Privacy Policy

Version 1. In force from 2 November 2026.

This Privacy Policy is our privacy notice, given under the Personal Data Protection Act 2010 ("PDPA"). It is written in English and in Bahasa Melayu, and both versions say the same thing. It explains what personal data LAYAN TV ENTERPRISE collects, why, who receives it, how long we keep it, and what choices you have. It is a short version for the period before LAYAN TV opens to everyone. If you take part in the private preview you also receive a preview information note. For the preview, that note applies where it is more specific.

In short

Visiting layantv.com: the website does not ask you for personal data, and we do not run analytics or advertising trackers on it.
Private preview, by invitation only: we collect your email address so you can sign in, what you watch and where you stopped, and technical records. The forms and messages you send us are optional.
Analytics is off unless you agree to it.
We do not sell personal data.
You can ask to see, correct or delete your data (section 9).
Nothing is charged today, and we do not collect payment data today.

1. Who is responsible, and how to contact us

The data controller is LAYAN TV ENTERPRISE, a sole proprietorship registered in Malaysia, registration no. 202603269671 (SA0659054-M).

Contact person for personal data: the proprietor of LAYAN TV ENTERPRISE.

Email layantv.support@gmail.com
Phone +6011-33114752
Address Tingkat 1-1, Lot 14211 B, Jalan Besar Sungai Merab Luar, Dengkil, Sepang, 43650 Bandar Baru Bangi, Selangor, Malaysia.

2. What we collect, why, and whether you must give it

Visiting the website
What we collect:
Technical data that our website host and its network handle when your browser asks for a page: IP address, browser and device type, pages requested, date and time
Where it comes from:
Your browser, automatically
Why:
To deliver the website and keep it secure
Must you give it?
It is needed to load the page. We do not use it for analytics or advertising
Private preview: signing in
What we collect:
Your email address, and the sign-in code we send you
Where it comes from:
You
Why:
To let you sign in and to run your account
Must you give it?
Your email address is required to sign in
Private preview: using it
What we collect:
What you watched and where you stopped; the devices you are signed in on; the group you were invited in and a participant number that we set
Where it comes from:
You and your use of the preview; we set the group and number
Why:
So you can carry on watching, to run the preview, and to report results by group, never by name
Must you give it?
Needed for the preview
Private preview: technical records
What we collect:
Logs and error reports, which can include your IP address; and your IP address and device type when an episode plays, because our video provider needs them to send you the video
Where it comes from:
Automatically
Why:
To run the preview, keep it safe and fix problems
Must you give it?
Needed for the preview
Private preview: your name and phone number
What we collect:
If we have them: a list that links your participant number to your name, and your phone or WhatsApp number
Where it comes from:
You, or the person who invited you
Why:
So your answers can be found if you ask to see, correct or delete them, and so we can contact you about the preview
Must you give it?
Optional, apart from your email
Private preview: screening, forms and help messages
What we collect:
What you tell us in the screening form, in the two short feedback forms and in any message you send us for help
Where it comes from:
You
Why:
To choose participants, to improve LAYAN TV, and to help you. If you agree, also to quote your answers, without your name, in our internal reports
Must you give it?
Optional. You can skip any question
Private preview: news after the preview (only if you agree)
What we collect:
Your email address or WhatsApp number
Where it comes from:
You
Why:
To send you news about LAYAN TV after the preview, for example when it opens to everyone
Must you give it?
Optional. You can stop it at any time
A record of what you agreed to
What we collect:
Your choices, the versions of this notice and the Terms you saw, the language, the date, and your account ID
Where it comes from:
You, when you press Continue
Why:
To be able to show what you agreed to
Must you give it?
Created when you agree
Analytics, only if you agree
What we collect:
A random analytics ID, what you do in LAYAN TV, your device type, browser or app version, language, country and the link that brought you here. When you are signed in these records are linked to your account ID. We never record your name, email, phone number, IP address, precise location or advertising ID
Where it comes from:
Your device
Why:
To learn what to fix and what works
Must you give it?
Optional. If you decline, everything still works. The analytics notice has the details
Contacting us
What we collect:
Your name, your email or phone number, and what you write
Where it comes from:
You
Why:
To answer you and keep a record
Must you give it?
We need a way to reply
Creators and rights holders
What we collect:
Name, public handle or profile link, contact channel, our messages, and information about the rights you hold (for example music licences and permissions). For a rights complaint: your name, contact details, the complaint and your evidence. We may pass a complaint to the creator concerned so they can respond
Where it comes from:
You, or public sources for creators we may approach
Why:
To contact, assess and license creators, and to handle rights complaints
Must you give it?
Needed for us to deal with you or your complaint

