TaniTokou Privacy Policy

Effective Date: 9 August 2026

Last Updated: 9 August 2026

TaniTokou is a product operated by Sohugy Dynamics Enterprise ("Sohugy Dynamics", "TaniTokou", "we", "us" or "our").

We respect the privacy of people who use TaniTokou and are committed to handling personal data responsibly, transparently and securely.

This Privacy Policy explains how we collect, use, store, disclose and protect information when you use the TaniTokou website, marketplace, user accounts, chat system, payment functions and other related services.

TaniTokou operates in Malaysia and handles personal data subject to applicable Malaysian law, including the Personal Data Protection Act 2010 [Act 709], as amended. The Act applies to the processing of personal data in connection with commercial transactions.

1. Who Is Responsible for Your Data

TaniTokou is operated by:

Sohugy Dynamics Enterprise
Suite 3.01, 3rd Floor
Wisma Prudential, Lot 10, Kolam Plaza
Luyang, Jalan Lintas
88300 Kota Kinabalu
Sabah, Malaysia

DBKK Trading Licence No.: 920035
Email: contact@tanitokou.com
Website: tanitokou.com

These business particulars are supported by the current Sohugy Dynamics Enterprise trading licence.

2. Personal Data We Collect

The information we collect depends on how you use TaniTokou.

It may include:

• your name;
• email address;
• telephone or WhatsApp number;
• account and authentication information;
• profile photograph;
• billing, delivery or pickup addresses;
• merchant or business name;
• merchant profile information;
• banking or payout information where required for sellers;
• product or service listings;
• photographs, descriptions, prices, quantities and availability information;
• shopping-cart information;
• orders and fulfilment information;
• payment and transaction records;
• messages sent through the TaniTokou chat system;
• enquiries, complaints or information provided to support; and
• security information required to protect accounts and the service.

Passwords are not intended to be stored as readable plain-text passwords.

Information that sellers intentionally publish as part of their marketplace presence—such as their seller or business name, profile photograph, general location, listings, product photographs, prices and availability—may be visible to other users or the public.

3. Sources of Personal Data

Most personal data is provided directly by you when you:

• register or update an account;
• create or manage a profile;
• publish a listing;
• make or receive an order;
• complete a transaction;
• use TaniTokou chat;
• provide address or payment information; or
• contact TaniTokou.

We may also receive transaction-related information from providers that assist us with payment processing, authentication, email, security or other TaniTokou functions.

4. How We Use Personal Data

We use personal data where reasonably necessary to operate, protect and provide TaniTokou.

This includes:

• creating and maintaining accounts;
• verifying email addresses or telephone numbers;
• authenticating users;
• enabling sellers to publish and manage listings;
• enabling buyers to discover and purchase local produce;
• managing carts, orders and transactions;
• processing payments;
• facilitating seller payouts;
• supporting delivery, pickup or order fulfilment;
• providing TaniTokou chat;
• sending account, order and transaction notifications;
• providing customer support;
• preventing fraud, abuse and unauthorised access;
• diagnosing technical problems;
• maintaining the security and reliability of the service;
• maintaining required business records; and
• complying with applicable legal, tax, accounting and regulatory obligations.

TaniTokou does not sell users' personal data to advertisers.

We also do not use your personal data for targeted advertising without an applicable basis or permission.

5. Required and Optional Information

Certain information is required to provide particular functions.

For example, contact and authentication information may be necessary to create and protect an account, while order-related information is necessary to complete transactions.

If you choose not to provide required information, we may be unable to provide the relevant feature.

Information identified as optional may be omitted without affecting unrelated functions.

6. Anonymous Usage Statistics

TaniTokou collects anonymous usage statistics to understand how the service is used and improve usability, performance and reliability.

These statistics may include:

• pages or sections used;
• interactions with interface elements;
• navigation patterns;
• click or tap activity;
• approximate interaction positions;
• aggregated heatmaps;
• screen-size or device categories;
• feature usage;
• errors; and
• technical performance information.

These analytics are not associated with an identifiable TaniTokou user.

TaniTokou's analytics data does not contain a TaniTokou user ID, account ID, name, email address, telephone number, signature, device fingerprint, derived identity or another identifier designed to identify or track an individual.

