Your personal data
Privacy Notice
What we collect when you make a booking or contact us, why we collect it, who it is shared with, and your rights under the Personal Data Protection Act 2010.
Updated: 21 September 2026
Who we are
- This website is operated by Koperasi Pelancongan Komuniti Kg. Beringgis Papar Berhad (PASAKON), operator of Pasakon Beach, Pantai Beringgis, 89500 Papar, Sabah, Malaysia ("we"). This notice explains how we collect, use and protect your personal data in line with the Personal Data Protection Act 2010 (PDPA).
Data we collect
- Booking details: name, email, phone number, number and ages of guests, stay or activity dates, and any special requests you make.
- Payment information: payments are processed by Billplz. We do not store your card number or banking details; we only receive the payment status and reference.
- Guest account: your email, password and booking history.
- Contact form: your name, email, phone number (optional), topic and message.
- Technical data: IP address, device and browser type, and pages visited - for security and, with your cookie consent, for analytics.
- On site: CCTV recordings in the resort's public areas for the safety of guests and property, as stated in our guest policies.
Why we use it
- To process and manage your booking and send confirmations, receipts and important information about your stay or activity.
- To answer enquiries, complaints and quotation requests.
- To meet legal, accounting and safety obligations, including guest registration.
- To understand how the website is used and improve our services - only with your consent to optional cookies.
- We do not sell your personal data and do not send marketing without your consent.
Who we share it with
- Billplz Sdn. Bhd. to process online payments.
- Email, hosting and website security service providers who process data on our behalf under confidentiality obligations.
- Google Analytics for analytics, only when you accept optional cookies.
- Authorities when required by law, including in emergencies involving guest safety.
- Some of these providers process data outside Malaysia; we only use providers that offer adequate protection.
How long we keep it
- Booking and payment records are kept for as long as accounting and legal purposes require, then deleted or anonymised.
- Contact form messages are kept for as long as needed to answer and record your enquiry.
- CCTV recordings are kept for a limited period and overwritten routinely unless needed for an investigation.
Your rights
- You may request access to your personal data, correct inaccurate data, limit processing and withdraw consent for processing that relies on consent (such as optional cookies).
- To make a request, email us at hello@pasakon.com.my with your booking or account details. We may ask you to verify your identity before acting.
- Optional cookies can be changed at any time through the Cookie Policy link at the bottom of every page.
Security
- We protect your data with appropriate technical and administrative security measures, and access to booking data is limited to staff who need it. If you have concerns about your data, contact us through the Contact Us page.
Changes to this notice
- We may update this notice from time to time. The current version is always shown on this page with its update date.