This Privacy Policy explains how PLATTER SDN. BHD. (we, us, or our) collects, uses, shares, and protects personal information in connection with MeCo, including its non custodial wallet, event platform, websites, applications, and related services (Services). It should be read with the MeCo Terms of Service. This is a draft and identifies matters requiring confirmation before publication.

1. Non Custodial Wallet

MeCo is a non custodial wallet. We do not collect, store, possess, or have access to your private keys, recovery phrase, or digital assets. Public blockchain information, including wallet addresses and transaction data, may be visible on public networks and is not information we control or can delete from a blockchain.

2. Information We Collect

Information you provide

We may collect your email address; optional X or other social media handle; responses to event registration questions; support communications; and other information you choose to submit. Event registration questions may request additional information selected by an organizer. Do not submit sensitive personal information unless the event page expressly requests it and an appropriate notice is provided.

Event participation information

We may collect or generate registration status, attendance and check-in records, stamp mission completion, participation in specified event content or activities, ticket status, payment status, reward eligibility and fulfillment records, and associated timestamps. The categories collected depend on the event and features you use.

Wallet and blockchain information

We may store a wallet address you provide or connect, including where needed for event ticket delivery, payment processing, reward fulfillment, or displaying wallet-related features. We may obtain publicly available blockchain data such as addresses, transaction identifiers, amounts, timestamps, token balances, and network information to provide wallet functions. A wallet address may be personal information where it can be linked to you or your activity.

Technical and usage information

We may automatically collect device identifiers, IP address, device and browser type, operating system, app version, log data, crash reports, and information about how you use the Services. We may use cookies, SDKs, or similar technologies on web and app surfaces.

3. How We Use Information

1) provide, operate, secure, and maintain the wallet and event platform;

2) process event registration, attendance, mission participation, tickets, payments, and rewards;

3) respond to support requests and communicate about registrations, service changes, and security matters;

4) analyze performance and improve features, usability, and reliability;

5) prevent fraud, abuse, and security incidents;

6) comply with legal obligations, enforce our terms, and protect rights and safety.

4. Analytics and Similar Technologies

We may use Firebase, Google Analytics through Google Tag Manager, Microsoft Clarity, and similar providers for infrastructure, analytics, crash reporting, and usability analysis. These providers may collect technical and usage information using cookies, SDKs, session recordings, heatmaps, or similar tools. We will configure and disclose these tools, consent choices, and regional restrictions as required by applicable law. They do not receive your private keys or recovery phrase from us.

5. How We Share Information

We may share information as follows:

1) Service providers that process information on our behalf, including Amazon Web Services (AWS) for hosting or database infrastructure and Firebase for application infrastructure, analytics, performance monitoring, crash reporting, or related functions, subject to appropriate contractual safeguards.

2) We do not disclose event registration, attendance, stamp-mission, participation, ticket, payment, reward, or activity records to event organizers, booths, sponsors, or other event recipients.

3) Blockchain networks and wallet recipients when you initiate or authorize a transaction or choose a wallet-connected feature. Public blockchain data may be permanently visible to others.

4) Professional advisers, authorities, or other parties where required by law or reasonably necessary to protect rights, safety, security, or prevent fraud.

5) Parties to a corporate transaction, such as a merger, financing, acquisition, reorganization, or sale of assets, subject to applicable law.

6. Data Retention

We retain personal information only as long as needed for the purposes described in this Policy, including service delivery, event administration, legal compliance, dispute resolution, and security. Public blockchain data cannot be deleted by us.

7. Security

We use reasonable technical and organizational measures designed to protect personal information. No security measure is perfect, and we cannot guarantee absolute security. You are responsible for keeping your device and wallet credentials secure; we will never ask you for your recovery phrase.

8. Your Privacy Rights

Depending on your location, you may have rights to request access, correction, deletion, portability, restriction, objection, or withdrawal of consent. To make a request, contact us using the details below. We may need to verify your identity and may retain or decline information where permitted or required by law. We cannot alter or delete public blockchain records. You may also have a right to complain to a relevant data protection authority.

9. International Transfers

We use AWS and Firebase to provide the Services. These providers may process or store personal information outside Malaysia, depending on the services and infrastructure used. We take reasonable steps and implement appropriate contractual, technical, and organizational safeguards for cross-border processing, as required by applicable law.

10. Children

We do not knowingly collect personal information from children in violation of applicable law. If you believe that a child has provided us with personal information, please contact us.

11. Changes to This Policy

We may update this Policy from time to time. We will post the updated version, revise the Last Updated date, and provide additional notice where required by law. Your continued use after the effective date is subject to the updated Policy to the extent permitted by law.

12. Contact

For privacy questions or requests, contact developer@mecowallet.com.