Privacy Policy
Privacy Policy
Last Updated: 1st July 2026
Roundtable Lounge respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how Weitizen Sdn. Bhd. trading as Roundtable Lounge (“Roundtable Lounge”, “we”, “us” or “our”), collects, uses, discloses, stores and protects your personal data when you access or use:
- the Roundtable Lounge website and eCommerce platform;
- our mobile, electronic and online services;
- our partnered retail outlets, events and promotional activities;
- our customer service, WhatsApp, email and social-media channels;
- our membership, loyalty, dealer, stockist and partnership programmes; and
- any other products, services or facilities operated by us,
collectively referred to as the “Services”.
This Privacy Policy is intended to comply with Malaysia’s Personal Data Protection Act 2010 and the Personal Data Protection (Amendment) Act 2024. The legislation regulates personal-data processing in commercial transactions and requires organisations to inform individuals about how their information is processed.
By accessing or using our Services, creating an account, placing an order, participating in our programmes or otherwise providing personal data to us, you acknowledge that you have read and understood this Privacy Policy.
1. AGE-RESTRICTED PRODUCTS
Roundtable Lounge offers products that may be subject to statutory age restrictions, including tobacco products, alcoholic beverages and other regulated products.
Our Services are intended only for persons who have reached the minimum legal age required to purchase the relevant products in their jurisdiction.
You may be required to confirm your date of birth and provide a valid government-issued identification document for age-verification purposes. We reserve the right to refuse registration, access, sale, delivery or collection where:
- the applicable age requirement is not satisfied;
- satisfactory proof of age cannot be provided;
- the identification document appears invalid or inaccurate; or
- the transaction is prohibited by applicable law.
We do not knowingly sell tobacco or smoking products to persons below the applicable legal age. Malaysian public-health rules prohibit the sale of smoking products to minors under 18.
Parents and guardians should not permit minors to access or use our Services.
2. PERSONAL DATA WE COLLECT
Depending on how you interact with us, we may collect the following categories of personal data.
2.1 Identity and age-verification information
This may include:
- full name;
- date of birth and age;
- gender, where relevant;
- nationality;
- identity-card or passport details;
- copies or images of identification documents;
- photograph or facial image used for identity verification; and
- verification results or age-eligibility status.
Where possible, we will limit the information retained after verification to what is reasonably necessary for compliance, fraud prevention and record-keeping purposes.
2.2 Contact information
This may include:
- residential, billing or delivery address;
- email address;
- telephone or mobile number;
- WhatsApp or other messaging contact details; and
- social-media username or account information.
2.3 Account and profile information
This may include:
- username and password;
- account number or member identification;
- saved addresses;
- communication preferences;
- membership, dealer, stockist or partner status;
- brand and product preferences;
- rewards and wallet records; and
- account activity and transaction history.
2.4 Transaction and payment information
This may include:
- products viewed, purchased, returned or exchanged;
- shopping-cart and wish-list information;
- order value, quantity and order date;
- billing and delivery information;
- payment method;
- limited payment details supplied by payment providers;
- invoices, receipts, refunds and credit records;
- promotional codes or vouchers used; and
- records of unsuccessful or suspected fraudulent transactions.
Full payment-card information may be collected and processed directly by our appointed payment-gateway providers. We may not have access to complete card details.
2.5 Dealer, stockist, brand and business-partner information
Where you apply to become or interact with us as a dealer, distributor, stockist, supplier, brand owner or other commercial partner, we may collect:
- business and company-registration information;
- director, shareholder or beneficial-owner information;
- business address and contact details;
- bank-account and settlement information;
- tax, licensing and regulatory information;
- authorised-signatory details;
- sales, inventory and order information;
- commercial proposals and correspondence; and
- Know Your Customer, due-diligence or verification documents.
2.6 Technical and usage information
When you access our online Services, we may automatically collect:
- Internet Protocol address;
- device type and device identifier;
- browser type and version;
- operating system;
- language and time-zone settings;
- login records;
- referring and exit pages;
- browsing, search and interaction history;
- session information;
- approximate location derived from device or network information; and
- information collected through cookies and similar technologies.
2.7 Communications and customer-service information
We may collect the content of communications made through:
- telephone calls;
- email;
- WhatsApp or SMS;
- live chat;
- customer-service forms;
- social-media messages;
- reviews and feedback;
- complaints and dispute submissions; and
- event or campaign registrations.
Telephone or video calls may be recorded where legally permitted and where appropriate notice has been provided.
2.8 Images and physical-location information
When you visit our physical outlet, warehouse, event venue or office, we may collect:
- closed-circuit television footage;
- photographs or video recordings taken during events;
- visitor-registration information; and
- delivery, collection or access records.
