Privacy Policy
Version 2026-09-05 · Last updated: 5 September 2026
1. Who we are
The Service is operated by ECA GLOBAL (M) SDN. BHD. (Company Registration No. 202101000122 (1400420-U)). For privacy questions or requests, visit Support & Complaints or email business@ecare.asia.
2. Information we collect
Information you provide
- Account and profile: email address, hashed password, username, display name, phone number, profile media, bio, city, preferences, and profile customisation.
- Content and communications: videos, images, comments, messages, fan-group posts, reports, support requests, and other content you submit.
- Creator, talent, merchant, event, and campaign data: applications, business contacts, skills, verification information, registrations, entries, attribution information, and related records.
- Transactions: records of Coin purchases, Gifts, memberships, services, refunds, chargebacks, Creator Income, and payouts. Payment-card details are handled by payment providers and are not stored by VYBE. If you provide payout-account or banking information for Creator payouts, VYBE stores that information to administer payouts, compliance, accounting, and support.
- Identity and compliance: information provided for identity, eligibility, KYC, safety, fraud-prevention, or legal checks when applicable.
Information collected automatically
- Usage data: content viewed, liked, saved, shared, or created; watch history; searches; and feature interactions.
- Device and technical data: device type, operating system, app version, IP address, security logs, and identifiers used for sessions and push notifications.
- Referral and attribution data: referral codes, internal entry paths, referrer host, and sanitised campaign parameters used to understand registrations and campaigns.
- Website storage: cookies, local storage, and session storage used as described below.
3. How we use information
- Provide, operate, personalise, and maintain the Service and your account.
- Deliver content, recommendations, messaging, events, campaigns, MARKET, and creator features.
- Process purchases, Gifts, refunds, chargebacks, Creator Income, and payouts.
- Send account, verification, security, support, and enabled notification communications.
- Prevent and investigate fraud, abuse, safety reports, and violations of our Terms.
- Maintain consent, transaction, moderation, security, and audit records.
- Comply with legal obligations and enforce agreements.
4. Legal basis
Where the Malaysian Personal Data Protection Act 2010 (PDPA) or other applicable law applies, we process personal data based on consent, performance of our contract with you, legitimate interests in operating and securing the Service, and compliance with legal obligations.
5. How we share information
We do not sell personal data. We share it only as needed:
- Service providers supporting hosting, video, email, notifications, identity, payments, analytics, and infrastructure, subject to appropriate safeguards.
- Other users when you make content or profile information public or share it with them.
- Sign-in and app-store providers when you choose their authentication or purchase services.
- Creators, merchants, event, campaign, and service participants where needed to provide a transaction or interaction you request.
- Legal and safety recipients when required by law or reasonably necessary to protect users, rights, property, or safety.
- Business-transfer recipients in connection with a merger, acquisition, financing, or asset transfer, subject to applicable protections.
6. Cookies and similar technologies
The website uses cookies and local storage for essential functions such as sessions and preferences. Session storage may retain first-touch event attribution for the current browser tab. You can control browser storage through browser settings, but disabling it may affect functionality.
7. Data retention and account deletion
We retain personal data while your account is active and as needed to provide the Service. Retention may continue where reasonably necessary for legal, accounting, transaction, payout, dispute, chargeback, fraud-prevention, safety, moderation, security, or reporting obligations.
When you request account deletion, we disable access, revoke active sessions and linked sign-in access, and delete or anonymise selected account identifiers. Content, communications, transaction, payout, safety, audit, and legally required records may be retained, restricted, or anonymised rather than immediately erased. Deletion does not convert purchased Coins or Promotional Coins into cash and does not override obligations involving other users or completed transactions.
8. Your rights
- Access and correction: view and update available profile information in the app.
- Account deletion: request deletion under Profile → Settings → Delete account, subject to the retention described above.
- Consent and preferences: withdraw optional consent or change available notification and privacy preferences.
- Privacy request: contact business@ecare.asia. We may need to verify your identity before fulfilling a request.
9. Security
We use technical and organisational measures including hashed passwords, encrypted connections, access controls, and restricted administrative access. No transmission or storage method is completely secure, and we cannot guarantee absolute security.
10. Children
The Service is not intended for children under 13, and some features require users to be 18 or the age of majority. We do not knowingly collect personal data from children under 13. If you believe a child has provided data, contact us. See our Child Safety Standards.
11. International transfers
We are based in Malaysia. Where data is processed outside your country, we take steps designed to protect it consistently with this Policy and applicable law.
12. Changes to this Policy
We may update this Policy. Material changes will be posted with a new version and “Last updated” date and, where required, notified in the app or presented for acceptance.
13. Contact us
ECA GLOBAL (M) SDN. BHD.
Email: business@ecare.asia