Privacy Policy
This Privacy Notice and its Addendum(s) (“Privacy Notice”) describe how DUDU CAR SBN BHD, its respective subsidiaries, affiliates, associated companies and jointly controlled entities (collectively “DUDU”, “we”, “us” or “our”) collect, use, process and disclose your Personal Data through the use of DUDU CAR’s mobile applications and websites (respectively “Apps” and “Websites”), as well as products, features and other services, operated by DUDU CAR (collectively, “Services”).
This Notice applies to our consumers, drivers and service providers (collectively “you”, “your” or “yours”).
"Personal Data" refers to any information that can identify you or make you identifiable. This encompasses a variety of details such as your name, nationality, phone number, bank and credit card information, personal preferences, email address, photographs, government ID numbers, biometric data, race, birth date, marital status, religion, health records, vehicle and insurance details, employment records, and financial data.
We typically collect, use, disclose or otherwise process your Personal Data in accordance with this Privacy Notice with your consent, or in compliance with applicable laws, such as where:
It is necessary for us to adhere to legal obligations;
it is required for us to engage in or fulfill a contract with you; and/or
for our legitimate interests, or those of others, including (but not limited to) the purposes described in this Privacy Notice.
I. OBTAINING PERSONAL DATA
We gather Personal Data about you in the ways listed below. We may also combine Personal Data accumulated through these various channels:
When you share your Personal Data with us
We collect your Personal Data when you share it to us. For example, when you:
fill up a registration form as a user or customize your profile (such as your name, contact information and other identification information where needed);
submit information to assess your eligibility to provide services as a DUDU driver (such as your driver’s license information, and background check results);
provide supporting documents, such as proof of disability and discount eligibility, so that we can examine you better as a DUDU driver or user on our platform;
share information to evaluate your suitability to be a DUDU CAR’s vendor, supplier, or other partner (such as the name and contact information of the authorized representative)
engage with DUDU CAR’s social media platforms (such as your social media account ID, profile photo and any other publicly available data);
partake in campaigns or activities held by us (such as the pictures, audio, or videos you may submit, which may include images of yourself);
fill up demographic information in questionnaires and research forms (such as your age, gender, and other information you may volunteer such as your marital status, occupation and income information);
apply for loans, insurance claims or other financing products to enable us to assess your eligibility (such as earning statements, bank statements, accident information, and relevant information you may volunteer);
connect with us through our various customer support channels (such as chat, messages, emails, call recordings, pictures you submit to support your claim);
accept to take our rides with in-vehicle audio and/or video recording features;
verify your identity through various means (such as social media logins, submission of selfie images or independently verified payment card information). For example, if you are a user, we may confirm your identity through selfie images as an added layer of security. If you are a DUDU driver, you may be required to authenticate your identity with a selfie before or after rides to help prevent unauthorized use of your driver account.
Via our Apps, Websites, and Services
Personal Data may be gathered in the course of using our Apps, Websites, and Services. Some examples are:
Your location information
Feedback, ratings, and compliments
Transaction details (such as payment method)
Information regarding your interactions with our Apps, Website, or Services (including features used and content viewed)
Device information (including hardware model, serial number, IP addresses, file and app names and versions, GPS location, IMEI number, advertising identifiers, or any data that may indicate device or app modification)telematics data (such as speed, acceleration and braking data);
We may also collect and process the following information through specific tools:
Telematics Data:
We will install telematics devices in vehicles for purposes including:
Ensuring vehicles are properly maintained and serviced in a timely manner;
Supporting the safety, security, and integrity of our products and services;
Improving and enhancing our products and services; and
Internal vehicle tracking, analysis, and administrative purposes.
We own telematics data and are contractually required to protect and safeguard this data.
In-app Communication Data:
Personal data you enter when using our in-app messaging or communication features.
Audio/Video Data Captured During Rides:
Personal data that may be collected through your interactions with us, our agents, or via in-vehicle audio and/or video recordings (which may capture your image, voice, or both, along with related metadata).
In-vehicle Applications and Devices:
We may install audio and/or video recording devices in vehicles to help promote the safety and security of both drivers and consumers.
Via other channels
We may collect Personal Data — including, but not limited to, your name, contact details, and other identifying information where necessary — from third parties or other external channels. Such sources or channels include:
referral programmes;
our business partners, such as payment providers
insurance and financial providers;
credit bureaus, alternative credit scoring agencies and any other credit reporting organisations;
publicly available or governmental sources of data;
when our users add you as an emergency contact;
when our users add you as a recipient or beneficiary of any use of our Services;
when you use our in-app chat; and
marketing services providers or partners.
