Go2Like Privacy Policy

Last Updated: June 10, 2025This Privacy Policy (“Policy”) explains how Go2Like (“we,” “our,” or “us”) collects, uses, stores, protects, and shares your personal information when you access or use the Go2Like website and related services (collectively, “the Platform”). Please read this Policy carefully before using our services. If you have any questions, you may contact us as described in the “Contact” section below.1. Scope and Principles

Scope of Application
This Policy applies to all personal information collected when you register, log in, browse, place orders, make payments, or otherwise interact with the Platform. It does not cover any third-party websites or apps linked from our Platform; those sites have their own privacy practices.
Core Principles
Legality and Compliance: We collect and process information in accordance with applicable laws and regulations and industry best practices.
Transparency: We will inform you of our data collection purposes and methods, and—where required—obtain your consent in advance.
Data Minimization: We only collect information necessary to provide and improve our services, and do not gather data beyond what is needed.
Security: We implement appropriate technical and managerial safeguards to protect your data from unauthorized access, disclosure, alteration, or destruction.
User Control: You may review, correct, or delete your personal data as permitted by this Policy and applicable law.2. Information We Collect
When you use the Platform, we may collect the following categories of information. If you do not provide certain information, you may be unable to use specific features.
Account Registration and Verification
Email Address / Mobile Number: Used to register and log in to your account, verify your identity, and send security notifications.
Username / Nickname: Used for display and user interaction on the Platform.
Password: Stored in encrypted form for account security.
Identity Verification Details (as required): If you wish to use certain payment methods or request withdrawals, we may collect your real name, government ID number (e.g., passport or national ID), and related photos.
Payment and Financial Information
Top-Up / Payment Records: Includes transaction amount, currency, payment method (e.g., credit card, PayPal, FPX, USDT), transaction ID, date/time, and IP address.
Withdrawal / Payout Information: If you request a withdrawal, we may collect your bank account details or cryptocurrency wallet address for disbursing funds.
Billing & Invoice Information: When issuing invoices, we may collect your billing name, billing address, and tax identification number.
Basic Usage and Device Information
Device Information: Device model, operating system, browser type and version, IP address, and screen resolution.
Activity Logs: Login/logout timestamps, search queries, pages visited, clicks, and order history.
Location Information: If you authorize location access, we collect city-level location data to help prevent fraud or verify payment regions.
Customer Service and Communication Data
Live Chat and Ticket Records: Content of your conversations with customer support, ticket numbers, queries, and resolutions.
Emails and Internal Messages: Any emails or messages you send to us, including feedback or inquiries.
Cookies and Similar Technologies
Cookies: We use cookies to maintain your login status, store your preferences, and enable certain security features.
Third-Party Analytics: We may use third-party tools (e.g., Google Analytics) to gather anonymous usage data and improve our service. These tools generally do not collect information that directly identifies you.3. How We Use Your Information
We use the information we collect for the following purposes. You may decline to provide certain data, but then you may be unable to use the corresponding feature.
Account Management and Authentication
Verify your registration and ensure account security.
Enable you to securely log in and maintain your session.
Order Processing and Service Delivery
Calculate and deduct the fees when you place an order (e.g., for followers, likes, views).
Send your order details to our upstream service providers and track delivery progress.
Provide you with order status updates, allow refunds or replenishment requests if delivery does not meet expectations.
Payment and Settlement
Process your top-up, order payment, and withdrawal transactions.
Validate payment callbacks for fraud prevention.
Generate invoices or receipts for your records.
Risk Management and Security
Analyze login and transaction patterns to detect fraudulent or malicious activity.
Monitor for mass-ordering, account sharing, or other behaviors that violate our terms of service.
Take necessary measures such as temporarily suspending accounts or restricting certain actions when suspicious activity is identified.
Product Improvement and Business Analytics
Aggregate and analyze usage data (e.g., page visits, popular services, drop-off rates) to optimize our user interface and features.
Provide you with personalized recommendations, promotional offers, or product updates.
Generate anonymized reports and dashboards to inform business decisions.
Customer Support and Technical Assistance
Keep records of customer service interactions to facilitate timely issue resolution and follow-up.
Send you notifications about account security, order updates, system maintenance, or new promotions via email or in-app messages.
Legal Compliance
Cooperate with law enforcement or regulatory authorities when required by law.
Retain transaction records for tax, accounting, or auditing purposes in compliance with relevant regulations.4. How We Share and Disclose Information

