隐私政策 Privacy Notice Notis Privasi
这份通知说明 M3 收集哪些个人资料、为什么收集、给了谁、保存多久，以及你有哪些权利。依据马来西亚《2010 年个人资料保护法令》（PDPA，经 2024 年修正案修订）。 This notice explains what personal data M3 collects, why, who it is shared with, how long it is kept, and what rights you have. Issued under Malaysia's Personal Data Protection Act 2010 (as amended by the Amendment Act 2024). —
🚨 这是草案This is a draftDraf
本页仍在法务复核中，复核后可能更新。标有 [[ ]] 的部分待填。 This notice is still under legal review and may be updated. Items marked [[ ]] are still to be filled in. Notis ini masih disemak dan mungkin dikemas kini.
☠️ PDPA 第 7(3) 条要求书面通知同时以英文和马来文提供。马来文版本尚未完成 —— 上线前必须补上。切换到 BM 目前只会看到这段说明。 ☠️ Section 7(3) of the PDPA requires this written notice in both English and Bahasa Malaysia. The Malay version is not ready yet and must be added before launch. Switching to BM currently shows only this note. ☠️ Seksyen 7(3) PDPA menghendaki notis ini disediakan dalam Bahasa Malaysia dan Bahasa Inggeris. Versi Bahasa Malaysia belum siap dan mesti dilengkapkan sebelum pelancaran. Sila rujuk versi Bahasa Inggeris buat masa ini.
1. 谁是资料控制者Who is the data controllerPengawal data
AURA RETREAT SDN. BHD.（公司注册号 202501038161 / 1639570-P）是本服务的资料控制者。 AURA RETREAT SDN. BHD. (company registration number 202501038161 / 1639570-P) is the data controller for this service. —
资料保护主任（DPO）：[[DPO 姓名与联系方式]] 🚨 [[必须任命并向个人资料保护专员通报 — 2025 年 6 月起的法定义务]] Data Protection Officer: [[DPO 姓名与联系方式]] 🚨 [[must be appointed and notified to the Commissioner — statutory since June 2025]] —
2. 我们收集什么What we collectData yang dikumpul
M3 的 iPhone / Android App 打开的是同一个服务，收集的资料与网页版相同；App 只在你用到相应功能时才向系统申请权限：相机（扫码）、麦克风（录语音留言）、相册（选图发帖、保存海报）与通知。你可以随时在手机设置里关掉。 The M3 iPhone and Android apps open the same service and collect the same data as the website. The apps ask for device permissions only when you use the related feature: camera (scanning codes), microphone (recording voice notes), photos (choosing images to post, saving posters) and notifications. You can turn these off at any time in your phone settings. —
| 类别CategoryKategori | 具体资料DetailsButiran |
|---|---|
| 账户Account— | 邮箱、密码（加盐哈希储存，我们看不到明文）、姓名（可选）、语言偏好、推荐码与推荐关系（注册时或之后绑定的推荐人；用社区邀请码加入社区时绑定的，记录该社区的社区主为推荐人；客服更改推荐人时记录原因）Email, password (stored salted and hashed — we cannot read it), name (optional), language preference, referral code and referral relationship (the referrer set at or after sign-up; if set when you joined a community with its invite code, that community's owner; if support changes it, the reason)— |
| 交易与账务Transactions— | 购买记录、M3 积分与 M3 余额流水、兑换与核销记录、提现申请与收款地址；你上架产品的话，还有上架租金的扣款、到期提醒、宽限与暂停记录；兑换或出售收 M3 余额的商品时，代管的金额、核销时间、转给商家或退回的记录；你是社区主的话，还有该社区的 Pro 订阅记录（试用与到期日、自动续费开关、续费提醒与每次扣款）；进阶会员的订阅记录（到期日、自动续费开关、续费通知与每次扣款），以及社区主那边每笔订阅收入的待入账与入账记录；你开通 M3 Plus 的话，还有 M3 Plus 的订阅记录（周期、到期日、自动续费开关、续费提醒与每次扣款）Purchase records, M3 Point and M3 Credit ledgers, redemptions, withdrawal requests and the addresses you give us; if you list products, listing rent charges, due-date reminders, grace periods and pauses; for items priced in M3 Credit, the held amount, when it was redeemed, and when it was paid out or returned; if you own a community, its Pro subscription record (trial and end dates, the auto-renewal setting, renewal notices and each charge); premium membership records (end date, the auto-renewal setting, renewal notices and each charge), and for owners each payment's pending and paid-in record; if you take out M3 Plus, your M3 Plus subscription record (period, end date, the auto-renewal setting, renewal reminders and each charge)— |
| 链上资料On-chain— | 为你派生的充值地址、交易哈希、你提供的提现地址。这些资料本身在公链上是公开的。The deposit address derived for you, transaction hashes, and the withdrawal address you provide. This information is public on the blockchain by nature.— |
| 技术Technical— | 登录会话、IP 位址（部分记录以哈希形式保存）、浏览器与设备特征、访问时间；为防滥用，部分操作（如注册、查询邀请码）按 IP 位址计次数，计数过期后每日清除Login sessions, IP address (hashed in some records), browser and device characteristics, access times; to prevent abuse, some actions (such as registering or looking up invite codes) are counted per IP address, and expired counts are cleared daily— |
| 登录设备 （面容 / 指纹）Sign-in devices (face / fingerprint)— |
你绑定设备时由设备生成的公钥与凭证编号、设备名称（如「iPhone · Safari」，由浏览器标识判断）、绑定与最近使用时间。☠️ 面容、指纹的识别在你的设备上完成，M3 收不到也不储存任何面容或指纹资料。The public key and credential ID your device creates when you register it, a device name (such as "iPhone · Safari", worked out from your browser's identifier), and when it was registered and last used. ☠️ Face and fingerprint recognition happens on your device; M3 never receives or stores any face or fingerprint data.— |
| Telegram （选用）Telegram (optional)— |
只在你用 Telegram 登录或绑定时：Telegram 交给我们的用户编号、用户名、显示名，以及绑定与最近一次登录的时间。我们拿不到你的手机号、聊天内容或联系人。社区主连接 Telegram 群时：群的编号、群名、由谁连接，以及连接与断开的时间；Bot 只认连接指令和「Bot 被移出群」这类系统消息，不读取、不保存群里的聊天。你让「跟我有关的通知」发到 Telegram 时：Bot 会把有人 @你、私信你、回复你、申请结果、你点了提醒的语音房通知发到你的 Telegram，内容包括社区名、发的人的名字和最多 300 字的摘要。在 Telegram 里打开 M3、且你允许 Bot 给你发消息时会自动开启，可以在「我的 → 通知」关掉。Only if you sign in with or link Telegram: the user ID, username and display name Telegram provides, and when you linked it and last signed in with it. We do not receive your phone number, messages or contacts. If an owner connects a Telegram group: the group’s ID and name, who connected it, and when it was connected and disconnected; the bot only acts on the connect command and system events such as being removed from the group, and does not read or store the group’s chat. If notifications about you go to Telegram: the bot sends mentions, direct messages, replies to you, application results and voice-room reminders you asked for to your Telegram, including the community name, the sender's name and a summary of up to 300 characters. This turns on automatically when you open M3 inside Telegram and allow the bot to message you, and you can turn it off under Me → Notifications.— |
