Privacy Policy

1. Introduction

JB-SG Link (“JB-SG Link”, “we”, “us”, “our”) operates the website www.jbsglink.com and its related web application, tools, guides, and notification services (collectively, the “Service”). The Service provides information for people travelling between Johor Bahru, Malaysia and Singapore, including live checkpoint conditions, currency exchange rates, fuel prices, public holidays, transport guides, deals, events, and news.

JB-SG Link is operated by [JBSG LINK ENTERPRISE], a business registered in Malaysia [SSM Registration No.: TR0346077-K]. For the purposes of applicable data protection law, we are the data user / organisation responsible for personal data processed through the Service.

This Privacy Policy explains what data we collect, why we collect it, how we use and share it, how long we keep it, and the choices and rights you have. Because our users are located in both Malaysia and Singapore, this Policy is written to comply with the Malaysian Personal Data Protection Act 2010 (“MY PDPA”) and to respect the principles of the Singapore Personal Data Protection Act 2012 (“SG PDPA”).

If you do not agree with this Policy, please do not use the Service.

2. Scope

This Policy applies to:

• the website www.jbsglink.com and all of its pages and subdomains;
• the JB-SG Link progressive web app (PWA) installed to your device from our website;
• forms, tools, and interactive features on the Service (e.g. contact forms, community traffic reports, issue reports, calculators);
• alert and notification services we may offer (e.g. browser push notifications, email alerts, or messaging-platform channels such as Telegram or WhatsApp); and
• our official social media pages, to the extent we receive data from them (the platforms themselves are governed by their own privacy policies).

This Policy does not apply to third-party websites, apps, or services that we link to, including money-transfer providers, banks, merchants, advertisers, and government websites. Their privacy practices are governed by their own policies.

3. Data We Collect

We deliberately collect as little personal data as possible. Most of the Service can be used without creating an account and without telling us who you are.

Data you provide to us

• Contact and feedback forms. When you contact us (e.g. via our contact page, feedback form, or advertiser enquiry form), we collect the information you submit, which may include your name, email address, company name, and the content of your message.
• Community traffic reports. When you submit a crossing report (e.g. “Clear / Moderate / Heavy”) or an issue report (e.g. accident, breakdown, long queue), we collect the report content, the checkpoint, direction, travel mode, zone, any optional free-text note you enter (limited length), and a timestamp. These reports are designed to be anonymous — we do not ask for your name and we do not link reports to an identity. Please do not include personal data (yours or anyone else’s, such as vehicle plate numbers or names) in free-text notes; we may remove notes containing such data.
• Alert subscriptions (current or future feature). If you subscribe to alerts (for example, exchange-rate threshold alerts or checkpoint congestion alerts), we collect the information necessary to deliver them, which may include: a browser push subscription token, your email address, or your messaging-platform handle; together with your chosen alert preferences (e.g. currency pair, threshold, checkpoint, time windows).
• Lead-generation and referral forms (future feature). Certain guides or tools may include optional forms through which you can ask to be connected with a relevant third-party service provider (for example, insurance, remittance, telco, moving, or job-related services). If you complete such a form, we collect the details you enter (which may include your name, contact details, and your request), and we will only do so with your explicit consent given at the point of submission, including consent to share your details with the named category of partner (see “How We Share Data”).
• Advertiser and partner contacts. If you represent a business that engages with us for advertising, sponsorship, or partnership, we collect business contact information and correspondence needed to manage that relationship.
• Surveys and giveaways (future feature). If we run surveys, polls, or giveaways, we collect the responses and entry details you choose to submit, and we will explain at the point of collection how they will be used.

Data collected automatically

• Usage and analytics data. We use Google Analytics to understand how the Service is used. This involves data such as pages viewed, approximate location (city/country level, derived from IP), device and browser type, screen size, referral source, and interaction events. Google Analytics sets cookies and/or uses similar identifiers; see “Cookies and Similar Technologies”.
• Server and security logs. Our hosting and infrastructure providers automatically log technical data such as IP address, request URL, timestamp, and user-agent for security, rate-limiting, abuse prevention, and debugging. For example, community report endpoints may apply IP-based rate limiting to prevent spam and manipulation.
• Device and app data (PWA). If you install the Service as a PWA, your device stores our app shell and cached content locally through a service worker. We do not receive additional personal data from installation itself.
• Local storage and preferences. We may store non-identifying preferences in your browser (e.g. selected checkpoint tab, currency tab, dismissed banners) using cookies, localStorage, or similar technologies. These stay on your device.

