Privacy Policy

1. Introduction

F Harmthon Production Sdn. Bhd. (Company Registration No. (SSM) is available upon request via the email below; FINAS Licensed Distributor: DF 14/02913), operating as FH Cinema, is committed to protecting your personal data in accordance with the Personal Data Protection Act 2010 (Act 709) of Malaysia (“PDPA”).

This Privacy Policy explains how we collect, process, use, store and protect your personal data when you use our website and services at fhcinema.com.my.

2. Personal Data We Collect

We may collect and process the following personal data:

2.1 Information you provide directly

• Full name
• Email address
• Phone number (if provided)
• Password (stored using a secure hash such as Argon2id / bcrypt)
• User profile information

2.2 Payment information

• Transaction details (amount, date, status)
• Selected payment method
• Payment reference ID

Note: Card/banking details are processed directly by third-party payment gateways (e.g. Fiuu / Razer Pay, PayPal where enabled) and are not stored in our systems. Those providers apply PCI DSS controls as applicable.

2.3 Information collected automatically

• IP address
• Browser and device type
• Pages visited and approximate visit duration
• Watching history and content preferences
• Cookie / session data

3. Purpose of Processing

In line with the PDPA, we process your personal data to:

• Provide and manage your user account
• Process purchases, rentals, memberships and related orders
• Deliver video streaming and live services
• Send account and transaction notices
• Provide customer support
• Improve our services and user experience
• Prevent fraud and unauthorised activity
• Comply with applicable legal requirements

4. PDPA Principles

We observe the seven PDPA principles, including General, Notice and Choice, Disclosure, Security, Retention, Data Integrity and Access.

5. Consent

By registering an account or using FH Cinema services, you consent to the collection and processing of your personal data as described in this policy.

You may withdraw consent at any time by contacting us. Withdrawal may affect our ability to provide certain services.

6. Disclosure to Third Parties

Your personal data may be shared with processors that help us deliver the service, including:

• Payment gateways — Fiuu (Razer Pay), PayPal (if enabled)
• Video / streaming providers — e.g. Bunny Stream / CDN, Cloudflare Stream, Vimeo or YouTube where used for content delivery
• Authentication providers — Google / Facebook sign-in (if enabled by you)
• Hosting / infrastructure providers — for operating the website and databases
• Lawful authorities — when required by law or court order

We do not sell your personal data to third parties for marketing.

7. Cookies

We use cookies and similar technologies for:

• Essential cookies — login session and security
• Preference cookies — language and display preferences
• Analytics cookies — understanding how the site is used (where enabled)

You can control cookies via your browser settings. Disabling some cookies may affect site features.

8. Data Security

• SSL/TLS encryption for data in transit
• Secure password hashing (Argon2id with bcrypt fallback)
• Access controls for systems and databases
• Periodic security monitoring
• CSRF and XSS protections on forms

9. Data Retention

• Financial transaction records — up to 7 years (company / tax requirements)
• Account data after deletion request — up to 90 days for technical deletion processing, unless longer retention is required by law

10. Your Rights under PDPA 2010

• Access — request a copy of your personal data
• Correction — request correction of inaccurate or incomplete data
• Withdraw consent — withdraw consent to processing
• Object — object to processing for direct marketing

To exercise these rights, contact the Data Protection enquiry email below. We aim to respond within 21 working days.

To delete your account, email fhcinema79@gmail.com with subject “Delete Account”. We will process requests within 14 working days, subject to verification.

11. Policy Changes

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised update date.

12. Complaints

1. Contact us first so we can try to resolve your concern
2. If still unsatisfied, you may lodge a complaint with the Personal Data Protection Department (JPDP): www.pdp.gov.my