隐私声明
最后更新：2026 年 10 月 29 日
W TALENT ACADEMY SDN. BHD.（公司注册号 202201009237 (1454934-D)，下称「我们」）经营 DuitLink 网站和 App（下称「本服务」）。本声明说明我们收集哪些个人资料、怎么用、给谁，以及你有哪些权利。
1. 我们收集的资料
| 类别 | 内容 | 来源 |
|---|
| 账号资料 | 姓名、邮箱、邀请码；密码由登录服务（Supabase）加密保管，我们看不到明文 | 你注册时填写 |
| 推广资料 | 头像（你上传的照片，或用 Google 登录时 Google 账号的头像；存之前缩成小方图并去掉照片里的拍摄地点等资料）、主要社交账号（平台和用户名，你自己填，我们不验证）、简介、推广渠道、你收藏在达人页面上的商品 | 你填写；Google 头像由 Google 提供 |
| 关于你 | 职业、年龄段（例如 25–34 岁），注册时必填，可在「账户」里改 | 你填写 |
| 收款资料 | 银行名称、户名、银行账号 | 你填写；加密保存，只有财务人员能查看，每次查看都会留下记录 |
| 推广和收入 | 你生成的推广链接和追踪编号；Shopee、Lazada 回传的订单（订单号、商品、时间、状态、佣金）；你的余额、提现和付款记录 | 系统产生、平台报表 |
| 使用记录 | 登录和重要操作的记录；服务器日志里可能有 IP 地址和浏览器类型 | 系统自动记录 |
平台报表不含买家的姓名或联络方式，我们也不收集。
2. 我们怎么用
审核会员资格；按你的职业和年龄段为你推荐更适合、更容易出单的商品（可能用 AI 工具分析，只用这两项和你的推广记录，不用于其他用途）；为你生成带追踪编号的推广链接；计算、确认和支付你的佣金；对账和防止作弊；寄确认信、重设密码等服务通知；处理你的查询；遵守法律要求。
我们不会把你的个人资料卖给任何人，也不会拿来投放广告。
3. 我们会给谁
- Shopee、Lazada：生成推广链接时，会把商品链接和你的追踪编号交给平台，平台据此回传订单。
- 服务商（只按我们的指示处理资料）：Supabase（登录和数据库，新加坡）、Google Cloud（网站和后台，新加坡）、Lark（寄系统邮件）。
- 银行：付款给你时。
- 法律要求，或为了保护你、我们或他人的权益时。
4. 资料存放在马来西亚以外
我们的服务器在新加坡。我们只选用有适当安全保护的服务商。
5. 保存多久
账号存在期间都会保存。你申请注销后，佣金、付款等财务记录按法律要求保留（公司账务记录至少 7 年）；其他资料在注销处理完成后删除或去除身份。
6. 安全
银行资料加密保存；员工按职务只能看到需要的资料；管理员登录要双重验证；重要操作都有记录。不过，任何网络传输都不能保证百分之百安全。
7. 你的权利
- 查阅、更正你的资料：大部分资料可以在 App 的「账户」里自己改。
- 撤回同意：撤回后可能无法继续使用本服务。
- 申请注销账号：在「账户 → 隐私与账户」申请。
- 联系我们：support@wtalent.my。
8. 年龄
本服务只供年满 18 岁的人使用。注册时选的年龄段从 18 岁起，未满 18 岁不能注册。
9. 声明更新
我们更新本声明时，会在 App 和网站上通知，并更新上面的日期。
Privacy Notice
Last updated: 29 October 2026
W TALENT ACADEMY SDN. BHD. (company no. 202201009237 (1454934-D), "we") operates the DuitLink website and app (the "Service"). This notice explains what personal data we collect, how we use it, who we share it with, and your rights.
1. Data we collect
| Category | What | Source |
|---|
| Account | Name, email, invite code. Your password is held, encrypted, by our sign-in provider (Supabase); we never see it in plain text | You, at sign-up |
| Promotion | Profile photo (one you upload, or your Google account photo if you sign in with Google; stored as a small square with location and other photo details removed), main social account (platform and username, self-declared and not verified), bio, promotion channels, products you save to your creator page | You; the Google photo comes from Google |
| About you | Occupation and age range (for example 25–34), required at sign-up and changeable in Account | You |
| Payout | Bank name, account holder, account number | You. Stored encrypted; only finance staff can view it, and every view is logged |
| Links and earnings | Affiliate links and tracking IDs you create; orders reported by Shopee and Lazada (order number, product, time, status, commission); your balance, withdrawals and payments | The Service and platform reports |
| Usage | Records of sign-ins and important actions; server logs may contain IP address and browser type | Automatically |
Platform reports do not contain buyers' names or contact details, and we do not collect them.
2. How we use it
To review membership; recommend products that suit you and are easier to sell, based on your occupation and age range (possibly analysed with AI tools, using only these two answers and your promotion records, for no other purpose); create affiliate links carrying your tracking ID; calculate, validate and pay your commission; reconcile accounts and prevent fraud; send service emails such as confirmations and password resets; answer your questions; and meet legal obligations.
We do not sell your personal data or use it for advertising.
3. Who we share it with
- Shopee and Lazada: when you create a link, the product link and your tracking ID go to the platform, which reports orders back.
- Service providers acting on our instructions: Supabase (sign-in and database, Singapore), Google Cloud (website and server, Singapore), Lark (service emails).
- Banks, when we pay you.
- When the law requires it, or to protect you, us or others.
4. Storage outside Malaysia
Our servers are in Singapore. We use only providers with appropriate security safeguards.
5. How long we keep it
For as long as your account exists. After you ask to close your account, financial records such as commissions and payments are kept as the law requires (at least 7 years for company accounting records); other data is deleted or de-identified once the closure is processed.
6. Security
Bank details are encrypted; staff see only what their role needs; administrators sign in with two-factor authentication; important actions are logged. No transmission over the internet is completely secure.
7. Your rights
You can access and correct your data (most of it in the app's Account page), withdraw consent (you may then be unable to use the Service), and ask to close your account (Account → Privacy and account). Contact us at support@wtalent.my.
8. Age
The Service is for people aged 18 or over. The age ranges offered at sign-up start at 18, so nobody younger can register.
9. Changes
We will announce updates in the app and on the website and change the date above.