Privacy Policy

1. Who We Are

KTM Watcher is operated by Tan Ee Wai, a sole proprietor based in Malaysia. We operate the seat availability alert service at ktmwatcher.com.

2. Information We Collect

We collect the following information to operate the Service:

• Account information: your email address and password (hashed, never stored in plain text).
• KTMB credentials: your KTMB email and password, encrypted before storage using industry-standard encryption.
• Telegram: your Telegram chat ID, used solely to deliver alerts.
• Watch data: your chosen routes, dates, seat preferences, and alert history.
• Usage data: timestamps of polls, alerts delivered, and credits used.

3. How We Use Your Information

• To provide the seat monitoring and alert service.
• To process credit top-ups and maintain your account balance.
• To send you service notifications via Telegram (alerts, low balance warnings, system notices).

We do not use your information for advertising or share it with third parties for marketing purposes.

4. KTMB Credentials

Your KTMB password is encrypted using AES-256 encryption before it is stored. It is never stored in plain text and is never visible to our staff. It is used solely to search for seat availability on your behalf. You can delete your stored credentials at any time from your dashboard.

5. Data Sharing

We do not sell, rent, or share your personal data with third parties except:

• Where required by Malaysian law or court order.
• With service providers necessary to operate the Service (hosting: Railway, database: PostgreSQL). These providers are bound by confidentiality obligations.

6. Data Retention

Your account data is retained for as long as your account is active. If your account is inactive for 24 months, your credits expire. You may request deletion of your account and all associated data at any time by contacting us.

7. Security

We use industry-standard security measures including encrypted credential storage, secure HTTPS connections, and session-based authentication. No system is completely secure — we cannot guarantee absolute security but we take all reasonable measures to protect your data.

8. Your Rights

You have the right to access, correct, or delete your personal data. To exercise these rights, contact us at support@ktmwatcher.com.

9. Cookies

We use session cookies solely for authentication purposes. We do not use tracking or advertising cookies.

10. Changes to This Policy

We may update this Privacy Policy at any time. We will notify users of material changes via Telegram. Continued use of the Service constitutes acceptance.

11. Contact

For privacy-related questions, contact us at support@ktmwatcher.com.