Privacy Policy

Savwee Student Hub - Effective Date: 28 March 2026

Savwee Student Hub

Effective Date: 28 March 2026

1. Introduction

1.1 We, Savwee Education Sdn Bhd (Registration No.: 201701022011 (1236177-W)) (collectively referred to as “Savwee”, “Company”, “we”, “us”, or “our”) and other members of the Savwee Group (as defined below) value privacy and we are committed to protecting all personal data provided to us and processed by us, in accordance with the Personal Data Protection Act 2010 (as may be amended from time to time, including by the Personal Data Protection (Amendment) Act 2024, hereinafter referred to as the “PDPA”). This Privacy Policy (“Privacy Policy”) is issued by Savwee with respect to the Savwee Student Hub web application and website (the “Platform”) and applies to all entities within the Savwee Group.

1.2 The Platform is owned and operated by Savwee, where such expression shall, unless repugnant to the context thereof, be deemed to include its respective representatives, administrators, employees, directors, officers, agents and their successors and assigns.

1.3 For the purpose of this Privacy Policy, unless the context requires otherwise, the terms “personal data” and “processing” shall have the meaning prescribed in the PDPA.

1.4 This Privacy Policy describes our gathering, storing, dissemination and processing practices in respect of personal data of individuals through your use of or access to our Platform and all content, tools, features, calculators, educational materials, and functionality available at or through the Platform.

1.5 Please read this Privacy Policy to understand how we use and process the personal data we have collected or may collect from you.

1.6 By accessing and using the Platform, providing your personal data, and/or creating an account, you are deemed to have read and consented to be bound by this Privacy Policy and the collection, use, access, transfer, storage and processing of your personal data described in this Privacy Policy as may be modified or updated from time to time by us.

1.7 Any changes to this Privacy Policy will be updated to the Platform. Any such revised Privacy Policy will continue to apply to all personal data that has previously been collected as well as information that has been stored or processed on an ongoing basis by us. Therefore, you are encouraged to check our Platform on a regular basis for any updates or changes to the Privacy Policy.

1.8 If you are a firm, corporation or entity supplying personal data of your partners, directors, shareholders, employees, officers and/or other persons to us, please do ensure that you have obtained their consent and bring this Privacy Policy to their attention.

1.9 This Privacy Policy is issued in the English language. In the event of any inconsistency between the English version and any translation, the English version shall prevail.

2. Definitions

“Platform” means the Savwee Student Hub web application accessible at https://hub.savwee.com and any associated mobile-optimised website, but does not include any website or application owned or operated by a third party that may be accessed from the Platform.

“Savwee Group” includes Savwee (using whatever trading names as it considers appropriate for its business and marketing purposes) and any company which may from time to time be established and which may fall under the majority ownership and control of the officers of Savwee, including the parent or holding company and any subsidiary, affiliate, associate company and any company which has a strategic or operational partnership agreement with the Company.

“Services” means the educational tools, calculators, quizzes, trade journaling, resources, and other features made available through the Platform by the Savwee Group.

“User”, “you” or “your” means the person who accesses, uses, or creates an account on the Platform, and, if authorised and applicable, the entity on whose behalf any person accesses or uses the Platform.

“Third-Party Service Providers” means external companies whose infrastructure or services are used to operate the Platform, including but not limited to Supabase (database, authentication, and file storage) and Vercel (web hosting and content delivery).

3. Scope of This Privacy Policy

3.1 This Privacy Policy sets out what kind of personal data is being processed, including but not limited to:

the purposes for which the personal data is being or is to be collected and further processed;

the source of that personal data;

your right to request access and correction of your personal data and how to contact us with any inquiries or complaints in respect of the personal data;

the persons to whom we disclose or may disclose your personal data;

the choices and means by which you may limit the processing of your personal data;

whether it is obligatory or voluntary for you to supply the personal data; and

where it is obligatory for you to supply the personal data, the consequences to you if you fail to supply the personal data.

4. Types of Personal Data We Collect

4.1 Personal data refers to all information that relates directly or indirectly to you and/or your interactions with us. Sensitive personal data refers to any personal data as to your physical or mental health or condition, your political opinions, your religious beliefs or other beliefs of a similar nature, the commission or alleged commission by you of any offence, or any other personal data as may be determined by law from time to time.

4.2 The personal data collected by us may include but is not limited to the following:

(a) Information You Provide to Us Through the Platform

Account registration information: your name, email address, and phone number (optional).

Authentication data: your password (stored in hashed form) and two-factor authentication (2FA) configuration.

