This is a translation. The Bahasa Melayu version is the legally binding text.

Privacy Notice: E-venizer (e.nuna.nz)

Last updated: 25 October 2026

In short:

• We collect the information needed to register you for an event and issue your certificate.
• Only your event's organiser and the system administrator can see it.
• We do not sell your data or use it for advertising.
• You can ask to see, correct or delete your data.

Questions? E-mail inquiry@bungkas.com.

1. Who we are

e.nuna.nz is an event registration and e-certificate system operated by BunGkaS Multitech Services ("BMS", "we"; SSM Registration No. 202203106739 (CT0105002-P)). Our address: No. 1205, Jalan A43, Taman Warisan Puteri, 70400 Seremban, Negeri Sembilan.

Each event is run by an organiser whose name is shown on the form. The organiser decides what information to ask for and uses it for their event. We provide and maintain this system.

This notice is given under the Personal Data Protection Act 2010 (PDPA). Participants under 18 register with the consent of a parent or guardian.

2. The information we collect

What you fill in on the form (the organiser chooses which fields are required; required fields are marked *):

• full name
• identity card number
• e-mail
• phone number
• gender
• race
• organisation / school / association

What the system generates:

• a 6-character participant code and a serial number
• date of birth, worked out from your IC number for age statistics
• the time you registered
• the time you checked in to each session (if the organiser records attendance), and whether you registered on the spot
• your IP address at the time of registration
• the number of times the certificate was downloaded

If you request a correction: the new information you submit.

3. Why we use it

• To register you for the event and prevent duplicate registrations.
• To print your name (and other details the organiser chooses) on the certificate.
• To let you find your certificate using your participant code and your phone number or e-mail.
• To let anyone who has your certificate code verify that the certificate is genuine. A check by code only answers "Valid" or "No match". The verification QR code on the certificate shows your name partly masked, the last 4 digits of your MyKad number (or the last 4 characters of another ID number), the event name, date and certificate number.
• To give the organiser statistical reports, for example the number of participants by gender, race and age.
• To record your attendance at each session and, if the organiser sets an attendance condition, to issue the certificate only to participants who meet it.
• To prevent misuse, for example by limiting repeated attempts from the same IP address.

We do not use your data for advertising and we do not sell it. This site does not use analytics or tracking tools.

4. Do you have to give this information?

Information marked * is required to register. Without it we cannot register you or issue a certificate. Other information is optional.

5. Who can see it

• Your event's organiser: all of your information for that event only. Organisers of other events cannot see it.
• WhatsApp (if you choose it): if you tap the "Save to my WhatsApp" button, your registration details (event name, name, partly hidden IC number, participant code, serial number and certificate link) are sent through WhatsApp (owned by Meta) to the number you choose. We do not send anything automatically; it only happens when you yourself tap "Send" in WhatsApp.
• Anyone who scans the verification QR code on your certificate: The verification QR code on the certificate shows your name partly masked, the last 4 digits of your MyKad number (or the last 4 characters of another ID number), the event name, date and certificate number, so that others can confirm the certificate.
• System administrators (BMS): to maintain the system, help organisers and answer your requests.
• Cloudflare: all visits to e.nuna.nz go through Cloudflare, including what you type into the form.
• Backup provider: backup copies of the database are stored encrypted on Google Drive.
• Service providers, including AI tools that help build and run the system. They may see data while doing that work.
• Authorities, when required by law.

Some of these providers may store or handle data outside Malaysia.

6. How long we keep it

• Participant information is kept for up to 2 years after the event ends. After that the system automatically deletes your name, IC number, date of birth, e-mail, phone number, organisation and IP address, and any correction requests. Only gender, race and year of birth are kept, without your name, for statistics. After that your certificate can no longer be looked up or verified.
• An organiser can also delete an event earlier; all participants of that event are deleted with it.
• Backup copies: made daily and deleted after about 14 days.
• System logs (who did what) do not store participant names.

7. How we protect it

• All connections are encrypted (HTTPS).
• Organisers can only see their own events.
• IC number, phone number and e-mail are partly hidden on screen and are only revealed when the organiser taps "Show".
• Certificate lookup is locked after 10 wrong attempts within an hour.
• Every administrator action is recorded.
• If a data breach occurs that may harm you, we will notify you and the Personal Data Protection Commissioner as required by law.

8. Your rights

• Correct your information: use the Correction page. The organiser will review and approve it.
• See or delete your information: contact your event's organiser, or e-mail inquiry@bungkas.com. We will reply within 21 days and may ask you to prove your identity. If your data is deleted, your certificate can no longer be downloaded or verified.
• Withdraw consent: you can ask for your data to be deleted at any time, as above.
• Complaints: if you are not satisfied with our reply, you can complain to the Personal Data Protection Department.

9. Cookies

This site only uses cookies that the form needs to work (session and form protection), and to remember your language and display theme preferences (stored in your browser), and to remember your registration on this phone so you can confirm attendance without typing it again (kept for 120 days). There are no advertising or tracking cookies.

10. Changes to this notice

If this notice changes, the date above will be updated.