AI RoboChef Sdn Bhd Privacy Policy

The latest revision of this Privacy Policy was published on 8 June 2026

AI RoboChef World Legal Notice

Privacy Policy

Effective Date: 8 June 2026

AI ROBOCHEF SDN BHD, also operating through the AI RoboChef World brand, respects your privacy and is committed to protecting your personal data.

Effective Date

8 June 2026

Website

https://robochefworld.com

Business Name

AI ROBOCHEF SDN BHD

Company Registration Number

1674363-W

Registered Business Address

74g, Lintang Sungai Pinang, 10150 Penang, Malaysia

Privacy Contact

Support@RoboChefWorld.com

1

Privacy Policy Section

1. Introduction

AI ROBOCHEF SDN BHD, also operating through the AI RoboChef World brand, respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, disclose, store, transfer, retain, and protect personal data when you visit our website, create an account, submit a form, contact our team, apply for a franchise opportunity, participate in our smart food and beverage ecosystem, interact with our dashboards or portals, make payments, communicate through WhatsApp or other channels, or otherwise engage with us.

AI RoboChef World is a technology enabled food and beverage ecosystem involving artificial intelligence, robotic cooking technology, standardised recipes, franchise development, digital monitoring, revenue sharing, royalty tracking, payment processing, marketing support, investor participation, operator support, introducer arrangements, and partner collaboration.

Because our platform may involve franchise applicants, investors, F&B operators, recipe owners, master franchise partners, sales agents, introducers, business partners, account users, and other ecosystem participants, we may collect and process personal data for business, operational, contractual, financial, compliance, legal, marketing, analytics, security, and relationship management purposes.

This Privacy Policy is designed to support compliance with applicable privacy and data protection laws, including the Malaysia Personal Data Protection Act 2010, the Singapore Personal Data Protection Act 2012, and, where applicable, the California Consumer Privacy Act as amended by the California Privacy Rights Act, and other applicable privacy laws depending on your location and interaction with us.

At this stage, AI RoboChef World does not actively target users in the European Economic Area or the United Kingdom. If this changes, we may update this Privacy Policy and implement additional GDPR or UK GDPR compliance measures where required.

2

Privacy Policy Section

2. Who We Are

For the purposes of this Privacy Policy, “AI RoboChef,” “AI RoboChef World,” “we,” “us,” and “our” refer to:

AI ROBOCHEF SDN BHD

Company Registration Number: 1674363-W

Registered Business Address: 74g, Lintang Sungai Pinang, 10150 Penang, Malaysia

Website: https://robochefworld.com

Privacy Contact and Data Protection Contact: Support@RoboChefWorld.com

Unless otherwise stated, AI ROBOCHEF SDN BHD is the organisation responsible for deciding how personal data collected through our website, forms, accounts, platform, business operations, and communications is processed.

Where we work with related entities, master franchise partners, country offices, regional partners, service providers, payment processors, introducers, operators, or business partners, those parties may act as independent controllers, joint controllers, processors, service providers, or authorised recipients depending on the facts and the applicable law.

3

Privacy Policy Section

3. Scope of This Privacy Policy

This Privacy Policy applies to personal data collected through or in connection with:

Our website at https://robochefworld.com.

Website pages including Home, About Us, Contact Us, Franchise Operator Form, Coming Soon pages, and Privacy Policy pages.

Franchise investment, master franchise, investor opportunity, business partner, recipe collaboration, and operator inquiry pages.

Contact forms, application forms, inquiry forms, and lead forms.

User accounts, login areas, dashboards, franchise portals, operator portals, investor portals, agent portals, CRM records, and reporting systems.

Online payments and payment related communications.

WhatsApp, phone, SMS, email, social media, meeting, event, webinar, presentation, and other communications.

Marketing, advertising, analytics, remarketing, retargeting, and promotional campaigns.

Franchise, licensing, royalty, commission, introducer, revenue sharing, investor, payout, and reporting activities.

Digital dashboards and operational monitoring tools that track sales, outlet performance, royalty, campaign impact, payout status, operational alerts, partner contribution, and performance trends.

Any other interaction between you and AI RoboChef World.

This Privacy Policy does not apply to third party websites, social media platforms, payment platforms, messaging platforms, or external services that we do not own or control. Those third parties may have their own privacy policies and terms.

4

Privacy Policy Section

4. Personal Data We Collect

Depending on how you interact with us, we may collect the following categories of personal data.

4.1Identity Data

We may collect your full name, identity card number, passport number, nationality, country, state, city, area, company name, business name, job title, business role, account name, user ID, referral identity, and other identifying information.

