Privacy Policy

This notice explains how Monsta Wash Sdn. Bhd. (“MonstaWash”, “we”, “us”) collects, uses and protects personal data when you visit www.monstawash.my, send us an enquiry, or work with us on a laundry facility. It is written to meet the Personal Data Protection Act 2010 (PDPA) of Malaysia.

1. Who we are

MonstaWash designs, installs, operates and supports commercial self-service smart laundry facilities for universities and colleges, hotels and serviced suites, condominiums, hostels, worker accommodation and commercial properties across Malaysia. Our registered office and published contact details are shown at the bottom of this page.

2. Personal data we collect

Data you give us

• Enquiry details from the forms on this website: your name or PIC designation, phone or WhatsApp number, email address, property type, estimated space and location (state), and anything you write in the message field.
• Proposal and contract details when you proceed: company or management body details, billing contact, site address, and the names of the people authorised to deal with us.
• Service communications: emails, WhatsApp messages and call notes in which you ask for support or a site visit.

Data we collect automatically

• Technical data such as IP address, browser and device type, referring page, and the pages you view on this website.
• Cookies and similar technologies that keep the site working and let us see which pages are being used (see section 7).

Facility data (for our partners)

Where MonstaWash operates a facility for you, our machines report operational data — cycle counts, machine status, error alerts and payment terminal status — through our 24/7 cloud telemetry. This is equipment and utilisation data. It may include a machine identifier and usage timestamps, not the identity of the person who used the machine.

3. Why we use it

• To answer your enquiry and arrange a site feasibility visit or survey.
• To prepare proposals, spatial layouts, technical drawings and commercial terms.
• To install, commission, operate, service and support a facility.
• To provide the support desk, dispatch technicians, and track service history against each machine.
• To invoice, reconcile cashless collections and provide reporting to property owners or management bodies.
• To improve this website, our services and our machine performance.
• To comply with accounting, tax, safety and other legal obligations.

4. Consent and legal basis

By submitting a form on this website, contacting our desk, or signing a proposal, you consent to the uses described in this notice. You may withdraw that consent at any time by writing to us — see section 9. Where we must keep records for accounting or legal reasons, we will explain that when you ask.

5. Who we share it with

• Our own team and technicians, who need the details to survey, install or service a site.
• Service providers who work under our instructions: cloud hosting and telemetry, cashless payment and DuitNow QR processing, machine installation and M&E contractors, logistics, and professional advisers such as auditors and lawyers.
• Authorities where the law requires it.

We do not sell personal data, and we do not pass it to unrelated third parties for their own marketing.

6. Where your data is held

Our website, telemetry and business systems are hosted on servers we control or that are provided by established cloud providers. Where a provider stores data outside Malaysia, we take reasonable steps to ensure the data is protected to a standard comparable to the PDPA.

7. Cookies and analytics

This website uses cookies that are needed for it to work (session and security cookies) and, where enabled, analytics cookies that tell us which pages and sections visitors use. You can block or delete cookies in your browser settings; the site will still work, but some conveniences may not. Analytics data is used in aggregate and is not used to identify you.

8. How long we keep it

• Enquiries that do not become a project: kept while we may still be of service to you, and then deleted on request.
• Project, service and warranty records: kept for the life of the agreement plus the warranty period, so we can honour service commitments and keep a machine’s service history.
• Financial records: kept for the period required by Malaysian accounting and tax rules.

9. Your rights

Under the PDPA you may ask to access the personal data we hold about you, correct it if it is inaccurate, limit how it is used, or withdraw your consent. Write to us using the contact details below and we will respond within a reasonable time. You may also contact the Personal Data Protection Commissioner of Malaysia if you are not satisfied with how we handled your request.

10. Security

Access to enquiry and partner records is limited to the people who need it. We use access controls, encrypted connections (HTTPS), and routine backups, and our technicians work from issued accounts. No system is perfectly secure, so please do not send sensitive documents through a web form — ask us for a safer channel and we will provide one.

11. Children

This website is aimed at property owners, management bodies and business decision-makers. We do not knowingly collect personal data from anyone under 18 through it. If a minor’s details reach us by mistake, tell us and we will delete them.

12. Changes to this notice

If our practices change, we will update this page and the “last updated” date at the top. Material changes that affect an existing facility agreement will be communicated to the partner directly as well.