Rakyat Builder Supplemental Privacy Notice

MyDIGITAL Corporation (“MyDIGITAL”, “we”, “us” or “our”) operates the Rakyat Builders Hub (“Hub”) within Rakyat Digital.

This notice supplements the Rakyat Digital Privacy Notice and explains the additional processing associated with Hub features. Read both notices together and where their descriptions of Hub-specific processing differ, this notice applies to that processing to the extent of the difference.

You access the Hub through your existing Rakyat Digital sign-in arrangement using My Digital ID SSO. No separate Hub login credentials are required. Builder onboarding collects additional information to create your profile.

We process:

• Account and profile information: your account reference, name, email where supplied, username, state, technology stack, experience level and building status, together with optional profile details.
• Projects and events: materials you submit, event listing submissions and records of events you select or join.
• Community activity: connection requests, notes, messages, blocks, reports and notifications.
• Optional features and service records: public GitHub information, AI inputs you submit, and relevant technical, administrative and consent records.

We use this information to operate your profile, display projects, enable connections and messages, administer events, provide requested features and notifications, maintain security and handle reports.

The Hub does not request, store or record your MyKad number. Required and optional information is identified during onboarding or use of the relevant feature.

If your profile is public, anyone may see your published profile details, projects, GitHub information, badges and joined events. Your account name and email are not automatically displayed as public profile fields.

If your profile is private, it remains accessible to you and authorised administrators. Connected builders can still see your username, photograph and Verified mark.

Approved event listings publicly display the submitted organiser name and email. Obtain permission before submitting another person’s contact details.

Public information may be copied or indexed by external services. Changing visibility or removing information cannot ensure removal of copies already obtained by others.

Messages are visible to the participants, rather than other builders, but are not end-to-end encrypted. Authorised infrastructure personnel may access stored information where necessary to operate the service.

For reported content, authorised reviewers may read the reported message and up to ten preceding messages, or the reported connection request note. Administrative access to reports is logged.

Removing a connection or blocking someone stops new messages but does not delete messages already sent. Contact us if suspension prevents you from using these controls.

• Rakyat Digital systems. Profile, project and event participation records, including private records, are exchanged with other Rakyat Digital systems using your account reference. The exchange excludes your name and email but is not necessarily anonymous. Connections, messages, notes, blocks, reports and notifications are not exchanged with those systems.
• Event administration. Authorised administrators may view and download event participation lists, including email addresses, to administer and contact participants about the relevant event.
• GitHub. Connecting GitHub is optional. The Hub reads your GitHub login and public information; it does not access your private code. You may disconnect it using the available controls. Disconnection does not automatically remove content you separately submitted.
• Providers supporting hosting, maintenance and security may access relevant information for their assigned functions, subject to appropriate safeguards. Other lawful disclosures follow the Main Privacy Notice.

We apply appropriate safeguards and retain information only as necessary for the relevant service, security, complaint-handling or legal purpose.

You may update your profile, change its visibility, disconnect GitHub, remove connections, block builders or request deactivation or deletion of your builder profile.

Making a profile private does not stop the internal processing described above. A Hub deactivation or deletion request does not, by itself, close your Rakyat Digital or My Digital ID account.

The rights and request procedures in the Main Privacy Notice also apply. Where consent is withdrawn, we will explain any effect on the relevant feature.

For privacy questions, requests or complaints, contact support@rakyatdigital.gov.my.

We will publish updates with a revised effective date and notify you of material changes through an appropriate channel.