3. SOURCES OF PERSONAL DATA
We may collect personal data:
- directly from you;
- through your use of our website, platform or partnered retail Services;
- from a person acting on your behalf;
- from your employer, company, dealer, distributor or business partner;
- from payment gateways, logistics providers and verification providers;
- from participating brands, stockists, suppliers or promotional partners;
- from social-media platforms where you interact with our pages or advertisements;
- from publicly available sources;
- from fraud-prevention, compliance or identity-verification providers; and
- from cookies, analytics tools and similar technologies.
Where you provide personal data relating to another person, you represent that you are authorised to provide the information and have informed that person about this Privacy Policy.
4. PURPOSES FOR WHICH WE USE PERSONAL DATA
We may collect, process and use your personal data for the following purposes.
4.1 Providing our Services
This includes:
- creating and managing your account;
- confirming your identity and age eligibility;
- processing orders and payments;
- arranging delivery, collection, returns and refunds;
- managing stock availability;
- issuing receipts and invoices;
- managing memberships, rewards and promotions;
- responding to enquiries and customer-service requests; and
- providing information about products and services.
4.2 Compliance and age verification
We may use your information to:
- verify that you meet applicable age requirements;
- comply with licensing and regulatory obligations;
- conduct Know Your Customer or business-partner due diligence;
- prevent sales of regulated products to prohibited persons;
- maintain required transaction and verification records; and
- respond to lawful requests from regulators or enforcement authorities.
4.3 Business operations
We may use information to:
- operate and improve the Roundtable Lounge platform;
- manage brand, supplier, distributor and stockist relationships;
- conduct inventory, fulfilment and sales administration;
- process commissions, rebates or settlements;
- maintain accounting, tax and audit records;
- manage internal reporting and business planning; and
- evaluate commercial proposals and partnership applications.
4.4 Security and fraud prevention
We may use information to:
- authenticate accounts;
- protect our systems and users;
- detect suspicious transactions;
- prevent fraud, misuse, theft and unauthorized access;
- investigate security incidents;
- enforce our contractual rights; and
- maintain the safety of our customers, employees and premises.
4.5 Analytics and service improvement
We may analyze data to:
- understand customer preferences and purchasing trends;
- improve website functionality and user experience;
- measure campaign and promotion performance;
- evaluate product demand;
- develop new products, services and features; and
- prepare aggregated reports and business insights.
4.6 Marketing and personalization
Where permitted by law, we may use your information to:
- send product launches, invitations, news and promotions;
- recommend products based on your interests or transaction history;
- customize website content and advertising;
- conduct surveys, contests, campaigns and events;
- inform you about brand collaborations and special offers; and
- measure the effectiveness of marketing activities.
You may withdraw from direct-marketing communications at any time.
4.7 Legal purposes
We may use or retain personal data to:
- comply with applicable laws, court orders and regulatory requirements;
- establish, exercise or defend legal claims;
- investigate complaints and disputes;
- protect our rights, property and interests; and
- support a corporate transaction such as a merger, acquisition, restructuring or sale.
Under Malaysia’s personal-data framework, processing includes activities such as collecting, recording, holding, storing, using, disclosing and destroying personal data.
5. BASIS FOR PROCESSING
Depending on the circumstances, we process personal data:
- with your consent;
- to perform or enter into a contract with you;
- to comply with legal and regulatory obligations;
- for our legitimate business interests, where those interests do not override your rights;
- to prevent or detect fraud and security threats;
- to protect vital interests; or
- for other purposes permitted under applicable law.
Where we rely on consent, you may withdraw your consent subject to legal, contractual and operational restrictions.
Withdrawal of consent may affect our ability to provide certain Services, particularly where identity, age, delivery or payment information is necessary to complete a transaction.
6. MARKETING COMMUNICATIONS
Where you have subscribed, consented or where otherwise permitted by law, we may contact you through:
- email;
- telephone;
- SMS;
- WhatsApp;
- mobile or browser notifications;
- social-media platforms; or
- postal mail.
You may opt out by:
- selecting the unsubscribe option in our emails;
- replying “STOP” or following the instructions in a message;
- changing your account communication settings; or
- contacting us using the details stated at the end of this Privacy Policy.
Opting out of marketing communications will not prevent us from sending transactional or service-related messages, such as order confirmations, payment notices, delivery updates, security alerts and changes to our terms.
7. COOKIES AND SIMILAR TECHNOLOGIES
We may use cookies, pixels, tags, software-development kits, local storage and other similar technologies.
Cookies are small files stored on your browser or device that help us recognise your device, remember your preferences and understand how you interact with our Services.