TaniTokou does not use this anonymous analytics information to build personalised advertising profiles.

7. Necessary Cookies and Storage

TaniTokou may use cookies or browser-storage mechanisms that are necessary for functions such as:

• maintaining login sessions;
• protecting accounts;
• remembering language preferences;
• preventing abuse; and
• providing essential website functionality.

These mechanisms are used to operate the service and do not convert the anonymous usage statistics described in Section 6 into user profiles.

8. TaniTokou Chat

When TaniTokou connects a buyer and seller through the service, communications arising from that connection are intended to take place through the TaniTokou chat system.

TaniTokou may process and store messages and related chat information as necessary to provide the communication service.

TaniTokou does not prevent people who already know one another independently of TaniTokou from communicating through another method.

For example, if two people already possess each other's contact information and choose to communicate by telephone, WhatsApp, email, face-to-face or another service, that communication takes place outside TaniTokou and is subject to the privacy practices of whatever method they choose.

TaniTokou does not control private communications taking place entirely outside the TaniTokou service.

9. Information Shared Between Buyers and Sellers

TaniTokou may make information available between participants in a transaction where reasonably necessary to fulfil an order.

This may include information necessary to:

• identify the order;
• communicate through chat;
• confirm products and quantities;
• arrange pickup or delivery; and
• complete the transaction.

We do not make private account information public merely because someone holds a TaniTokou account.

10. Third-Party Service Providers

TaniTokou uses external service providers to operate particular functions.

As of the Last Updated date, the principal providers include:

• Meta / WhatsApp Cloud API — for supported WhatsApp-based account functions such as telephone-number verification and authentication. WhatsApp is not TaniTokou's internal buyer-seller chat service.
• Cloudflare — including Cloudflare Turnstile for protection against bots and automated abuse, and Cloudflare R2 for object and media storage.
• Zoho Corporation — for TaniTokou email-delivery services, including Zoho Mail or ZeptoMail services used by TaniTokou from time to time.
• Billplz Sdn Bhd — for payment processing for supported transactions.
• PostHog — for the anonymous usage statistics described in Section 6.

These providers may process limited information necessary to perform their respective services.

TaniTokou does not intentionally disclose more personal data to a service provider than is reasonably required for the relevant function.

If a principal provider changes and the change materially affects the handling of personal data, this Privacy Policy will be updated.

11. WhatsApp and Meta

TaniTokou uses WhatsApp services provided by Meta for certain account-related functions, including supported telephone-number or account verification.

When information is transmitted using WhatsApp, Meta or WhatsApp may process that information according to their own terms and privacy practices.

WhatsApp is not the buyer-seller chat system within TaniTokou.

Buyer-seller conversations arising through TaniTokou are handled through the TaniTokou chat system.

12. Email

TaniTokou may use your email address to send service-related communications, including:

• account verification;
• security information;
• order notifications;
• transaction or payment information; and
• important service notices.

Email delivery may be provided using services supplied by Zoho Corporation.

13. Payments

Payments supported by TaniTokou may be processed through Billplz.

Where necessary to create or reconcile a payment, TaniTokou may provide transaction-related information to the payment provider, such as:

• payment amount;
• order number or reference;
• transaction reference; and
• contact information required for the transaction.

TaniTokou does not ask users to provide their online-banking passwords to TaniTokou.

Payment providers may separately process information according to their own privacy practices and legal obligations.

14. Data Security

TaniTokou takes reasonable technical and organisational measures intended to protect personal data against:

• unauthorised access;
• accidental loss;
• misuse;
• alteration;
• unauthorised disclosure; and
• destruction.

Access to personal data is restricted according to operational and security requirements.

No internet-based service can guarantee absolute security. Nevertheless, we will continue to use reasonable safeguards appropriate to the nature and sensitivity of the information being processed.

If a personal-data breach occurs, Sohugy Dynamics Enterprise will take the actions required by applicable law and notification requirements. Malaysia's Personal Data Protection Commissioner currently maintains specific guidance and a circular concerning data-breach notification.

15. Data Retention and Account Deletion

TaniTokou does not intend to retain personal data longer than reasonably necessary for the purpose for which it was collected, except where longer retention is required by law.

When a verified account-deletion request has been completed, ordinary account information that no longer needs to be retained will be deleted from TaniTokou's active systems without an additional retention period.