4.2Contact Data

We may collect your email address, phone number, mobile number, WhatsApp number, mailing address, business address, social media profile, website, and other contact details.

4.3Account Data

If you create an account, we may collect your username, account credentials, password related data, profile information, role permissions, account status, login activity, security information, account preferences, dashboard access, portal usage, and communications linked to your account.

You are responsible for keeping your account credentials confidential and for notifying us immediately if you suspect unauthorised access to your account.

4.4Inquiry and Interest Data

We may collect information about your area of interest, including franchise investment, master franchise opportunity, recipe collaboration, business partner opportunity, F&B operator collaboration, investor opportunity, introducer opportunity, self funded franchise, funded franchise, or other commercial opportunity.

4.5Franchise Application Data

If you submit a franchise operator application or related business opportunity application, we may collect information such as:

Full name.

Identity card or passport number.

Contact number.

WhatsApp number.

Email address.

Company name, where applicable.

Business experience.

F&B experience.

Years of business experience.

Social media or website details.

Preferred franchise type.

Investment capability.

Whether you are open to revenue sharing arrangements.

Whether you can manage daily operations.

Preferred business location.

State, city, area, and proposed shop location.

Operational readiness information.

Your ability to manage outlet operations, hire and manage staff, handle local marketing, and operate under company SOP.

Your reasons for interest in AI RoboChef franchise.

Your business goals.

Additional remarks.

Referral information, including the name and contact number of the person who referred you.

Other information you choose to provide.

4.6Supporting Documents

Where required for application assessment, funded franchise review, investor review, operator onboarding, due diligence, compliance, fraud prevention, or business verification, we may collect documents such as:

Identity card copy.

Passport copy.

Company profile.

Business registration documents.

Proposed location photos.

Bank statements for funded franchise assessment.

Financial capability documents.

Verification documents.

Contract related documents.

Other supporting documents requested by us.

These documents may contain sensitive, confidential, financial, or identification information. We handle such documents with additional care and access restrictions where appropriate.

4.7Business, Financial, and Commercial Data

We may collect information relating to licensing fees, franchise fees, monthly management fees, royalty participation, revenue sharing, commissions, introducer incentives, investor participation, payout records, bank account details, tax details, invoices, receipts, payment status, payment method, transaction details, account balances, settlement status, contract status, business records, and commercial relationship history.

4.8Payment Data

We collect and process payment related information when you make or receive payments through our website, platform, payment gateways, payment processors, bank transfer, or other available payment methods.

Online payments may be processed through third party payment providers, including Stripe, PayPal, payment gateways, and other payment methods available on our platform from time to time.

We do not intend to store full payment card numbers unless expressly stated and legally permitted. Payment processors may collect, process, and store payment details under their own privacy policies, security standards, and terms.

4.9Operational and Performance Data

Where you are an operator, franchisee, sales agent, introducer, investor, recipe owner, master franchise partner, account user, business partner, or ecosystem participant, we may collect or process data relating to:

Outlet sales.

Outlet performance.

Customer trends.

Recipe usage.

Royalty calculations.

Commission calculations.

Payout tracking.

Investor participation.

Revenue sharing.

Marketing campaign performance.

Promotional activity.

Operational alerts.

Outlet health.

Dashboard activity.

Reporting statements.

Partner contribution.

Support tickets.

Technical support records.

Business development progress.

Performance trends.

This information may include personal data where it relates to an identifiable individual, account user, operator, investor, sales agent, introducer, partner, or contact person.

4.10Technical and Website Usage Data

When you visit or use our website, platform, dashboards, or digital services, we may collect technical information such as IP address, device type, browser type, operating system, screen size, language settings, referring website, pages viewed, features used, date and time of visits, session duration, clicks, form interactions, approximate location derived from IP address, cookie identifiers, advertising identifiers, and similar online activity data.

4.11Marketing and Communications Data

We may collect your communication preferences, marketing consent status, subscription status, email engagement, campaign responses, call records, WhatsApp messages, SMS messages, meeting notes, event attendance, inquiry history, lead source, advertising interaction, and relationship management history.

4.12Automated Assessment Data

Because we use automated lead scoring, AI assessment, credit assessment, investor screening, fraud screening, and automated application decision tools, we may process information to assess application suitability, lead quality, financial readiness, investment risk, operational readiness, fraud risk, eligibility, business fit, and compliance risk.

Where required by law, we will provide meaningful information about automated processing and allow individuals to request human review or exercise applicable rights.