We use your data only for the reasons above. If we want to use it for a new reason, we will tell you, and where the law needs your consent we will ask first. We do not send marketing messages at the moment. If we start, we will ask you first, and you can stop them at any time.

Paid plans (not available yet). We do not take payments or collect payment data today. If we introduce paid plans, we will update this policy before we do. We expect to receive from the payment provider the plan, its status, the billing period, transaction references, and the card brand and last four digits. The payment provider receives your card or bank details itself and handles them under its own privacy policy. We expect to keep payment records for up to seven years, as tax law requires.

3. Why the law lets us use your data

Under section 6 of the PDPA we may process personal data with your consent. We may also process it without consent where it is necessary for a contract with you or to take steps you ask for before a contract, to comply with a legal obligation, or for another reason the Act lists. In this notice:

With your consent (optional; you can withdraw it): analytics, quotes from your form answers, news about LAYAN TV after the preview.
Because it is necessary to give you what you asked for: running your account and the preview, answering your questions.
Because the law or a contract makes it necessary: security, legal claims, keeping records.

4. Who receives your data

Companies that work for us (service providers). They may use your data only on our instructions.

Website hosting and delivery: Cloudflare (Cloudflare Pages), on its global network.
Accounts and our database: Supabase, in Singapore.
Servers and logs: Google Cloud, in Singapore.
Sign-in emails: Resend, in Japan.
Error reports: Sentry, in Germany.
Video delivery and storage: Mux (United States, global network) and Cloudflare. They see your IP address and device type when an episode plays. We do not send them your name or your account.
Analytics, only if you agree: PostHog, in the European Union.
Survey and feedback tools for the private preview, and tools we use in our own work, including AI-based tools. We try not to put personal data into them. When we must, we use only what is needed, and we do not send your name or contact details to an AI tool.

Others who receive data for their own purposes:

Our email provider, Google (Gmail). It runs the mailbox where we receive and send our own email, under its own terms and privacy policy.
The payment provider, Razorpay Curlec, when paid plans open.
Authorities, where the law requires or allows us to give data.
Our professional advisers, such as lawyers and accountants.
A company that takes over the business (section 12).

We do not sell your personal data.

5. Sending data outside Malaysia

Most of the companies above are outside Malaysia: Singapore, Germany and the European Union, the United States, Japan, and the global networks of Cloudflare and Mux. So your data is sent outside Malaysia. We do this only for the purposes in this notice and put the contracts and records in place that the PDPA requires for the companies that work for us.

Email is handled differently from the companies that work for us. Google runs our mailbox (Gmail) on its own terms, and we cannot choose the country where it keeps email. It may be the United States or another country where Google has servers. If you email us, you agree that Google holds your message in this way. If you would rather not, write to us by post instead, at the address in section 1.

