Read Sippa terms and conditions Malaysia covering services, payments, subscriptions, privacy, PDPA, and user responsibilities across our platform.

LEGAL & COMPLIANCE

   •  Terms & Conditions
   •  Privacy Policy
   •  PDPA
   •  Cookies & Tracking


TERMS & CONDITIONS

Last Updated: 25 February 2026

Welcome to Sippa! By accessing, browsing, or using our website, mobile application, products, or services (collectively, the “Services”), you agree to be bound by these Terms of Use (“Terms”). Please read them carefully. If you do not agree with any part of these Terms, you must immediately cease using our Services. Sippa reserves the right to modify, update, or revise these Terms at any time. Your continued use of the Services constitutes acceptance of any such changes. These Terms apply to all Users, including but not limited to individual consumers, businesses, subscribers, and visitors accessing the platform in Malaysia or any other jurisdiction where Sippa may operate now or in the future.

 

1. Definitions

For clarity, the following definitions apply throughout these Terms:

“Services” – All products, subscriptions, features, add-ons, digital content, loyalty programs, promotions, contests, sweepstakes, in-store and online purchases, and other offerings provided by Sippa.

“User” – Any individual or entity accessing or using the Services.

“Content” – Any text, images, videos, reviews, comments, or other submissions uploaded or submitted by Users.

“Platform” – The Sippa website, mobile application, or other digital interfaces provided by Sippa.

“Digital Content” – Content provided via download, streaming, or electronic delivery, including e-books, media, educational materials, software, and interactive modules.

“Promotions” – Any discounts, vouchers, contests, sweepstakes, loyalty rewards, or other incentives offered by Sippa.

“Subscription” – A recurring access plan or service tier, including digital or physical products, features, or add-ons.

“DRM” – Digital Rights Management or technological measures used to protect digital content from unauthorized access, copying, or distribution.

“Credits” – Any digital or in-platform value issued by Sippa, including without limitation points, vouchers, gift cards, or any balance held in a wallet, account, or other stored-value system. Credits are non-cashable, non-transferable, and remain the property of Sippa unless otherwise specified, including any future in-platform credits or digital representations of value.

“Gift Cards” – Prepaid digital or physical cards issued by Sippa that can be redeemed for products or services on the Platform, subject to these Terms.

 

2. Eligibility

2.1. Users must be at least 18 years old or of the legal age in their jurisdiction to access or use the Services.

2.2. Minors may only use the Services with the prior consent of a parent or legal guardian, who agrees to these Terms on their behalf.

2.3. By accessing or using the Services, Users represent and warrant that they have the legal capacity to enter into these Terms.

2.4. While these Terms are drafted for Malaysia, Sippa may expand Services internationally. Users outside Malaysia must comply with local laws and regulations in addition to these Terms.

 

3. Orders, Payment, and Pricing

3.1. ORDER CONFIRMATION – Orders placed through the platform are confirmed via email or in-app notification. Ownership of goods or products transfers only upon full payment.

3.2. Pricing – Prices are displayed at the time of purchase. Sippa may modify prices at any time without prior notice, except where prohibited by law. All prices are subject to applicable taxes, duties, and shipping fees unless stated otherwise.

3.3. Payment Methods – Payments may be made via credit/debit cards, FPX (Financial Process Exchange), authorized e-wallets, approved payment gateways, or cash in-store.

3.4. Third-Party Payments – Sippa is not responsible for errors, delays, or failures caused by third-party payment providers.

3.5. Promotions and Discounts – Promotional offers may be subject to specific restrictions, expiry dates, or limited availability. Fraudulent or unauthorised use of promotions may result in account suspension or termination.

3.6. Taxes and Duties – Users are responsible for applicable taxes, customs duties, or import charges unless otherwise indicated at the time of purchase.

3.7. Payment Disputes – Users must notify Sippa promptly of any payment disputes. Liability for disputed transactions is capped at the amount of the individual transaction.

 

4. Shipping, Delivery, and In-Store Collection

4.1. Shipping Fees & Estimated Delivery – All fees, estimated delivery times, and collection options are displayed at checkout. Delivery times are estimates and not guaranteed.

4.2. Delivery Delays – Sippa is not liable for delays due to events beyond reasonable control, including weather, transport disruptions, pandemics, strikes, or third-party service failures.

