Privacy Policy

Last updated: 6 July 2026

This Privacy Policy explains how Rahsia Bumi Enterprise ("we", "us", "our") collects, uses, and protects your personal data when you use the Mamba Management App website at mambaapp.online (the "Site") and its member portal. We handle personal data in accordance with the Personal Data Protection Act 2010 (Malaysia).

The data controller is Rahsia Bumi Enterprise, registered in Malaysia under SSM registration no. 202503350807 (TR0334731-P). You can reach us through our support page.

1. Data We Collect

• Account data: your name, email address, a password (stored only as a salted cryptographic hash), and a recovery phrase (also stored only as a salted hash — we cannot read it).
• Trading-related data: MT5 account numbers you add for whitelisting, and the email address associated with your Valetax broker account when you request IB verification.
• Usage data: basic analytics events such as page views, the page visited, referrer, and — when you are logged in — which account performed an action.
• Contact messages: the email address and message you submit through our contact form.

We do not collect or store your MT5 passwords, broker login credentials, or payment card details on this Site.

2. How We Use Your Data

• To create and manage your member account and sessions.
• To process IB verification and MT5 whitelist requests with our partner broker.
• To respond to messages you send us.
• To understand how the Site is used and improve it.
• To notify our administrators (via Telegram) of registrations and requests so we can process them promptly.

3. Where Your Data Is Stored

Data is stored in a Cloudflare D1 database and served through Cloudflare's global infrastructure. Session tokens are stored hashed. Administrative notifications containing your name, email, or account numbers are delivered to our team through Telegram.

4. Sharing

We never sell your personal data. We share it only with: (a) our partner broker (Valetax) to the extent needed to verify your IB status or whitelist your MT5 account; and (b) service providers that host and operate the Site (Cloudflare) and our internal notifications (Telegram). The dashboard embeds a YouTube video, and YouTube may set its own cookies when you interact with it.

5. Cookies & Local Storage

We do not use advertising cookies. The member portal stores a session token and a cached copy of your profile in your browser's local storage so you stay signed in. You can remove these at any time by logging out or clearing your browser data.

6. Retention

Account data is kept while your account is active. Expired session tokens are purged automatically. If you ask us to delete your account, we will remove your account data, MT5 account records, and sessions from the database.

7. Your Rights

You may request access to, correction of, or deletion of your personal data. To delete your account and data, use our Account & Data Deletion page. You can also contact us via Telegram at t.me/Mambaindi or by email at admin@rahsiabumi.com, and we will respond within a reasonable time.

8. Security

Passwords and recovery phrases are hashed with PBKDF2, all traffic is encrypted via HTTPS, and API access is rate-limited. No system is perfectly secure, so please use a strong, unique password.

9. Children

The Site is intended for adults aged 18 and over. We do not knowingly collect data from minors.

10. Changes

We may update this policy from time to time. The "Last updated" date above reflects the latest revision. Material changes will be announced on the Site.