About these documents
Every Program on native.cards must publish its own Program Terms and Privacy Notice before anyone can join, and may publish a Marketing Notice. Those documents are the Merchant's: they form the agreement between the Merchant and its Members, and the Merchant is the data controller named in the privacy notice.
This page contains standard wording that a Merchant may adopt as published, or adapt. Each standard document is written so that it is complete and accurate for a Program that uses the ordinary features of native.cards, without any blank to fill in: it identifies the Merchant by reference to the name and contact details shown on the Merchant's own page and Wallet Card.
Important notice to Merchants. These documents are Templates within the meaning of the Merchant Agreement. They are provided for convenience and are not legal advice. By publishing a standard document, with or without changes, the Merchant adopts it as its own and is solely responsible for ensuring that it is accurate, complete and lawful for its Program. A Merchant should add to or amend the standard wording wherever its Program differs from it, in particular where: benefits expire; a fee is charged for membership; purchases, bookings, tickets or insurance are involved; sensitive personal data or the personal data of persons under 18 is collected; or the Merchant is subject to sector-specific regulation.
The Privacy Notice is provided in English and in Bahasa Malaysia because section 7(3) of the Personal Data Protection Act 2010 requires a written notice to be given in both languages. Both versions should be published together.
Document 1 — Standard Program Terms
Program Terms
1. About these terms
1.1 These terms apply to this membership program (the "Program"). The Program is operated by the business whose name and contact details appear on this page and on your card ("we", "us" or "our").
1.2 By joining, you agree to these terms. If you do not agree, please do not join.
1.3 The Program runs on native.cards, a platform operated by Platehaus Sdn. Bhd. (native.cards is its brand name, not a separate company). Platehaus provides the technology only. It is not a party to these terms and is not responsible for the Program, for our goods and services, or for any reward or benefit. Your use of native.cards itself is governed by the native.cards Terms of Use.
2. Joining
2.1 Membership is open to individuals aged 18 or above. If you are under 18, you may join only with the consent of your parent or guardian.
2.2 You must give true and accurate details when you join and keep them up to date. One membership is allowed per person.
2.3 We may decline an application, and where the Program requires our approval your membership begins only when we approve it.
2.4 Membership is free of charge unless we clearly tell you otherwise before you join.
3. Your card
3.1 You will receive a digital membership card, which you may keep in Apple Wallet or Google Wallet. It is personal to you. Do not share it, copy it or let anyone else use it.
3.2 Show your card, or give your member number or the telephone number you registered, each time you wish to earn or use benefits. We may ask you to confirm your identity.
3.3 Our record of your membership is the official record. Your card and any notification show that record at a point in time and may take a little while to update. If they differ, our record prevails.
3.4 Your card is not a payment card or an identity document and has no cash value.
3.5 Your digital card is issued through native.cards and depends on Apple Wallet or Google Wallet, which may change or withdraw their services at any time. If your card stops working in a wallet, your membership is not affected: you can still show your card from your member page, or give us your member number.
4. Earning and using benefits
4.1 You earn points, stamps, visits or other benefits, and may claim rewards, in the manner shown on the Program page and on your card. Each reward is subject to the conditions shown for it at the time you claim it, including any limit on availability and any expiry date.
4.2 Benefits are earned only on genuine, qualifying transactions or visits that are recorded by our staff or by our sales system at the time. Please check that your visit has been recorded before you leave. We may be unable to add benefits afterwards.
4.3 Benefits and rewards have no cash value. They cannot be exchanged for cash, sold, or transferred to another person, and may be used only with us. Unless we state otherwise, a reward cannot be combined with another offer.
4.4 If a purchase is refunded or cancelled, the benefits earned on it will be reversed. We may correct any entry made in error, and may withhold or reverse benefits obtained by fraud, misuse or breach of these terms.
4.5 Rewards are subject to availability. If a reward is unavailable, we may offer a reasonable substitute of similar value.
4.6 Where an expiry date applies to a benefit or reward, it is shown to you. A benefit or reward that is not used by its expiry date lapses.
5. Sharing and referrals
5.1 Where we allow benefits to be shared through a native.cards Family Account, sharing is subject to the Family Account terms of native.cards and applies only to the benefits we mark as shareable.