4.3. In-Store Collection – Orders for in-store pickup must be collected within the specified timeframe. Failure to collect may result in order cancellation without refund.

4.4. Damaged or Lost Items – Users must notify Sippa immediately upon receipt of damaged, defective, or missing items. Resolution will follow the return and refund policy.

4.5. International Shipping – If Sippa expands services internationally, Users may be responsible for additional duties, taxes, or import regulations.

 

5. Returns, Refunds, and Cancellations

5.1. Returns – Items that are damaged, defective, or incorrect may be returned within three (3) days of receipt.

5.2. Refunds – Refunds follow Sippa’s return policy and may include processing fees. Refunds for digital content, add-ons, or promotions may be limited or non-refundable.

5.3. Cancellations – Orders may be cancelled prior to shipment or preparation. Users must contact customer service for cancellation requests.

5.4. Exceptions – Certain products, promotions, or digital content may be non-refundable, as specified at the time of purchase.

5.5. Chargebacks – Unauthorised chargebacks are considered a breach of these Terms and may result in account suspension, legal action, or liability for fees incurred.

 

6. Subscriptions, Auto-Renewals, and Add-On Features

6.1. Paid subscriptions are governed by separate subscription terms including eligibility, pricing, billing cycles, usage, and auto-renewal provisions.

6.2. Users may cancel subscriptions via the platform. Cancellations take effect at the end of the current billing period. No refunds will be issued for partial periods unless required by law.

6.3. Family or group subscriptions may require guardian consent for minors.

6.4. Add-ons or digital content may have separate terms. Sippa may modify, suspend, or discontinue add-ons at its discretion.

6.5. Auto-renewal notifications and reminders will be sent to Users. Users are responsible for ensuring up-to-date payment information.

6.6. Refunds for subscription cancellations will follow the specific subscription terms.

 

7. Loyalty, Referral, and Promotional Programs

7.1. Participation in any loyalty, referral, or promotional program is subject to the specific program terms provided at the time of enrolment or participation.

7.2. Credits issued under these programs are non-cashable, non-transferable, and remain the property of Sippa at all times.

7.3. Credits may expire if unused and may be modified, suspended, or canceled by Sippa at its sole discretion, with or without notice.

7.4. Any fraudulent, manipulative, unauthorised, or abusive activity — including artificial inflation, unauthorized claims, or violation of program rules — may result in suspension or termination of the User’s account, forfeiture of Credits, reversal of transactions, and potential legal action.

7.5. Users acknowledge and agree that participation in loyalty, referral, or promotional programs does not constitute a guarantee of discounts, monetary value, or entitlement to future rewards.

7.6. Sippa reserves the right to enforce program rules, reclaim or adjust Credits, and seek indemnification for any losses arising from misuse, fraud, or breach of program terms.

7.7. Sippa is not responsible or liable for technical errors, service interruptions, third-party failures, or changes to programs, including suspension, modification, or cancellation, and Users accept that no compensation is owed in such events.

 

8. Digital Content and DRM Protections

8.1. Users may access digital content for personal, non-commercial purposes only.

8.2. Content is non-transferable unless explicitly authorized.

8.3. Circumventing DRM, encryption, or other technological protections is strictly prohibited.

8.4. Sippa is not liable for errors, interruptions, or failures in accessing digital content.

8.5. Sippa may update, modify, or remove digital content at its discretion.

 

9. User Conduct and Prohibited Activities

9.1. Users must not: Violate applicable laws or third-party rights. Engage in harassment, threats, or offensive conduct. Attempt to access unauthorised areas of the Platform. Upload harmful, misleading, or illegal content. Use Services for unauthorised commercial purposes.

9.2. Breach of these rules may result in suspension, termination, or legal action.

9.3. Users agree to report any suspicious, harmful, or illegal activity to Sippa immediately.

 

10. User Content and License

10.1. By submitting content, Users grant Sippa a non-exclusive, worldwide, royalty-free license to use, reproduce, modify, distribute, and display such content in connection with the Services.

10.2. Users must not submit content that is false, misleading, offensive, defamatory, illegal, or infringes third-party rights.

10.3. Sippa may remove or restrict access to content violating these Terms.

10.4. Users retain copyright in their submissions, subject to the license granted to Sippa.

 

11. Intellectual Property

11.1. All content on the Platform, including software, text, graphics, logos, images, and media, is owned or licensed by Sippa Group Sdn Bhd.

