Privacy Notice

We collect information you choose to provide, including your name, email address, mobile number, nationality, preferred university, course, study level, intake, and any message you send us.

For security, we process limited technical information such as an IP address and browser identifier. We convert these into a one-way security fingerprint used for short-term abuse prevention; the raw IP address is not stored in the application-request table.

We use applicant information to respond to enquiries, recommend suitable study options, support admission planning, prevent abuse, maintain service reliability, and keep necessary business records. We will not sell applicant personal data.

Google Analytics remains disabled unless you select “Accept analytics.” If accepted, it helps us understand aggregate website usage. Advertising storage and personalization are disabled. You may change this choice at any time using “Analytics settings” in the footer. We also honor supported Global Privacy Control signals.

We use service providers to operate the website and process requests, including Supabase for database services, Resend for staff email notifications, and Google Analytics only after consent. These providers may process data in countries outside Malaysia and are expected to protect it under their contractual and legal obligations.

We retain personal data only for as long as reasonably necessary for the purposes described here, including responding to an application and meeting applicable record-keeping obligations. We use access controls, row-level database protections, bounded input validation, rate limiting, and encrypted network connections. No internet service can guarantee absolute security.

You may ask to access or correct your data, withdraw consent, object to optional analytics, or request deletion where applicable. Contact us at mynextadmission@gmail.com. We may need to verify your identity before completing a request.

Malaysian official guidance describes notice and choice, disclosure, security, retention, integrity, and access principles under the Personal Data Protection Act 2010 and its amendments. You can review the official principles.

Applicants under 16 should ask a parent or guardian to submit or approve an enquiry. If you believe a child submitted personal data without appropriate permission, contact us so we can review it.

We may update this notice when our services or legal obligations change. The date above shows the latest revision. See also our website terms.