5.2 Where we offer a reward for inviting friends, it is given on the conditions shown to you with your invitation link. You must invite only people you know. We may withhold or reverse a referral reward that has been obtained unfairly, including by inviting yourself.
6. Messages
6.1 We will send you messages needed to run your membership, for example a change in your balance or a reward that is ready.
6.2 We will send you offers and news only if you agree. You may change your mind at any time on your membership page, by using the unsubscribe link in an email, or by switching off notifications for the card in your wallet.
7. Changes to the Program
7.1 We may change the Program, its benefits or these terms. We will publish the new terms and, where a change materially reduces benefits you have already earned, we will give you reasonable notice and a reasonable opportunity to use them first.
7.2 We may end the Program. If we do, we will give you at least 30 days' notice where you hold unused benefits, and you may use them until the Program ends. Unused benefits lapse when the Program ends.
8. Ending your membership
8.1 You may leave the Program at any time on your membership page. Your card will stop working, your balance will close and unused rewards that can be cancelled will be cancelled.
8.2 We may suspend or end your membership if you seriously or repeatedly breach these terms, if you obtain benefits dishonestly, or if you abuse or threaten our staff. Where it is reasonable to do so, we will tell you why and give you a chance to respond.
9. Our responsibility
9.1 Nothing in these terms excludes or limits any right you have under the Consumer Protection Act 1999 or any other law that cannot lawfully be excluded or limited.
9.2 Subject to clause 9.1, we are not responsible for: any failure or delay of Apple Wallet, Google Wallet, your device or your internet connection; or any loss that we could not reasonably have foreseen.
10. Your personal data
We handle your personal data as described in our Privacy Notice for this Program, which you should read together with these terms.
11. Contact and complaints
If you have a question or a complaint about the Program, please contact us using the details shown on this page or on the back of your card. We will try to resolve it promptly.
12. Law
These terms are governed by the laws of Malaysia. The courts of Malaysia have jurisdiction, and nothing in these terms prevents you from bringing a claim before the Tribunal for Consumer Claims Malaysia.
Document 2 — Standard Program Privacy Notice (English)
Privacy Notice
This notice is given under the Personal Data Protection Act 2010 ("PDPA"). It explains how the business whose name and contact details appear on this page and on your card ("we", "us" or "our") handles your personal data for this membership program (the "Program"). We are the data controller.
1. Personal data we collect
(a) Your email address and the name you give;
(b) your telephone number, if you give it on the form or to our staff so that we can find your membership;
(c) your answers to any other question on the joining form;
(d) the member number generated for you;
(e) your membership activity: visits, purchases credited to you (amount, date, outlet and receipt reference), points, stamps, rewards and corrections, and the staff member and outlet that recorded them;
(f) your choices about offers and notifications, and the version of the terms and of this notice that you accepted;
(g) the messages we send you and whether they were delivered;
(h) how you came to join (for example the QR code, link, referral or social media reply you used); and
(i) technical information about your digital card needed to keep it updated.
2. Where we get it
From you, when you join and when you use your membership; from our staff and our sales system, when they record your visits and purchases; from Apple or Google, when you save or remove your card; and from a member who invites you.
3. Why we use it
(a) To enrol you and manage your membership;
(b) to issue your digital card and keep it up to date;
(c) to identify you at our counter and to record and honour your benefits and rewards;
(d) to send you messages needed to run your membership;
(e) to send you offers and news, only if you have agreed;
(f) to run referrals and shared benefits, where offered;
(g) to understand and improve the Program, including by statistics;
(h) to prevent and investigate misuse; and
(i) to comply with the law and to deal with claims.
4. Whether you must give it
Your email address and any details marked as required on the joining form are obligatory: without them we cannot enrol you. Everything else is voluntary, including whether you receive offers.
5. Who we disclose it to
(a) Platehaus Sdn. Bhd., the operator of native.cards, which processes your personal data on our behalf, and its service providers (hosting, database, email delivery and security);
(b) Apple and Google, if you choose to save your card to Apple Wallet or Google Wallet: the details shown on your card are delivered to your device and to that wallet provider;
(c) our sales system provider, where our sales system is connected to the Program;
(d) other members of your Family Account, who can see your name and shared benefits, if you join one;
(e) our professional advisers; and
(f) authorities, where the law requires or permits.