11.2. Users may not copy, modify, distribute, transmit, display, or create derivative works without written consent.

11.3. Trademarks, service marks, and branding are protected under Malaysian and international intellectual property laws.

11.4. Any unauthorised use may result in civil and criminal penalties.

 

12. Privacy, Data Retention, Cookies, and Marketing

12.1. User data is collected, stored, and processed in accordance with Sippa’s Privacy Policy.

12.2. Users consent to the use of cookies and tracking technologies as described in the Cookie Notice.

12.3. Users consent to receive marketing communications unless they opt out.

12.4. Sippa may share user data with authorised partners (e.g., delivery providers, payment processors) but is not liable for misuse by third parties.

12.5. Personal data will be retained as required by law and operational necessity, and securely deleted when no longer needed.

12.6. Users have the right to access, correct, or request deletion of personal data, subject to applicable laws. Sippa processes personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia and, where applicable, may comply with international data protection laws.

12.7. Users accessing Services from jurisdictions outside Malaysia acknowledge and consent to the transfer, storage, and processing of personal data across borders in accordance with applicable data protection laws.

 

13. Warranty Disclaimer and Service Availability

13.1. Services are provided “as is” without warranties of any kind, express or implied.

13.2. Sippa does not guarantee uninterrupted or error-free access to the Platform.

13.3. Users acknowledge the inherent risks of digital services, including network outages or technical failures, and agree that Sippa is not responsible for such events.

13.4. No advice or information provided by Sippa or its affiliates constitutes a warranty.

 

14. Limitation of Liability, Indemnification, and Liability Cap

14.1. Transaction Cap – Sippa’s liability for any claim arising from the Services, including purchases, subscriptions, digital content, promotions, or Credits, is strictly limited to the amount of the genuine, verified individual transaction giving rise to the claim. Any artificially added, manipulated, duplicated, or fraudulent Credits are expressly excluded from this limitation.

14.2. Excluded Damages – Sippa is not liable for any indirect, incidental, consequential, punitive, or special damages, including but not limited to loss of revenue, profits, goodwill, data, or business opportunities, even if Sippa has been advised of the possibility of such damages.

14.3. Third-Party Content and Services – Sippa is not responsible for the actions, content, products, or services of third-party websites, integrations, payment providers, delivery partners, or other external services. Users engage with third-party services entirely at their own risk.

14.4. Indemnification – Users agree to indemnify, defend, and hold harmless Sippa Group Sdn Bhd, its affiliates, officers, directors, employees, and agents from and against any claims, liabilities, damages, losses, costs, or expenses (including reasonable legal fees) arising from: Violation of these Terms; Fraudulent, unauthorised, or artificial use of Services, including Credit manipulation or creation; User content submissions; Breach of any law or third-party rights; Misuse, abuse, or interference with the Platform; or Interaction with third-party partners, content, or service providers integrated with the Platform. Users must cooperate fully with Sippa in the defence of any claim and may not settle any claim without Sippa’s prior written consent.

14.5. Service Availability Disclaimer – While Sippa aims to provide uninterrupted and secure access to Services, it does not guarantee continuous availability, error-free operation, or that Services will meet User requirements. Sippa is not liable for downtime caused by cyberattacks, network failures, or events beyond reasonable control.

14.6. Credits and Rewards – Credits, loyalty points, vouchers, or other in-platform rewards are not equivalent to cash and remain the sole property of Sippa Group Sdn Bhd. Sippa may adjust, revoke, modify, or cancel such Credits at its discretion, with or without notice, without incurring liability. Misuse, fraud, or violation of program rules may result in forfeiture or reversal of Credits.

14.7. Survival – The obligations in this Section survive the termination, suspension, or expiration of the User’s account, subscription, or access to Services.

 

15. Force Majeure

15.1. Definition – Sippa shall not be liable for any failure or delay in performing obligations due to events beyond reasonable control, including natural disasters, pandemics, strikes, governmental actions, network failures, cyberattacks, or failures of third-party providers.

15.2. Effect on Obligations – During a Force Majeure Event, Sippa may suspend or delay performance without liability. Sippa shall use reasonable efforts to resume normal operations as soon as practicable.

15.3. Notification – Where practicable, Sippa will notify Users of Force Majeure Events via the website, app, or email.

15.4. Survival – The provisions of this Section survive termination or expiration of the User’s account or access to Services.

