Who handles your information
Open Collect Enterprise, the operator of CGX, is responsible for personal information collected through this website. Our registered business details are provided in the footer.
We handle personal data in accordance with applicable Malaysian data protection requirements, including the Personal Data Protection Act 2010, as amended.
Information we collect
Information may include your name, email, username, phone number, shipping address, order details, support correspondence, and member claim, reward and lucky draw records. Account credentials are handled by our authentication service.
Payment providers process payment details through checkout. We do not ask you to send card numbers, passwords or payment credentials by email or WhatsApp. Technical information, such as cookies and browser or device information, may be processed to operate and secure the website.
How we use information
We use information to process payments and orders, arrange delivery, manage membership and box claims, administer rewards and draws, respond to support requests, prevent fraud and meet legal obligations. We do not sell your personal information.
Member usernames and recorded lucky draw winners may be displayed to other signed-in members during live draws. Shipping addresses and account credentials are not part of that display.
Service providers & disclosure
Information is shared as needed with Shopify for store checkout, enabled payment providers, our website and authentication service providers, and delivery partners such as J&T Express, Pos Malaysia and DHL. We may also disclose information when required by law or to investigate fraud.
Some providers may process data outside Malaysia. Where cross-border processing is necessary, we take steps to apply safeguards required by applicable law. Third-party checkout and payment services also have their own privacy policies.
Cookies, security & retention
Cookies and browser storage may support sign-in, cart contents and essential website functions. You can manage cookies using your browser settings, although some functions may stop working.
We use access controls and other reasonable safeguards to protect information. No online service can guarantee absolute security. We retain information only as needed for the purposes described here, dispute resolution and applicable legal or accounting obligations.
Your choices & requests
You may contact support@collectgrading.com to request access to or correction of your personal data, raise a privacy concern, or request account deletion or withdrawal of consent where applicable. We may need to verify your identity. Some records must be retained for legal obligations, and withdrawal may prevent us from providing a requested service.
The current policy is available on this page. Material changes will be reflected in an updated policy and communicated where required by law.