| Google （选用）Google (optional)— |
只在你用 Google 登录或绑定时：Google 交给我们的账号编号、邮箱与显示名，以及绑定与最近一次登录的时间。我们拿不到你的 Google 密码、通讯录或其他 Google 服务里的资料。Only if you sign in with or link Google: the account ID, email and display name Google provides, and when you linked it and last signed in with it. We do not receive your Google password, contacts or data from other Google services.— |
| Apple （选用）Apple (optional)— |
只在你用 Apple 登录或绑定时：Apple 交给我们的账号编号、邮箱（你选择隐藏邮箱时是 Apple 的转发地址）、是否为转发地址、显示名（只在第一次授权时给），以及一个加密保存的授权凭据（只用来在你解绑或删除账户时到 Apple 撤销授权），和绑定与最近一次登录的时间。我们拿不到你的 Apple 密码或其他 Apple 服务里的资料。Only if you sign in with or link Apple: the account identifier Apple gives us, your email (Apple's relay address if you chose to hide your email) and whether it is a relay address, your name (provided only the first time you authorise), an encrypted authorisation credential (used only to revoke the authorisation with Apple when you unlink it or delete your account), and when you linked and last signed in. We never receive your Apple password or data from other Apple services.— |
| 社区Communities— | 你加入的社区、角色与加入时间；你发布的帖子、评论、点赞与活动报名；你在群聊里发的消息（含图片、语音与视频；视频文件在发出 30 天后自动删除，被撤回或隐藏的也一样）；你发给社区团队的私信；你提交的举报；你发出与领取的红包记录（含 M3 时刻红包雨的领取记录）；你在帖子和评论里附的语音留言（每段最长 60 秒，跟帖子一样，同一社区的成员听得到）与表情回应；你作为社区主上传的社区 Logo（开通社区主 Pro 时显示在 M3 城的楼顶招牌上）；你解锁的社区课程与学习进度（每节学完没有、课程里传上来的视频看了多少、每节测验与课后测验的分数；这门课所在社区的社区主与版主看得到，课程页上写明）；你作为社区主或版主上传的课程封面图（审核通过后对该社区成员显示；没有被采用的会在 24 小时后删除）；你在社区商店兑换的兑换项与核销记录；活动现场签到的时间；你在社区任务里的进度与领取记录；社区主与版主的管理操作记录（隐藏、禁言、移出）；你申请开社区时填写的社区名、简介、社群规模、所在平台、联系方式与补充说明（只给 M3 团队审核和联系你用，不给其他会员看）。为保护成员，你发布的文字会在发出前由系统自动检查（拦截钓鱼链接、恢复短语与密钥形状的内容，以及色情、博彩、毒品与歧视用语一类的违规字词），检查只看这一段文字、不另存The communities you join, your role and when you joined; posts, comments, likes and event sign-ups you make; the messages you send in group chat (including images, voice notes and videos; video files are deleted automatically 30 days after they are sent, recalled or hidden ones too); the direct messages you send to a community's team; reports you submit; red packets you send and claim (including M3 Moment red packet rain claims); voice notes you attach to posts and comments (up to 60 seconds each; like posts, members of that community can hear them) and your reactions; the community logo you upload as an owner (shown on the rooftop sign in M3 City while the community has Community owner Pro); community courses you unlock and your progress (which lessons you completed, how much of each uploaded course video you watched, and your lesson and course quiz scores; visible to the owner and moderators of that community, as the course page states); course cover images you upload as an owner or moderator (shown to that community's members once approved; images not used are deleted after 24 hours); community store items you redeem and when they are used; when you checked in at an event; your progress and claims in community tasks; records of moderation actions by owners and moderators (hiding, muting, removal); if you apply to open a community, the community name, description, group size, platform, contact details and notes you enter (used only by the M3 team to review and contact you, never shown to other members). To protect members, text you post is checked automatically before it is published (blocking phishing links, anything shaped like a recovery phrase or key, and objectionable words such as sexual, gambling, drug-related or abusive terms); the check reads only that text and stores nothing extra— |
| M3 Plus 与群聊翻译（只在你开通时）M3 Plus and chat translation (only if you subscribe)— | 你每天、每月用了多少次群聊翻译和问 AI（只记次数与用量，用来执行上限与控制成本）。群聊翻译的译文按「哪条消息 · 哪种语言」保存，不记录是谁要的翻译，之后别的 M3 Plus 会员要同一条同一种语言时直接显示；原文被撤回或隐藏后，译文即删除。语音转文字同样：转出来的字按语音文件保存、不记录是谁要的，原消息被撤回或隐藏、或语音文件被删除后即删除。How many group chat translations and AI questions you use each day and month (counts and usage only, to apply limits and control cost). Group chat translations are kept per message and language, without recording who asked for them, and are shown to other M3 Plus members who ask for the same message in the same language; once the original is recalled or hidden, its translation is deleted. Voice-to-text works the same way: transcripts are kept per voice file without recording who asked, and are deleted once the original is recalled or hidden, or the voice file is deleted.— |
| 拉黑Blocking— | 你拉黑了谁、什么时候拉黑。只有你自己看得到，对方不会收到通知；用来把对方的内容和通知从你这里去掉。解除拉黑或删除账户后即删除。Whom you have blocked and when. Only you can see it, and the other member is not told; we use it to remove their content and notifications from your view. It is deleted when you unblock them or delete your account.— |