Profile information: your investment personality quiz results and preferences.

Trade journal data: stock names, tickers, investment thesis, financial metrics (PE ratio, target prices, position sizes), confidence levels, timeframes, and any free-text entries you submit through the 9-point checklist.

Uploaded files: chart screenshots and other supporting documents you upload to the Platform.

Quiz responses: your answers to lesson quizzes and your scores.

Calculator inputs: data you enter into the compound interest calculator and valuation calculator, and any saved scenarios.

Support requests: information you provide when using the WhatsApp message generator, including your name, email, and description of your inquiry.

Feedback and communications: any messages, feedback, or correspondence you send to us.

(b) Information Collected by Technology via the Platform

Your web browser type, Internet Protocol (IP) address, domain name, device type, operating system, and a date/time stamp for your visit.

Cookies and session data: small data files sent to your browser to maintain your authenticated session and provide a functional user experience. We use essential session cookies (which expire once you close your browser or log out) for authentication purposes. We do not use persistent tracking cookies or third-party advertising cookies.

Page access and usage information: which pages you visit, which features you use, and how you interact with the Platform, collected for the purpose of improving the Platform’s functionality and user experience.

(c) Information from Third-Party Service Providers

Technical and infrastructure data processed by our Third-Party Service Providers (Supabase and Vercel) in the course of hosting the Platform and providing authentication, database, and file storage services.

4.3 If the need arises, we will obtain explicit consent from you to process sensitive personal data. We may however process personal data without your consent in limited circumstances as permitted by law.

5. Use of Personal Data

5.1 We may collect and process personal data from you for one or more of the following purposes:

to verify your identity and facilitate the creation of and secure your account on the Platform;

to provide you with the Services and features available through the Platform;

to store, display, and manage your trade journal entries, quiz scores, calculator scenarios, personality quiz results, and uploaded files;

to send you administrative notifications, such as account verification emails, password reset emails, security alerts, and service updates;

to respond to your enquiries, feedback, and support requests;

to generate anonymised and aggregated data, reports, and statistics for the purposes of improving the Platform, creating educational content, and conducting internal research;

to improve and customise the quality of experience when you interact with the Platform;

to provide you with information on and/or to market our products, services, and educational programmes which may be of interest to you, subject to your right to opt out of such communications at any time;

to develop new features and improve our existing Services;

for our day-to-day operations and administrative purposes;

to detect and prevent fraudulent activity and to maintain the security of the Platform;

to comply with legal and regulatory requirements, including any law, regulation, guideline, and/or relevant regulatory authority;

for such other purposes as may be directed or consented to by you; and

for all other purposes in relation to or incidental to the above.

6. Disclosure of Personal Data

6.1 We will process personal data for the purposes stated in Clause 5 above and may disclose your personal data to the following third parties:

personnel, employees, agents, coaches, trainers, and service providers of Savwee, to the extent reasonably necessary for the provision and maintenance of the Services;

our subsidiaries and affiliates within the Savwee Group, including but not limited to Savwee Research Sdn Bhd;

Third-Party Service Providers who assist us in operating the Platform, including Supabase (database, authentication, and file storage) and Vercel (web hosting and content delivery);

our auditors, legal advisors, and compliance professionals;

law enforcement agencies and government agencies to detect, prevent, or otherwise address fraud, security, or technical issues, or as required by applicable law;

any actual or proposed assignee or transferee of all or any part of our rights or obligations under any agreement between us and you; and/or

other parties, companies, organisations, or individuals outside Savwee when we obtain your consent to do so, subject at all times to any applicable laws.

6.2 We shall be entitled to retain all data and information supplied by you for the duration of your relationship with us and for such period as may be necessary to protect our interests as may be deemed necessary, or where otherwise required by law or relevant regulation.

6.3 We do not sell your personal data to any third party. We do not share your personal data with third-party advertisers.

7. Security of Personal Data

7.1 We undertake to store, protect, and process your personal data in a secure manner by maintaining physical, electronic, and procedural safeguards in compliance with the PDPA. Security measures we implement include:

Encryption in transit (TLS/SSL) for all data transmitted between your browser and the Platform.

Hashed passwords - your password is never stored in plain text.

Row-level security (RLS) policies in our database ensuring that each user can only access their own data.

Optional two-factor authentication (2FA) via TOTP authenticator applications.

Secure file storage with authenticated access controls for uploaded files.

