Privacy Notice

1. Who is responsible

[Operator legal name] ([Operator address]) is responsible for your personal data under Macau Law 8/2005, the Personal Data Protection Act, and notifies the Personal Data Protection Bureau of its processing as that law requires.

2. Why we collect data

• To create and protect your account and confirm you are a real person.
• To verify sellers, so buyers can trust the sellers on the marketplace.
• To prevent, detect and deal with fraud, abuse, prohibited items and rule breaking.
• To provide listings, messages and support.
• To meet legal obligations and cooperate with the authorities when the law requires or allows it.

3. What we collect

• Account: mobile number, display name, sign-in times, device and network records (for example IP address).
• Consent records: the version of the terms you accepted, when, and your age confirmation.
• Seller verification: email address, ID document details, the face liveness result; for business accounts, trade name, registration or tax number, address and contact person.
• Listings: text and photos. We remove location and other metadata from photos on upload.
• Messages and reports: messages with other users, reports you make or receive, and moderation records.

4. ID and face checks

Seller ID and face liveness checks are carried out by a specialist identity verification provider. We ask for your explicit consent before the check starts. We receive only the result, a reference and the date; we do not store your ID images, selfie or face template in our systems, and the provider keeps them only for the limited period set in its contract with us and for no other purpose. If an automated check fails, a person reviews it, and you may ask for a manual review.

5. Legal bases

We rely on: your consent (explicit consent for ID and face checks); what is necessary to perform the user agreement; legal obligations; and our legitimate interest in preventing fraud and abuse, where your rights do not override it.

6. Messages

We store messages to deliver them and screen them automatically for spam, scams, prohibited items and abusive language. Staff may read messages that are reported, flagged by our systems or needed for an investigation. Messages are not end-to-end encrypted.

7. Who sees your data

• Other users see only your display name, listings, approximate area and, for business sellers, the trade details. Your phone number is never shown.
• Service providers for hosting, SMS, email and identity verification, bound by contract to protect the data.
• The authorities, when the law requires it or to report serious or suspected unlawful conduct.

8. Processing outside Macau

Some providers may process data outside Macau. We transfer data only where Law 8/2005 allows it (for example, where there is adequate protection or with your consent).

9. How long we keep data

• Account data: while the account is open and up to 12 months after it closes.
• Seller verification results: while the seller account is active and up to 12 months after.
• Messages: 12 months after a conversation ends, unless a report or investigation needs longer.
• Enforcement and moderation records: up to 3 years.
• System logs: up to 6 months.

10. Your rights

You may ask to access, correct or, where it applies, delete your personal data, and object to some processing (including direct marketing). Email [contact email]. If you are unhappy with how we handle your data, you may complain to the Personal Data Protection Bureau.

11. Security

We use reasonable technical and organisational measures to protect data, such as encrypted connections, hashed sign-in codes, restricted staff access and access logs.

12. Age

The service is not for anyone under 16. If we learn that an account belongs to someone under 16, we close it.

13. Changes

We may update this notice and will tell you in the service about significant changes.