 

16. Third-Party Services and Integrations

16.1. The Services may include integrations, APIs, payment gateways, or tools provided by third parties. These are provided for User convenience and do not constitute endorsement by Sippa.

16.2. Users acknowledge that interactions with third-party services are at their own risk. Sippa does not guarantee availability, accuracy, or performance of any third-party service.

16.3. Sippa is not responsible for errors, failures, or data breaches occurring via third-party services.

16.4. Third-party services may be modified, suspended, or removed at any time without notice.

16.5. Users agree to indemnify Sippa from any claims arising from their interaction with third-party services.

16.6. The provisions of this Section survive termination or expiration of the User’s account or access to Services.

 

17. Governing Law and Dispute Resolution

17.1. Governing Law – These Terms shall be governed by the laws of Malaysia, without regard to conflict of laws principles.

17.2. Negotiation – In the event of any dispute, the parties shall first attempt resolution through good-faith written negotiation.

17.3. Arbitration – If negotiation fails within 30 days of written notice, the dispute shall be referred to arbitration under the rules of the Asian International Arbitration Centre (AIAC) in Kuala Lumpur. Arbitration shall be conducted in English by a single arbitrator. The decision is final and binding, and judgment may be entered in any court of competent jurisdiction. Each party bears its own costs unless directed otherwise by the arbitrator.

17.4. Equitable Relief – Sippa reserves the right to seek injunctive or equitable relief in any court to protect intellectual property, confidential information, or prevent fraudulent use of the Services.

17.5. Survival – Provisions of this Section survive termination of any User account or access to the Services.

 

18. Termination

18.1. Suspension or Termination by Sippa – Sippa may suspend or terminate a User account at its sole discretion for violation of these Terms, illegal or fraudulent activity, non-payment, chargebacks, or abuse of Services.

18.2. User Obligations upon Termination – Upon termination, Users must immediately cease use of all Services, delete any proprietary materials provided by Sippa, and settle any outstanding balances.

18.3. Effect on Rights and Liabilities – Termination does not affect accrued rights or liabilities of either party prior to termination.

18.4. Reinstatement – Terminated accounts may only be reinstated at Sippa’s sole discretion, subject to resolution of the breach and payment of any outstanding fees.

18.5. Notification – Sippa will use reasonable efforts to notify Users of termination via email or in-app notification.

18.6. Survival – Provisions regarding liability, indemnification, dispute resolution, intellectual property, and confidentiality survive termination.

 

19. Promotions, Contests, and Sweepstakes

19.1. Participation in any Promotion is subject to the specific rules provided at the time of enrolment. Users must comply with these Terms and any additional Promotion rules. Promotions are void where prohibited by law.

19.2. Any attempt to manipulate, artificially inflate, or fraudulently claim rewards constitutes a breach of these Terms. Sippa may investigate suspicious activity and take appropriate action including account suspension, termination, or legal proceedings. Credits or prizes obtained fraudulently are forfeited and may be reclaimed by Sippa.

19.3. Sippa is not liable for technical failures, lost entries, or errors caused by third-party providers.

19.4. Sippa may modify, suspend, or cancel any Promotion at any time without notice or compensation to Users.

19.5. Users are solely responsible for reporting and paying any applicable taxes on prizes or rewards received.

19.6. Sippa’s liability for any claim arising from a Promotion is strictly limited to the value of the individual prize or reward. Sippa is not liable for indirect, incidental, or consequential damages arising from participation.

19.7. Disputes relating to Promotions shall follow the Governing Law and Dispute Resolution provisions in Section 17.

20. Entire Agreement

20.1. These Terms of Use, together with Sippa’s Privacy Policy and any other policies, rules, or program terms referenced herein, constitute the entire agreement between Users and Sippa Group Sdn Bhd regarding the Services. This Agreement supersedes any prior agreements, communications, or representations, whether written, oral, or implied.

20.2. Users acknowledge they have not relied on any statement or representation outside this Agreement in deciding to use the Services.

20.3. Any subscribed services, add-ons, loyalty programs, promotions, or Credits are subject to their respective terms, which form an integral part of this Agreement. In case of conflict, the specific terms for that service or promotion shall prevail solely for that product or program.

20.4. Sippa may amend this Agreement at any time. Continued use of Services after amendments constitutes acceptance. Users are responsible for regularly reviewing these Terms.