Data we do NOT collect

• We do not require account registration for general use of the Service.
• We do not collect payment card details (we do not sell anything directly on the Service at this time; if that changes, payment will be handled by a payment processor and this Policy will be updated).
• We do not collect precise GPS location.
• We do not knowingly collect data revealing race, religion, health, or other sensitive categories, and we ask that you do not submit such data in free-text fields.
• The traffic-camera images displayed on the Service are public images published by the Singapore Land Transport Authority (LTA). They are low-resolution roadway images not intended to identify individuals, and we do not attempt to identify any person or vehicle from them.

4. How We Use Data

We use the data described above to:

1. Operate the Service — display live checkpoint status, aggregate and display community reports, deliver pages, remember your in-page preferences.
2. Deliver alerts you request — send push notifications, emails, or messages according to the alert preferences you set, and stop sending them when you unsubscribe.
3. Respond to you — reply to contact-form messages, feedback, and enquiries.
4. Connect you with partners at your request — pass your lead-form details to the relevant partner, only where you have expressly consented (see “How We Share Data”).
5. Improve the Service — analyse aggregate usage to decide what to build, fix, and prioritise.
6. Maintain security and integrity — detect and prevent spam, abuse, false reporting, scraping, and attacks; enforce rate limits; debug errors.
7. Support our business operations — manage advertiser and partner relationships, measure the performance of placements in aggregate, and maintain records required by law (e.g. tax and accounting records).
8. Comply with legal obligations — respond to lawful requests from authorities where required.

We do not use your personal data to build individual advertising profiles, and we do not sell personal data.

5. Cookies and Similar Technologies

We use the following categories:

• Strictly necessary — required for the Service to function (e.g. security, load balancing by our hosting provider).
• Preferences — remember non-identifying choices you make on the Service (stored locally in your browser).
• Analytics — Google Analytics cookies/identifiers, used to measure aggregate usage.

You can control cookies through your browser settings, including blocking or deleting them. Blocking analytics cookies does not affect your ability to use the Service. Where required by applicable law, we will present a consent mechanism for non-essential cookies.

6. Third-Party Service Providers (Data Processors)

We rely on a small number of service providers to run the Service. They process data on our behalf and are not permitted to use it for their own purposes beyond providing their service to us:

These providers may store data on servers located outside Malaysia and Singapore (commonly in the United States, the European Union, or Singapore). Where personal data is transferred outside Malaysia, we take reasonable steps to ensure it is protected to a standard comparable to the MY PDPA, including by using providers with recognised security practices and contractual data-protection commitments.

7. How We Share Data

With service providers

As described in “Third-Party Service Providers”, to operate the Service.

Aggregated, non-identifying information

We may publish or share aggregated statistics that do not identify anyone — for example, “X reports were submitted this week” or aggregate traffic patterns by hour. We may share such aggregate audience and engagement statistics with advertisers and prospective partners.

With partners, at your request (lead-generation)

If you submit a lead form asking to be connected with a service provider, we will share the details you submitted with the relevant partner only with your explicit consent obtained on the form itself, which will name the category of partner (and, where practicable, the specific partner). Once shared, the partner processes your data under its own privacy policy. You may withdraw consent for future sharing at any time (see “Your Rights and Choices”), though we cannot un-share data already passed to a partner at your request.

Advertisers and sponsors

We do not give advertisers access to your personal data. Advertisers receive only aggregate performance information (e.g. total impressions or clicks on their placement).

Legal, safety, and enforcement

We may disclose data where required by law, court order, or lawful government request, or where reasonably necessary to protect the rights, property, or safety of JB-SG Link, our users, or the public, or to detect and prevent fraud or abuse.