Upstream Service Providers
To fulfill your orders, we share only the necessary order details (service type, target social media link, quantity, etc.) with our upstream providers. They use this information solely to deliver the requested social media services (e.g., likes, followers, views).
Upstream providers do not receive your login credentials or other sensitive personal data.
Payment Processors
If you choose to pay via third-party processors (e.g., credit cards, PayPal, FPX, USDT), certain transaction details (amount, time, transaction ID) may be shared with that payment processor to complete the transaction.
We never share your full card number or wallet private keys. All payment information is handled through secure, encrypted channels by the processor itself.
Legal or Regulatory Authorities
If required by law or legal process, we may disclose your information to government agencies, courts, or law enforcement.
We may also disclose information if necessary to protect the rights, safety, or property of the Platform, its users, or the public.
Business Transfers
In the event of a merger, acquisition, reorganization, or sale of assets, user information may be transferred as part of the business assets.
We will notify you of any such transfer and how your data will be treated afterward.
With Your Consent
We will only share your personal information with third parties for purposes not covered by this Policy if we obtain your explicit consent in advance.5. Cookies and Similar Technologies

What Cookies We Use
Essential Cookies: Required to maintain your logged-in status, authenticate requests, and protect against security threats (e.g., CSRF token).
Performance Cookies: Track site performance, page load times, and errors to help us optimize and debug.
Functionality Cookies: Remember your language preference, display settings, or other customized features to improve user experience.
Analytics Cookies: Used by third-party tools (e.g., Google Analytics) to collect anonymous, aggregated usage data for trend analysis.
How to Manage or Disable Cookies
You can adjust your browser settings to block or delete cookies. If you disable all cookies, certain features—like staying logged in or saving preferences—may not work properly.
Other Tracking Technologies
We may also use Local Storage, Session Storage, or other web technologies to store temporary data needed for site functionality. These are not used to collect sensitive personal information without your consent.6. Data Security and Retention

Security Measures
Encryption: All data transmitted between your browser/device and our servers is encrypted via HTTPS/TLS. Sensitive fields (e.g., passwords, ID numbers, bank details, wallet addresses) are stored in encrypted form using industry-standard algorithms (e.g., bcrypt).
Access Controls: Access to our production environment and user databases is restricted to authorized personnel only, following the principle of least privilege.
Monitoring and Audits: We conduct regular security audits, vulnerability scans, and penetration tests to identify and mitigate risks promptly.
Incident Response: We maintain a documented incident response plan. In the unlikely event of a data breach, we will notify affected users and relevant authorities as required by law.
Data Retention Periods
Registration and Verification Data: Retained for as long as your account is active, plus up to 5 years after account closure or deactivation to comply with legal and financial record-keeping requirements.
Order and Transaction Records: Retained for a minimum of 5 years for tax, audit, and regulatory compliance.
Usage Logs and Access Records: Retained for 1–3 years to support security analysis, troubleshooting, and performance optimization.
Cookies and Session Data: Stored only as long as needed for their specific purpose (session cookies expire when you close your browser; persistent cookies expire according to their set duration or until you delete them).
Account Deletion and Data Erasure
If you request account deletion, we will remove your personal data within 30 days, except for data required to process any outstanding orders or comply with legal obligations.
Any remaining transaction or financial records needed for auditing or legal purposes will be retained in anonymized form as required by law.7. Protection of Minors

Age Restriction
Our services are intended only for individuals who have reached the legal age of majority in their jurisdiction (typically 18 years old). If you are under the required age, you must not register or use the Platform without parental or guardian consent.
If we become aware that a user is underage and did not have parental authorization, we will suspend or close the account and remove personal data as required by law.
Parental Consent
If you are a parent or guardian, you may register an account on behalf of a minor and supervise all activities.
We do not knowingly collect more information than necessary from minors, and any requests for identity verification involving minors will require guardian approval.8. Your Rights
Depending on applicable laws, you may have certain rights over your personal data. Within the Platform, you can exercise the following:
Access and Review
Log in to your account and visit the “Profile” or “Personal Information” section to view and edit non-sensitive data (e.g., nickname, email, phone number).
You may submit a “Data Access Request” to obtain a copy of all personal data we hold about you in a machine-readable format. We will respond within 15 business days.
Correction and Update
You can update your email address, phone number, or other contact details in your account settings, subject to re-verification if needed.
If you notice any inaccuracies, please correct them immediately or contact customer support for assistance.
Deletion and Account Closure
To delete your account, navigate to “Account & Security” → “Delete Account” or contact our support team. Ensure you have withdrawn any remaining balance and closed any open orders before initiating deletion.
Following a valid request, we will delete your personal data within 30 days, except for any information legally required to be retained (e.g., tax records), which will be anonymized or securely archived.
Withdraw Consent / Restrict Processing
In your “Privacy Settings,” you may withdraw consent for data processing that is not strictly necessary for account operation (e.g., marketing emails, personalized recommendations).
Once consent is withdrawn, we will cease those specific processing activities, though essential functions (logging in, order processing) will remain unaffected.
Complaint and Redress
If you believe we have violated your privacy rights or this Policy, you can submit a complaint via our support channels (see “Contact Us” below). We will respond within 5 business days and investigate promptly.
If you are unsatisfied with our resolution, you may escalate your complaint to your local data protection authority.9. How We Share Information