| M3 展会周M3 Expo Week— | 展会期间你打开过哪个展位、哪一天。我们只存一个由会员编号（没登录时用设备 Cookie）加密算出来的化名编号，不直接存会员编号、不存 IP（这个编号只在 M3 内部能对回是谁）；同一个人同一个展位一天只算一次，只用来排「今天最多人看」，展商和其他会员只看到人数。Which booths you opened during the expo, and on which day. We store only a pseudonymous code computed with a key from your member ID (or, when you are not signed in, a device cookie), not your member ID itself and not your IP address (only M3 can link the code back to an account); one person counts once per booth per day. It is used only to rank “Most visited today”; exhibitors and other members see only the number.— |
| 从 Telegram 搬家 （社区主上传）Moving from Telegram (uploaded by owners)— |
社区主可以贴上原来 Telegram 群付费会员的名单：Telegram 用户名或数字 id、到期日与备注。名单里可能有还不是 M3 会员的人；只用来在本人用 Telegram 登录 M3 时认出他、请他自己确认加入，不用于联系他或作其他用途。社区主撤回、或本人加入后，那一行即失效。🚨 [[社区主上传第三方资料的法律依据与保留期限 — 法务]]An owner can paste the list of paid members from their old Telegram group: Telegram usernames or numeric ids, expiry dates and a note. The list may include people who are not yet M3 members; it is used only to recognise them when they sign in to M3 with Telegram and invite them to confirm joining, never to contact them or for anything else. A row stops working once the owner withdraws it or the person joins. 🚨 [[legal basis and retention for third-party data uploaded by owners — legal]]— |
| 客服Support— | 你在「客服」里提的问题、对话内容与附件，以及处理状态。只给 M3 客服团队看。The questions, messages and attachments you send through Support, and their status. Only the M3 support team sees them.— |
| 通知Notifications— | 只在你选择开启时：你的浏览器推送服务给的订阅地址与加密钥匙、设备名称、最近一次成功送达的时间Only if you turn them on: the subscription address and encryption keys issued by your browser's push service, a device name, and when a notification was last delivered successfully— |
| App 推送 （只在 App 里开启时）App notifications (only if you turn them on in the app)— |
Apple（APNs）或 Google（FCM）给这台手机的推送令牌、平台（iOS / Android）、App 版本、设备名称与最近一次成功送达的时间。关掉通知、退出登录或删除账户后即删除。The push token Apple (APNs) or Google (FCM) issues for your phone, the platform (iOS or Android), the app version, a device name and when a notification was last delivered successfully. It is deleted when you turn notifications off, sign out or delete your account.— |
| 相机（扫码）Camera (QR scanning)— | 扫码时画面只在你的设备上识别，不上传、不储存。只有识别出的内容（例如社区邀请码）按你接下来的操作送到 M3。When you scan a code, the camera image is read on your device only — it is not uploaded or stored. Only the decoded content (such as a community invite code) is sent to M3, as part of whatever you do next.— |
| 麦克风与相册Microphone and photos— | 麦克风只在你按住录语音留言时使用，录下的那一段按你的操作发出（跟帖子一样，同一社区的成员听得到）；我们不在其他时候收音。相册只在你选图发帖或保存海报时打开，只上传你选中的图片。The microphone is used only while you hold to record a voice note, and that recording is sent as you choose (heard by members of the same community, like a post); we never listen at any other time. Your photos are opened only when you pick an image to post or save a poster, and only the images you choose are uploaded.— |
| 身份验证Verification— | 在需要验证身份时收集的证件资料。🚨 [[证件类型与触发条件 — 待 KYC 方案定案]] 证件属敏感个人资料，另需明示同意。Identity documents collected where verification is required. 🚨 [[document types and triggers — pending the KYC decision]] Identity documents are sensitive personal data and require explicit consent.— |
| 商家入驻申请 （只在你申请时）Merchant application (only if you apply)— |
店名、类别、所在国家与城市、联系方式、网站（选填）、打算给会员提供什么、给审核的备注，以及审核结果与理由；经社区「邀请商家」链接提交的，另记下是哪个社区。联系方式只给 M3 审核团队，不显示给任何社区或会员。Shop name, category, country and city, contact details, website (optional), what you plan to offer members, any note for the reviewer, and the review result and reason; if you applied through a community's "Invite merchants" link, which community. Contact details are seen only by M3's review team and are not shown to any community or member.— |
| 链上地址验证 （只在你连接时）On-chain address verification (only if you connect one)— |
你连接的链上地址（最多 3 个，BNB Smart Chain 或 Solana）与连接时间；为某个社区核对持有门槛时读到的余额合计、是否达标与核对时间。我们不收集、也不保存任何密钥或恢复短语，签名只用来证明地址属于你。链上地址与其余额本身在区块链上是公开的。你的地址不会显示给其他会员，社区里只显示「持有人」标记。在「资产」页，M3 会读你已连接地址上 BNB、USDT、USDC 等列出的余额来显示给你（现场读取、约 1 分钟缓存，不写进账户资料）。在「资产」页转出时，你填的收款地址和数量只用来做这一次核对，我们不保存；「这个地址你第一次转」的提醒只记在你自己的设备上。在「资产」页兑换时，你选的两种币、数量、滑点和你用来兑换的链上地址会发给第三方聚合服务 OKX DEX 来报价和准备交易，不附带你的名字、邮箱或账户资料；为了对账，M3 会记下每一笔兑换：你用来兑换的地址、两种币、数量、手续费比例、交易哈希，以及之后在区块链上核对到的结果（有没有成交、收到多少、手续费多少）—— 跟 M3 余额流水一样保存（见保留期限的占位）；准备了但没有发出去的兑换，记录 14 天内删除。交易本身在区块链上公开。删除账户时，兑换记录里的地址会被抹掉，只留下对账需要的币种、数量、手续费和交易哈希。Solana 地址的余额通过 Solana 节点服务商读取（只发地址和代币，不附带你的资料）。The on-chain addresses you connect (up to 3, on BNB Smart Chain or Solana) and when you connected them; when checking a community's holding threshold, the combined balance read, whether it met the threshold and when it was checked. We never collect or store any private key or recovery phrase; the signature is used only to prove the address is yours. On-chain addresses and their balances are public on the blockchain. Your addresses are not shown to other members; communities only show a “holder” label. Under Money, M3 reads the BNB, USDT, USDC and other listed balances at your connected addresses to show them to you (read live and cached for about a minute; not added to your account records). When you send from Money, the recipient address and amount are used only for that one check and are not stored; the “first time sending to this address” reminder is kept only on your own device. When you swap under Money, the two tokens, the amount, the slippage and the on-chain address you swap from are sent to the third-party aggregator OKX DEX to get a quote and prepare the transaction, without your name, email or account details; for reconciliation, M3 records each swap: the address you swap from, the two tokens, the amount, the fee rate, the transaction hash and what we later verify on the blockchain (whether it completed, how much you received and the fee) — kept like your M3 Credit history (see the retention placeholder); swaps that were prepared but never sent are deleted within 14 days. The transaction itself is public on the blockchain. When you delete your account, the address is erased from your swap records, keeping only the tokens, amounts, fee and transaction hash needed for reconciliation. Balances of Solana addresses are read through a Solana node provider (only the address and token are sent, without your details).— |