4.13Sensitive Personal Data

We do not intentionally collect sensitive personal data unless necessary for a specific legitimate business, legal, compliance, due diligence, fraud prevention, financial assessment, contractual, or security purpose, or where you voluntarily provide it.

Sensitive personal data may include identification documents, passport or identity card numbers, bank statements, financial capability documents, verification documents, or other information that may be considered sensitive under applicable laws.

We process sensitive personal data only where permitted by law and with appropriate safeguards.

5

Privacy Policy Section

5. How We Collect Personal Data

We may collect personal data directly from you when you:

Visit our website.

Create an account.

Log in to a portal or dashboard.

Complete a contact form.

Complete a franchise operator application.

Submit documents to us.

Make an online payment.

Contact us by email, phone, WhatsApp, SMS, social media, or other channel.

Attend a meeting, presentation, webinar, event, roadshow, or business discussion.

Apply for a franchise, investor, operator, recipe owner, business partner, introducer, or master franchise opportunity.

Participate in our franchise, licensing, royalty, revenue sharing, operator, investor, sales agent, introducer, or partner ecosystem.

Use our dashboard, CRM, partner portal, reporting system, operational system, or payment system.

Subscribe to receive updates, communications, or marketing materials.

We may also collect personal data from third parties, including referral partners, introducers, sales agents, franchise partners, master franchise partners, business partners, payment processors, identity verification providers, fraud screening providers, credit assessment providers, analytics providers, advertising platforms, CRM providers, cloud storage providers, hosting providers, publicly available sources, corporate registries, social media platforms, event organisers, and professional advisers.

6

Privacy Policy Section

6. How We Use Personal Data

We may collect, use, process, store, disclose, analyse, and transfer personal data for the following purposes.

6.1Website Operation and Account Management

We use personal data to operate our website, manage user accounts, authenticate users, provide dashboards, maintain portals, manage logins, provide access to features, troubleshoot issues, improve functionality, and maintain platform security.

6.2Inquiry and Communication Management

We use personal data to respond to inquiries, follow up on contact requests, provide information about AI RoboChef World, communicate with prospective franchisees, investors, operators, recipe owners, partners, introducers, and other interested parties, and manage relationship records.

6.3Franchise, Operator, Investor, and Partner Evaluation

We use personal data to assess franchise applications, operator suitability, investor suitability, business partner suitability, master franchise opportunities, recipe collaboration proposals, introducer relationships, operational readiness, financial capability, preferred business locations, business experience, F&B experience, and overall business fit.

6.4Automated Assessment, Screening, and Decision Support

We use automated tools, including AI assessment, lead scoring, credit assessment, investor screening, fraud screening, and automated application decision tools, to support our review process.

These tools may help us evaluate risk, suitability, financial readiness, application completeness, fraud indicators, potential business fit, and prioritisation. We may use automated outputs to support human review, operational decisions, onboarding decisions, eligibility decisions, and risk management.

Where required by applicable law, you may request human review, express your point of view, contest a decision, or request additional information about automated processing.

6.5Business Development and Relationship Management

We use personal data to manage relationships with franchisees, operators, investors, recipe owners, introducers, sales agents, master franchise partners, business partners, suppliers, service providers, and other ecosystem participants.

6.6Contracting and Commercial Transactions

We use personal data to prepare, negotiate, enter into, manage, perform, and enforce contracts, licenses, franchise arrangements, investment arrangements, revenue sharing arrangements, royalty arrangements, introducer arrangements, commission arrangements, payment arrangements, partner arrangements, service arrangements, and related commercial transactions.

6.7Payments, Royalty, Commission, and Payout Administration

We use personal data to process payments, verify payment status, issue invoices and receipts, calculate and administer licensing fees, monthly management fees, royalties, revenue sharing, introducer incentives, sales agent commissions, investor participation, payout statements, tax records, settlement records, accounting records, and financial reporting.

6.8Operational Monitoring and Support

We use personal data to provide operational support, monitor outlet performance, track sales, manage royalty reporting, support recipe deployment, monitor recipe usage, assist with marketing activities, provide technical support, monitor dashboard usage, identify operational issues, improve processes, and support franchise or partner performance.

6.9Marketing and Promotional Communications

Where permitted by law and based on consent where required, we may use personal data to send communications, updates, marketing materials, business opportunity information, event invitations, promotional content, franchise information, investor information, partner updates, and related notices by email, phone, WhatsApp, SMS, social media, advertising platforms, or other communication channels.

You may opt out of marketing communications at any time by contacting us or using the unsubscribe method provided in the relevant communication, where available.

