Privacy Policy

Last Updated: 24 January 2026

Gambaq Kotak Studio (“Gambaq Kotak”, “we”, “our”, or “us”) is committed to protecting your personal data and privacy. This Privacy Policy explains how we collect, use, store, and protect personal data in accordance with the Personal Data Protection Act 2010 (PDPA), Malaysia.

By using our website https://www.gambaqkotak.com, contacting us, or engaging our services, you consent to the collection and use of personal data as described in this policy.

1. Personal Data We Collect

We may collect and process the following personal data:

• Full name

• Phone number

• Email address

• Event details (date and venue)

• Photographs, videos, and GIFs captured during events

• Payment information (e.g. bank transfer receipt for booking deposit or full payment)

⚠️ We do not collect IC numbers or national identification details.

2. How We Collect Personal Data

Personal data is collected when you:

• Contact us via WhatsApp or email

• Make a booking through WhatsApp

• Provide payment confirmation

• Use our photobooth services at events

• Communicate with our team for enquiries or support
  
  

Event bookings are coordinated via WhatsApp, and confirmed through calendar invitations sent using Google Calendar.

3. Purpose of Data Collection

We collect and use personal data for the following purposes:

• Managing bookings and event schedules

• Providing photobooth services

• Processing payments and issuing invoices

• Delivering digital photo galleries via Google Drive

• Customer communication and support

• Internal business records and reporting
  
  

4. Photographs, Videos & Marketing Use

Photographs, videos, and GIFs taken during events are considered personal data.

• Photo softcopies are shared with clients via Google Drive links

• We may use selected photos, videos or GIFs taken or generated for portfolio, website, and social media marketing purposes
  
  

Marketing Consent

• Marketing usage is based on opt-in consent

• Clients may opt-out of marketing usage at any time
  
  

If consent is withdrawn, we will cease using the relevant media for marketing purposes going forward.

5. Children & Minors

Our services may involve events where children or minors are present (e.g. weddings, family events).

• Consent for collection and usage of photos involving minors is obtained through the event host or legal guardian

• We take reasonable care to ensure such data is handled respectfully and securely

6. Storage & Security of Personal Data

Personal data is stored using the following systems:

• Google Drive – event photos and media

• Google Sheets – invoices, payment records, package details

• Gmail & Whatsapp – customer communication

• Local business computers – temporary storage before secure cloud synchronisation

Access to personal data is restricted to authorised staff only. We take reasonable technical and organisational measures to protect personal data from loss, misuse, unauthorised access, or disclosure.

7. Data Sharing

We do not sell, rent, or trade personal data.

Limited data may be shared only when necessary:

• Printing vendors (e.g. customer name for guestbook cover design only)

• Cloud service providers (Google) for business operations

• Authorities if required by law

8. Data Retention

We retain personal data as follows:

• Booking and transaction records: retained indefinitely for business, tax, and audit purposes

• Photographs and media files: retained for approximately 3 months, unless otherwise agreed

Data is securely deleted when no longer required.

9. Your Rights Under PDPA

You have the right to:

• Request access to your personal data

• Request correction of inaccurate or incomplete data

• Withdraw consent for marketing or data usage (subject to contractual and legal obligations)

Requests can be made by contacting us using the details below.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, operational, or business changes. Any updates will be published on this page with a revised “Last Updated” date.

11. Contact Information

For questions, requests, or concerns regarding this Privacy Policy or your personal data, please contact:

Business Name: Gambaq Kotak Studio
Email: admin@gambaqkotak.com
WhatsApp: +6011-2110-2542
Website: https://www.gambaqkotak.com