6. How long we keep it

Data	How long
Account and what you watched (preview)	While the preview runs, and up to 6 months after it ends. Before then we write to you about your account. If you want to keep it, you will be asked to agree to a new notice. If you do not, we delete it. You can ask us to delete it at any time (see section 9)
Technical records: logs	30 days
Technical records: each episode played	90 days
Technical records: error reports	Up to 90 days
Technical records: security records	13 months (longer only if a security incident or a legal claim needs them)
Deleted data in our backups	Up to 7 days
A copy of an invited person's email address in our cloud provider's security log	400 days, which we cannot shorten
Analytics, only if you agree	Up to 13 months, then deleted. We keep only overall totals with no ID
Preview group, screening answers and the list linking participant numbers to names	Deleted 6 months after the preview ends
Your contact for news after the preview (only if you agree)	Until you tell us to stop, and for at most 12 months after the preview ends. Then we delete it unless you say yes again
Your form answers	Kept with your participant number until that list is deleted. After that we keep the answers with no name or number and with anything that could point to you removed, so we can no longer find them to change or delete them
Messages you send us for help or to contact us	Up to 24 months after your question is closed. Email we delete can stay in Google's own systems for several months, which we cannot shorten
Record of what you agreed to	Up to 6 years after your account is deleted, so we can show what you agreed to
Creators we approach	Deleted 12 months after the last contact if there is no working relationship, and at once if you ask
Rights complaints	6 years after the complaint is closed
Payment and tax records (if paid plans open)	Up to 7 years, as tax law requires

We keep something longer only where the law requires it or we need it for a legal claim. The preview information note gives the full preview schedule.

7. Cookies and storage on your device

Malaysia has no cookie-specific law, but we tell you what is stored. The LAYAN TV website stores on your device only what it needs:

your language and display choices;
interface settings (for example a card you have closed);
your analytics choice;
when you sign in to the preview, your sign-in session; and
if you agree to analytics, a random analytics ID and a reference to the link that brought you.

We use no advertising cookies. Our website host's network (Cloudflare) may set two security cookies, __cf_bm and cf_clearance, and run a bot-detection script. They are for security, and we receive no data from them.

8. Automated decisions and profiling

We do not make decisions about you by automated means that have legal or similarly significant effects. "Continue watching" uses only your own viewing progress. We do not personalise recommendations at the moment. If we start, we will update this notice and ask for your agreement where the law needs it.

9. Your rights and choices

Email layantv.support@gmail.com, phone +6011-33114752, or write to us by post at the address in section 1. We may need to check who you are first. We do this by replying to the email address on your account, by asking you to confirm in your account, or by contacting you on the details we already hold.

Please do not email us a copy of your ID card, passport or bank card. If we ever need proof of who you are, we will tell you a safe way to send it.

See your data (access). Ask in writing. We reply within 21 days. If we need more time we tell you before the 21 days end, and we can take up to 14 more days.
Correct your data. Ask in writing. If your data is wrong, we correct it within 21 days of your request. If we refuse, we tell you in writing within 21 days, with our reasons.
Take back your consent. You can withdraw any consent at any time. We stop that use on receiving your request. For analytics you can also switch it off in the settings.
Stop processing that is likely to cause you damage or distress, and stop direct marketing.
Ask us to send your data to another organisation (data controller), where this is technically possible.
Delete your account. Ask us and we delete it within 30 days, except for what we must or may lawfully keep (section 6).
Complain. Contact us first. You can also complain to the Personal Data Protection Commissioner (pdp.gov.my).

10. Children

LAYAN TV accounts are for people who are 18 or older. If you think a person under 18 has given us personal data, tell us and we will delete it.

11. Security and data breaches

We use technical and organisational measures to protect personal data, and we require our service providers to protect it. No system is completely secure. If a personal data breach happens that the law requires us to report, we will notify the Personal Data Protection Commissioner and the people affected within the time the law sets.

12. If the business moves to a company

If the proprietor of LAYAN TV ENTERPRISE later moves the business into a company the proprietor controls, the data we hold may be passed to that company. We will tell you before this happens. The company may use your data only for the reasons in this notice.

13. Changes to this notice

We will publish any change here with a new version number and date. If a change adds a new use of your data or a new recipient, we will tell you before it takes effect, and ask for your agreement where the law needs it.