invocation

During the process of providing services, we may invoke some of your device permissions (e.g., storage for caching content). You can choose to close some or all permissions in your device's settings.

1.5 Exceptions to Authorized Consent

In accordance with relevant laws, we may collect and use some necessary personal information without your authorized consent under specific circumstances, such as to comply with legal obligations or to protect national security or public interest.

2. How We Share, Transfer, and Publicly Disclose Your Personal Information

We will not share your personal information with any other company, organization, or individual except in the following circumstances:

• With your prior consent.
• Necessary sharing with business partners, such as cloud service providers (e.g., Amazon) and content audit service providers, to provide you with our services. We only share necessary information and ensure our partners adhere to strict data protection standards.
• With our affiliates, subject to the purposes stated in this policy.
• In the event of a merger, acquisition, or bankruptcy, we will require the new entity holding your information to continue to be bound by this policy.
• As required by law or to respond to legal processes or enforceable governmental requests.

3. How We Store and Protect Your Personal Information

Storage Location: Your personal information will be processed on servers that may not be in your country of residence. Our servers are located in Frankfurt, Germany. We will take appropriate measures to protect your rights in accordance with this policy.

Storage Time: We store your personal information for a reasonably necessary period as required by law. After this period, we will delete or anonymize your personal information.

Protection: We endeavor to take various security measures in accordance with industry standards to protect your personal information. Your account has a security protection function; please keep your account and password information safe.

4. How You Manage Your Personal Information

You have the right to access, correct, or delete your personal information. You can also change or withdraw your consent for us to collect your personal information (e.g., by changing device permissions). If you need to obtain a copy of your personal information, you may contact us as provided in Section 11.

5. How You Delete Your Account

You can delete your account within the app by navigating to Setting -> Account -> Delete Account. After deletion, your personal information will be removed from MalayStory, except for information that must be retained by law.

6. Special Terms for Jurisdictions

For California Residents: As required by the California Consumer Privacy Act (CCPA), this section describes the categories of personal information we may have collected or disclosed for commercial purposes. These include identifiers, commercial information (purchase activities), and internet activity information. We do not "sell" your personal information as defined under the CCPA. You have the right to request information about the data we collect and to request deletion of your personal information.

For European Union Users: If you are in the EU, you have rights under the GDPR, including the right to access, rectify, or erase your personal data, and the right to data portability.

7. Protection of Underage Users

We attach great importance to the protection of personal information of underage users (especially children under 13). Users who are minors shall use the services of MalayStory under the supervision, guidance, and consent of their guardians. If we find that we have collected personal information from underage users without verifiable parental consent, we will delete the relevant data as soon as possible.

8. How We Update Our Privacy Policy

We reserve the right to update or amend this policy from time to time. In case of any update, we will notify you through an APP client push notification or other reasonable means.

9. How to Contact Us

If you have any questions about this policy or wish to make a complaint, please contact us at [email protected]. We will endeavor to process your request as soon as possible.

Mailing Address:
Xfaceline Limited.
OFFICE F, 12/F, YHC TOWER, 1 SHEUNG YUET RD, KOWLOON BAY KLN, HONG KONG