20.5. No failure or delay by Sippa in exercising any right shall constitute a waiver. Any waiver must be explicitly provided in writing by Sippa.

20.6. This Agreement is binding upon Users, their heirs, successors, and permitted assigns. Sippa may assign its rights and obligations to any affiliate or successor without consent, provided such assignment does not materially reduce Users’ rights.

 

21. Future Expansion

21.1. These Terms are currently tailored for Malaysia. Sippa may expand internationally.

21.2. If Services become available in other jurisdictions, additional terms or policies may apply.

21.3. Users accessing Services outside Malaysia must comply with local laws, including taxation, data protection, and consumer protection regulations.

21.4. Sippa is not responsible for non-compliance by Users with local laws outside Malaysia.

 

22. Data Security and User Responsibilities

22.1. Users are responsible for maintaining the confidentiality of their account credentials.

22.2. Users must notify Sippa immediately of any unauthorised access or suspicious activity.

22.3. Sippa implements reasonable security measures to protect User data.

22.4. Users acknowledge that no system is completely secure and that Sippa does not guarantee absolute protection against cyber threats or data breaches.

 

23. Compliance with Laws and Export Controls

23.1. Users must comply with all applicable local, national, and international laws while using the Services.

23.2. Users may not access, download, or distribute Services or digital content in violation of Malaysian law or international regulations.

23.3. Digital content or technology provided by Sippa may be subject to export control laws. Users agree not to circumvent such laws.

 

24. Modifications and Updates to Services

24.1. Sippa may update, modify, or discontinue Services, features, or content at any time.

24.2. Changes to the platform or Services do not entitle Users to compensation unless required by law.

24.3. Users will be notified of significant changes via email, in-app notification, or platform announcements.

24.4. Continued use of Services after modifications constitutes acceptance of the updated terms.

 

25. User Feedback

25.1. Users may provide feedback, suggestions, or comments regarding Services.

25.2. By submitting feedback, Users grant Sippa a perpetual, worldwide, royalty-free license to use, modify, reproduce, or implement such feedback in any way.

25.3. Feedback may be used for product improvement, marketing, or promotional purposes without compensation to the User.

 

26. Severability

26.1. If any provision of these Terms is found to be invalid, unlawful, or unenforceable, the remaining provisions shall remain in full force and effect.

26.2. The invalidity of one provision shall not affect the validity of any other provision.

 

27. No Waiver

27.1. Failure to enforce any provision of these Terms shall not constitute a waiver of the right to enforce such provision in the future.

27.2. Any waiver must be in writing and signed by Sippa to be effective.

 

28. Interpretation

28.1. Headings and section titles are for convenience only and shall not affect the interpretation of these Terms.

28.2. Words importing the singular include the plural and vice versa. Words importing any gender include all genders.

28.3. References to persons include individuals, companies, corporations, partnerships, trusts, and other legal entities.

 

29. Risk Acknowledgment

29.1. Users acknowledge and accept that digital platforms and e-commerce inherently carry risks, including service interruptions, technical failures, and potential data loss.

29.2. Users agree to assume all such risks and release Sippa from liability except as explicitly provided under these Terms.

29.3. Users acknowledge that Sippa is not responsible for third-party content, recommendations, or services accessed via the platform.

 

30. Customer Support and Complaints

30.1. Sippa provides customer support through its email and in-app channels.

30.2. Complaints regarding transactions, services, or digital content must be submitted within 30 days of the event giving rise to the complaint.

30.3. Sippa will use reasonable efforts to resolve complaints in a timely and fair manner, but resolution timelines may vary depending on the nature of the complaint.


PRIVACY POLICY

Last Updated: 25 February 2026

This Privacy Policy (“Policy”) governs the collection, use, disclosure, retention, and protection of personal data and information collected by Sippa Group Sdn Bhd, including all subsidiaries, affiliates, and third-party service providers, in connection with our digital ordering platform, coffee chain services, mobile applications, kiosk ordering systems, delivery services, loyalty programs, and any other services or integrations provided by Sippa (collectively, the “Services”).

 

 

This Policy is designed to ensure full compliance with applicable privacy laws and regulations across all jurisdictions in which we operate, including but not limited to Malaysia, Singapore, the European Union (EU), the United States of America (USA), and other global territories. By using our Services or providing personal data to Sippa, you acknowledge and consent to the practices outlined herein.