Depending on the account, this may include:

• user-profile information;
• profile photographs;
• saved addresses;
• account preferences;
• profile data that is no longer required;
• chat messages that are not subject to a legal retention requirement; and
• other personal information that is no longer required.

Six-month operational retention for orders and transactions

Order and transaction records may remain in TaniTokou's operational systems for up to six (6) months following account deletion.

This limited period enables TaniTokou to complete matters connected with prior transactions, such as reconciliation, payment processing, adjustments or other operational matters concerning those orders.

At the end of the six-month period, information that is no longer required for operational purposes will be deleted or anonymised.

Records retained for LHDN requirements

After that six-month operational period, Sohugy Dynamics Enterprise may still be required to retain the minimum financial, accounting, sales, purchase, payment and transaction records necessary to comply with Malaysian tax and recordkeeping obligations.

LHDN currently states that specified digital-business documents, records and business accounts—including payment-gateway statements, bank statements, sales invoices, purchase records, confirmations of sales and purchases, agreements and receipts—must be kept for seven (7) years.

Accordingly, after six months:

the user's TaniTokou account remains deleted;

however, the minimum records required for LHDN, taxation, accounting, audit or other legal-compliance purposes may continue to be retained for the legally required period.

Information retained solely for these purposes:

• does not constitute an active TaniTokou account;
• will not be used to reactivate the deleted account;
• will not be used to continue ordinary marketplace activity on behalf of the deleted user;
• will not be used for personalised advertising or marketing; and
• will be accessible only where reasonably required for accounting, tax, audit, legal or regulatory purposes.

When the applicable statutory retention period has expired and no other lawful reason requires continued retention, the records will be securely deleted or otherwise disposed of.

16. Your Rights

Subject to applicable Malaysian law, you may contact us to:

• ask about personal data we hold about you;
• request access to your personal data;
• request correction of inaccurate or outdated information;
• update your account information;
• withdraw consent where processing depends upon consent;
• request deletion of your account and eligible personal data; or
• raise questions or concerns about the handling of your data.

The Personal Data Protection Commissioner's official guidance describes the privacy notice as a mandatory part of Section 7 compliance intended to inform individuals about how their personal data is processed.

Requests may be sent to:

contact@tanitokou.com

We may need to verify that a person making a request controls the relevant account before fulfilling certain requests.

17. Account and Data Deletion

You may request deletion of your TaniTokou account and eligible associated personal data.

Detailed instructions will be available at:

tanitokou.com/account-deletion

Deletion of an account does not override any obligation of Sohugy Dynamics Enterprise to retain particular records where required by applicable law.

18. Minors

TaniTokou is primarily intended for people legitimately participating in marketplace activities.

Where applicable law requires parental, guardian or other appropriate permission for a person's use of the service or processing of their personal data, TaniTokou may require such permission or restrict the relevant functions.

If we become aware that information relating to a minor has been improperly collected, we may take reasonable steps to remove it.

19. Processing or Storage Outside Malaysia

Some external service providers used by TaniTokou may operate systems or infrastructure outside Malaysia.

Where personal data is transferred outside Malaysia, Sohugy Dynamics Enterprise will take reasonable steps to handle that transfer consistently with applicable Malaysian data-protection requirements.

Malaysia's Personal Data Protection Commissioner currently publishes dedicated guidance concerning cross-border transfers of personal data.

20. Changes to This Privacy Policy

We may update this Privacy Policy when:

• TaniTokou's functions change;
• our data-handling practices change;
• material service providers change; or
• applicable legal, security or regulatory requirements change.

The latest version will be published on this page with a revised Last Updated date.

Where a change materially affects the handling of personal data, we may provide additional notice where appropriate.

21. Contact Us

For privacy questions, personal-data requests, deletion requests or concerns about this Privacy Policy, please contact:

TaniTokou
A product of Sohugy Dynamics Enterprise

Suite 3.01, 3rd Floor
Wisma Prudential, Lot 10, Kolam Plaza
Luyang, Jalan Lintas
88300 Kota Kinabalu
Sabah, Malaysia

DBKK Trading Licence No.: 920035
Email: contact@tanitokou.com
Website: tanitokou.com