| 算力中心 （只在你使用时）Compute centre (only if you use it)— |
你写的描述、要抠图时上传的图片、生成的图，以及每一单的项目、付的 M3 积分、状态（做好 / 失败 / 已退回）与时间。生成的图和抠图成功时上传的原图存放在 M3 的图片空间，凭链接可以打开；没做成的那一单，上传的原图会删除。🚨 [[生成图与上传图的保存期限 — 法务]]The description you write, any image you upload for a cut-out, the images produced, and for each order the item, the M3 Points paid, its status (done / failed / refunded) and the time. Generated images, and the uploaded original for a successful cut-out, are kept in M3's image storage and can be opened by anyone with the link; if an order fails, the uploaded original is deleted. 🚨 [[retention for generated and uploaded images — legal]]— |
| 购物返点Shopping Rewards— | 你从 M3 点击进入商家的记录、由此产生的订单编号与金额、你提交申诉时上传的截图Records of clicks from M3 through to a merchant, the resulting order references and amounts, and screenshots you upload when raising a missing-order claim— |
☠️ 我们不收集也不持有你的私钥或助记词。任何自称 M3 向你索取私钥、助记词或密码的人都是诈骗。 ☠️ We never collect or hold your private keys or seed phrase. Anyone claiming to be M3 and asking for a private key, seed phrase or password is attempting fraud. ☠️ Kami tidak sekali-kali mengumpul atau menyimpan kunci peribadi atau frasa benih anda.
3. 为什么收集Why we collect itTujuan
- 建立与维护你的账户、验证登录To create and maintain your account and verify sign-in—
- 处理购买、兑换、核销与提现To process purchases, redemptions and withdrawals—
- 记录推荐关系（你填写的推荐码，或你第一次用社区邀请码加入社区时绑定的社区主）；客服更改推荐人时，通知你和相关推荐人To record the referral relationship (the referral code you entered, or the community owner set the first time you joined a community with its invite code); when support changes a referrer, to notify you and the referrers involved—
- 以你绑定的设备（面容 / 指纹 / 锁屏）、你绑定的 Telegram 或 Google 验证登录To verify sign-in with a device you have registered (face, fingerprint or screen lock) or with the Telegram or Google account you have linked—
- 运作会员社区：显示你的内容、处理举报、让社区主与版主维护秩序；按你在该社区里的动作（签到、发帖、评论、点赞、领红包、学课、测验、活动签到、解锁课程、商店兑换）统计成员分层（社区开通社区主 Pro 时），让社区主与版主了解成员是否活跃，并可只给某一层成员发专属红包（名单在发出时确定、随该红包保存，只通知名单上的人）；另按入群时间汇总新成员的留存比例、汇总领红包之后成员有没有再来（只算人数与比例）；社区主与版主也可以给某一层成员发一句提醒，我们记下这条提醒发给了谁、你有没有在社区页看到、有没有点「知道了」，以及你是否关掉了该社区的提醒To run member communities: showing your content, handling reports and letting owners and moderators keep order; and grouping members by their activity in that community (check-ins, posts, comments, likes, red packets claimed, lessons, quizzes, event check-ins, course unlocks and store redemptions) (when the community has Community owner Pro) so owners and moderators can see who is active and can send a red packet to just one group (the list is fixed when it is sent and kept with that red packet; only people on it are notified); and summarising how many new members stay, by when they joined, and how many members come back after claiming a red packet (counts and percentages only); owners and moderators can also send a one-line reminder to one group, and we record who it was sent to, whether you saw it on the community page, whether you tapped “Got it”, and whether you turned off reminders for that community—
- 运作社区课程与社区商店：记录解锁、学习进度、兑换与核销，把课程扣除平台服务费后的部分记入该社区的社区基金；社区商店另收 M3 余额时，代管这笔 M3 余额，核销后转给社区主或按规则退回；处理兑付问题的报告To run community courses and community stores: recording unlocks, progress, redemptions and when codes are used, recording the part of course unlocks left after the platform fee in that community's fund; where a store item also charges M3 Credit, holding that M3 Credit and paying it to the owner after the code is redeemed or returning it under the rules; and handling reports of items not honoured—
- 审核商家入驻申请并开通上架位；按近 30 天的活跃成员人数与带来的商家数计算社区等级（只用人数，不评估你个人）To review merchant applications and open listing slots, and to work out community levels from the number of active members in the past 30 days and the number of merchants brought in (counts only; it does not assess you as an individual)—
- 按你加入的社区决定每日签到里出现哪些商家定向投放的视频，并把定向投放的分成计入该社区的社区基金（投放的商家只看到播完次数，看不到是谁看了）To decide which targeted merchant videos appear in your daily check-in based on the communities you belong to, and to add the targeted-ad share to that community's fund (the advertising merchant sees only the number of completed views, not who watched)—
- 在你连接链上地址后，核对你是否达到某个社区的持有门槛，并在你领取持有人红包 / 任务奖励时再核对一次Once you connect an on-chain address, to check whether you meet a community's holding threshold, and to check again when you claim a holder red packet or task reward—
- 运作课后测验与结业证书：记录每次交卷的分数（不记录你选了哪个答案）、发放证书，并在你分享的核验链接上显示证书编号、显示名、课程名、颁发社区、日期与分数To run course quizzes and certificates: recording the score of each submission (not which answers you chose), issuing certificates, and showing the certificate number, display name, course, issuing community, date and score on the verification link you share—
