Last updated: 5 June 2026
At durianpark.com, operated by Wizleo Equity Management (Malaysia) Sdn Bhd (“DurianPark”, “we”, “us” or “our”), we take the security of your personal and payment information seriously. This Security Policy describes the measures we use to protect our customers and our Website. It should be read together with our Privacy Policy and Payment Policy.
1. Our Commitment
We are committed to safeguarding the confidentiality, integrity and availability of the information you share with us, and to handling personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.
2. Encryption (SSL/TLS)
Our Website is secured with SSL/TLS encryption. Information transmitted between your browser and our Website—such as account details and checkout information—is encrypted to protect it from interception.
3. Payment Security
All card and online banking payments are processed through a PCI-DSS compliant third-party payment gateway. We do not store your full card numbers, CVV or online banking credentials on our servers. Sensitive payment data is handled directly by the certified payment provider. See our Payment Policy for further details.
4. Data Protection
Personal data we collect is stored on secured systems with access restricted to authorised personnel who need it to fulfil orders and provide customer support. We retain personal data only for as long as necessary for the purposes described in our Privacy Policy or as required by law.
5. Account Security & Your Responsibilities
- Keep your account password confidential and use a strong, unique password.
- Do not share your login credentials or one-time passwords (OTPs) with anyone.
- Always log out after using a shared or public device.
- Notify us immediately if you suspect any unauthorised access to your account.
Please note that DurianPark staff will never ask you for your full password, card CVV or OTP by phone, email or message.
6. Website & System Safeguards
We maintain technical and organisational safeguards to protect our Website, including up-to-date software, firewalls and security plugins, regular updates and backups, and monitoring for suspicious activity. While we take reasonable steps to protect our systems, no method of transmission or storage over the internet is completely secure, and we cannot guarantee absolute security.
7. Third-Party Service Providers
We work with trusted third-party providers (for example, our payment gateway, hosting provider and delivery partners) who are required to apply appropriate security measures when handling data on our behalf.
8. Incident Response
In the unlikely event of a security incident affecting your personal data, we will take prompt action to contain and investigate the incident and will notify affected customers and the relevant authorities where required by law.
9. Contact Us
If you have any security concerns or wish to report a vulnerability, please contact us immediately at info@durianpark.com or call +60 14-2832-841.