We do not sell your personal data.
6. Transfer outside Malaysia
The Program is hosted in Singapore, and the providers named above may process personal data in other countries, including the United States. By joining, and by saving your card to a wallet, you consent to this transfer.
7. How long we keep it
We keep your personal data for as long as you are a member. If you leave, your name and telephone number are removed from your record and your card stops working at once; the rest of your record is kept for 12 months, so that your membership can be reopened if you return, and is then deleted or anonymised. Records of transactions may be kept in anonymised form for up to 7 years for accounting purposes, and records of your consent for up to 7 years as evidence.
8. Your rights
You may: ask for access to, and a copy of, your personal data; ask us to correct it; withdraw your consent; ask us to limit how we use it; and ask us to stop using it for direct marketing. You can see your membership, correct certain details, change your choices and leave the Program on your membership page. For anything else, contact us using the details on this page or on your card. We will respond within 21 days. You may also complain to the Personal Data Protection Commissioner of Malaysia.
9. Persons under 18
If you are under 18, your parent or guardian must agree to this notice on your behalf.
10. Changes
If we change this notice, we will publish the new version and, where the change is significant, tell you beforehand.
11. Language
This notice is given in English and Bahasa Malaysia. If the two differ, the English version prevails.
Document 3 — Notis Privasi Program Standard (Bahasa Malaysia)
Notis Privasi
Notis ini diberikan di bawah Akta Perlindungan Data Peribadi 2010 ("APDP"). Notis ini menerangkan cara kami mengendalikan data peribadi anda bagi program keahlian ini ("Program"). "Kami" bermaksud perniagaan yang nama dan butiran hubungannya dipaparkan pada halaman ini dan pada kad anda. Kami ialah pengawal data, iaitu pihak yang bertanggungjawab ke atas data peribadi anda.
1. Data peribadi yang kami kumpul
(a) Alamat e-mel anda dan nama yang anda berikan;
(b) nombor telefon anda, jika anda memberikannya pada borang atau kepada kakitangan kami supaya kami dapat mencari keahlian anda;
(c) jawapan anda kepada sebarang soalan lain pada borang penyertaan;
(d) nombor ahli yang dijana untuk anda;
(e) aktiviti keahlian anda: lawatan, pembelian yang dikreditkan kepada anda (amaun, tarikh, cawangan dan rujukan resit), mata, cap, ganjaran dan pembetulan, serta kakitangan dan cawangan yang merekodkannya;
(f) pilihan anda tentang tawaran dan pemberitahuan, serta versi terma dan notis ini yang anda terima;
(g) mesej yang kami hantar kepada anda dan sama ada mesej itu berjaya dihantar;
(h) cara anda menyertai Program (contohnya kod QR, pautan, rujukan atau balasan media sosial yang anda gunakan); dan
(i) maklumat teknikal tentang kad digital anda yang diperlukan untuk memastikan kad itu dikemas kini.
2. Sumber data peribadi
Daripada anda, apabila anda menyertai Program dan menggunakan keahlian anda; daripada kakitangan dan sistem jualan kami, apabila lawatan dan pembelian anda direkodkan; daripada Apple atau Google, apabila anda menyimpan atau membuang kad anda; dan daripada ahli yang menjemput anda.
3. Tujuan data peribadi digunakan
(a) Untuk mendaftarkan anda dan mengurus keahlian anda;
(b) untuk mengeluarkan kad digital anda dan memastikan kad itu dikemas kini;
(c) untuk mengenal pasti anda di kaunter kami, serta merekodkan dan memberikan faedah dan ganjaran yang anda layak terima;
(d) untuk menghantar mesej yang diperlukan bagi mengendalikan keahlian anda;
(e) untuk menghantar tawaran dan berita kepada anda, hanya jika anda bersetuju;
(f) untuk mengendalikan rujukan dan faedah yang dikongsi, jika ditawarkan;
(g) untuk memahami dan menambah baik Program, termasuk melalui statistik;
(h) untuk mencegah dan menyiasat penyalahgunaan; dan
(i) untuk mematuhi undang-undang dan menguruskan tuntutan.