- 在你开启「Telegram 通知」后，通过 M3 的 Telegram Bot 把社区公告、活动与红包发到你的 Telegram 私信；Bot 发不到你（例如你停用了 Bot）时会自动关闭Once you turn on Telegram notifications, to send community announcements, events and red packets to you as private messages from the M3 Telegram bot; if the bot can no longer reach you (for example you blocked it), this is switched off automatically—
- 社区主连接 Telegram 群后，把社区里所有成员都看得到的公告、活动与红包通知发到该群（只给部分成员的内容不发），并每周发一条上周的汇总数字（不含任何成员身份；没有动静的那一周不发；社区主可关）；Bot 被移出群或发不进去时自动断开Once an owner connects a Telegram group, to post the community’s announcement, event and red packet notices that every member can see to that group (content limited to some members is never posted); the connection ends automatically if the bot is removed or can no longer post there; once a week a summary of the previous week’s numbers (never who; skipped when nothing happened) is also posted, which the owner can switch off—
- 在公开社区的「社区城」页面上，向任何人（包括没登录的人）展示该社区近 24 小时的汇总数字（例如成员数、领走的红包数）；页面上没有任何成员的身份，也没有具体内容To show anyone (including people who are not signed in) a listed community’s totals for the last 24 hours on its community city page (such as member count and red packets claimed); the page shows no member’s identity and no content—
- 在你开启通知后，把社区公告、活动与红包推送到你的设备To send community announcements, events and red packets to your device once you turn notifications on—
- 运作 AI 社区助手：把你在「问助手」里或在群聊用 @AI 提的问题，连同该社区的公告、活动、课程以及社区主 / 版主给 AI 管家的资料，交给 AI 服务商生成回答（群聊里的回答作为群聊消息显示给该群成员）；AI 答不上的问题只保存问题文字（不保存是谁问的），供该社区的社区主和版主补充答案，30 天内没有人再问同一个问题即删除；为社区主生成上周周报草稿（只用统计数字，不发送成员名字）；记录调用次数与用量以控制成本To run the AI community assistant: sending the question you ask in “Ask” or with @AI in the group chat, together with that community’s announcements, events, courses and the information the owner or moderators gave the AI steward, to our AI provider to produce an answer (answers in the group chat are shown to that group as chat messages); for questions it can’t answer, keeping only the question text (not who asked) so the community’s owner and moderators can add an answer, deleted once no one has asked the same question for 30 days; drafting last week’s recap for owners (using counts only, without sending member names); and recording the number and size of requests to control cost—
- 运作 M3 Plus：扣款、自动续费与到期提醒；把 Plus 会员要翻译的群聊消息交给 AI 服务商翻译并保存译文（见上表）；在群聊里你名字旁显示 Plus 标记To run M3 Plus: charging, auto-renewal and end-date reminders; sending group chat messages that Plus members ask to translate to our AI provider and keeping the translations (see the table above); and showing the Plus badge next to your name in group chat—
- 防止作弊、重复注册、洗钱与其他滥用To prevent cheating, duplicate registration, money laundering and other abuse—
- 发送与你的账户和交易相关的通知To send notifications about your account and transactions—
- 履行法律、税务与监管要求To meet legal, tax and regulatory obligations—
4. 资料从哪里来Where it comes fromSumber
绝大部分来自你本人 —— 注册、购买、提现申请、上架申请与申诉时由你填写或上传。少部分由系统在你使用服务时自动生成（会话、IP 哈希、交易记录），或由你的推荐人在邀请你时提供（推荐码关联）。购物返点的订单状态由联盟网络回传给我们。社区里与你有关的内容（例如别人对你帖子的评论、版主对你的管理操作）由其他成员产生。 Most of it comes from you — what you enter or upload when registering, making a purchase, requesting a withdrawal, submitting a listing or raising a claim. Some is generated automatically as you use the service (sessions, hashed IP, transaction records), or comes from the person who referred you (the referral link). For Shopping Rewards, order status is reported back to us by the affiliate network. Some community content relating to you (such as comments on your posts, or a moderator's action on your account) is created by other members. —
5. 我们把资料给谁Who we share it withPendedahan
| 对象Recipient— | 给什么 · 为什么What and why— |
|---|---|
| 生态方Partners— | ☠️ 只有在你明示授权之后，且只给与该生态方有关的资料。所有读取推荐关系的调用都会留下审计记录。☠️ Only after you explicitly authorise it, and only data relating to that partner. Every call that reads referral relationships is logged for audit.— |
| 接入商家Merchants— | 核销时提供核销码与该次兑换的必要信息（券名、兑换时间）。在 M3 自助上架的商家可以在 App 里自己核销，看到的也只有这些；商家可以自己记下这单的交易额，只供商家自己记账。不提供你的邮箱、姓名或账户资料。The redemption code and what is needed for that redemption (item name, when it was claimed). Merchants who list on M3 can redeem codes themselves in the app and see only the same; they may record the sale amount for their own records. Not your email, name or account information.— |
| 联盟网络Affiliate network— | 一个随机生成、无法反推出你身份的追踪标识，用于把订单对应回你的点击。提交漏单申诉时会转交你提供的订单资料。A randomly generated tracking identifier that cannot be reversed into your identity, used to match an order back to your click. If you raise a missing-order claim, the order details you provide are passed on.— |