 

1. Scope of Services and Data Collection Sippa operates a comprehensive digital ecosystem for coffee and related services, including but not limited to in-store and mobile ordering, digital and physical loyalty programs, delivery services and third-party delivery integrations, mobile and web applications, kiosk-based ordering systems, payment processing and financial interactions, third-party integrations for marketing, analytics, and customer support, and optional social features, contact list integrations, and event-based features.

 

Data may be collected across all touchpoints, including website interactions, mobile applications, kiosk devices, delivery operations, loyalty program enrollment, device contacts (if permitted), optional social features, and third-party integrations. Collection methods include direct input, automated tracking technologies (cookies, pixels, SDKs), customer service communications, transactions, feedback, surveys, and third-party sources.

 

Mandatory data (e.g., name, email, payment information) is required to access Services. Optional data (e.g., birthday, social contacts, app preferences) is collected only with explicit user consent.

 

2. Jurisdictional Coverage

This Policy applies to all users globally, with specific provisions for the following jurisdictions:

  • Malaysia: Personal Data Protection Act 2010 (PDPA)
  • Singapore: Personal Data Protection Act 2012 (PDPA)
  • Australia: Privacy Act 1988 and the Australian Privacy Principles (APPs)
  • European Union: General Data Protection Regulation (GDPR)
  • United States: California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA) and other applicable state privacy laws
  • Other global jurisdictions: Compliance with local privacy laws as applicable

All clauses are tailored to reflect each jurisdiction’s requirements, including cross-border data transfer safeguards, opt-in/opt-out marketing rules, and age consent regulations.

 

3. Personal Data Defined

For the purposes of this Policy, “Personal Data” refers to any information that identifies, relates to, describes, or is capable of being associated with an individual. Examples include but are not limited to name, date of birth, gender, and identification numbers; contact information (email, phone, mailing address); device identifiers, IP address, cookies, and browsing activity; location data (GPS, Wi-Fi, mobile triangulation); financial information (bank account details, credit/debit card information); transaction history, loyalty points, and purchase preferences; communications and feedback including customer support records; optional social features and device contacts (if user consented); and any other data provided by the user or collected via interactions with Sippa Services.

 

4. Age, Eligibility, and Children’s Data Full Account Access (18 and over): 

Users must be at least 18 years old to create a full account and access all Services, including ordering, payment processing, loyalty programs, and data-intensive features. By creating an account, you represent and warrant that you are 18 or older.

 

Limited Access (Ages 13–17): Users aged 13 to 17 may access certain informational or limited features of the Services only with verified parental or guardian consent. Users in this age group cannot create full accounts, make payments, enroll in loyalty programs, or access any features requiring the collection of sensitive personal data. Sippa reserves the right to restrict or terminate access if a minor is found to have misrepresented their age.

 

Children Under 13: Use of Sippa Services by children under the age of 13 is strictly prohibited. Sippa does not knowingly collect personal data from children under 13. If we become aware that such data has been collected, it will be deleted promptly.

 

Parental Rights: Parents or legal guardians may request access to, correction of, or deletion of the personal data of minors under their care by contacting [email protected].

 

Enforcement: Failure to comply with these age requirements may result in account suspension, termination, or restriction of access to Services.

 

5. Methods and Circumstances of Data Collection

Sippa may collect personal data under the following circumstances: registration and account creation; ordering and payment processing; participation in loyalty programs, promotions, and contests; customer support interactions via email, phone, or in-person; surveys, feedback forms, reviews, and ratings; kiosk interactions and mobile app usage; device contact lists and social feature interactions (with consent); third-party integrations and partner services; and automated tracking technologies including cookies, web beacons, SDKs, and analytics platforms.Mandatory fields are indicated during registration or transaction processes. Optional fields require explicit user consent.

 

6. Tracking Technologies and Automated Data Collection

Sippa employs tracking technologies to enhance user experience and ensure service functionality. Cookies remember preferences, login sessions, and cart contents. Web beacons and pixels monitor marketing campaigns and engagement. Mobile SDKs collect app usage statistics and crash reports. IP address and device fingerprinting identify unique devices and prevent fraud. Geolocation services support delivery and location-based personalization. Optional device contact integration is enabled only with explicit consent. Users may configure devices and browsers to manage or disable cookies. Disabling certain cookies may reduce Service functionality.