Business transfers

JB-SG Link is operated as a going concern and may in future be reorganised, or the Service (in whole or in part) may be sold, merged, or transferred to another operator. In connection with any such transaction (including due diligence for it), user data may be transferred to the successor operator as part of the transferred assets, provided that the successor agrees to honour this Privacy Policy (or provides notice and choice regarding any material changes). If such a transfer occurs, we will take reasonable steps to notify users, such as a notice on the Service.

8. Data Retention

We keep personal data only as long as needed for the purposes described above:

• Community traffic reports — displayed for a short live window (e.g. up to 90 minutes for status aggregation; issue reports auto-clear after approximately 60 minutes) and retained thereafter only in aggregated or anonymised form for historical pattern features (e.g. heatmaps and “now vs typical” comparisons).
• Contact-form correspondence — retained for as long as needed to handle your enquiry and for a reasonable period afterwards for record-keeping, typically no more than [24] months.
• Alert subscriptions — retained until you unsubscribe, until delivery permanently fails (e.g. expired push tokens are deleted), or until the alert feature is discontinued.
• Lead submissions — retained for up to [12] months for record-keeping and dispute handling, then deleted or anonymised.
• Server logs — retained per our infrastructure providers’ standard rolling windows.
• Analytics data — retained per our configured Google Analytics retention settings.
• Business records — retained as required by Malaysian tax, accounting, and company law.

When data is no longer needed, we delete it or irreversibly anonymise it.

9. Security

We take reasonable technical and organisational measures appropriate to the nature of the data we process, including: encrypted connections (HTTPS) across the Service; access controls and secrets management for our infrastructure; reliance on reputable managed providers with industry-standard security; rate limiting and abuse detection on submission endpoints; and minimising the personal data we collect in the first place.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a data breach that poses a real risk of significant harm to you, we will take steps to notify affected users and relevant authorities where required by applicable law.

10. Children

The Service is general-audience travel and utility information and is not directed at children. We do not knowingly collect personal data from children under 13 (or the higher minimum age required in your jurisdiction). If you believe a child has provided us personal data, contact us and we will delete it.

11. Your Rights and Choices

Subject to applicable law (including the MY PDPA and, for Singapore users, the SG PDPA), you have the right to:

• Access — request a copy of the personal data we hold about you;
• Correction — request correction of inaccurate or incomplete data;
• Withdraw consent — withdraw consent to processing that is based on consent (e.g. alerts, lead sharing), after which we will stop the relevant processing;
• Limit processing — request that we limit processing of your personal data in certain circumstances;
• Deletion — request deletion of data we no longer need or that we hold based on your consent.

To exercise any of these rights, contact us using the details in “Contact Us”. We may need to verify your identity before acting on a request (which, given how little data we hold, is usually done by confirming control of the email address concerned). We will respond within the timeframe required by applicable law (under the MY PDPA, generally within 21 days). We may charge a modest fee for access requests where the law permits.

Unsubscribe shortcuts: every alert email we send includes an unsubscribe link; push notifications can be disabled in your browser or device settings at any time; messaging-channel alerts can be stopped by leaving the channel or blocking the bot.

Anonymous community reports cannot be traced back to a specific person, so we are generally unable to locate or delete an individual report on request.

12. Do Not Track and Global Privacy Control

Some browsers send “Do Not Track” or “Global Privacy Control” signals. Because we do not track users across third-party websites or sell personal data, the Service’s behaviour does not change in response to these signals, but you can block analytics cookies as described in “Cookies and Similar Technologies”.

13. Changes to This Policy

We may update this Policy as the Service evolves — for example, when we launch alerts, lead-generation features, or new integrations. When we make material changes, we will update the “Last updated” date above and, where the change significantly affects how we handle personal data, provide more prominent notice on the Service. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

14. Contact Us

For any questions about this Policy, or to exercise your rights:

• Email: jbsglink@gmail.com
• Contact form: https://www.jbsglink.com/contact
• Business: [JBSG LINK ENTERPRISE], [SSM Registration No.: TR0346077-K], Malaysia

If you are in Malaysia and are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Department (JPDP). If you are in Singapore, you may contact the Personal Data Protection Commission (PDPC).