6.10Analytics, Advertising, Retargeting, and Website Improvement

We use Google Analytics, Meta Pixel, advertising pixels, retargeting tools, analytics tools, CRM systems, and similar technologies to understand website performance, measure campaign effectiveness, analyse visitor behaviour, improve content, improve lead generation, support digital advertising, and retarget users who have interacted with our website or campaigns.

Where required by law, we will request consent before using non essential cookies or similar technologies.

6.11Security, Fraud Prevention, and Legal Protection

We use personal data to protect our website, systems, business, staff, users, franchisees, partners, investors, operators, agents, introducers, and ecosystem participants from fraud, unauthorised access, identity misuse, cyber threats, payment abuse, suspicious activity, contractual breach, unlawful activity, disputes, claims, and security incidents.

6.12Compliance With Legal and Regulatory Obligations

We use personal data to comply with applicable laws, regulations, lawful requests, court orders, tax obligations, accounting obligations, corporate record keeping obligations, payment obligations, fraud prevention requirements, data protection requirements, and other legal or regulatory duties.

6.13Corporate Transactions

If we undergo a restructuring, investment, merger, acquisition, sale, joint venture, financing, reorganisation, transfer of assets, or similar transaction, personal data may be reviewed, disclosed, or transferred as part of that transaction, subject to appropriate safeguards.

7

Privacy Policy Section

7. Legal Bases for Processing Personal Data

Where applicable privacy laws require us to identify a legal basis, we rely on one or more of the following.

7.1Consent

We may process personal data where you have given consent, including when you submit a form, create an account, agree to be contacted, agree to receive marketing materials, accept cookies, or voluntarily provide information.

Where we rely on consent, you may withdraw consent at any time. Withdrawal of consent does not affect processing carried out before withdrawal.

7.2Contractual Necessity

We may process personal data where necessary to take steps at your request before entering into a contract, or to perform a contract with you or an organisation you represent.

7.3Legitimate Interests

We may process personal data where necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. These interests may include responding to inquiries, evaluating opportunities, managing relationships, improving services, operating dashboards, protecting systems, preventing fraud, conducting business analytics, supporting franchise operations, managing payments, and maintaining business records.

7.4Legal Obligation

We may process personal data where necessary to comply with laws, regulations, court orders, tax obligations, accounting requirements, corporate governance obligations, payment requirements, data protection requirements, and other legal duties.

7.5Establishment, Exercise, or Defence of Legal Claims

We may process personal data where necessary to establish, exercise, defend, investigate, or resolve legal claims, contractual claims, regulatory matters, disputes, enforcement matters, or compliance issues.

8

Privacy Policy Section

8. Cookies and Tracking Technologies

Our website uses cookies, pixels, tags, scripts, device identifiers, local storage, analytics tools, advertising technologies, retargeting tools, and similar tracking technologies.

These technologies may be used to:

Enable website functionality.

Keep users logged in.

Remember preferences.

Improve website performance.

Understand website traffic.

Measure advertising and campaign performance.

Support Meta Pixel and retargeting.

Support Google Analytics.

Improve lead generation.

Detect security risks.

Analyse user engagement.

Support CRM and marketing workflows.

Some cookies are necessary for the website to function. Others are used for analytics, advertising, retargeting, personalisation, and marketing.

Where required by law, we will request your consent before placing non essential cookies on your device. You may manage cookies through your browser settings or through any cookie preference tool provided on our website.

If you disable cookies, some website features, account features, dashboards, or forms may not function properly.

9

Privacy Policy Section

9. Third Party Tools and Service Providers

We use or may use trusted third party tools and service providers to support our website, platform, payment, analytics, hosting, cloud, communication, marketing, CRM, and business operations.

These may include:

Google Analytics.

Meta Pixel.

Stripe.

PayPal.

Hosting providers.

Google Cloud.

Hostinger.

WhatsApp integrations.

CRM systems.

Cloud storage providers.

Payment gateways.

Email and marketing platforms.

Analytics providers.

Advertising platforms.

Form management providers.

IT support providers.

Cybersecurity providers.

Accounting and invoicing providers.

Dashboard, portal, and reporting providers.

Legal, tax, accounting, audit, and professional advisers.

Government authorities, regulators, courts, and law enforcement where required by law.

We require service providers to process personal data only for authorised purposes and to apply appropriate confidentiality, security, and data protection safeguards.

Some third party providers may process personal data in countries outside Malaysia, including Singapore, the United States, or other countries where their systems, support teams, or infrastructure are located.

