Governed by the Laws of Malaysia — Last updated: 19 September 2026
This Privacy Policy explains how AI Ahad Sdn. Bhd. (Platform Owner) and B TAG VENTURE Sendirian Berhad (Company No. 201901031508 / 1340838-P) (Platform Operator) ("Ekubur.my", "Akhirat", "we", "our", or "us") collect, use, disclose, retain, protect, and otherwise process personal data through the Ekubur.my platform (also known as Akhirat) and related services.
This Privacy Policy should be read together with our Terms of Service at https://ekubur.my/terms-of-service.
By accessing or using Ekubur.my, you acknowledge that you have read and understood this Privacy Policy.
This Privacy Policy applies to:
This Policy does not apply to independent third-party websites, mosques, cemeteries, transport providers, payment providers, or other external organisations operating under their own policies.
Depending on the services requested, we may collect:
Identity Information
Contact Information
Funeral Coordination Information
Account Information
Payment Information
Ekubur.my does not intentionally store payment-card information unless expressly disclosed.
Documents You Upload
Technical Information
Ekubur.my processes information relating to deceased individuals solely for funeral coordination, family records, and related services such as inheritance claims.
Users submitting such information represent that they:
Information concerning deceased individuals may contain personal information relating to living family members, which remains protected under applicable privacy laws.
We may use personal data to:
We may disclose information to:
Service Providers
Technology Providers
Payment Providers
Authorities
Where required by law, including courts, police, government agencies, and regulatory authorities.
We do not sell personal data to third parties. We do not share personal data for advertising or marketing purposes.
Personal data may be processed outside Malaysia where cloud infrastructure or technology providers operate internationally.
Where transfers occur, we will take reasonable steps to ensure data is handled consistently with applicable Malaysian legal requirements.
We implement reasonable administrative, organisational, and technical measures to protect information from:
These measures include encrypting credentials and two-factor secrets, storing passwords only as bcrypt hashes, serving the platform exclusively over HTTPS/TLS, restricting administrative access, and isolating uploaded documents in access-controlled storage.
However, no system can provide absolute security and we cannot guarantee complete protection from every cyber threat.
Personal data will be retained only:
Specific retention periods:
When information is no longer required, it will be deleted, anonymised, or securely destroyed.
Subject to applicable Malaysian law, users may request:
Requests may be submitted using:
privacy@ekubur.my · support@ekubur.my · customerservice@b.tag-malaysia.com
Ekubur.my may use cookies and similar technologies for:
We do not use cookies for third-party advertising or cross-site tracking.
Users may configure browser settings to manage cookies.
Where permitted by law, we may send:
Users may opt out of marketing communications at any time.
Service-related communications will continue where necessary.
The Platform is not intended for use by children acting independently.
Parents and guardians should contact us if they believe information relating to a minor has been used improperly.
We may revise this Privacy Policy periodically.
Updated versions will be published on the Platform and become effective on the stated effective date.
Continued use of the Platform after updates constitutes acceptance of the revised Policy.
This section describes specifically how Ekubur.my accesses, uses, stores, and shares Google user data, in accordance with the Google API Services User Data Policy.
Email delivery through Google
We operate our own Google account (a Google Workspace/Gmail mailbox) and connect to it using OAuth 2.0 with Google's Gmail API (scope: https://www.googleapis.com/auth/gmail.send) to send transactional emails on our behalf — for example account welcome messages, password resets, payment and order confirmations, and claim status updates. This access is limited to sending email from our own mailbox. We do not read, scan, index, or store the contents of any user's Gmail or other mailbox, and we never request access to a user's email, files, contacts, or photos.
Email addresses you provide
When you register or transact with us, you give us an email address (which may be a Gmail or other Google account address). We use it solely to deliver service-related emails to you and to identify your account. Your email address is not used for advertising and is not sold.
Google Cloud Platform
The Platform is hosted on Google Cloud Platform (Cloud Run, Cloud SQL, and Cloud Storage). Documents you upload — payment receipts and identity or supporting documents — are stored in access-controlled Google Cloud Storage buckets. Google acts as our infrastructure and email delivery processor.
Address autocomplete
When entering addresses (for example a residence or cemetery location), the Platform may use the Google Maps Platform Places API. The text you type is sent to Google to return address suggestions. This feature does not identify you to Google for advertising purposes, and we do not use it to build advertising profiles.
Sign-in
Ekubur.my does not use "Sign in with Google". Accounts are secured with an email address and password, with optional two-factor authentication.
OAuth 2.0 credentials used to connect our own mailbox (client ID, client secret, and refresh token) are stored only in server-side configuration accessible to the Platform's backend. They are never included in web pages, mobile apps, or browser storage, and are never shared.
Data in transit — including emails and uploaded documents — is protected using TLS encryption.
We do not sell Google user data. We do not share Google user data with third parties except: (a) Google, as the provider of the email, hosting, storage, and address-autocomplete services described in Section 15; and (b) where required by law.
Transactional emails we send are retained for as long as the related account or transaction record is retained under our Retention schedule (Section 9), after which they are deleted or anonymised.
If the Platform disconnects its Google mailbox integration, or upon your written request relating to data we hold about you, we revoke and delete the associated OAuth credentials and delete the relevant data within a reasonable period, subject to statutory retention obligations.
You may request access, correction, or deletion of your personal data using the contact details in Section 21, or follow the process in Section 20 (Account and Data Deletion).
Ekubur.my's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically:
Human access to user data is strictly restricted and only permitted when:
Where funeral or family records include the email addresses of family members (for example next-of-kin or beneficiaries), those addresses are used only to contact them about the services they are involved in, and are protected in the same way as member data. We do not collect data from children under 18 for account creation.
You have the right to request the complete deletion of your account and associated personal data at any time.
How to request deletion:
Once we have verified your identity, we will permanently remove your personal profile, transaction records, and uploaded documents within thirty (30) days, except where retention is required by Malaysian tax, bookkeeping, or other applicable law (see Section 9, Retention).
Deletion requests are free of charge. If you are unable to email us, you may also submit a deletion request through our support channels listed in Section 21.
Privacy enquiries should be directed to:
privacy@ekubur.my · support@ekubur.my
AI Ahad Sdn. Bhd. / B TAG VENTURE Sendirian Berhad
Company No. 201901031508 (1340838-P)
Menara Ilham, No. 8 Jalan Binjai, Unit 12A-03, 50450 Kuala Lumpur, Malaysia
customerservice@b.tag-malaysia.com
+60 3 48107 101