Privacy notice
Last updated: 22 October 2026
Waqti collects the least it needs to run queues and bookings: mostly a name and a phone number. This notice explains what we collect, why, who sees it, and how to ask for a copy, a correction or deletion, as required by Malaysia's Personal Data Protection Act 2010 (PDPA).
Who is responsible
Waqti is run by Mensha codes ("Waqti", "we").
When you join a shop's queue or book a time, you give your details to that shop. The shop decides how to use them, and Waqti stores and processes them on the shop's behalf.
For shop owners and their teams, Waqti is responsible for the account details you give us.
What we collect
From customers who join a queue or book:
- Your name and phone number. Both are needed: without them the shop can't call you or find your booking when you arrive.
- Your visit: the service, the team member you chose, the time you joined or booked, and when you were served.
- Notes the shop's staff add about you, and customer lists a shop imports.
- From shop owners: your name, email, a password (stored only as a secure hash), your shop's details and team names, and records of payments to Waqti. We never see card details.
- From everyone: basic technical logs (such as IP address and browser) kept by our hosting provider for security.
Why we use it
To put you in line, show your place and wait time, let the shop call you, find your booking when you arrive, and let the shop see its own customer history. For shop owners, to run your account, bill you, and give support.
We don't sell personal data, show ads, or send marketing to customers. The TV queue screen in a shop shows ticket numbers, never names or phone numbers.
Support access
If a shop asks for help, a Waqti admin can open its dashboard to fix the problem. These sessions end automatically after a short time and every one is logged.
Where it's stored
Our providers may store data on servers outside Malaysia. We only use providers that protect it to a standard comparable to the PDPA, with encryption in transit and at rest.
Cookies and your device
We use only what the app needs to work: a sign-in cookie for shop accounts, your language and theme choice, and a note on your phone of today's place in line so you can reopen it. No advertising or tracking cookies.
How long we keep it
Visit records stay while the shop uses Waqti, so it can see its own history. When a shop closes its account, we delete its data, including its customer list, within 90 days, except records the law requires us to keep, such as invoices.
Your rights
Under the PDPA you can:
- Ask for a copy of the personal data held about you.
- Ask for it to be corrected if it's wrong.
- Withdraw your consent and ask for it to be deleted.
- Ask for it in a form you can take to another service.
How to make a request
Ask the shop you visited, or email us at the address below with the shop's name and the phone number you used. We reply within 21 days. If we need to check it's really you, we'll ask before sharing anything.
If a security breach puts your data at risk, we will tell the Personal Data Protection Commissioner and you, as the law requires.
Children
If a child is getting a service, a parent or guardian should join or book with their own name and number.
Changes to this notice
If we change how we use personal data, we'll update this page and the date at the top, and tell shop owners by email before it takes effect.
Contact
Questions, or a request about your data? Email us and we'll reply within 21 days.