NaiBnB
Privacy Policy
NaiBnB Team App · Last updated: 28 June 2026
This Privacy Policy describes how NAI HOSPITALITY (M) SDN BHD ("we", "us", or "our") collects, uses, and protects information when you use the NaiBnB Team App (the "App").
This App is intended solely for internal use by employees and staff of Nai Hospitality. It is not available to the general public.
Information We Collect
When you use the App, we may collect the following information:
- Account information — Your name and email address, used to authenticate you with our internal system.
- Usage data — Screen activity and session duration, used to measure employee engagement with internal tools.
- Device information — Device type and operating system version, collected automatically for compatibility and error reporting.
- Push notification token — Used to send you work-related notifications from our system.
- Location data — Approximate location may be accessed if you use check-in features, solely to verify on-site attendance.
How We Use Your Information
- To authenticate you and grant access to internal tools
- To track performance, goals, and task completion as part of your employment
- To send internal notifications and updates
- To monitor and improve app performance
Data Sharing
We do not sell, rent, or share your personal information with third parties outside of Nai Hospitality, except:
- As required by Malaysian law or regulation
- With service providers who process data on our behalf (e.g. cloud hosting, push notifications) under strict confidentiality agreements
Data Retention
We retain your data for as long as you are employed with Nai Hospitality. Upon termination of employment, your account is deactivated and personal data is deleted within 90 days unless retention is required by law.
Security
Your data is transmitted over HTTPS and stored on secured servers. Access is restricted to authorised personnel only. We use bearer token authentication to protect all API access.
Your Rights
Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Withdraw consent for non-essential processing
To exercise these rights, contact us at the address below.
Contact