We may use the following types of cookies.
Essential cookies
These are required for functions such as:
- account login;
- shopping-cart management;
- payment processing;
- fraud prevention;
- age-gate functions; and
- website security.
Preference cookies
These remember choices such as:
- language;
- region;
- saved settings; and
- account preferences.
Analytics cookies
These help us understand:
- how visitors navigate the platform;
- which pages are viewed;
- how long users remain on a page; and
- whether technical errors occur.
Advertising cookies
These may be used to:
- deliver relevant advertisements;
- measure campaign effectiveness;
- limit repeated advertisements; and
- understand engagement across websites or platforms.
You may manage cookies through your browser or device settings. Blocking certain cookies may affect the functionality of the Services.
Where required, we will obtain your consent before placing non-essential cookies.
8. ONLINE ADVERTISING AND SOCIAL MEDIA
We may work with advertising, analytics and social-media providers to:
- promote Roundtable Lounge;
- show advertisements to audiences likely to be interested in our Services;
- measure conversions and campaign performance;
- understand customer engagement; and
- create audiences based on website or platform activity.
These providers may collect online identifiers, device information, cookie information and interaction data in accordance with their respective privacy policies.
When you interact with our social-media pages, post public comments, tag us or submit public reviews, the information may be visible to other users and members of the public.
When you access our Services through a third-party login or social-media integration, information may be exchanged with the relevant platform according to your settings and the platform’s privacy policy.
9. HOW WE DISCLOSE PERSONAL DATA
We do not sell or rent your personal data as a standalone commercial product.
We may disclose personal data to the following parties where reasonably necessary.
9.1 Service providers
These may include providers of:
- website hosting and cloud infrastructure;
- IT support and cybersecurity;
- payment processing;
- identity and age verification;
- delivery, courier and logistics services;
- warehouse and fulfilment services;
- customer support;
- email, messaging and marketing services;
- analytics and advertising;
- accounting, audit and professional services; and
- document storage and data management.
9.2 Brands, suppliers, distributors and stockists
Where necessary to process an order, fulfil a transaction or manage a commercial relationship, we may disclose relevant information to participating:
- brand owners;
- suppliers;
- distributors;
- authorised stockists;
- dealers; and
- fulfilment partners.
Only information reasonably required for the relevant purpose should be disclosed.
9.3 Professional advisers
We may disclose information to:
- lawyers;
- auditors;
- accountants;
- insurers;
- consultants; and
- other professional advisers.
9.4 Authorities and legal recipients
We may disclose information where required or permitted by law, including to:
- courts;
- regulators;
- licensing bodies;
- tax authorities;
- law-enforcement agencies; and
- governmental authorities.
9.5 Corporate transactions
Personal data may be disclosed as part of a proposed or completed:
- merger;
- acquisition;
- investment;
- restructuring;
- joint venture;
- financing;
- transfer of business or assets; or
- insolvency proceeding.
Any recipient will be expected to handle personal data in accordance with applicable privacy requirements.
10. INTERNATIONAL DATA TRANSFERS
Some of our service providers, technology providers, affiliates or commercial partners may be located outside Malaysia.
As a result, personal data may be transferred to, accessed from or stored in another country. The data-protection laws of that country may differ from those in Malaysia.
Where personal data is transferred internationally, we will take reasonable steps to ensure that the transfer is made in accordance with applicable legal requirements and that appropriate safeguards are in place.
11. DATA SECURITY
We use reasonable administrative, organisational, physical and technical safeguards designed to protect personal data from:
- loss;
- misuse;
- unauthorised access;
- alteration;
- disclosure;
- copying; and
- destruction.
Our safeguards may include:
- access controls;
- password protection;
- authentication procedures;
- encryption where appropriate;
- monitoring and logging;
- staff confidentiality obligations;
- vendor-security requirements;
- secure backup procedures; and
- incident-response processes.
No electronic transmission, online platform or storage system is completely secure. We therefore cannot guarantee absolute security.
You are responsible for maintaining the confidentiality of your account password and should notify us immediately if you suspect unauthorised use of your account.
12. DATA-BREACH MANAGEMENT
Where we become aware of a personal-data breach, we will investigate and take reasonable steps to contain, assess and remedy the incident.
Where required under applicable law, we may notify:
- the relevant data-protection authority;
- affected individuals; and
- other relevant parties.
The Malaysian Personal Data Protection Department has issued specific guidance concerning data-breach notification under the amended framework.
13. RETENTION OF PERSONAL DATA
We retain personal data only for as long as reasonably necessary to:
- provide the Services;
- maintain your account;
- complete transactions;
- fulfil the purposes described in this Privacy Policy;
- comply with tax, accounting, regulatory and legal obligations;
- prevent fraud;
- resolve disputes;
- enforce agreements; and
- maintain security and business records.
