This Personal Data Protection Act Policy (“PDPA Policy”) explains how SERVEFORU HOST INTEGRATED, operating the Interdata Networks brand (“Interdata Networks”, “we”, “our”, or “us”), processes personal data in connection with commercial transactions and our hosting, virtual-server, proxy, VPN, and related services.
This policy is intended to support compliance with the Personal Data Protection Act 2010 of Malaysia, as amended, and applicable regulations, standards, circulars, and guidelines.
1. Scope
This policy applies to personal data processed through Interdata Networks websites and client areas, account registration and billing, payment and fraud review, hosting and virtual-server services, proxy and VPN services, support systems, abuse and security investigations, marketing communications, and service providers acting for Interdata Networks.
2. Interdata Networks’ Role
Interdata Networks generally acts as a data controller for customer account information, billing and transaction information, support records, KYC and verification information, service and security metadata, and proxy connection metadata processed for authentication, billing, security, and abuse prevention.
Interdata Networks may act as a data processor where we process personal data solely on a customer’s documented instructions as part of a particular service.
Customers remain responsible for determining whether their own use of Interdata Networks services makes them a data controller or data processor.
3. Personal Data Processed
Personal data may include:
- identity and contact details;
- business and billing details;
- account credentials and identifiers;
- IP addresses and device information;
- payment and transaction records;
- hosting and service configurations;
- proxy source IPs, exit IPs, timestamps, and connection metadata;
- destination IPs, ports, and hostnames where technically recorded;
- bandwidth and usage records;
- support communications;
- KYC and verification documents;
- fraud, abuse, and security records;
- lawful-request and dispute records.
4. Purposes of Processing
Personal data may be processed for account registration, order acceptance, provisioning, billing, payment collection, authentication, access control, service operation, support, proxy bandwidth metering, fraud detection, abuse prevention, network and IP-reputation protection, security monitoring, KYC review, complaint investigation, customer communication, legal and accounting compliance, legal claims, service improvement, and capacity planning.
5. Notice and Choice
Interdata Networks provides notice through this PDPA Policy, our Privacy Policy, contractual terms, service descriptions, and notices presented during collection.
Where processing is optional, you may choose whether to provide the information. Where information is necessary to provide or protect a service, refusing or withdrawing it may prevent Interdata Networks from accepting an order or continuing the service.
6. Consent and Other Permitted Processing
Where consent is required, Interdata Networks may request consent through an account form, checkbox, written communication, or another appropriate method.
Interdata Networks may process personal data without separate consent where processing is otherwise permitted or required by applicable law, including where necessary to perform a contract, comply with legal obligations, prevent or detect fraud, protect security, respond to an emergency, administer justice, or establish and defend legal rights.
7. Disclosure
Interdata Networks may disclose personal data to payment processors and financial institutions, domain registrars and registries, datacentres and upstream networks, proxy and infrastructure suppliers, security and monitoring providers, identity-verification and fraud-prevention providers, professional advisers, contractors, courts, regulators, and enforcement authorities where reasonably necessary or legally permitted.
Interdata Networks does not sell personal data.
8. Data Processors and Vendors
Where a vendor processes personal data for Interdata Networks, we will take reasonable steps to require the vendor to process data only for authorised purposes, apply appropriate security controls, limit access, notify Interdata Networks of relevant incidents, and comply with applicable data-protection obligations.
9. Proxy Data
Proxy service operation may require Interdata Networks to process account identifiers, authentication identifiers, customer source IP addresses, assigned gateway and exit IP addresses, timestamps, destination IPs, ports and hostnames where technically available, bandwidth totals, connection results, and abuse or security indicators.
Interdata Networks does not routinely decrypt customer TLS communications. Proxy data is retained only for as long as reasonably necessary for service operation, billing, security, investigation, legal compliance, and dispute handling.
