Last updated: 23 September 2026 · Version 1.0
Who we are What we collect How we use it Consent Who we share it with How long we keep it Security Your rights Children Contact · 中文
1. Who we are
AOE Centre ("AOE Centre", "we", "us", "our") operates the website at aoecentre.org and its learning services, including the learner and teacher portals, the online store, the ambassador programme, and — for partner schools — the AOE attendance service. For the purpose of Malaysia's Personal Data Protection Act 2010 (PDPA), AOE Centre is the data user responsible for the personal data described here.
Registered name: AOE Centre — [registered business name / SSM registration number to be inserted]
Registered address: [business address to be inserted]
Contact: aoe4education@gmail.com · WhatsApp +60 11-5441 6881
2. What personal data we collect
We collect only what a service needs to work. Depending on how you use AOE Centre, that may include:
When you create an account
- Your name, email address and phone number.
- A password, which we store only as a one-way hash — we never see or keep the password itself.
- Whether you registered as a student or a teacher.
When you use the learning portal
- Your practice attempts, scores, daily streaks and the sets you have completed.
- Essays and written work you submit to the essay checker.
- A nickname and, if you choose to add them, a display name, school and year level for your profile and scoreboards.
- Friend connections and any classes you join.
- Sign-in records: the date, time, IP address and browser/device description of each sign-in, kept for security.
When you buy, refer or apply
- Order details: the subjects you order and any referral code used. Payment itself is arranged and confirmed by hand over WhatsApp — we do not collect or store card or bank-card numbers on this website.
- If you join the ambassador or partner programme: your application details, contact information, and any payout proof documents you or we upload (for example a bank transfer slip), stored in a private area outside the public website.
- Feedback, ratings and question reports you send us.
When you take the placement test
- The placement test form is submitted through a third-party form service (Web3Forms) so that we receive your answers and contact details by email. Please see that provider's own handling of data.
Attendance service (partner schools only)
- For schools that use the AOE attendance service, we process, on behalf of and under the instructions of the school, students' attendance records, card-tap times, guardians' names and contact numbers, and leave documents (which may include photographs of medical certificates). The school is the data controller for this data; AOE Centre processes it to provide the service.
Automatically
- A session cookie to keep you signed in, and a small amount of local storage in your browser to remember your theme and language. We do not use advertising or third-party tracking cookies.
- Basic technical data such as your IP address, used for security, rate-limiting and to keep the service running.
3. How we use your data
- To create and run your account and show you your progress.
- To deliver the subjects and services you have unlocked, and to mark practice and essays.
- To issue and validate access codes, process referrals and pay ambassadors.
- To keep the service secure — detecting misuse, limiting abusive traffic and investigating problems.
- To contact you about your account, your orders or your child's attendance, including by WhatsApp and email where you have given the relevant contact details.
- To improve our questions and materials using the feedback and reports you send.
We do not sell your personal data, and we do not use it for advertising.
4. Consent
By creating an account or submitting a form on AOE Centre, you consent to the processing of your personal data as described in this policy. Where the law requires it, we ask for your consent at the point of collection — for example, a tick-box when you register or when a parent confirms they have read how the attendance service uses their child's data. You may withdraw your consent at any time by contacting us (see Your rights); withdrawing consent may mean we can no longer provide part of the service.
5. Who we share it with
We share personal data only where it is necessary to run the service:
- Messaging and email providers — for example Meta's WhatsApp Business (Cloud API) and our email provider — to deliver the notices you have asked for.
- Our hosting provider, which stores the website and its database on secure servers.
- The form service (Web3Forms) for the placement test, as described above.
- Partner schools, in the case of the attendance service, receive only their own students' data.
- Authorities, where we are required to disclose data by law.
We do not transfer your data to any other third party for their own purposes.
6. How long we keep it
We keep personal data only as long as needed for the purpose it was collected, or as long as the law requires. Account and progress data is kept while your account is active. Payout proof documents are kept for a limited period for accounting and then removed. Sign-in logs are kept for 180 days for security, then deleted. When data is no longer needed, we delete or anonymise it. You may ask us to delete your account and its data at any time.
7. How we protect it
- Passwords are stored only as salted one-way hashes.
- The site is served over HTTPS.
- Sensitive files — receipts, payout slips, database backups and attendance documents — are stored in private areas that are not reachable from the public web, and are served only to the specific signed-in account they belong to.
- Access to admin functions is protected by a password, rate-limiting and access logging.
No system can be guaranteed perfectly secure, but we take reasonable steps to protect your data and to keep those steps up to date.
8. Your rights
Under the PDPA you have the right to:
- ask what personal data we hold about you and request a copy;
- ask us to correct data that is inaccurate or out of date;
- withdraw your consent and ask us to stop processing or to delete your data;
- limit how we use your data for certain purposes.
To exercise any of these, email aoe4education@gmail.com. We will respond within a reasonable time. For attendance data held on behalf of a school, please contact the school, which is the controller of that data.
9. Children's data
AOE Centre is used by school-age learners. Where a learner is a minor, we expect a parent or guardian to consent to the account and to the processing described here. For the attendance service, the school obtains the consent required from parents. If you believe a child's data has been collected without proper consent, contact us and we will resolve it.
10. Changes to this policy
We may update this policy from time to time. The "last updated" date at the top shows the current version. Significant changes will be highlighted on the website.
11. Contact us
Questions about this policy or your data: aoe4education@gmail.com, or WhatsApp +60 11-5441 6881. See also our Terms & Conditions.