Retention periods may vary depending on:
- the type of information;
- the nature of our relationship with you;
- legal or regulatory requirements;
- applicable limitation periods; and
- whether a dispute or investigation is ongoing.
When personal data is no longer required, we will take reasonable steps to delete, destroy or anonymise it.
Aggregated or anonymised information that no longer identifies you may be retained for business-analysis and statistical purposes.
14. YOUR PERSONAL-DATA RIGHTS
Subject to applicable laws and exceptions, you may have the right to:
- request confirmation as to whether we process your personal data;
- request access to your personal data;
- request correction of inaccurate, incomplete, misleading or outdated data;
- withdraw consent previously provided;
- object to or opt out of direct marketing;
- request information about the purposes for which your data is processed;
- request restriction or cessation of certain processing, where applicable;
- request data portability, where legally applicable;
- make a complaint concerning our handling of personal data; and
- request deletion where we are not legally or contractually required to retain the information.
Malaysia’s Personal Data Protection Department recognises rights relating to access, correction, withdrawal of consent and prevention of processing for direct-marketing purposes, subject to the legislation.
To exercise a right, contact us using the details below. We may request information to verify:
- your identity;
- your authority to make the request; and
- the personal data or account concerned.
Certain requests may be refused or limited where permitted by law, including where the information must be retained for legal, fraud-prevention, contractual, regulatory or dispute-resolution purposes.
15. SENSITIVE PERSONAL DATA
Unless specifically requested for a lawful and necessary purpose, please do not provide us with sensitive personal data, such as information concerning:
- health or medical conditions;
- political opinions;
- religious beliefs;
- criminal allegations or convictions;
- biometric or genetic information; or
- other legally protected sensitive information.
Where sensitive personal data is required, we will process it only as permitted by applicable law and, where required, with your explicit consent. Malaysia’s PDPA generally requires express consent for processing sensitive personal data, subject to limited statutory exceptions.
16. CCTV AND EVENT PHOTOGRAPHY
CCTV may operate at our premises for:
- safety and security;
- prevention and investigation of theft or fraud;
- protection of customers, employees and property; and
- incident management.
Photographs or recordings may also be taken at Roundtable Lounge events, launches or promotional activities.
Where reasonably practicable, notices will be displayed or participants will be informed. You may notify our event team should you not wish to appear in promotional photography, although exclusion may not always be possible for wide-angle or crowd images.
17. THIRD-PARTY WEBSITES AND SERVICES
Our Services may contain links to third-party websites, payment gateways, delivery providers, brand pages or social-media platforms.
We do not control and are not responsible for the privacy practices, security or content of third-party services. You should review the relevant third party’s privacy policy before providing personal data.
18. BUSINESS-PARTNER AND AUTHORISED-USER RESPONSIBILITIES
Brands, dealers, distributors, stockists and other authorised users who receive personal data through the Roundtable Lounge platform must:
- use the information only for authorised purposes;
- maintain confidentiality;
- implement appropriate security safeguards;
- comply with applicable data-protection laws;
- refrain from using customer information for unauthorised marketing;
- notify us promptly of suspected data breaches; and
- delete or return information when it is no longer required.
Access to customer information may be suspended or terminated where misuse is suspected.
19. CHANGES TO THIS PRIVACY POLICY
We may amend this Privacy Policy from time to time to reflect:
- changes to our Services;
- new technologies or business practices;
- legal or regulatory developments; or
- changes to the way we process personal data.
The revised policy will be published with an updated “Last Updated” date.
Where changes are material, we may provide additional notice through the platform, email or other appropriate communication channels.
Your continued use of the Services after the revised Privacy Policy becomes effective constitutes acknowledgement of the updated policy.
20. CONTACT US
For enquiries, requests or complaints relating to this Privacy Policy or the handling of your personal data, please contact:
Roundtable Lounge
Operated by ; Weitizen Sdn Bhd
Registered Address: 1-13A-3A, Plaza Aurora SOVO, Jalan Persiaran Jalil 1, 57000, Bukit Jalil, Malaysia
Email: hello@roundtable.com
Telephone / WhatsApp: +60163331927
Website: app.rtlounge.com
Operated by ; Weitizen Sdn Bhd
Registered Address: 1-13A-3A, Plaza Aurora SOVO, Jalan Persiaran Jalil 1, 57000, Bukit Jalil, Malaysia
Email: hello@roundtable.com
Telephone / WhatsApp: +60163331927
Website: app.rtlounge.com