Upstream Service Providers
We transmit only the required order details (service type, target link, quantity) to third-party service providers who fulfill your requested social media services (e.g., likes, followers, views). They do not receive your login credentials or other sensitive personal details.
Payment Partners
Certain transaction details (amount, payment method, transaction ID) are shared with payment processors to complete and verify payments. No full card numbers or wallet private keys are shared. All payment data is handled by the payment processor within secure, encrypted channels.
Legal Obligations
We may share personal information with law enforcement, regulatory bodies, or courts when required by applicable law or legal process.
We also share information to protect the rights, property, or safety of Go2Like, our users, or the public.
Business Transfers
If Go2Like is involved in a merger, acquisition, or asset sale, user data may be among the assets transferred. We will notify you and ensure that the acquiring entity adheres to the terms of this Policy.
With Your Consent
We will share your personal information with third parties for purposes not described here only if we first obtain your explicit consent.10. Cookies and Similar Tracking

Types of Cookies
Essential Cookies: Required to keep you logged in, authenticate your session, and provide baseline security.
Performance Cookies: Track site performance (page loading times, errors) to help us improve our Platform.
Functionality Cookies: Remember your language or display preferences to enhance your experience.
Analytics Cookies: Collected by third-party platforms (e.g., Google Analytics) to gather anonymous data on how users interact with our site. These do not identify you personally.
Managing Cookies
You can configure your browser to refuse or delete cookies. If you do so, some features (such as staying signed in or saving preferences) may not function properly.
Other Tracking Tools
We might also use Local Storage, Session Storage, or similar technologies for temporary data required by the Platform. These do not collect your sensitive personal information without your consent.11. Data Security and Retention

Security Measures
Encryption in Transit: All data transmitted between your device and our servers is encrypted via HTTPS/TLS.
Encrypted Storage: Sensitive user information (passwords, identity documents, bank or wallet details) is encrypted at rest using industry-standard methods (e.g., bcrypt for passwords).
Access Control: Only authorized personnel have access to user data in production environments, following least-privilege principles.
Security Monitoring: We perform regular security audits, vulnerability scans, and penetration tests to identify and fix potential risks promptly.
Incident Response: We have a formal data breach response plan. In the event of a security incident, we will notify affected users and relevant authorities as required by law.
Retention Periods
Account and Verification Data: Retained for the duration your account remains active, plus at least 5 years after deactivation or deletion to comply with financial and legal record-keeping requirements.
Order and Payment Records: Stored for at least 5 years to meet tax, accounting, and regulatory requirements.
Log and Analytics Data: Kept for 1–3 years for security monitoring, troubleshooting, and service improvement.
Cookies and Session Data: Expire at the end of your browser session or according to the cookie’s specified duration.
Deletion and Anonymization
If you request account deletion, we will delete or anonymize your personal data within 30 days, except for any data required for outstanding transactions or legal compliance.
We will anonymize or remove personally identifiable information from aggregated data used for analytics after the legal retention period.12. Protection of Minors

