1. Introduction
Kpp-test.com ("we") operates an online Malaysian driving test practice platform. This Privacy Policy explains how we collect, use, store, and protect your personal information. By using this platform, you agree to the data practices described in this policy.
2. Information We Collect
2.1 Information You Provide
- Registration: Email address (for login and notifications)
- Profile: Nickname (optional, for display purposes)
- Practice Data: Your progress, review list, and mock exam results (to provide personalized service)
2.2 Automatically Collected Information
- Device Info: Browser type, operating system, screen resolution
- Usage Data: Pages visited, time spent, click behavior
- Anonymous Fingerprint: Used for free quota tracking (10 questions in total, not a daily allowance), not linked to personal identity
2.3 Payment Information
We do not directly process or store your payment card information. All payments are handled by third-party payment processors:
- Creem: Credit/bank card payments (MYR/USD)
- XunHupay: WeChat Pay / Alipay (CNY)
- We only receive payment completion notifications and order IDs — never card numbers or payment credentials
3. Cookies and Local Storage
We use the following storage technologies:
- Auth Cookies: Maintain your login session
- Language Preference Cookie: Remember your selected language
- localStorage: Store practice progress, mode preferences, and free quota counts
- Analytics Cookie: Google Analytics 4 (production only) for understanding site usage
You can clear cookies and local storage via your browser settings. After clearing, free quota counts will be recalculated based on your anonymous fingerprint.
4. How We Use Information
- Provide driving test practice, mock exams, and review features
- Record practice progress for cross-device sync (for logged-in users)
- Manage free quota (10 questions, lifetime) and Pro subscription status
- Process subscription payments and order management
- Improve platform functionality and user experience
- Send service-related notifications (e.g., subscription expiry reminders)
5. Data Storage and Security
- Database: Supabase (PostgreSQL), cloud-hosted
- Password Security: Passwords are stored using industry-standard hashing — we cannot see your plaintext password
- Encrypted Transmission: All data transfer uses HTTPS (TLS 1.2+) encryption
- Access Control: Only authorized personnel can access the database; server-side keys are never exposed to the client
6. Third-Party Services
We use the following third-party services, each with their own privacy policies:
- Supabase: User authentication and database hosting (Ireland)
- Google Analytics 4: Website traffic analysis (anonymized data)
- Creem / XunHupay: Payment processing services
We do not sell or rent your personal information to any third party.
7. Data Retention
- Account Data: Permanently deleted within 30 days of account deletion
- Practice Records: Deleted together with account
- Payment Records: Retained for 7 years as required by law
- Anonymous Usage Data: Not linked to personal identity, retained for analytics
8. Your Rights
Under the Malaysian PDPA (Personal Data Protection Act) and general data protection principles, you have the right to:
- Access: View the personal data we hold about you
- Correct: Correct inaccurate or outdated information
- Delete: Request deletion of your account and associated data
- Withdraw Consent: Withdraw consent for specific data processing
- Data Portability: Obtain a copy of your data in a structured format
To exercise these rights, contact [email protected].
9. Children's Privacy
This platform is intended for Malaysian driving test candidates (typically 17+ years old). We do not knowingly collect personal information from children under 13. If you are a parent/guardian and discover your child has registered, please contact us to delete their account.
10. International Data Transfers
Your data may be stored on servers outside Malaysia (e.g., Supabase Ireland data center, Vercel global CDN). We ensure these transfers comply with applicable data protection laws.
11. Policy Changes
We may update this Privacy Policy from time to time. For significant changes, we will notify you via platform notice or email. Continued use of the platform constitutes acceptance of the updated policy.
12. Contact Us
For any privacy-related questions, please contact:
- 📧 Email: [email protected]
- This platform is independently operated and is not affiliated with the Jabatan Pengangkutan Jalan (JPJ) Malaysia