10. Security Principle
Interdata Networks uses reasonable measures to protect personal data from loss, misuse, alteration, unauthorised access, and unauthorised disclosure. Controls may include access restriction, authentication, encryption, logging, network security, backups, monitoring, staff confidentiality, incident response, and vendor due diligence.
11. Retention Principle
Personal data is retained only for as long as reasonably necessary for the purpose for which it was collected or another lawful purpose.
Retention periods may be extended for tax and accounting obligations, active services, payment disputes, fraud prevention, security incidents, abuse complaints, litigation, regulatory investigations, and legal holds.
12. Data Integrity
Customers must provide accurate and current personal data and update it promptly when it changes. Interdata Networks may request re-verification where information appears inaccurate, outdated, or inconsistent.
13. Access and Correction
Subject to applicable law and reasonable identity verification, you may request access to personal data held about you and correction of inaccurate or incomplete information.
Interdata Networks may charge a lawful processing fee or decline a request where permitted by law.
14. Withdrawal of Consent
Where processing is based on consent, you may withdraw that consent by contacting Interdata Networks. Withdrawal does not affect processing already lawfully completed.
Interdata Networks may be unable to continue a service where the withdrawn information is necessary for authentication, billing, fraud prevention, security, or legal compliance.
15. Direct Marketing
You may opt out of promotional messages by using the unsubscribe mechanism or contacting Interdata Networks.
Operational, billing, security, abuse, and legal notices are not promotional messages and may continue while your account or relevant obligations remain active.
16. Data Portability
Where required by Malaysian law and technically feasible, you may request transmission of eligible personal data in a commonly used machine-readable format.
Portability does not require Interdata Networks to disclose security-sensitive information, confidential business information, or information relating to another person.
17. Cross-Border Transfers
Personal data may be processed outside Malaysia where Interdata Networks uses international datacentres, proxy locations, payment processors, software suppliers, or other providers.
Interdata Networks will take reasonable steps to ensure that cross-border transfers are supported by safeguards recognised under applicable Malaysian law.
18. Personal Data Breach Notification
Interdata Networks maintains procedures for identifying, assessing, and responding to personal-data breaches.
Where notification requirements are met, Interdata Networks will notify the Personal Data Protection Commissioner and affected data subjects within the period required by applicable law.
Customers acting as data controllers must promptly notify Interdata Networks of a breach affecting data processed through Interdata Networks services where our assistance may be required.
19. Data Protection Officer
Where Interdata Networks is required by law to appoint a Data Protection Officer, Interdata Networks will maintain the appointment and make an appropriate business contact channel available.
Until a separate DPO channel is published, PDPA enquiries should be submitted through the official Interdata Networks support system and marked “PDPA / Data Protection Request”.
20. Automated Monitoring and Decisions
Interdata Networks may use automated security and risk systems to detect fraud, suspicious payments, account takeover, abnormal proxy activity, spam, attacks, and policy violations.
A system-generated risk indicator may cause a temporary restriction or manual review. Where required by applicable law, a customer may request appropriate human review of a significant automated decision.
21. Customer Obligations
Customers using Interdata Networks services to process personal data must have a lawful basis, provide required privacy notices, honour applicable rights requests, secure credentials and systems, avoid unnecessary collection, notify Interdata Networks promptly of relevant security incidents, and comply with applicable data-protection law.
22. Requests and Complaints
A request should include the requester’s full name, Interdata Networks account email, the nature of the request, the information or service concerned, and evidence reasonably required to verify identity.
Requests should be submitted through the official Interdata Networks client area or support system.
23. Policy Updates
Interdata Networks may amend this policy to reflect changes in law, guidance, technology, or service operation. Material changes will be published using a reasonable notice method.
24. Governing Law and Contact
This policy is governed by Malaysian law.
INTERDATA NETWORKS / SERVEFORU HOST INTEGRATED
Support: [email protected]
Address: No. 58, Persiaran Cempaka Sari 48, Taman Cempaka, 31400 Ipoh, Perak, Malaysia