Privacy Policy

1. Introduction

Sesame Mart is a brand operated by Aplikasi Kebun Sdn. Bhd. (“we”, “us”, or “our”). We operate unmanned convenience stores across Klang Valley, Malaysia. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit or use our stores.

By entering a Sesame Mart store, you agree to the practices described in this policy.

2. Data We Collect

We collect the following categories of personal data:

• Entry data — when you tap your bank card or scan a WhatsApp QR code to enter, we record the entry timestamp and the card or phone identifier used.
• Transaction data — items purchased, transaction amounts, payment method, and timestamps from our self-checkout POS system.
• CCTV footage — our AI-powered camera system records video footage of all activity inside and at the entrance of each store for security and loss prevention purposes.
• Device and access data — IP addresses and device identifiers if you interact with our digital systems.

3. How We Use Your Data

• To grant and manage store access.
• To process and record purchases.
• To monitor for theft, damage, and unauthorised access.
• To investigate and resolve disputes or incidents.
• To manage and optimise inventory restocking.
• To comply with legal obligations under Malaysian law.

4. CCTV and AI Surveillance

All Sesame Mart locations are monitored by our proprietary AI camera system. Footage is retained for a minimum of 30 days and may be retained longer in the event of an incident or active investigation. Footage is reviewed only by authorised personnel and, where required, shared with law enforcement.

5. Sharing Your Data

We do not sell your personal data. We may share it with:

• Payment processors — to facilitate card transactions.
• WhatsApp / Meta — when you use WhatsApp QR entry, subject to WhatsApp's own privacy terms.
• Law enforcement — where required by law or court order.
• Service providers — third parties who assist us in operating our stores, bound by confidentiality obligations.

6. Data Retention

We retain transaction and entry data for up to 24 months. CCTV footage is retained for a minimum of 30 days. You may request deletion of your personal data, subject to legal retention requirements, by contacting us.

7. Your Rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the right to:

• Access personal data we hold about you.
• Correct inaccurate or incomplete data.
• Withdraw consent for processing where consent is the legal basis.
• Request deletion of your data, subject to legal obligations.

To exercise any of these rights, contact us at privacy@sesamemart.com.

8. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. All data is transmitted over encrypted connections.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The effective date at the top of this page will reflect the latest revision. Continued use of our stores after changes constitutes acceptance of the updated policy.

10. Contact

For any privacy-related enquiries, contact:

Aplikasi Kebun Sdn. Bhd.
(202101033119 / 1433419-D)
privacy@sesamemart.com