Privacy Policy

Miracle Indonesia ("Miracle") is a software platform operated by BRAND9 SDN. BHD. The property agency activities carried out through it are conducted separately by AX MIRACLE PROPERTIES SDN. BHD., a registered estate agency in Malaysia (LPPEH E (1) 2167), which is responsible for the personal data described here. This policy explains what we collect, why, who we share it with, how long we keep it, and what you can ask us to do.

It covers two groups of people: Miracle agents and HQ staff who use the platform, and people who send an enquiry about a project through Miracle or through an agent's website.

We handle personal data in line with the data protection law that applies to our service. Where that law gives you rights beyond this policy, those rights still apply.

When an agent registers and works in Miracle, we hold:

• Registration and profile: name, email address, phone number, and a securely hashed password. Agency or company name, licence or registration details, profile photo, biography, focus areas and languages when the agent provides them.
• Sign-in data: session records, the timestamps and outcomes of sign-in attempts, and — where the agent signs in with Google — the account identifier and basic profile Google returns. We never receive a Google password.
• Placement in the organisation: branch, team, role and rank, used for reporting lines and commission structures.
• Agent website content: the projects selected for display, hero and theme settings, uploaded images and published testimonials.
• Subscription status: activation and expiry dates, payment status and the payment provider's transaction reference.
• Support tickets: the messages sent, and the chat transcript when a ticket is opened from the support widget.
• Activity records where participation is recorded by HQ.

When someone enquires about a project — through Miracle, through an agent's website, or through a WhatsApp enquiry flow — we record the name, phone number, email address where given, the message, the project or page the enquiry came from, and the agent it was routed to.

An enquiry is shared with the Miracle agent responsible for that project so they can respond, and is visible to Miracle HQ for operational purposes such as routing, quality and dispute handling.

When an agent submits a sale, the submission includes the customer's name and contact number, the unit reference, the booking or SPA price and date, the developer reference, and a link to the proof of booking uploaded by the agent.

From that submission we create and keep the claim record and its stages, the commission calculated and approved against it, and the payout records that follow. These are business and accounting records: they are retained even after an agent leaves, as described in section 9.

We automatically collect data needed to run and protect the service:

• A session cookie that keeps you signed in, which is removed when you sign out or the session is revoked.
• Usage measurement: pages viewed, referring page, approximate device and browser details, and an identifier stored in your browser (as a first-party cookie and in browser storage) so repeat visits can be counted without identifying you by name.
• Server and security logs, including IP address and request details, used to investigate errors, abuse and fraud, and to enforce rate limits on sensitive actions such as sign-in and password reset.
• Records of administrative actions in the workspace, so HQ changes to accounts, sales, claims and commission can be audited.

We use the data above to:

• Create and run agent accounts, including approval, sign-in and password reset.
• Publish agent websites and the projects an agent has selected.
• Route enquiries to the responsible agent and notify them by email or WhatsApp.
• Process sale submissions, claims, commission calculations and payouts, and keep the records these require.
• Activate and renew subscriptions, and confirm payment status with our payment provider.
• Answer support requests and communicate about your account, subscription or an activity.
• Keep the platform secure: detect and investigate fraud, abuse and misuse, and enforce our terms.
• Understand how the platform is used so we can improve it.
• Meet our legal, tax and record-keeping obligations, and respond to lawful requests.

We do not sell personal data. We share it only as follows:

• With the Miracle agent handling an enquiry, and with the HQ, branch or team leadership responsible for that agent's work.
• With the developer of a project, where the information is needed to register or verify a booking for a sale.
• With service providers acting on our instructions — hosting and content delivery, database, file storage, email delivery, payment processing, and abuse prevention. They may process data only to provide their service to us. We can tell you which providers we currently use on request.
• Where the law requires it, or to establish, exercise or defend a legal claim.
• With a successor if the business or part of it is transferred, subject to this policy.

Subscription payments are collected by BRAND9 SDN. BHD., the merchant for the Miracle Agent Subscription, through approved payment providers that may support cards, online banking and other methods.

We receive the payment status, the amount and the provider's transaction reference; we do not receive or store your full payment credentials.

If you pay by direct bank transfer, we also collect what you tell us about that transfer — the paying account name, the transfer reference and date — and any payment receipt or transfer slip you choose to upload, so that the payment can be verified.

Payment evidence of that kind is restricted to authorised administrative use. It is never published, never shown on your receipt, and is kept only for as long as reasonably required for payment verification, reconciliation, accounting, dispute handling and applicable legal obligations.

Account and profile data is kept while the account exists. If an account is closed, we remove or anonymise what we no longer need.

Enquiries, sale submissions, claims, commission and payout records are kept after a subscription lapses or an agent leaves, for as long as reasonably necessary for business, accounting, audit, dispute-resolution and applicable legal requirements. Once that need ends, they are deleted or anonymised.

Support tickets and technical logs are kept only as long as they are useful for support, security and troubleshooting.

Passwords are stored hashed, never in plain text. Sessions can be revoked centrally, and resetting a password signs out existing sessions. Sensitive actions are rate limited, and access to the HQ workspace is restricted by role and recorded.

Our systems and providers may process data in more than one country, including outside the country you are in.

No service can be completely secure. Keep your credentials safe and tell us immediately if you think your account has been accessed without permission.

Subject to the law that applies to you, you can ask us to give you a copy of the personal data we hold about you, correct it if it is wrong, delete it, or limit how we use it, and you can withdraw consent where we relied on it.

Agents can update most profile data directly in the workspace. For anything else, contact us using the details below and tell us what you would like us to do.

Some data cannot be deleted on request — for example a sale, claim, commission or payout record we must keep for accounting and audit. We will tell you when that applies.

An agent who receives an enquiry through Miracle decides how they then contact and serve that client, and is responsible for handling that person's data in line with the law that applies to them.

Enquiry data may be used only to respond to the enquiry and serve that client — it may not be resold, transferred, or added to unrelated marketing.

Miracle is intended for people aged 18 and over and is not directed at children. If you believe a child has given us personal data, contact us and we will remove it.

We may update this policy as the platform or the law changes. Where a change is material we will tell you by email or through a notice on the platform.

For any privacy question or request, contact support@miracleindonesia.com or +60167385919, or use the support chat on this website. We aim to respond within a reasonable time.