4. Sama ada data peribadi wajib diberikan
Alamat e-mel anda dan sebarang butiran yang ditanda sebagai wajib pada borang penyertaan adalah wajib: tanpanya kami tidak dapat mendaftarkan anda. Semua yang lain adalah sukarela, termasuk sama ada anda menerima tawaran.
5. Pihak yang kami dedahkan data peribadi
(a) Platehaus Sdn. Bhd., pengendali native.cards, yang memproses data peribadi anda bagi pihak kami, dan pembekal perkhidmatannya (pengehosan, pangkalan data, penghantaran e-mel dan keselamatan);
(b) Apple dan Google, jika anda memilih untuk menyimpan kad anda dalam Apple Wallet atau Google Wallet: butiran yang dipaparkan pada kad anda dihantar ke peranti anda dan kepada pembekal dompet digital tersebut;
(c) pembekal sistem jualan kami, jika sistem jualan kami disambungkan kepada Program;
(d) ahli lain dalam Family Account (akaun keluarga) anda, yang boleh melihat nama anda dan faedah yang dikongsi, jika anda menyertainya;
(e) penasihat profesional kami; dan
(f) pihak berkuasa, jika dikehendaki atau dibenarkan oleh undang-undang.
Kami tidak menjual data peribadi anda.
6. Pemindahan ke luar Malaysia
Program ini dihoskan di Singapura, dan pembekal yang dinamakan di atas boleh memproses data peribadi di negara lain, termasuk Amerika Syarikat. Dengan menyertai Program, dan dengan menyimpan kad anda dalam dompet, anda memberi persetujuan kepada pemindahan ini.
7. Tempoh penyimpanan
Kami menyimpan data peribadi anda selagi anda menjadi ahli. Jika anda keluar, nama dan nombor telefon anda dibuang daripada rekod anda dan kad anda terhenti berfungsi serta-merta; baki rekod anda disimpan selama 12 bulan, supaya keahlian anda boleh dibuka semula jika anda kembali, dan kemudiannya dipadamkan atau dijadikan tanpa nama. Rekod transaksi boleh disimpan dalam bentuk tanpa nama sehingga 7 tahun bagi tujuan perakaunan, dan rekod persetujuan anda sehingga 7 tahun sebagai bukti.
8. Hak anda
Anda boleh: meminta akses kepada, dan salinan, data peribadi anda; meminta kami membetulkannya; menarik balik persetujuan anda; meminta kami mengehadkan cara kami menggunakannya; dan meminta kami berhenti menggunakannya bagi pemasaran langsung. Anda boleh melihat keahlian anda, membetulkan butiran tertentu, menukar pilihan anda dan keluar daripada Program pada halaman keahlian anda. Bagi perkara lain, hubungi kami menggunakan butiran pada halaman ini atau pada kad anda. Kami akan memberi maklum balas dalam tempoh 21 hari. Anda juga boleh membuat aduan kepada Pesuruhjaya Perlindungan Data Peribadi Malaysia.
9. Individu di bawah umur 18 tahun
Jika anda berumur di bawah 18 tahun, ibu bapa atau penjaga anda mesti bersetuju dengan notis ini bagi pihak anda.
10. Perubahan
Jika kami mengubah notis ini, kami akan menerbitkan versi baharu dan, jika perubahan itu ketara, memaklumkan anda terlebih dahulu.
11. Bahasa
Notis ini diberikan dalam bahasa Inggeris dan Bahasa Malaysia. Jika terdapat percanggahan antara kedua-duanya, versi bahasa Inggeris hendaklah diguna pakai.
Document 4 — Standard Marketing Notice
Offers and news
If you agree, we will send you offers, promotions and news about this Program and our own products and services, as notifications on your digital card and by email. We will not send you advertising for anyone else.
This is optional. Your membership and your rewards are the same whether or not you agree.
You can change your mind at any time: on your membership page, by using the unsubscribe link in any email, or by switching off notifications for the card in Apple Wallet or Google Wallet.