中文
隐私政策
最后更新：2026 年 9 月 23 日 · 版本 1.0
1. 关于我们
AOE Centre（“本中心”、“我们”）运营 aoecentre.org 网站及其学习服务，包括学生与教师门户、网上商店、大使计划，以及为合作学校提供的 AOE 考勤服务。根据马来西亚《2010 年个人资料保护法令（PDPA）》，AOE Centre 是负责处理本政策所述个人资料的资料使用者。
注册名称：AOE Centre —〔待填入注册商号 / SSM 注册号码〕
注册地址：〔待填入营业地址〕
联系方式：aoe4education@gmail.com · WhatsApp +60 11-5441 6881
2. 我们收集哪些个人资料
我们只收集服务运作所必需的资料。视乎您如何使用本中心，可能包括：
注册账户时
- 您的姓名、电邮地址和电话号码。
- 密码——我们仅以不可逆的哈希形式存储，绝不保存密码原文。
- 您注册为学生或教师。
使用学习门户时
- 您的练习记录、分数、连续学习天数以及已完成的题组。
- 您提交给作文批改的作文与写作内容。
- 昵称，以及您自愿填写的显示名称、学校和年级。
- 好友关系和您加入的班级。
- 登录记录：每次登录的日期、时间、IP 地址及浏览器／设备说明，用于安全用途。
购买、推荐或申请时
- 订单内容：您所订购的科目及所用的推荐码。付款由人工透过 WhatsApp 安排与确认——本网站不收集或存储任何银行卡或信用卡号码。
- 若您加入大使或合作伙伴计划：您的申请资料、联系方式，以及上传的付款凭证（例如银行转账单据），存储于公开网站以外的私密区域。
- 您发送的反馈、评分和题目报告。
分级测试
- 分级测试表单透过第三方表单服务（Web3Forms）提交，我们借此以电邮接收您的答案与联系方式。相关处理请参阅该服务商的政策。
考勤服务（仅限合作学校）
- 对于使用 AOE 考勤服务的学校，我们依学校指示并代表学校处理学生的考勤记录、刷卡时间、监护人姓名与联系电话，以及请假文件（可能包含病假单照片）。此类资料的控制者为学校，AOE Centre 仅为提供服务而处理。
自动收集
- 用于保持登录状态的会话 Cookie，以及记住主题与语言偏好的少量浏览器本地存储。我们不使用广告或第三方追踪 Cookie。
- 基本技术资料，如 IP 地址，用于安全、限流及维持服务运作。
3. 我们如何使用资料
- 创建和运行您的账户，并向您展示学习进度。
- 提供您已解锁的科目与服务，并批改练习与作文。
- 发放和验证访问码、处理推荐并支付大使佣金。
- 维护服务安全——侦测滥用、限制恶意流量、调查问题。
- 就您的账户、订单或孩子的考勤与您联系，包括在您提供相关联系方式时透过 WhatsApp 和电邮。
- 根据您的反馈与报告改进题目与教材。
我们不会出售您的个人资料，也不会将其用于广告。
4. 同意
当您在本中心创建账户或提交表单时，即表示您同意按本政策处理您的个人资料。在法律要求时，我们会在收集当下征求您的同意——例如注册时的勾选框，或家长确认已阅读考勤服务如何使用其孩子资料。您可随时联系我们撤回同意（见“您的权利”）；撤回同意可能导致我们无法继续提供部分服务。
5. 我们与谁共享
仅在运行服务所必需时共享：
- 消息与电邮服务商——例如 Meta 的 WhatsApp Business（Cloud API）及我们的电邮服务商——用于发送您所要求的通知。
- 主机服务商，在安全服务器上存储网站及其数据库。
- 表单服务（Web3Forms），用于分级测试，如上所述。
- 合作学校（考勤服务）仅接收其本校学生的资料。
- 主管机关，在法律要求披露时。
我们不会为第三方自身目的向其转移您的资料。
6. 我们保存多久
我们仅在收集目的所需的期间，或法律要求的期间内保存个人资料。账户与进度资料在账户有效期间保存；付款凭证仅为会计目的保存有限期间后删除；登录日志仅为安全目的保存 180 天，之后删除。资料不再需要时，我们会删除或匿名化。您可随时要求删除账户及其资料。
7. 我们如何保护资料
- 密码仅以加盐的不可逆哈希存储。
- 网站以 HTTPS 传输。
- 敏感文件——收据、佣金单据、数据库备份及考勤文件——存储于公开网络无法访问的私密区域，且仅提供给其所属的已登录账户。
- 管理功能受密码、限流及访问记录保护。
没有任何系统能保证绝对安全，但我们采取合理措施保护您的资料并持续更新这些措施。
8. 您的权利
根据 PDPA，您有权：
- 查询我们持有关于您的哪些个人资料并索取副本；
- 要求更正不准确或过时的资料；
- 撤回同意并要求我们停止处理或删除您的资料；
- 限制我们将资料用于某些用途。
如需行使上述权利，请电邮 aoe4education@gmail.com，我们会在合理时间内回复。对于代表学校持有的考勤资料，请联系作为控制者的学校。
9. 儿童资料
本中心供学龄学习者使用。若学习者为未成年人，我们期望由其父母或监护人同意开设账户并同意本政策所述的处理。对于考勤服务，由学校取得家长所需的同意。若您认为某儿童的资料在未获适当同意下被收集，请联系我们，我们会予以处理。
10. 本政策的变更
我们可能不时更新本政策。页首的“最后更新”日期显示当前版本。重大变更将在网站上标示。
11. 联系我们
有关本政策或您资料的问题：aoe4education@gmail.com，或 WhatsApp +60 11-5441 6881。另见我们的条款与条件。