Privacy Notice

This notice explains how NCTA processes your personal data in line with the Personal Data Protection Act 2010 (PDPA).

Data we collect

• Account: name, e-mail, password (stored as a hash).
• Orders: plan, amount, payment reference, transaction hash (TXID) and the payer's wallet address visible on the public blockchain. We do not store card numbers or bank account details.
• EA usage: MT5 account number, broker name, EA version and the time of the last licence check.
• Downloads: IP address and download time.
• Affiliate: identity verification (KYC) information and the wallet address for commission payouts, if you join the affiliate programme.
• Cookies: a session cookie (needed to log in), a language cookie ncta_lang, and a referral cookie ncta_ref (30 days) that records the affiliate code if you arrive through a referral link.

Purposes

To run your account, orders and licences; to verify EA licences; to prevent licence sharing and fraud; to send transactional e-mails; to pay affiliate commission; and to comply with the law.

Sharing

Hosting and e-mail providers, blockchain transaction verification services (for example TronGrid), the owner's internal notification services (for example Telegram), and authorities where required by law. Blockchain data is public and cannot be deleted. We do not sell your data. Data may be processed outside Malaysia by these providers.

Retention

For as long as your account is active and afterwards as required by law and financial record-keeping, for the period required by the applicable law.

Your rights

You may request access to, correction of, or deletion of your data (subject to legal obligations) by contacting us through the support e-mail at the bottom (footer) of every page.