Privacy Policy
Last updated October 2026
This policy describes what we collect, why, and the choices you have under the Malaysian Personal Data Protection Act 2010 (PDPA). Winbox Ultimate Property Management is the data user for the information described here.
1. Who we are
We look after residential property in Klang, Petaling Jaya, Cheras, and Kuala Lumpur. Contact: contact@wboxultimate.com or WhatsApp +6011 2555 8401. Address: Level 23, Menara TA One, 22 Jalan P. Ramlee, 50250 Kuala Lumpur.
2. What we collect
From an owner: name, phone number, email, the property address, details of the unit and tenancy, and whatever else you send so we can reply or manage the property. From a tenant or applicant, once we are appointed: identity and contact details, information you ask us to check, and the tenancy record. This site does not run advertising cookies and we do not sell browsing profiles. A host may keep ordinary server logs, such as an IP address, to keep the site working.
3. Why we use it
To answer your enquiry, to prepare a proposal, and, if you appoint us, to perform the management agreement: finding a tenant, collecting rent, arranging repairs, and sending the monthly statement. Also to keep records the law requires and to establish or defend a legal claim. We do not use your details for third-party advertising and we do not sell them.
4. WhatsApp and email
WhatsApp and email are provided by other companies. Their terms also apply. Do not send passwords or full card numbers. We keep the thread so approvals stay in one place. You may ask us to continue by email instead.
5. Who we share it with
Contractors who need the address and the fault in order to quote or repair. A bank or payment service, only as needed to move rent to the owner. Professional advisers if a dispute requires them. A government authority if the law requires it. We do not share owner or tenant lists with other agencies for their marketing.
6. How long we keep it
Enquiry notes that do not become a client file are kept only as long as needed to reply and for a short business record. Client and tenancy records are kept for the life of the agreement and for as long afterwards as Malaysian law, tax practice, or a possible claim requires.
7. Security and your rights
Access to client files is limited to people who need them for the work. Under the PDPA you may ask for access to personal data we hold about you and ask us to correct it if it is wrong. You may withdraw consent where processing is based on consent. Write to the email or WhatsApp above. We may need to confirm it is you. You may also complain to the Personal Data Protection Commissioner of Malaysia.
8. Cookies, links, and children
This site does not set advertising or analytics cookies. A link to WhatsApp, Google Maps, or another site is governed by that site once you leave. The service is for adult owners and for tenants who can enter a tenancy. We do not knowingly collect personal data from children.
9. Changes
We may update this policy by posting a new version on this page with a new date. A change does not reduce rights you already have under the PDPA.