| 同一社区的成员Members of the same community— | 你的显示名（你填写的名字；没填写的显示打码后的邮箱）、你的角色与加入日期（显示在成员名单上）、你发布的内容、点赞与活动报名。社区主与版主另可看到被移出与被禁言的成员，以及谁兑换了本社区商店的兑换项（显示名、核销码最后 4 位、兑换与核销时间）；还可看到你在本社区 30 天内最近一次动作是哪一天、所在分层（新人 / 活跃 / 走冷 / 沉默），以及你是否在本社区花过 M3 积分（不显示金额，也不显示你在其他社区的动作）。社区主与版主另看得到本社区的留存与红包效果汇总，以及每条分层提醒发给了几人、几人看到（提醒挂满 7 天后才显示）、之后几人回来（只在留存页、按 7 天计）；一格、一个红包或一条提醒不到 3 人时不显示这些数，也不计入合计。分层与这些汇总只在社区开通社区主 Pro 时提供。以上只有人数与比例，看不到是哪些人，也看不到是谁关掉了提醒。社区主与版主看得到本社区基金的每一笔进出（种类、数额、日期），不显示是谁付的；也看得到本社区带来了几家商家与等级进度（只有人数，看不到是哪些商家）。你是不是本社区的进阶会员（名字旁的「进阶会员」标记）所有成员都看得到，不显示你付了多少、哪天到期。不提供你的邮箱全文或账户资料。Your display name (the name you set, or a masked email if you have not set one), your role and join date (shown on the member list), the content you post, your likes and event sign-ups. Owners and moderators can also see members who have been removed or muted, and who redeemed items from their community store (display name, the last 4 characters of the code, and when it was redeemed and used). They can also see on which day you last did something in that community within the past 30 days, which group you fall into (new / active / cooling / silent), and whether you have spent M3 Points in that community (no amounts, and nothing about your activity in other communities). They can also see retention and red packet summaries for that community, and for each segment reminder how many it went to, how many saw it (shown once the reminder has been up for 7 days) and how many came back afterwards (on the retention page only, over 7 days); none of these figures is shown or added to totals for a cell, red packet or reminder involving fewer than 3 people. Segments and these summaries are only available while the community has Community owner Pro. All of this is counts and percentages only, without showing who, and not who turned reminders off. Owners and moderators can see every entry in and out of the community fund (type, amount, date), without showing who paid, and how many merchants the community has brought in and its level progress (counts only, without showing which merchants). All members of a community can see whether you are a Premium member there (the “Premium” label next to your name), but not how much you paid or when it ends. Not your full email or account information.— |
| 持有证书核验链接的人Anyone with a certificate link— | 证书编号、你的显示名（未填写的显示「M3 会员」）、课程名、颁发社区、日期与分数。不显示邮箱或账户资料；核验页不被搜索引擎收录。链接由你自己决定是否分享。The certificate number, your display name (“M3 Member” if you have not set one), the course, the issuing community, the date and the score. No email or account information; the verification page is not indexed by search engines. You decide whether to share the link.— |
| 推送服务Push services— | 开启通知后，通知经你的浏览器所用的推送服务（视浏览器而定：Google、Apple、Mozilla 或 Microsoft）送达。通知内容按 Web Push 标准加密传送，推送服务只负责转交。Once you turn notifications on, they are delivered through the push service your browser uses (depending on the browser: Google, Apple, Mozilla or Microsoft). Notification content is encrypted in transit under the Web Push standard; the push service only relays it.— |
| Apple 与 App 推送服务Apple and app push services— | 你用 Apple 登录时，你的浏览器或手机直接与 Apple 交换授权；你解绑或删除账户时，我们把授权凭据交回 Apple 撤销。App 通知经 Apple（APNs）或 Google（FCM）送到你的手机，我们只交给它们推送令牌与这一条通知的标题、正文和要打开的页面。When you sign in with Apple, your browser or phone exchanges the authorisation with Apple directly; when you unlink it or delete your account, we return the credential to Apple to revoke it. App notifications reach your phone through Apple (APNs) or Google (FCM); we give them only the push token and that notification's title, text and the page it opens.— |
| 群聊实时服务Real-time chat service— | 群聊启用实时推送时，新消息经实时消息服务商（Ably）即时转给同一社区在线的成员；它只负责转交，聊天记录保存在 M3 自己的资料库。When real-time delivery is on for group chat, new messages are relayed instantly to online members of the same community through a real-time messaging provider (Ably); it only relays them; chat history is stored in M3's own database.— |
| 人机验证服务Bot-check service— | 注册时，页面会加载 Cloudflare Turnstile，在你的浏览器里判断是不是机器在注册：它读取浏览器与设备的技术信号，由 Cloudflare 按其隐私政策处理（你的浏览器直接连到 Cloudflare，它会看到浏览器的网络信息）。我们只收到「通过 / 不通过」，不把你的 IP 位址或邮箱转给 Cloudflare。When you sign up, the page loads Cloudflare Turnstile to check in your browser whether a bot is signing up: it reads technical signals from your browser and device, processed by Cloudflare under its own privacy policy (your browser connects to Cloudflare directly, so Cloudflare sees your browser's network information). We only receive pass or fail, and we do not pass your IP address or email to Cloudflare.— |
| AI 服务商AI provider— | 你在「问助手」里或群聊用 @AI 提的问题，以及该社区成员本来就看得到的公告、活动与课程内容、社区主 / 版主给 AI 管家的资料，交给 Anthropic（Claude）生成回答；M3 Plus 会员要翻译的群聊消息，只发送这条消息的原文（不附带发的人或要翻译的人的身份）；周报草稿只发送统计数字。不发送你的邮箱、名字或账户资料。「问助手」的回答 M3 不保存；AI 答不上的问题只保存问题文字、不保存是谁问的，30 天内没有人再问即删除；另外只记录调用次数与用量。🚨 [[服务商的保留期限与是否用于训练 — 法务按其商业条款核对后写明]]The question you ask in “Ask” or with @AI in the group chat, plus that community’s announcements, events and course content that members can already see and the information the owner or moderators gave the AI steward, are sent to Anthropic (Claude) to produce an answer; for group chat messages an M3 Plus member asks to translate, only the original text of that message is sent (without the identity of the sender or of the person asking); recap drafts send counts only. Your email, name and account information are not sent. M3 does not keep “Ask” answers; for questions the AI can’t answer we keep only the question text, not who asked, deleted once no one has asked it again for 30 days; otherwise we record only the number and size of requests. 🚨 [[provider retention period and whether data is used for training — to be confirmed by legal against its commercial terms]]— |
| 语音识别服务商Speech-recognition provider— | M3 Plus 会员要转成文字的那一段群聊语音，交给 Groq 转写（只发这段语音，不发说话的人或要转写的人的身份、邮箱或账户资料）。🚨 [[服务商的保留期限、是否用于训练、伺服器所在地 — 法务按其商业条款核对后写明]]A group chat voice message that an M3 Plus member asks to turn into text is sent to Groq for transcription (only that voice message — not the identity, email or account details of the speaker or of the person asking). 🚨 [[provider retention, use for training and server location — legal to confirm against its commercial terms]]— |