Age Restriction
Our services are intended for individuals at least 18 years old (or the age of majority in your jurisdiction). If you are under the required age, you must obtain permission from your parent or legal guardian before using the Platform.
If we learn that a user is underage and did not have parental consent, we will suspend or close the account and delete any related personal data.
Parental Consent
Parents or guardians may register on behalf of minors and supervise their use of the Platform.
We do not knowingly collect more data than necessary from minors, and identity verification involving minors will require explicit guardian approval.13. User Rights
Depending on applicable privacy laws, you may have the following rights regarding your personal data:
Access and Review
Sign in to your account and navigate to “Profile” or “Personal Information” to view and edit certain non-sensitive data (e.g., username, email, phone number).
Submit a “Data Access Request” to receive a copy of all personal data we hold about you in a machine-readable format within 15 business days.
Correction and Update
You may update your contact details, nickname, or other editable information via the account settings. Verification (e.g., SMS or email) may be required for certain changes.
If you discover errors in your personal data, promptly correct them or contact our support team.
Deletion and Account Closure
To delete your account, go to “Account & Security” → “Delete Account” or contact us via support channels. Please ensure all outstanding orders or withdrawals are settled.
We will delete your data within 30 days, except for any data that must be retained by law or for legitimate business purposes (e.g., transaction records for auditing).
Withdraw Consent / Restrict Processing
In your “Privacy Settings,” you can withdraw consent for marketing emails, personalized recommendations, or analytics tracking.
After withdrawal, we will cease those specific processing activities. However, essential services such as logging in and order processing will continue.
Complaint and Appeal
If you believe we have violated your privacy rights or this Policy, you may file a complaint via the contact methods below. We will respond within 5 business days and investigate promptly.
If you are not satisfied with our resolution, you may escalate your complaint to your local data protection authority.14. How We Share Information

Upstream Service Providers
We transmit only the necessary order details (service type, target link, quantity) to third-party providers who fulfill your requested social media services. They cannot access your login credentials or any other sensitive personal data.
Payment Partners
When you use third-party payment solutions (credit cards, PayPal, FPX, USDT), certain transaction metadata (amount, date/time, transaction ID) is shared with the payment provider to complete and verify the payment.
We do not share your full card number or private keys; all sensitive payment data is processed and stored securely by the payment provider.
Legal or Regulatory Requirements
We may disclose your personal data to law enforcement or regulatory agencies if required by law or a valid legal process (e.g., subpoena, court order).
We may also disclose data to protect the personal safety of users, the public, or our business interests.
Business Transactions
If we undergo a merger, acquisition, or sale of assets, your personal data may be among the transferred assets. We will notify you and ensure that the acquiring entity adheres to our Policy.
With Your Explicit Consent
We will share your personal data with other third parties for additional purposes only after obtaining your explicit consent.15. Cookies and Tracking

Types of Cookies
Essential Cookies: Required to maintain your login session, authenticate requests, and provide core security functions.
Performance Cookies: Track page load times, bounce rates, and other metrics to help us optimize site performance.
Functionality Cookies: Remember your language preference, display settings, or other customized features for a smoother experience.
Analytics Cookies: Collected by third-party analytics services (e.g., Google Analytics) to gather aggregated usage data. These do not personally identify you.
Managing Cookies
You can configure your browser to block or delete cookies, though this may cause some features to stop working (e.g., staying logged in or saving preferences).
Other Technologies
We may also use Local Storage, Session Storage, or similar technologies to temporarily store session data. These do not collect personal information without your consent.16. Data Security and Retention

Security Measures
Encryption in Transit: All data exchanged between your device and our servers is encrypted via HTTPS/TLS.
Encrypted Storage: Sensitive information (passwords, identity documents, payment details) is encrypted or hashed using industry-standard methods.
Access Controls: Access to our production environment and personal data is restricted to authorized personnel following strict least-privilege policies.
Security Monitoring: We conduct regular vulnerability scans, penetration tests, and security audits to detect and address any potential risks.
Incident Response: In the event of a data breach, we have an established response plan to notify affected users and relevant authorities promptly.
Retention Periods
Account and Verification Data: Retained while your account is active, plus a minimum of 5 years after account closure for legal and auditing requirements.
Order and Payment Data: Retained for at least 5 years to comply with tax and financial regulations.
Log and Analytics Data: Retained for 1–3 years to support security monitoring and service improvement.
Cookies and Session Data: Expire at the end of your session or according to the cookie’s set lifetime.
Deletion and Anonymization
Upon a valid account deletion request, we will erase or anonymize your personal data within 30 days, except for any data that must be retained for legal reasons (e.g., transaction records).
After the retention period, logs and anonymized data used solely for analytics will be permanently deleted or irreversibly anonymized.17. Protection of Minors

Age Requirement
Our services are intended for individuals who are 18 years or older (or the age of majority in your jurisdiction). If you are underage, you must obtain your parent’s or legal guardian’s permission before using the Platform.
If we become aware that a user is underage without valid consent, we will suspend or close the account and remove personal data as required by law.
Parental Consent
Parents or guardians may register on behalf of minors and supervise their use of the Platform.
We do not intentionally collect more data than necessary from minors, and any identity verification will require explicit guardian approval.18. Policy Updates