Highly confidential personal information
Certain Personal Data that we collect may be highly confidential and classified as sensitive information under applicable laws and regulations in specific jurisdictions. This may include :
Racial or ethnic origin
Religious or philosophical beliefs
Genetic data
Biometric data (like fingerprints, facial recognition, or iris scans)
Health information
Sexual orientation
Criminal records
We collect sensitive Personal Data only with your explicit consent and/or in strict accordance with applicable laws. If you are asked to provide any documentation or information for a particular purpose that may incidentally contain sensitive Personal Data not required for that purpose, you agree to remove or redact such sensitive Personal Data before submitting the documentation or information to us.
When minors or children’s Personal Data is provided to us by you
As a parent or legal guardian, please do not allow minors or children under your care to submit Personal Data to DUDU CAR. In the event that the Personal Data of a minor is disclosed to DUDU CAR, you hereby consent to the processing of the minor’s Personal Data, acknowledge and agree to be bound by the terms of this Notice, and accept responsibility for the minor’s actions.
When other individual’s Personal Data is provided to us by you
In certain situations, you may provide us with the Personal Data of other individuals (such as your spouse, family members, or friends). For example, this may occur when you add them as emergency contacts, use the in-app chat feature, book a ride on their behalf, or designate them as recipients or beneficiaries in connection with our Services. By providing their Personal Data to us, you represent and warrant that you have obtained their consent for their Personal Data to be collected, used, and disclosed in accordance with DUDU CAR’s Privacy Notice.
II. PERSONAL DATA’S USAGE
DUDU CAR may utilize your Personal Data for the following purposes set out in the list below. (“Purposes”). Additionally, if you use DUDU CAR in various capacities (for example, if you are both a driver and a consumer), We may combine and link your Personal Data collected from different interactions and capacities to facilitate your use of our Services and for the purposes outlined below:
Provision of services
We may combine and link your Personal Data collected from different interactions and capacities to facilitate your use of our Services and for the purposes outlined below.
provide you with Services across our service categories;
create, manage, edit and update your account;
authenticate your identity and age (if essential);
confirm your ride details and complete payment transactions;
operate, manage or verify your qualification for application of products, services, promotions, or rewards with DUDU CAR;
conduct due diligence checks and risk assessments / analysis;
offer, obtain, provide, facilitate or maintain insurance or financing solutions;
monitor your trip in real time and identify any unusual route deviations
customise your App experience (such as to recommend products and services relevant to you, identify your preferences or otherwise personalise your experience with DUDU CAR);
improve the flow of your experience, such as automatically filling in your registration information;
perform internal operations necessary to provide our Services, including troubleshooting software bugs and operational problems, conducting data analysis, testing and research, monitoring and analysing usage and activity trends;
ensure the protection and proper functioning of the Services and all related systems and facilities;
allow communications between our users;
invite you to participate in our events, surveys and studies;
enable our partners to manage and allocate fleet resources; and
fulfil the services to you as a data processor, where you have provided consent to the data controller (i.e. the organisation you had purchased goods or services from, and for whom DUDU CAR is providing services on behalf of) for such services to be rendered.
In delivering these services and features, we may utilize both manual processes and automated technologies, including AI-powered services. We are committed to ensuring the accuracy and reliability of these AI-driven solutions and, when necessary, may manually review and verify their outputs.
Customer support
We use Personal Data to resolve customer’s issues. For example, we may:
investigate and resolve concerns;
monitor and enhance the quality of our user support responses;
address questions, comments and feedback; and
keep you informed about actions taken to resolve user support issues.
Safety and protection
We utilise your data to make sure the safety and protection of our Services and all users. This includes:
check driver’s identity before allowing their use of our Services;
recognizing dangerous driving behaviour such as speeding, harsh braking and acceleration, and providing suggestions to drivers;
using device, location, profile, usage, in-carriage activities and other Personal Data to prevent, detect and combat fraud or dangerous actions or events;
sharing the location and details of drivers and passengers when the emergency button is enabled;
verifying your identity when you log in to DUDU CAR;
using gender information, for personalising your experience on our platform, such as same gender ride allocations and;
monitoring compliance with our terms and conditions and policies.
Research, improvement, security
We may utilise the Personal Data we collect for testing, research, analysis, machine learning, and product development. This helps us to understand better your needs and preferences, protect your Personal Data, enhance the safety and security of our Services, create new features, products and services, and support development of insurance and financial solutions.
Compliance with legal requirements
We may utilise the Personal Data we gathered for legal purposes, such as to examine and resolve any claims or disputes, detect/prevent/prosecute crime, or as allowed or required by applicable law.
We may also use your Personal Data when required, advised, recommended, expected, or requested by our legal counsel or by any local or foreign legal, regulatory, governmental, or other competent authority.