| 图像生成服务商Image-generation provider— | 你在算力中心写的描述，或要抠图时上传的图片，交给 fal.ai 生成（只发描述或那张图，不发你的身份、邮箱或账户资料）。🚨 [[服务商的保留期限、是否用于训练、伺服器所在地 — 法务按其商业条款核对后写明]]The description you write in the compute centre, or the image you upload for a cut-out, is sent to fal.ai to generate the result (only the description or that image — not your identity, email or account details). 🚨 [[provider retention, use for training and server location — legal to confirm against its commercial terms]]— |
| 行情来源Market data source— | 「资产」页显示的价格与 24 小时涨跌由 M3 的服务器向 DexScreener 查询，只发代币的合约地址，不发你的链上地址、身份或账户资料。Prices and 24-hour changes under Money are fetched by M3's servers from DexScreener; only token contract addresses are sent — never your on-chain addresses, identity or account details.— |
| 兑换报价服务Swap quote service— | 你在「资产」页兑换时，M3 的服务器向 OKX DEX 查询报价并准备交易：发送两种币的合约地址、数量、滑点和你用来兑换的链上地址（准备交易必须用到），不发你的名字、邮箱或账户资料。🚨 [[服务商的保留期限与伺服器所在地 — 法务按其条款核对后写明]]When you swap under Money, M3's servers ask OKX DEX for a quote and to prepare the transaction, sending the two tokens' contract addresses, the amount, the slippage and the on-chain address you swap from (needed to prepare the transaction); your name, email and account details are not sent. 🚨 [[provider retention and server location — legal to confirm against its terms]]— |
| Solana 节点服务Solana node service— | 只在社区的持有门槛是 Solana 上的代币时：M3 的服务器向 Solana 节点服务商（目前是 Helius）查询你已连接的 Solana 地址持有该代币的数量，只发地址和代币，不发你的名字、邮箱或账户资料。🚨 [[服务商的保留期限与伺服器所在地 — 法务按其条款核对后写明]]Only when a community's holding threshold is a token on Solana: M3's servers ask a Solana node provider (currently Helius) how much of that token your connected Solana addresses hold, sending only the address and the token — not your name, email or account details. 🚨 [[provider retention and server location — legal to confirm against its terms]]— |
| 技术服务商Service providers— | 主机与资料库、物件储存、邮件发送、内容分发与防护。它们按我们的指示处理资料，不得自用。🚨 [[服务商清单与所在地 — 法务确认后逐一列明]]Hosting and database, object storage, email delivery, content delivery and protection. They process data on our instructions and may not use it for their own purposes. 🚨 [[list of providers and their locations — to be itemised after legal review]]— |
| 主管机关Authorities— | 在法律要求或为保护合法权益必要时。Where required by law or necessary to protect legitimate interests.— |
☠️ 我们不出售你的个人资料，也不把它用于第三方广告投放。 ☠️ We do not sell your personal data, and we do not use it for third-party advertising. ☠️ Kami tidak menjual data peribadi anda.
6. 跨境传输Transfers outside MalaysiaPemindahan ke luar negara
部分技术服务商的伺服器位于马来西亚境外。🚨 [[具体国家/地区 · 依据的传输机制 — 法务依 2025 年跨境传输指引确认]] Some service providers operate servers outside Malaysia. 🚨 [[which countries · the transfer mechanism relied on — legal to confirm against the 2025 cross-border transfer guidelines]] —
7. 保存多久How long we keep itTempoh penyimpanan
🚨 [[各类资料的保留期限 — 法务与会计确认]]（包括分层提醒的收件名单与「看到 / 知道了」记录，这类记录目前没有自动删除；以及帖子删除之后语音留言文件的保留期限） 🚨 [[retention periods per category — legal and accounting to confirm]] (including segment reminder recipient lists and “seen / got it” records, which are not currently deleted automatically; and how long voice note files are kept after a post is deleted) —
社区擂台：排名局的操作记录（你每一步怎么操作）保存 8 周，之后自动清除；只用来核对分数和查作弊。分数和排名结果会留着。 Community arena: the inputs of ranked rounds (each move you make) are kept for 8 weeks and then deleted automatically; they are used only to verify scores and check for cheating. Scores and ranking results are kept. —
语音房：声音只经 M3 在香港的语音服务器实时转发，不录音、不保存。我们会记录每个语音房的主题、主持人、开始与结束时间和最高在线人数（用来计算免费时长）；台上与举手的名单在语音房结束时删除。私密房的密码只保存加密后的散列，我们看不到原文。直播打赏会记下谁打赏了谁、金额、平台费、在哪个语音房、到账或作废的时间，跟 M3 余额的流水一样保存（保留期限见本节开头的占位）；打赏时台上的人和房里的人会看到「谁打赏了谁」的提示（你拉黑的人的提示不会显示给你）。房里发的红包和小黄车的兑换会记下是在哪个语音房；社区主和版主看得到每一场的汇总（时长、最多同时在线人数、红包、打赏合计和成交），不列出谁来听过。 Voice rooms: audio is only relayed in real time through M3’s voice server in Hong Kong and is never recorded or stored. We keep each room’s topic, host, start and end times and peak attendance (to calculate free usage); the lists of people on stage and with raised hands are deleted when the room ends. Passwords for private rooms are stored only as an encrypted hash, so we cannot see them. For live tips we record who tipped whom, the amount, the platform fee, the room, and when the tip was released or cancelled, and keep these like other M3 Credit records (see the retention placeholder at the start of this section); when someone tips, people in the room see who tipped whom (you will not see tips from people you have blocked). Red packets sent in a room and shop redemptions made in a room are recorded with the room; owners and moderators see a summary for each session (length, peak listeners, red packets, tip totals and sales) that does not list who listened. —
有一件事需要先说明白：交易记录不能随你的要求删除。账务流水要按法律与税务要求保存。因此删除或停用账户都是关闭账户，不是抹掉记录。 One thing is worth stating plainly: transaction records cannot be deleted on request. Ledgers must be retained for legal and tax purposes. Deleting or closing an account therefore closes it rather than erasing its records. —
