Version 31 October 2026-v2 · Secure registration and payout details

Personal Data Protection Notice / Notis Perlindungan Data Peribadi

Secure online registration is open. Registration details are sent to MERCY’s secure account service only when you submit the form. Payout details are requested separately inside the authenticated affiliate dashboard. Do not share passwords, OTPs or card details. Send eligibility documents only through the separate authenticated community-access form.
Pendaftaran dalam talian dibuka. Maklumat pendaftaran dihantar kepada perkhidmatan akaun MERCY apabila anda menghantar borang. Butiran bayaran komisen hanya diminta melalui papan pemuka affiliate yang memerlukan log masuk.

1. Data controller / Pengawal data

MERCY Series Global (site-published SSM registration 202603256493 (TR0350191-X)). Privacy contact: shahir@mercyseries.com. Additional statutory privacy contact and address details will be checked and published before account activation.

2. Data collected / Data dikumpulkan

To create and administer self-service affiliate accounts: full name, verified Google account identifier, email, contact/WhatsApp number, country/region, proposed marketing channel, an optional audience description, age-18 declaration, terms/privacy acknowledgement and optional separate marketing consent. Technical abuse-prevention logs (for example request timestamps or IP metadata) may be necessary for security. No bank account, IC/passport number, health data or payment card details are requested on this page. The authenticated payout form collects the payout account holder’s name and either a DuitNow identifier or bank name and account number. Dashboard summaries mask the destination. These details are used for commission payment and are not included in public affiliate links or customer-visible coupon information.

Untuk menilai permohonan: nama penuh, e-mel, nombor telefon, lokasi, saluran promosi, penerangan pilihan, pengesahan umur dan persetujuan berkenaan terma/notis. Maklumat akaun bank dan dokumen pengenalan tidak diminta melalui borang ini.

2A. Private community-benefit evidence / Bukti kelayakan komuniti

The separate authenticated community-access form collects a verified account/email, applicant or cardholder name, relationship/authority declaration, application type, explicit proof-processing consent and submitted evidence. OKU card evidence may reveal sensitive disability information; submit it only with the cardholder’s explicit consent or lawful guardian authority. You may redact unrelated MyKad details, address, diagnosis and barcode while retaining the cardholder name and JKM issuer needed for review. We do not ask for MyGOV passwords, selfies, medical reports, children’s photographs or student lists.

Institution applications collect the registered institution name, registration/authorisation number, official link, operating-evidence date, authorised representative details and two supporting documents. Proof is reviewed privately to determine eligibility, detect duplicate claims and administer free access or enhanced commissions. File checks do not authenticate a government record. Raw documents are encrypted, restricted to authorised reviewers and subject to a 30-day proof-access expiry. Daily cleanup removes expired files. They are not included in public links, sent to the AI chatbot or used for marketing.

After document deletion, we retain limited application and decision records, consent/authority records, dates and anti-duplicate fingerprints as needed to administer the benefit and prevent repeat claims. The verified applicant can see their own outcome. Approved free app copies are emailed to the verified account; institution payouts require the verified institution’s bank account. For access, correction, withdrawal of proof-processing consent, deletion requests or a review of a decision, contact the privacy address below. Necessary financial and anti-fraud records may need to be retained.

Borang kelayakan komuniti yang memerlukan log masuk mengumpulkan bukti OKU atau institusi secara peribadi dengan persetujuan nyata dan pengesahan kuasa pemohon. Dokumen disulitkan, hanya boleh dilihat penyemak yang dibenarkan dan aksesnya tamat selepas 30 hari; pembersihan harian memadamkan fail yang telah tamat tempoh. Tutup maklumat peribadi yang tidak berkaitan; jangan hantar kata laluan MyGOV, laporan perubatan, foto kanak-kanak atau senarai pelajar. Hubungi MERCY untuk pembetulan, penarikan persetujuan atau semakan keputusan.

2A(i). UiTM Faculty of Pharmacy evidence

UiTM Pharmacy benefit applications collect your own name, verified account/email, student or staff role, faculty selection, optional current-evidence date, consent and authority declaration, plus one or two student / staff cards or other current official documents. We use this evidence to privately verify your Faculty of Pharmacy affiliation and active status, set a review expiry and administer the enhanced commission benefit. Keep your name, issuer, faculty and active validity visible; cover unrelated MyKad number, address, barcode and payment information. No portal password or academic results are required.

The same encrypted storage, authorised reviewer restriction, 30-day proof-access expiry and daily deletion process apply. Limited application decisions, consent, review dates and anti-duplicate fingerprints may remain for benefit administration and fraud prevention. Your proof is not public, sent to the chatbot or used for marketing.

2B. Free affiliate app access

We use the verified affiliate account identifier and registered email to assign one free personal app serial, administer its affiliate-version licence and provide sign-in and requested delivery messages. Your own authenticated dashboard displays this private serial. The serial is separate from your public affiliate ID and coupons; it is not included in public sales links. Opening the free copy may save its serial on your device for sign-in. App access remains subject to the stated device controls. We do not require a new purchase or eligibility-document upload for the standard affiliate free copy.

3. Purpose / Tujuan

We intend to use the data to automatically check legal eligibility, activate accounts after secure self-registration, prevent fraud, issue unique affiliate identifiers and individually requested account-owned coupon codes, attribute eligible purchases, administer commissions and payouts, and comply with law. Marketing messages require a separate optional choice. We will not publish applicants' private details or send activation serials to affiliates.

Data bertujuan untuk penilaian kelayakan, komunikasi keputusan, keselamatan, pengurusan pautan dan kupon, rekod komisen dan kewajipan undang-undang. Mesej pemasaran memerlukan pilihan persetujuan berasingan.

4. Disclosure and service providers / Perkongsian

Access is restricted to authorised programme administrators and service providers necessary for secure hosting, communications, fraud checking, payments and recordkeeping. Where personal data crosses borders, appropriate legal safeguards and transparency will be required. Data is not publicly published and is not sold to advertisers.

5. Retention and security / Tempoh simpanan dan keselamatan

We will retain application and financial records only for a documented purpose and legal retention period; different retention periods may apply to rejected applications versus completed payments. Security controls must include encrypted transport, limited access, audit trails, safe deletion and incident response. Access to payout destinations is restricted to the signed-in account and authorised payout administrators; public responses display only masked details.

6. Your rights / Hak anda

You may contact shahir@mercyseries.com to request access to, correction of, or other legally available controls over your personal data, or to withdraw optional marketing consent. Some financial records may need to be kept for legal compliance.

Anda boleh menghubungi alamat e-mel di atas untuk memohon akses, pembetulan atau hak lain yang dibenarkan oleh undang-undang, termasuk menarik balik persetujuan pemasaran pilihan. Sesetengah rekod kewangan tertakluk pada kewajipan simpanan undang-undang.

7. Questions / Pertanyaan

Read about your rights under Malaysia's Personal Data Protection Act 2010 (Act 709) and amendments. Contact us at shahir@mercyseries.com for programme privacy questions.

KKM staff proof review

Applicants may upload proof privately to request the KKM staff benefit. We use the proof, verified account email, applicant name and review outcome only to assess eligibility, administer the benefit, prevent duplicate claims and manage related enquiries. Proof is encrypted, restricted to authorised reviewers and excluded from the AI chatbot. Proof access expires after 30 days; daily cleanup removes expired files. Support tickets are separate; upload eligibility proof only through the private application form.