Last updated: 8 July 2026
This Privacy Policy explains how Realesta ("Realesta", "we", "us" or "our") collects, uses, discloses and protects your personal data when you use our website at realesta.my and our Realesta mobile application (together, the "Platform"). We are committed to handling your personal data responsibly and in accordance with the Personal Data Protection Act 2010 of Malaysia (the "PDPA") and other applicable laws.
By creating an account, listing a property, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with it, please do not use the Platform.
1. Who this policy applies to
This policy applies to everyone who uses Realesta, including property seekers (buyers and renters), homeowners who list their own property, real estate agents and agencies, and general visitors to our website and app.
2. Information we collect
2.1 Information you provide to us
- Account details — your name, email address, phone number, password (stored in encrypted form) and account role (for example, buyer, self-lister or agent).
- Identity verification data — if you apply to list your own property or to register as an agent, we collect identity documents such as images of your identity card (IC front and back), a photo, and, for agents, agency details, logo and licence information. This is used solely to verify your identity and eligibility to list on the Platform.
- Listing content — details of properties you post, including title, description, price, address, location (map coordinates) and photographs.
- Preferences and activity — properties you save to your favourites, and the locations and search radius you set for property alerts.
- Communications — information you provide when you contact us for support, enquiries or feedback.
2.2 Payment information
When you purchase credits or a subscription, payments are processed by our third-party payment provider, Billplz. Your payment is made on Billplz's secure platform. We do not collect or store your full card or banking details; we retain only a record of the transaction (such as order reference, amount, package and payment status).
2.3 Information we collect automatically
- Device and usage data — such as your IP address, device type, operating system, browser type, app version, and pages or screens you view, to help us operate, secure and improve the Platform.
- Location data — when you use map features or set a location for property alerts, we process the coordinates you provide or select. The mobile app only accesses your device location if you grant permission.
- Cookies and similar technologies — see section 5 below.
2.4 Information from third parties
We may receive limited information from service providers that help us run the Platform, such as our payment provider (payment confirmation status) and security services (for example, verification results from Google reCAPTCHA when it is enabled).
3. How we use your information
We use your personal data to:
- create and manage your account and verify your identity where required;
- publish, display and manage property listings, and enable buyers and renters to view them;
- enable you to save favourites and receive alerts about new listings that match the location and radius you have chosen;
- connect you with agents or listers, including facilitating contact via phone or WhatsApp when you choose to reach out;
- process payments for credits and subscriptions;
- send service messages such as email verification, security codes, account notices and, where you have opted in, property alerts;
- maintain the security and integrity of the Platform, prevent fraud and moderate listings and identity submissions;
- analyse usage to improve our features, performance and content; and
- comply with our legal obligations.
4. Legal basis and consent
We process your personal data on the basis of your consent, the performance of our services to you, our legitimate interests in operating and improving the Platform, and compliance with legal obligations. Where we rely on consent, you may withdraw it at any time as described in section 9, although this may affect your ability to use certain features.
5. Cookies and similar technologies
We and our service providers use cookies and similar technologies to keep you signed in, remember your preferences, secure the Platform (including verification tools such as reCAPTCHA where enabled), and understand how the Platform is used. You can control cookies through your browser settings; disabling some cookies may affect how the website functions.
6. How we share your information
We do not sell your personal data. We may share it in the following limited circumstances:
- With other users — when you publish a listing, the listing details and the contact information you provide (such as your name and phone number) are shown publicly so that interested parties can contact you. When you contact an agent or lister, your enquiry is shared with them.
- With service providers — trusted third parties who help us operate the Platform, including our payment provider (Billplz), email delivery services, map and tile providers, security and anti-abuse services (such as Google reCAPTCHA), and hosting and storage providers. They may only process your data on our instructions.
- For legal reasons — where required by law, regulation, legal process or an enforceable governmental request, or to protect the rights, property or safety of Realesta, our users or the public.
- Business transfers — in connection with a merger, acquisition or sale of assets, subject to this policy.
7. Contacting agents and listers
The Platform lets you contact agents and listers directly, including through WhatsApp. If you choose to do so, your message is sent through WhatsApp (operated by Meta) and is subject to WhatsApp's own privacy policy. We do not control third-party messaging services.
8. Data retention
We keep your personal data for as long as your account is active or as needed to provide the Platform, comply with our legal obligations, resolve disputes and enforce our agreements. Identity verification documents are retained only as long as necessary for verification and record-keeping purposes, after which they are deleted or anonymised.
9. Your rights
Subject to the PDPA and applicable law, you have the right to:
- access the personal data we hold about you and request a copy;
- correct or update inaccurate or incomplete data;
- request deletion of your data or the closure of your account;
- withdraw consent to our processing, including opting out of marketing and property alerts; and
- limit or object to certain processing.
You can manage much of your information directly in your account settings. For other requests, contact us using the details in section 14. We may need to verify your identity before acting on a request.
10. Marketing and property alerts
If you set up property alerts, we will email you when new listings match the location and radius you selected. You can turn alerts off at any time from your dashboard or by following the unsubscribe instructions in the emails. We will still send you essential service messages relating to your account.
11. Data security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or alteration. These include encrypted password storage, access controls and secure transmission. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
12. Children's privacy
The Platform is intended for users aged 18 and above. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.
13. Mobile application permissions
Our mobile app may request the following device permissions, which you can grant or deny:
- Camera and photos — to let you upload property images and identity documents.
- Location — to show nearby properties and help you pin a listing's location on the map.
- Internet access — required for the app to communicate with our services.
The app only uses these permissions for the purposes described and only when you choose to use the related features.
14. International transfers
Your personal data is primarily processed in Malaysia. Some of our service providers may process data outside Malaysia; where they do, we take steps to ensure your data continues to be protected in accordance with this policy and applicable law.
15. Third-party links
The Platform may contain links to third-party websites or services that we do not control. This Privacy Policy does not apply to those third parties, and we encourage you to review their privacy policies.
16. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you through the Platform. Your continued use of the Platform after changes take effect constitutes acceptance of the revised policy.
17. Contact us
If you have questions, concerns or requests regarding this Privacy Policy or your personal data, please contact us at:
Realesta
realesta.my