你自己删除账户之后（「我的 → 登录信息 → 删除账户」）：立即删除密码与验证码、显示名、绑定的设备（面容 / 指纹）、Telegram / Google / Apple 绑定（并到 Apple 撤销授权）、连接的链上地址、网页与 App 的推送订阅、你的拉黑名单、课程视频的观看时长；邮箱换成一个无法联系的占位地址，所有设备立即登出。保留：M3 余额与 M3 积分的流水、充值与提现记录（包括当时的 IP 位址）、兑换与购物返点记录、你发过的帖子、评论、群聊与语音（作者显示「已注销」）、客服记录，以及一条记下删除时间、原邮箱与 IP 的审计记录。资料库备份会按备份周期自然过期（目前最长约 12 个月）。🚨 [[上述各项的保留期限 · 审计记录与提现 IP 的保留期限 · 备份保留期 — 法务确认]] After you delete your account yourself (Me → Sign-in → Delete account), we immediately delete your password and codes, display name, linked devices (face or fingerprint), Telegram, Google and Apple links (revoking the Apple authorisation), connected on-chain addresses, web and app push subscriptions, your block list and your course video watch time; your email is replaced with an unreachable placeholder and every device is signed out. We keep the M3 Credit and M3 Points ledgers, top-up and withdrawal records (including the IP address at the time), redemption and shopping rebate records, the posts, comments, chat messages and voice notes you posted (shown as by a deleted account), support records, and an audit entry recording when the account was deleted, the original email and the IP address. Database backups expire on their normal cycle (currently up to about 12 months). 🚨 [[retention periods for each item above · for the audit entry and withdrawal IP addresses · for backups — legal to confirm]] —
8. 你的权利Your rightsHak anda
- 查阅我们持有的关于你的个人资料Access the personal data we hold about you—
- 更正不准确或不完整的资料Correct data that is inaccurate or incomplete—
- 撤回同意（撤回后我们可能无法继续提供部分或全部服务）Withdraw consent (after which we may be unable to continue providing some or all of the service)—
- 限制处理，以及要求停止用于直销目的的处理Limit processing, and require us to stop processing for direct marketing—
- 资料可携 —— 在技术可行的前提下，要求把你的资料直接传送给另一个资料控制者（PDPA 2024 修正案新增）Data portability — ask us to transmit your data directly to another controller, where technically feasible (added by the 2024 amendment)—
- 删除账户 —— 随时在「我的 → 登录信息」里自己删除（需要发到账户邮箱的 6 位验证码）；删了什么、留了什么见第 7 条Delete your account — yourself, at any time, under Me → Sign-in (confirmed with a 6-digit code sent to your account email); see section 7 for what is deleted and what is kept—
- 自行关闭：随时在设置里移除已绑定的登录设备、关闭通知 —— 移除后对应的公钥或订阅资料即从我们的系统删除；绑定的 Telegram 也可以随时解绑（需要先设过密码），解绑后 Telegram 资料即删除；绑定的 Google 同样可以随时解绑（需要先设过密码），解绑后 Google 资料即删除；绑定的 Apple 也一样，解绑时同时到 Apple 撤销授权；也可以随时退出社区，退出后不再出现在成员名单、不再收到该社区的通知Switch things off yourself: remove a registered sign-in device or turn off notifications in settings at any time — the matching public key or subscription record is then deleted from our systems; you can also unlink Telegram at any time (once you have a password), after which its details are deleted; the same applies to a linked Google account, and to a linked Apple account (unlinking it also revokes the authorisation with Apple); you can also leave a community at any time, after which you no longer appear on its member list or receive its notifications—
行使权利请联系 [[DPO 联系方式]]。我们会在 [[回应时限]] 内回应。你也可以向马来西亚个人资料保护专员署投诉。 To exercise a right, contact [[DPO 联系方式]]. We will respond within [[回应时限]]. You may also complain to the Personal Data Protection Commissioner of Malaysia. —
9. 安全SecurityKeselamatan
传输全程加密；密码以加盐哈希储存；证件与申诉截图存放在非公开储存桶，仅以短时效链接调阅；后台操作留有审计记录。面容 / 指纹登录采用公钥验证，M3 只保存公钥，即使资料库外泄也无法用它冒充你登录；每次登录验证用一次即作废。没有任何系统是绝对安全的 —— 请为 M3 使用独立且强度足够的密码。 Traffic is encrypted in transit; passwords are stored salted and hashed; identity documents and claim screenshots are held in non-public storage and accessed only through short-lived links; administrative actions are logged for audit. Face and fingerprint sign-in uses public-key verification: M3 keeps only the public key, which cannot be used to sign in as you even if our database were exposed, and each sign-in challenge can be used only once. No system is perfectly secure — please use a strong password unique to M3. —
10. 资料泄露Data breachesPelanggaran data
发生个人资料泄露时，我们会依 PDPA 尽快通报个人资料保护专员；若泄露可能对你造成重大损害，我们会直接通知你。 If a personal data breach occurs we will notify the Personal Data Protection Commissioner as soon as practicable, as the PDPA requires, and will notify you directly where the breach is likely to cause you significant harm. —
11. CookieCookiesKuki
我们使用维持登录状态与语言偏好所必需的 Cookie 与本地储存；面容 / 指纹登录时另有一个 5 分钟内有效、用完即删的验证 Cookie；用 Apple 登录时另有两个：一个 15 分钟内有效的「Apple 待开户」凭据，以及一个只在登录接口使用、30 天有效的浏览器识别 Cookie（防止别人拿走你的登录请求在另一台设备上用）。没登录时打开分享页或逛 M3 展会周，会放一个随机的设备 Cookie（最长 400 天，不含任何个人资料），只用来认出「是同一台设备」以免重复计数。App 里不加载 Telegram 的网页脚本。开启通知需要浏览器在你的设备上登记一个后台脚本（Service Worker）以接收推送。🚨 [[是否使用分析类 Cookie — 确认后据实列明]] We use cookies and local storage that are necessary to keep you signed in and to remember your language; face and fingerprint sign-in also uses a verification cookie that lasts up to 5 minutes and is deleted once used; Sign in with Apple uses two more: a 15-minute pending-registration ticket and a 30-day browser identifier used only by the sign-in endpoints (so a sign-in request cannot be reused on another device). When you open a share page or browse M3 Expo Week without signing in, we set a random device cookie (up to 400 days, containing no personal information) used only to recognise the same device so visits are not counted twice. The apps do not load Telegram's web script. Turning on notifications requires your browser to register a background script (a service worker) on your device to receive them. 🚨 [[whether any analytics cookies are used — to be stated accurately once confirmed]] —
12. 本通知的变更Changes to this noticePerubahan
更新时会在本页公布并更新版本日期，重大变更另行通知会员。 Updates are published on this page with a new version date; members are separately notified of material changes. —