Last updated: 20 October 2026
This policy explains how JohorBeer ("we", "us") collects, uses and protects your personal data when you visit our website, place an order or contact us, in line with Malaysia’s Personal Data Protection Act 2010 (PDPA).
Personal data we collect
- Contact and delivery details — name, mobile number, email (optional), delivery address and delivery notes
- Age and eligibility — your date of birth and your confirmation that you are a non-Muslim aged 21 or above. Our delivery team checks your photo ID on delivery; we do not keep a copy of it.
- Order details — products, amounts, payment status and the bank-transfer receipt or reference you send us
- Messages — what you send us on WhatsApp or through our enquiry forms, including business details for wholesale enquiries
- Technical data — IP address, browser type and pages requested, used to run and secure the website
We do not collect card details — payment is by bank transfer only.
Why we use it
- To process, deliver and support your order
- To check that you are legally allowed to buy alcohol
- To answer enquiries and prepare quotations
- To keep the accounting and tax records required by law
- To protect the website and our customers from fraud and abuse
We send promotional messages only if you agree to receive them, and you can stop them at any time by replying STOP on WhatsApp.
Who we share it with
Only as needed to fulfil your order or meet the law:
- our delivery team and the licensed supplier that fulfils your order
- the service providers that host and secure our website (Cloudflare), and WhatsApp (Meta) when you message us
- government authorities, when the law requires it
We never sell or rent your personal data.
Data stored outside Malaysia
Our website runs on Cloudflare’s global network, so your data may be processed on servers outside Malaysia. We take reasonable steps to keep it protected to a standard comparable to the PDPA.
How long we keep it
- Order and payment records: up to 7 years, for accounting and tax purposes
- Enquiries that did not lead to an order: up to 2 years
- Technical logs: only for a short period, for security
How we protect it
Customer data can be seen only by staff who need it, each with their own login, and the website uses encrypted (HTTPS) connections.
Your rights
You can ask to see or correct your personal data, withdraw your consent to marketing, or ask us to stop using data we no longer need. Send your request on WhatsApp to 018-668 8953; we will reply within 21 days. We may first need to confirm your identity.
Under-21s
Our website is for adults aged 21 and above. We do not knowingly collect personal data from anyone under 21.
Cookies and browser storage
- Cart — remembers what is in your cart
- Age confirmation — remembers that you confirmed you are 21+ and non-Muslim
- Staff login — used only in our admin area
We do not use advertising or tracking cookies.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed.