Privacy Policy
Last updated: 2 November 2026
At MerdekaL1, we respect your privacy and are committed to protecting your personal data.
This Privacy Policy explains how e23 Sdn. Bhd. (“e23”, “we”, “us” or “our”), as the data controller and operator of https://merdekal1.e23.io/ (the “Website”), collects, uses, discloses and protects personal data when you visit the Website or contact us about MerdekaL1.
This policy covers the informational Website and related enquiries. Participation in a developer network, pilot, blockchain application or other product may involve separate terms and privacy notices. This policy does not describe the processing of transaction data by all MerdekaL1 network participants.
We process personal data in accordance with applicable Malaysian data protection laws, including the Personal Data Protection Act 2010 (PDPA), as amended.
Personal Data We Collect
We may collect the following information:
- Contact information: Your name and work email address, plus any telephone number or other contact details you choose to provide.
- Professional information: Your organisation name, plus any job title, industry or business requirements you choose to provide.
- Enquiry information: Your message, use case, requests and correspondence submitted through contact facilities on the Website, email or other communication channels.
- Technical information: IP address, browser and device information, access times, pages visited, referring pages, server logs and cookie-related data, where collected by the Website or its service providers.
Please provide only information relevant to your enquiry. Do not submit identity documents, financial account details, private keys, seed phrases or sensitive personal data through general contact channels. If you provide another person’s personal data, ensure you are authorised to do so and that they have been informed of this policy.
How We Use Your Information
We collect and process personal data for the following purposes:
- Responding to enquiries and requests for information.
- Providing information about MerdekaL1, its blockchain infrastructure, technical capabilities and potential institutional applications.
- Arranging technical discussions, demonstrations and discussions about potential collaboration or pilots.
- Understanding organisational requirements and evaluating potential business opportunities.
- Operating, maintaining and securing the Website, investigating misuse and improving its content and user experience.
- Sending product updates, event invitations and marketing communications where permitted and subject to your communication preferences.
- Complying with applicable legal and regulatory obligations.
We process personal data with your consent where required, or where processing is otherwise permitted by applicable law, including to take steps at your request towards a contract, perform a contract or comply with legal obligations. We will provide appropriate notice and obtain consent where required before using personal data for a new purpose. Visiting the Website does not, by itself, constitute consent to promotional communications.
How We Collect Personal Data
We may collect personal data when you:
- Submit an enquiry through the contact facilities on https://merdekal1.e23.io/.
- Submit information through a third-party communication or lead form that identifies e23 or MerdekaL1 as the recipient, where such a channel is used.
- Request information, a demonstration or a discussion about a MerdekaL1 use case.
- Contact us by email or other communication channels.
- Visit or interact with our website, where cookies or analytics technologies are enabled.
Information may be provided directly by you, collected automatically through Website systems, or received through the platforms and service providers you use to communicate with us.
Providing enquiry information is voluntary. The Website’s contact form requires your name, work email address, organisation and message. Without these fields, the form cannot be submitted. If you contact us by email instead, we still need sufficient information to understand and respond to your request. Optional information is not required to submit an enquiry. Technical information needed to deliver and secure the Website may be processed when you access it.
Disclosure to Third Parties
We may share personal data with authorised third-party service providers where necessary to operate our website, manage enquiries, and deliver our services.
These may include:
- Website hosting and technical service providers.
- Customer relationship management and communication platforms.
- Analytics or advertising providers, only where their tools are used and subject to applicable notice and consent requirements.
- Professional advisers and regulatory authorities where required or permitted by law.
We require service providers handling personal data on our behalf to apply appropriate safeguards.
We do not sell personal data to third parties.
Cookies and Website Analytics
Our website may use cookies and similar technologies to support website functionality, understand visitor interactions and measure advertising performance.
Essential technologies support functions such as security and remembering preferences. If optional analytics or advertising technologies are introduced or enabled, we will provide information about their purposes and available choices. References to these technologies do not mean that all are active on the Website.
You may block or delete cookies through your browser settings and use any cookie preference controls made available on the Website. Blocking essential cookies may affect Website functionality. Withdrawing consent to optional tracking does not affect processing that has already lawfully taken place.
Where consent is required for non-essential cookies or tracking, we will seek it before activating those technologies.
Data Security
We implement reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.
Access to personal data is limited to authorised personnel and service providers who require the information for legitimate business purposes.
No electronic transmission or storage system can be guaranteed to be completely secure. Statements about MerdekaL1’s post-quantum network architecture do not mean that every Website, email or service-provider system uses post-quantum cryptography. Where a personal data breach occurs, we will make notifications required by applicable law.
Data Retention
We retain personal data only for as long as reasonably necessary to fulfil the purposes described in this Privacy Policy, including responding to enquiries, managing business relationships and meeting legal obligations.
Retention depends on the nature of the enquiry, whether a business relationship develops, applicable record-keeping duties and the need to resolve disputes or enforce legal rights. When personal data is no longer required, we will take reasonable steps to securely delete, destroy or permanently anonymise it.
Your Rights
Subject to applicable Malaysian law, you may request to:
- Access personal data we hold about you.
- Correct inaccurate or incomplete personal data.
- Withdraw consent where processing relies on your consent.
- Require us to cease or not begin processing for direct marketing, and request prevention of processing likely to cause damage or distress where the statutory conditions are met.
- Request transmission of your personal data to another data controller, subject to technical feasibility, compatibility of data formats and applicable legal requirements.
To submit a request, please contact us using the details in Section 11.
We may need proportionate information to verify your identity before processing a request. We will respond within applicable statutory time limits and explain any lawful restriction or refusal. Withdrawing consent may affect our ability to fulfil your request or continue an activity that depends on that consent; it does not affect prior lawful processing or processing otherwise required or permitted by law.
You may also lodge a complaint with Malaysia’s Personal Data Protection Commissioner through the official Personal Data Protection Department website at https://www.pdp.gov.my/.
International Data Transfers
Where we use service providers or systems located outside Malaysia, personal data may be transferred or processed internationally.
Before making such transfers, we will assess the applicable legal conditions and safeguards, including the protection available in the destination and contractual or other safeguards where relevant. We will rely on a transfer basis permitted under Malaysian law and obtain consent where required. You may contact us for information about transfers relevant to your personal data.
Marketing Communications
If you enquire about our solutions or services, we may contact you to respond to your request and provide relevant information.
We may also send marketing communications where permitted by law and in accordance with your preferences.
You may opt out of promotional communications at any time by following the unsubscribe instructions provided or contacting us directly.
Opting out of marketing communications will not prevent us from sending necessary communications relating to an existing enquiry or business relationship.
Contact Us
For questions, requests or complaints concerning this Privacy Policy or our handling of personal data, please contact:
e23 Sdn. Bhd.Website: https://merdekal1.e23.io/
Privacy enquiries: contact@e23.io
Business address: Level 3, 182, Jalan Maarof, Bangsar, 59000 Kuala Lumpur, Wilayah Persekutuan Kuala Lumpur
Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our business operations, data processing practices or applicable legal requirements.
Any updates will be published on this page with a revised “Last Updated” date.
We encourage you to review this Privacy Policy periodically. Where a change requires additional notice or consent, we will take the required steps before applying that change.
Linked Websites and Blockchain Tools
The Website links to resources such as the MerdekaL1 explorer, e23 content and pqc.my. Review the privacy notice applicable to each destination before submitting personal data. Third-party websites and platforms have their own privacy practices.
If you separately use a blockchain network or application, wallet addresses, transaction identifiers and submitted records may be visible to other participants or through an explorer, depending on that system’s design. Blockchain records may be difficult or impossible to alter or erase. Do not place personal or confidential information on a network without understanding its specific privacy arrangements. Contact us about any privacy request concerning systems operated by e23; we will assess it under the applicable law and technical circumstances.