When We Update
As our services evolve and legal requirements change, we may update this Policy. We will post the updated Policy on the Platform, indicating the “Last Updated” date.
For material changes that significantly affect your rights (e.g., changes in data sharing practices or new processing purposes), we will notify you at least 30 days before the changes take effect (via a banner or in-app notification).
Your Continued Use Implies Consent
If you continue to use the Platform after a Policy update, we will consider that you have read and agreed to the amended terms. If you do not accept the revised Policy, please stop using our services and request account deletion if desired.19. Your Rights and Choices

Access and Portability
You may request a copy of all personal information we hold about you. We will provide it within 15 business days in a commonly used electronic format.
You may also request a summary of how we collect, use, and share your data.
Correction
You have the right to correct or update any inaccurate personal data in your account settings or by contacting support. Verification may be required.
Deletion
You can request deletion of your account at any time, provided there are no outstanding orders or pending withdrawals. We will delete your data within 30 days except for information we must keep for legal reasons.
Restriction of Processing
You may ask us to restrict certain types of data processing (e.g., targeted marketing, analytics). After a valid request, we will stop those processing activities, except for essential operations (e.g., order fulfillment).
Objection
Where processing is based on our legitimate interests (e.g., fraud prevention), you have the right to object. We will evaluate your request and comply if we have no overriding legitimate grounds to continue.
Data Portability
If you request it, and where technically feasible, we will provide your personal data in a structured, machine-readable format so you can transfer it to another service.
Complaints
If you believe we have violated your privacy rights or this Policy, you may submit a complaint through our support channels (see “Contact Us” below). We will respond within 5 business days and investigate promptly. If you are unsatisfied with our resolution, you may file a complaint with your local data protection authority.20. Third-Party Links and Content

Third-Party Payment Processors
When you use credit cards, PayPal, FPX, USDT, or other third-party payment methods, the payment process occurs on the payment provider’s site. The provider’s privacy policy and security measures apply to your payment data.
Embedded Analytics or Social Plugins
We may embed third-party widgets (e.g., social sharing buttons) or use third-party analytics tools (e.g., Google Analytics). These third parties collect data under their own policies. We do not control how they use or store data.
External Links
Our Platform may link to or co-brand with external websites. We do not control those sites and encourage you to review their privacy policies before providing personal information.21. Data Security Practices
To protect your personal data, we employ the following measures:
Encryption
All data in transit is encrypted using HTTPS/TLS.
Sensitive data at rest (passwords, identity documents, payment details) is encrypted or hashed with industry-standard algorithms.
Access Controls
Only authorized personnel have access to production databases and environments.
We follow the principle of least privilege to limit data access.
Monitoring and Auditing
We continuously monitor for suspicious activities (e.g., brute-force login attempts) and keep security logs for at least 12 months.
Regular vulnerability scans and penetration tests are conducted to identify potential weaknesses.
Incident Response
We maintain a documented incident response plan. If a data breach occurs, we will notify impacted users and comply with legal notification requirements.
Employee Training
All employees with data access receive privacy and security training.
We enforce internal policies that prohibit unauthorized data access, copying, or sharing.22. Children’s Privacy

Age Requirement
Users must be at least 18 years old (or the age of majority in their jurisdiction). If you are underage, you must have parental or legal guardian consent to use the Platform.
Parental Controls
Parents/guardians may register on behalf of minors and supervise usage.
We do not intentionally collect more data than necessary from minors, and any verification involving minors requires guardian approval.23. Updates to This Policy

When We Update
We may revise this Policy from time to time to reflect changes in our practices or legal requirements. The “Last Updated” date at the top will indicate the revision date.
If changes materially affect your rights, we will post a prominent notice on the Platform and/or send you a direct notification before the changes take effect.
Your Acceptance
Continuing to use the Platform after changes are posted indicates your acceptance of the new Policy. If you do not agree with any changes, please cease using our services and request account deletion if necessary.24. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, or if you wish to exercise any of your rights (e.g., access, correction, deletion), please contact us:
Email: privacy@go2like.com
Phone: +60 18-668 8953
Mailing Address: 8th Floor, Tech Tower, Kuala Lumpur City Center, MalaysiaWe will respond to your inquiries within 3 business days and process any valid requests within 15 business days (or notify you if a longer period is required).Thank you for trusting Go2Like. We are committed to safeguarding your personal information with the utmost care and transparency.The Go2Like Team