Additional clauses for particular Programs
A Merchant whose Program includes any of the following should add the corresponding wording to its Program Terms and Privacy Notice.
A. Identification cards (staff, student, member and similar)
Program Terms:
This identification is issued by us to show that you hold the stated role or membership with us. It is not a government-issued identity document. You must tell us promptly if any detail on it is wrong or changes, and you must stop using it when your role or membership ends. The details we have marked as public can be seen by anyone who scans the code on your identification or opens its link, and each viewing is recorded for security. We may suspend, replace or cancel your identification at any time.
Privacy Notice (add to "Personal data we collect" and "Why we use it"):
We also process: your photograph; your role, department, class or grade; your staff, student or member reference; the validity dates of your identification; any emergency contact you give; and a record of each time the page for your identification is opened (the time, the general type of device and browser, and whether that device has opened it before). We use these to issue your identification, to let others verify it, and to keep it secure.
Where health or other sensitive details are included, add an express consent to the set-up statements the holder confirms:
I expressly consent to [organisation] processing the health details and emergency information I have provided, and to their being shown to its authorised staff, for my safety and for the purposes of this identification.
B. Tickets and event passes
Your ticket admits one person to the event, date and time shown on it. The admission code can be used once only: keep it private. We are responsible for the event; if it is cancelled or changed we will tell you by email or on your ticket. [State the refund or exchange position.]
C. Policy cards
This card is a summary for your convenience. It is not your policy or a certificate of insurance. Your cover is as set out in your policy documents, and any claim must be made to the insurer using the contact details shown.
D. Programs with members under 18
Where a member is under 18, a parent or guardian must complete the joining form, accepts these terms and the Privacy Notice on the member's behalf, and is responsible for the member's use of the card.
E. Advertising partners (where the Merchant has enabled sharing with an advertising platform)
The Platform generates and versions a separate advertising notice, which is shown to the Member with an unticked box at joining. A Merchant that enables sharing should also add to section 5 of its Privacy Notice:
(g) Meta (Facebook and Instagram), only if you separately agree: we share a scrambled form of your email address, technical details of your browser at the time you joined, and the fact and time of events such as joining, making a purchase or using a reward, so that we can measure and improve our advertising. You can switch this off at any time on your membership page.
F. Verified Members (where the Program asks for, or requires, a telephone number verified with WhatsApp)
Program Terms, where the Program requires a verified number:
To join this Program you must share with us a telephone number verified with WhatsApp on your native.cards account. One telephone number can hold only one membership of this Program. Referral rewards and any welcome bonus are given only to members who have shared a verified number. A verified number shows that you could send and receive WhatsApp messages on it when you verified it; it is not proof of your identity.
Program Terms, where the Program asks for a verified number and gives referral rewards and the welcome bonus only to members who share one:
Referral rewards and any welcome bonus are given only to members who have shared with us a telephone number verified with WhatsApp.
Privacy Notice (English), add to "Personal data we collect":
(j) if you choose to share it, or this Program requires it, the telephone number verified with WhatsApp on your native.cards account, with the date you shared it. We use it to find your membership at our counter and, where our Program Terms say so, to limit memberships and rewards to one per telephone number. native.cards verified the number; we receive it only when you share it with us, and you can stop sharing it at any time in your native.cards account settings.
Notis Privasi (Bahasa Malaysia), tambah pada "Data peribadi yang kami kumpul":
(j) jika anda memilih untuk berkongsinya, atau jika Program ini memerlukannya, nombor telefon yang disahkan dengan WhatsApp dalam akaun native.cards anda, berserta tarikh anda berkongsinya. Kami menggunakannya untuk mencari keahlian anda di kaunter kami dan, jika dinyatakan dalam Terma Program kami, untuk mengehadkan keahlian dan ganjaran kepada satu bagi setiap nombor telefon. native.cards yang mengesahkan nombor itu; kami hanya menerimanya apabila anda berkongsinya dengan kami, dan anda boleh berhenti berkongsinya pada bila-bila masa dalam tetapan akaun native.cards anda.
Questions about this document: support@native.cards. All legal documents