For example, we may use your Personal Data to:
comply with court orders, legal obligations, or governmental and regulatory requirements;
enforce our Terms of Service and other applicable agreements; and
safeguard our rights or property in the event of any claim, dispute, or legal action.
Marketing and promotions
We may use your Personal Data for advertising, promotional communications, and marketing campaigns (that may be of interest or relevance based on your profile), or DUDU CAR’s partners’, sponsors’ and advertisers’ products, services, events or promotions. For example, we may:
send you special offers that may be of interest or relevant to you across all of DUDU CAR’s service;
provide you with alerts, newsletters, updates, mailers, promotional materials, special privileges, festive greetings; and
inform, invite and manage your participation in our events or activities.
We may send marketing information to you through, where applicable (including by SMS, chat applications (e.g. WhatsApp, Telegram, LINE, WeChat), push notification, call, and by email).
If you wish to unsubscribe from receiving such marketing communications:
click the unsubscribe link provided in the relevant email or message.
update your communication preferences in the settings section of our App.
Please note that even if you opt out of marketing or promotional messages, DUDU CAR may still send you important account-related or service-related communications, such as two-factor authentication codes, transaction information, reward notifications, and other essential updates.
III. TRANSMISSION OF PERSONAL DATA
We will transfer your Personal Data with various parties for the Purposes and the parties include:
Fellow users of the services
For example:
if you are a consumer, we may share your registered name or username, pick-up and drop-off locations with our driver to fulfill your service request;
if you are a driver, we may share to the user your Personal Data such as your name and photo, vehicle make, model, number plate, location, contact and average rating;
if you use our in-app chat service, we may share your mobile number and DUDU CAR-registered name with the drivers.
Third-party entities
With third parties related to your use of DUDU CAR Services
For example:
if you are a passenger, we may share the vehicle’s location, driver’s and/or your name with third parties (such as your emergency contact) when you activate the Emergency Button.
if you are the driver, we may share your vehicle plate number or other personal data to the insurance company and/or to your passenger for the purpose of initiating insurance claims.
if you use our payment services, your Personal Data may be shared with another individual if you authorize the connection of their third-party payment method to our system to enable your payment on DUDU CAR.
With our legal representatives and official agencies
We may share your Personal Data with our legal advisors, law enforcement officials, government authorities and other third parties. This may take place to fulfil the legal purposes (mentioned above), or any of the following circumstances:
when necessary to respond to an emergency that endangers the life, health, or safety of an individual; or
when required in the public interest (such as during a public health emergency, for contact tracing, or to protect the community).
With DUDU CAR’s third-party vendors and business partners
We may share your Personal Data to our vendors, consultants, marketing partners, research firms, and other service providers or business partners. This includes:
payment processors and facilitators;
debt collectors;
vehicle solutions partners, vendors or third-party vehicle suppliers.
advertising and marketing partners and platform providers;
data analytics providers;
credit bureaus, alternative credit scoring agencies and any other credit reporting organisations;
background check and anti-money laundering service providers;
cloud storage providers;
document storage and management providers;
insurance and financing partners;
third party intermediaries involved in the managed investment of funds, such as brokers, asset managers, and custodians;
service providers who perform identity verification services; and
research partners, including those performing surveys or research projects in partnership with DUDU CAR or on DUDU CAR’s behalf;
educational and training institute partners;
fleet and merchant partners;
For example:
If you requested a service through a DUDU CAR partner or used a promotion provided by a DUDU CAR partner, DUDU CAR may share your Personal Data with that DUDU CAR partner.
For Business Transfer
We may share your Personal Data with other parties, in connection with any acquisitions, sales, mergers, joint ventures, consolidation, restructuring, financing or any other type of business transactions. However, your Personal Data will remain protected under the commitments outlined in any prior Privacy Notice to which you have consented.
IV. STORAGE OF PERSONAL DATA
We will store your Personal Data only for as long as needed to fulfill the purposes described in this Privacy Notice, unless a longer retention period is required or permitted by applicable law. The duration of personal data storage is based on factors such as the type of data, the reason for its collection and processing, and relevant legal or business considerations. For instance, selfie images will be deleted within 10 years from the date of collection, unless mandated or permitted by law or legal proceedings.
When your Personal Data is no longer required for the provision of DUDU CAR Services, for the stated purposes, or when we no longer have a legal or business justification to retain it, we will take appropriate measures to delete, destroy, anonymize, or restrict access to that data, to ensure it is not used for any purpose other than compliance with this Privacy Notice or for reasons relating to safety, security, and fraud prevention, in line with applicable legal requirements.