7.2 However, you agree and acknowledge that no data transmission over the internet can be guaranteed to be completely secure. Despite the foregoing commitment to you, we cannot guarantee or warrant the security of any information you transmit to us, or to or from our Platform. All such transmission of information is carried out at your own risk. However, once we receive your transmission, we will make reasonable efforts to ensure its security in our systems.

8. Cookies

8.1 We use essential cookies to maintain your authenticated session on the Platform. These cookies are strictly necessary for the Platform to function and cannot be switched off in our systems.

8.2 We do not use third-party advertising cookies, tracking pixels, or behavioural advertising technologies. We do not serve advertisements on the Platform.

8.3 We may use basic analytics to understand how the Platform is used in aggregate (such as which pages are most visited and which features are most used). This data is collected in anonymised and aggregated form and is used solely to improve the Platform.

8.4 You may set your browser to block all cookies. However, it is important to note that if essential cookies are disabled, the Platform may not function properly, and you may not be able to log in or access your account.

9. Your Rights Under the PDPA

9.1 Under the PDPA (as amended by the Personal Data Protection (Amendment) Act 2024), you have the following rights:

Right of access: You may request access to your personal data held by us.

Right of correction: You may request that we correct any inaccurate, incomplete, or not up-to-date personal data.

Right to withdraw consent: You may withdraw your consent to the processing of your personal data at any time by closing your account or contacting us. Please note that withdrawal of consent may affect our ability to provide the Services to you.

Right to object to direct marketing: You may opt out of receiving promotional communications at any time by using the unsubscribe mechanism provided in such communications or by contacting us.

Right to data portability: You may request a copy of your personal data in a commonly used, machine-readable electronic format.

10. Limiting Processing

10.1 Whenever we send you any promotional information, we will include instructions on how to unsubscribe and a link to do so. If you do not wish to receive further information of a similar nature and/or any information of any kind from us, you may directly unsubscribe.

10.2 It is obligatory to provide certain personal data (such as your name, email address, and password) to enable us to create your account and provide you with the Platform’s Services. Should you decline to provide such obligatory personal data, we may not be able to create your account or provide you with the Services.

10.3 The provision of other personal data (such as trade journal entries, quiz responses, calculator inputs, and uploaded files) is voluntary. However, certain features of the Platform may not function or may be limited if you choose not to provide such data.

11. Data Retention

11.1 We retain your personal data for as long as your account is active, or as needed to provide you with the Platform’s Services.

11.2 If you delete your account, we will delete your personal data within thirty (30) days, except where retention is required by applicable law, regulation, or for legitimate business purposes such as resolving disputes, enforcing our Terms of Use, or preventing fraud.

11.3 Anonymised and aggregated data that does not identify you personally may be retained indefinitely for the purposes of improving the Platform and creating educational content.

12. Links to Third-Party Websites

12.1 Our Platform may contain links to websites or applications operated by third parties (“Third-Party Sites”), including brokerage platforms, video tutorials, and other external resources listed in our Resources Hub. We have no control over the Third-Party Sites and assume no responsibility for their content, privacy policies, or statements.

12.2 You should carefully review the privacy policy and terms and conditions that apply to any Third-Party Sites you access from the Platform. You agree to waive any claim against us with respect to the Third-Party Sites.

13. Transfer of Personal Data Outside Malaysia

13.1 It may be necessary for us to transfer your personal data outside Malaysia because our Third-Party Service Providers operate servers and infrastructure that may be located in countries outside Malaysia.

13.2 By using the Platform, you consent to us transferring your personal data outside Malaysia in these instances, in accordance with Section 129 of the PDPA. We shall take reasonable steps to ensure that any such overseas entities are contractually bound not to use your personal data for any reason other than to provide the services they are contracted by us to provide and to adequately safeguard your personal data.

14. Data Breach Notification

14.1 In accordance with the PDPA (as amended), in the event we become aware of a personal data breach that affects your personal data, we will notify the Personal Data Protection Commissioner as soon as practicable.

14.2 Where a data breach is likely to cause significant harm to you, we will take reasonable steps to notify you of the breach and the measures we are taking to address it.

15. Changes to This Privacy Policy

15.1 We reserve the right at any time and at our sole discretion to revise, change, alter, or vary the contents of this Privacy Policy. The updated Privacy Policy will be posted on the Platform with a new effective date.

15.2 The continued use of the Platform following any such revision shall constitute your acceptance of, and agreement to be bound by, such changes.

By creating an account on the Savwee Student Hub, you acknowledge that you have read, understood, and consent to the collection, use, and processing of your personal data as described in this Privacy Policy.