 

7. Uses of Personal Data

Sippa collects, uses, and processes personal data to deliver and improve our Services and to maintain the trust and security of our platform. Specifically, personal data is used to provide and administer Services; process transactions and payment instructions; communicate regarding accounts, orders, or inquiries; deliver personalized content, offers, and marketing materials where consented; operate, maintain, and improve Services; detect, prevent, and investigate fraud, security breaches, or unlawful activity; comply with applicable laws, regulations, or legal proceedings; conduct research, analytics, and reporting; facilitate social interactions and optional features; manage third-party integrations and service providers; and process optional disclosure of birthday or social contacts based on user settings.

 

8. Legal Basis for Processing (EU Users)

For EU users, Sippa processes personal data under the following GDPR bases: consent for marketing communications and optional services; performance of a contract to fulfill orders and provide Services; legal obligation to comply with applicable laws; and legitimate interests to enhance services, detect fraud, and maintain platform security.

 

9. Marketing and Promotional Communications

Marketing communications are conducted in accordance with jurisdiction-specific requirements. EU users are subject to GDPR-compliant opt-in consent. Malaysia and Singapore users are provided opt-out options. US users are served in compliance with CAN-SPAM, CCPA, and CPRA. Sensitive data is used for marketing only with explicit consent. Users may withdraw marketing consent at any time via opt-out tools in the platform or by contacting our Data Protection Officer at [email protected].

 

10. Cross-Border Data Transfers

Sippa may transfer personal data internationally. Safeguards applied include Standard Contractual Clauses (SCCs) approved by the EU, adequacy decisions where applicable, Binding Corporate Rules (BCRs) within the Sippa Group, encryption and technical safeguards, and notification to users when transfers involve different jurisdictions or optional data.

 

11. Third-Party Service Providers

Sippa engages third-party providers for payment processing, delivery operations, marketing and analytics, IT and cloud hosting, and customer support. All third-party providers are contractually required to process data only on Sippa’s instructions, maintain confidentiality and security, and comply with applicable privacy laws. Jurisdiction-specific warnings are provided where cross-border service providers are engaged.

 

12. Data Retention and Deletion

Sippa retains personal data only as long as necessary for the purposes for which it was collected, subject to legal requirements. Upon expiry of applicable retention periods, data is deleted by erasure, anonymization, or access prevention. Retention periods are as follows:

  • Transaction records: 7 years
  • Loyalty program data: until account closure plus 1 year
  • Marketing consent records: 3 years after withdrawal
  • Customer support communications: 2 years
  • Cookies and analytics data: 13 months

13. User Rights and Access Users have rights in respect of their personal data that vary by jurisdiction. In general, Sippa recognizes and upholds the following rights for all users where applicable under local law. Users have the right to access their personal data and receive a copy of it, to correct inaccurate or incomplete data, to request deletion of their data where it is no longer necessary, to restrict or object to processing in certain circumstances, to data portability where processing is carried out by automated means, to withdraw consent at any time without affecting the lawfulness of prior processing, to object to direct marketing, to manage privacy controls for optional data such as birthday or social features, and to submit complaints to relevant regulatory authorities. To exercise any of these rights, users may contact our Data Protection Officer at [email protected].

 

14. Regulatory Complaints If you believe your personal data has been handled in breach of applicable privacy laws, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction. For your convenience, the primary regulators are listed below. For any complaint or privacy inquiry, you may first contact Sippa at [email protected] and we will endeavor to resolve your concern promptly.

  • Malaysia: Personal Data Protection Commissioner — www.pdp.gov.my
  • Singapore: Personal Data Protection Commission (PDPC) — www.pdpc.gov.sg
  • European Union / UK: Your national data protection authority, or the UK Information Commissioner’s Office (ICO) at www.ico.org.uk
  • Australia: Office of the Australian Information Commissioner (OAIC) — www.oaic.gov.au
  • United States: Federal Trade Commission (FTC) — www.ftc.gov, or your applicable state attorney general

15. Breach Notification

In the event of a personal data breach, Sippa will notify affected users without undue delay and comply with jurisdiction-specific notification timelines, including the GDPR requirement of 72 hours for notifiable breaches. Sippa will investigate, mitigate, and remediate the breach and communicate steps taken to prevent recurrence.

