Security & Trust

BITSTRIC is designed with a security-first and privacy-aware operating posture. We aim to collect only the information needed to respond to enquiries, deliver services, support client engagements, and maintain the website safely.

1. Security-First Handling

We apply access controls, confidentiality obligations, logging, monitoring, and secure configuration practices to help protect the information we process. Where appropriate, we use encryption, least-privilege access, workspace separation, and incident response procedures to reduce risk.

2. Cookies and Tracking

Our website may use essential, functional, analytics, and preference cookies, together with similar technologies such as pixels, tags, and web beacons. Essential cookies help the site operate securely. Analytics and functional cookies are used to understand usage patterns, improve performance, and support a better experience, subject to the controls available on the site.

Users can manage cookies through the website controls where available and through browser settings. Disabling cookies may affect some website features.

3. Data Minimization and Retention

We aim to avoid collecting unnecessary personal data. For enquiries and client work, we generally retain information only for as long as needed for service delivery, support, security, dispute handling, legal obligations, or legitimate business purposes. Where possible, we may also keep aggregated or anonymized records for internal analytics and service improvement.

4. Third-Party and Service Provider Handling

We may rely on trusted cloud, analytics, CRM, email, collaboration, security, and AI infrastructure providers to support our website and services. We expect these providers to follow contractual, security, and confidentiality safeguards appropriate to their role.

5. Cross-Border Safeguards

Some information may be processed or stored outside Malaysia, including in the United States or other regions where our service providers operate. When that happens, we use safeguards such as contractual protections, access controls, encryption where appropriate, and vendor due diligence to help protect the data.

6. AI and Model Use

BITSTRIC does not intentionally use client confidential data to train public AI models by default. Any optional use of client data for model fine-tuning, benchmarking, evaluation, or similar improvement work must be separately approved in writing.

7. Requests and Contact

If you want to ask about access, correction, deletion, or other privacy questions, please contact BITSTRIC through the published privacy contact details or the appropriate account channel. Where BITSTRIC is acting under a client engagement, requests may also need to be coordinated with the relevant client contact.

MSA and Data Processing Addendum (DPA) documents are available by request via email or through the Sales team.