Privacy policy

1. Controller

2. Overview

We only process personal data where necessary to provide this website, to perform a contract or on the basis of your consent. Legal bases are in particular Art. 6(1)(a) (consent), (b) (contract), (c) (legal obligation) and (f) GDPR (legitimate interest).

3. Hosting and server logs

The website and our database run on a server of Shinjiru Technology Sdn Bhd (Kuala Lumpur, Malaysia). The server is located in the Netherlands (European Union), so data is stored within the EU. Because the hosting provider is based outside the EU, the provider may have access to the server from Malaysia for technical maintenance or support. There is no adequacy decision of the European Commission for Malaysia, and the provider does not offer EU standard contractual clauses. We therefore keep the data on the server to a minimum: IP addresses are only stored in shortened (anonymised) form in the server logs, and no order or payment data is stored on the server. When you visit the website, technically necessary data (IP address, date/time, page requested, browser, operating system) is processed to deliver the website and ensure security (Art. 6(1)(f) GDPR). Log files are deleted after 14 days.

4. Database

In our database we only store the media library catalogue as well as reviews and content requests you submit through our forms (see section 12). Trial and order requests are not stored on our server; they are sent exclusively via WhatsApp.

5. Cookies and consent

Without consent we only set strictly necessary cookies (Art. 11.7a Dutch Telecommunications Act):

• consent – stores your cookie choice (12 months).
• NEXT_LOCALE – stores the selected language (session or up to 12 months).

Other cookies (e.g. ref for the referral programme, 30 days) are only set with your consent (Art. 11.7a Dutch Telecommunications Act, Art. 6(1)(a) GDPR). You can withdraw your consent at any time via “Cookie settings” in the footer.

6. Free trial via WhatsApp

When you request a trial, our form only creates a pre-filled WhatsApp message (name, email address, device). This data is not sent to our server; it is only sent to us when you send the message yourself in WhatsApp. We process it together with your WhatsApp number to provide the trial in the chat and to prevent repeated trials (Art. 6(1)(b) and (f) GDPR). If no purchase follows, we delete the data after 3 months.

7. Ordering via WhatsApp and payment

The order form only creates a pre-filled WhatsApp message (plan, price, name, email address, username if applicable). This data is not sent to our server; it is only sent to us when you send the message yourself in WhatsApp. We process it together with your WhatsApp number to perform the contract (Art. 6(1)(b) GDPR). For payment, the privacy terms of the payment provider also apply, e.g. PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. Data required for our records is kept for 7 years under the Dutch tax retention obligation (Art. 52 General Tax Act, Art. 6(1)(c) GDPR).

8. Providing your access

To create or renew your access, we transmit username and term to our technical service provider for the provision of access as a processor.

9. Email address

We only use your email address to match your order and for any queries. We do not send automated emails or newsletters; you receive login details exclusively via WhatsApp.

10. Abuse protection

To prevent automated mass requests, we limit the number of form submissions per IP address and use a field that is invisible to humans. The IP address is only held briefly in memory for this purpose and is not stored (Art. 6(1)(f) GDPR). We do not use third-party services for this.

11. Library data (TMDB)

Movie and series data is retrieved server-side from The Movie Database (TMDB). Images are served via our server; no personal data of yours is transmitted to TMDB. This product uses the TMDB API but is not endorsed or certified by TMDB.

12. Reviews, content requests and referrals

Reviews: we store display name, username, star rating and text (Art. 6(1)(a) and (f) GDPR). The username is only used to check that the review comes from a customer and is not published. Only display name, rating, text and date are published – after our review. You can request deletion of your review at any time.

Content requests: title, type, desired language and optionally your email address are stored to assess your request (Art. 6(1)(b) GDPR) and deleted once handled.

Reseller application: the form only creates a pre-filled WhatsApp message; nothing is stored on our server.

Referral programme: if you open a referral link, we remember the referrer’s username – in the cookie ref for 30 days only with your consent to functional cookies, otherwise only until you reload the page. When you order or request a trial, it is included in the WhatsApp message.

13. Communication via WhatsApp and Telegram

WhatsApp is our main channel for support, trials, IBO Player setup (MAC address and device key) and sending login details. The provider is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. Messages are end-to-end encrypted; WhatsApp/Meta does process metadata (e.g. phone number, time), possibly also in the US (Meta is certified under the EU-US Data Privacy Framework). The legal basis is Art. 6(1)(b) GDPR, for general enquiries Art. 6(1)(f) GDPR. We use the WhatsApp Business app and do not sync third-party address books. Chats are deleted after 6 months unless statutory retention obligations apply.

The same applies to Telegram (Telegram FZ-LLC, Dubai). The links on our website only become active when clicked; no data is transmitted beforehand.

14. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR), and may withdraw consent with future effect. You may lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work or place of the alleged infringement (Art. 77 GDPR) – in the Netherlands this is the Autoriteit Persoonsgegevens.

15. SSL/TLS encryption

This website uses TLS encryption for security reasons.

Last updated: 26 October 2026