 

16. Security Measures

Sippa implements administrative, technical, and physical safeguards to protect personal data, including SSL and AES-128 encryption for data at rest and in transit, PCI-DSS compliance for payment data, access controls and multi-factor authentication, regular audits and security assessments, and incident response planning and staff training.

 

17. Liability and Disclaimers

Sippa is not liable for unauthorized third-party access including hacking or phishing where reasonable safeguards were in place, user failure to secure account credentials, or third-party provider breaches where Sippa has fulfilled its contractual and legal obligations.

 

18. Cookies, Analytics, and Other Tracking

Certain cookies are required for the operation of Services and cannot be disabled. Third-party analytics tools including Google Analytics may be used to understand usage patterns. Users may disable optional cookies via browser settings, though functionality may be affected. Optional cookies may collect additional demographic or device information where consent has been obtained.

 

19. Consent Withdrawal

Users may withdraw consent at any time via account settings or by contacting [email protected]. Sippa will advise users on the consequences of withdrawal, which may include reduced access to or functionality of certain Services. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

 

20. Corporate Transactions

In the event of a merger, acquisition, joint venture, restructuring, or financing, personal data may be shared or transferred to relevant parties as part of that transaction. Where legally required, appropriate safeguards will be applied and users will be notified.

 

21. Data Protection Officer

Sippa has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable privacy laws. Users may contact the DPO for any privacy-related inquiries, data subject requests, consent withdrawal, or complaints at [email protected]. Sippa will respond to all requests within 30 days or such shorter period as required by applicable law.

 

22. Governing Law and Dispute Resolution

This Policy and all privacy-related disputes shall be governed by the laws of Malaysia, without regard to conflict of laws principles. In the event of any dispute arising from or in connection with this Policy, the parties shall first attempt resolution through good-faith written negotiation. If negotiation fails within 30 days of written notice, the dispute shall be referred to arbitration under the rules of the Asian International Arbitration Centre (AIAC) in Kuala Lumpur, conducted in English by a single arbitrator. The arbitrator’s decision is final and binding, and judgment may be entered in any court of competent jurisdiction. Each party bears its own costs unless directed otherwise by the arbitrator. Notwithstanding the foregoing, Sippa reserves the right to seek injunctive or equitable relief in any court of competent jurisdiction to protect personal data, intellectual property, or confidential information. Users in specific jurisdictions retain the right to raise disputes with their local data protection authority as set out in Section 14.

 

23. Amendments

This Policy may be modified, updated, or amended at any time. Changes take effect immediately upon posting. Continued use of Services following any amendment constitutes acceptance of the updated Policy. Users are encouraged to review this Policy periodically.


Personal Data Protection (PDPA)

Last Updated: 25 February 2026


1. Personal Data Protection Sippa Group Sdn Bhd (“Sippa”) collects, uses, and discloses personal data in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA) and Singapore Personal Data Protection Act 2012 (PDPA).


2. Purpose of Collection Personal data is collected to provide and improve Sippa’s services, process transactions, manage loyalty programs, communicate with users, and comply with legal obligations.


3. User Rights 

Users have rights under PDPA to:

  • Access their personal data
  • Correct or update their personal data
  • Withdraw consent for the collection, use, or disclosure of their personal data
  • Request deletion of their personal data, subject to legal or contractual obligations

4. Data Sharing and Transfers 

Sippa may share personal data with third-party service providers for operational purposes. Cross-border transfers are conducted in compliance with PDPA safeguards.


5. Reference to Privacy Policy 

For comprehensive details on the collection, use, disclosure, retention, and protection of personal data, please refer to the Privacy Policy contained within this Legal section.


Cookies and tracking

Last Updated: 25 February 2026

 

1. Use of Cookies 

Sippa’s website and digital services use cookies and similar tracking technologies to:

  • Remember user preferences and login sessions
  • Improve website functionality and service performance
  • Analyze user interactions for analytics and marketing purposes

2. Cookie Control 

Users can manage or disable cookies via their browser or device settings. Disabling certain cookies may affect website functionality or access to some features.

 

3. Third-Party Cookies 

Some cookies may be placed by third-party partners (e.g., analytics, marketing). These are subject to the third party’s privacy practices.

 

4. Consent 

By using Sippa’s website or services, users consent to the use of cookies as described. Users may withdraw consent by adjusting browser settings, but this may limit access to some features.

Scroll to Top