V. USE OF COOKIES, TRACKING TECHNOLOGIES AND ADVERTISEMENT ON EXTERNAL PLATFORMS
Cookies
DUDU CAR, along with third-party partners, may use cookies, web beacons, tags, scripts, local shared objects, advertising identifiers, and similar technologies (including software development kits, or SDKs, which function similarly to cookies and may be embedded in the DUDU CAR App to collect information about your interactions with the app) (collectively, “Cookies”) in connection with your use of the Websites and Apps, which may be persistent or stored only during an individual session on your browsers or devices.
Cookies may have unique identifiers, and can be stored on your computer or mobile device, embedded in emails we send to you, or placed our web pages. Cookies may be used for various purposes. For examples:
enable essential functions for the use of our Websites, Services, or Apps;
authenticate your identity and remember your preferences and settings;
deliver and measure the effectiveness of advertising campaigns, including tracking views and clickthrough rates;
analyze website traffic patterns and usage trends;
serve relevant advertisements to you across other apps and websites operated by third parties (either by us or other advertisers); and
enhance the user interface and overall experience by understanding the online behaviors and interests of users interacting with our Websites, Services, or Apps.
DUDU CAR may permit third parties to use cookies on our Websites and Apps to collect the same types of Personal Data for purposes similar to those for which DUDU CAR collects such data. These third parties may also associate the Personal Data they collect with other information they have about you from different sources. Please note that we do not have full access to, or control over, the cookies and tracking technologies used by these third parties.
Restriction of cookies on our websites
You have the right to choose to disable, block or deactivate cookies. However, please note that doing so may impact the availability, functionality, or performance of our Website, Services, or Apps.
You may adjust your internet browser settings to disable, block or deactivate cookies, as well as delete your browsing history or clear your cache. These options are typically found in the “History,” “Preferences,” “Settings,” or “Privacy” sections of your browser. For additional guidance, you may refer to the help section of your browser.
VI. SECURITY OF PERSONAL DATA
We prioritize the protection of your personal data. We will take reasonable legal, physical, organisational and technical measures to ensure that your Personal Data is protected. These measures are designed to prevent the loss, misuse, or unauthorized access of your Personal Data. We limit access to your Personal Data to our employees on a need to know basis. Those processing your Personal Data will only do so with proper authorization and are obligated to maintain strict confidentiality.
However, please be aware that transmitting information over the internet is never entirely secure. Although we will do our best to protect your Personal Data, we cannot guarantee the security of your Personal Data transmitted through any online means, therefore, any transfer of data remains at your own risk.
VII. YOUR PERSONAL DATA RIGHTS
In accordance with applicable laws and regulations, your rights may be entitled to:
request access to your Personal Data and receive a copy of it;
request the correction or update the Personal Data we maintain about you
and/or deletion of your Personal Data, unless we are required to retain it for legal, regulator, or business purposes;
request the restriction of or object to the processing of your Personal Data;
withdraw your consent to the processing of your Personal Data within our possession or control (if the legal basis for such processing is based on your consent);
request receipt or transmission to another organisation, in a machine-readable form, of the Personal Data that you have provided to us where we are using your Personal Data based on consent or performance of a contract; and
complain to the relevant data privacy authority if your data privacy rights are violated, or you believe your Personal Data has been mishandled.
If you are presented with the option to provide your Personal Data and elect not to do so, or if you subsequently withdraw your consent for its use, this may result in our inability to carry out the necessary actions to fulfill the purposes of processing as described in Section II (Use of Personal Data). Consequently, you may be unable to access or utilize certain features of the App or the Services under such circumstances.
Notwithstanding the withdrawal of your consent, we may continue to process your Personal Data to the extent required or otherwise permitted by applicable laws and regulations.
All requests concerning your Personal Data will be subject to screening and verification procedures. To establish your authority to submit such a request, we may require you to provide supporting documentation or other evidence. Upon successful verification, we will give effect to your request within the timelines prescribed by applicable laws.
VIII. AMENDMENTS AND UPDATES
DUDU CAR reserves the right to modify, update, or amend the terms of this Privacy Notice at any time. Any such amendments will be communicated to you via the Application and/or other appropriate channels at least five (5) business days prior to the effective date. The updated version of this Privacy Notice will also be made available on our website.
It is your responsibility to review this Privacy Notice periodically. Your continued use of the DUDU CAR Apps or website, or your continued communication and engagement with DUDU CAR following any modifications, updates, or amendments to this Notice — whether or not you have reviewed them — shall constitute your acknowledgment and acceptance of, and agreement to be bound by, the revised terms.
IX. HOW TO CONTACT US
If you have any queries about this Notice or would like to exercise your rights set out in this Notice, please direct your mail to our company’s official email:
The original of this Notice is written in the English language. In the event of any conflict between the English and other language versions, the English version shall prevail.