10

Privacy Policy Section

10. Sharing Personal Data Within the AI RoboChef Ecosystem

Because AI RoboChef World operates through a franchise, licensing, operator, investor, partner, introducer, sales agent, revenue sharing, and regional expansion model, we may share relevant personal data with authorised parties where necessary for legitimate business, contractual, operational, compliance, or legal purposes.

These parties may include:

AI ROBOCHEF SDN BHD.

International Business Federation, where applicable.

Regional, country, or master franchise offices.

Franchise development teams.

Business development partners.

Sales agents and introducers.

Franchise operators and operational support teams.

Recipe owners and commercial partners, where relevant.

Investors and funding partners, where relevant.

Technology providers and dashboard providers.

Payment processors and financial service providers.

Professional advisers and service providers.

We only share personal data where reasonably necessary for the relevant purpose, such as evaluating an opportunity, supporting operations, managing royalty or payout reporting, providing technical support, arranging meetings, processing applications, performing contracts, processing payments, preventing fraud, or complying with legal requirements.

11

Privacy Policy Section

11. International Data Transfers

Your personal data may be transferred to, stored in, or accessed from countries outside your country of residence, including Malaysia, Singapore, and other countries where our hosting providers, cloud providers, payment processors, CRM providers, analytics providers, advertising platforms, service providers, support teams, or business partners are located.

Our website and related systems may be hosted or supported by Google Cloud, Hostinger, cloud storage providers, CRM systems, payment gateways, WhatsApp integrations, and other third party service providers.

Where required by applicable law, we will take reasonable steps to protect personal data transferred internationally. These steps may include:

Contractual data protection obligations.

Data processing agreements.

Confidentiality obligations.

Vendor due diligence.

Technical and organisational safeguards.

Access controls.

Security measures.

Other lawful transfer mechanisms recognised by applicable privacy laws.

12

Privacy Policy Section

12. Data Retention

You have informed us that the business preference is lifetime retention with no expiry. However, privacy laws commonly require personal data not to be kept longer than necessary for the purpose for which it was collected, unless there is a continuing legal, contractual, business, security, compliance, fraud prevention, accounting, tax, dispute resolution, or operational need.

Accordingly, our policy is as follows:

We may retain personal data for as long as necessary or reasonably required for the purposes described in this Privacy Policy, including for active accounts, ongoing franchise or partner relationships, payment records, royalty records, commission records, investor records, operator records, CRM records, business records, audit records, legal records, fraud prevention, security, compliance, tax, accounting, dispute resolution, and operational continuity.

For long term business, franchise, investor, operator, royalty, payout, introducer, agent, contractual, and compliance records, we may retain records for an extended period and, where justified by business or legal necessity, for the lifetime of the relevant account, relationship, contract, franchise, system record, or legal limitation period.

Where personal data is no longer required for a lawful purpose, we will take reasonable steps to delete, anonymise, archive, restrict, or securely dispose of it, unless we are permitted or required to retain it by law.

Retention periods may vary depending on the type of data and purpose of processing. For example:

Account records may be retained while the account remains active and for a reasonable period thereafter.

Franchise application records may be retained for assessment, follow up, compliance, audit, dispute resolution, and future opportunity review.

Successful franchise, operator, investor, introducer, sales agent, or partner records may be retained for the duration of the relationship and for as long as necessary thereafter.

Payment, tax, accounting, invoice, receipt, royalty, payout, and commission records may be retained as required or permitted by law.

Identity documents, passport documents, IC documents, bank statements, and financial capability records may be retained where required for due diligence, compliance, funded franchise assessment, fraud prevention, contractual administration, dispute resolution, or legal purposes.

Marketing consent records may be retained while consent remains valid and for a reasonable period to prove compliance.

Website logs, analytics records, cookie data, and advertising records may be retained according to system settings and business needs.

Fraud prevention, security, automated assessment, and risk screening records may be retained where needed to protect our business and users.

We recommend that users should not send unnecessary sensitive documents unless requested by us.

13

Privacy Policy Section

13. Security of Personal Data

We take reasonable technical, administrative, and organisational measures to protect personal data against unauthorised access, collection, use, disclosure, copying, modification, loss, misuse, interference, destruction, or similar risks.

These measures may include:

Access controls.

Password protection.

Role based permissions.

Secure cloud storage.

Encryption where appropriate.

Confidentiality obligations.

Staff and contractor access restrictions.

Secure document handling.

Internal privacy controls.

Vendor due diligence.

System monitoring.

Incident response procedures.

Data minimisation practices.

Payment processor security controls.

Account security controls.

Audit and logging where appropriate.

However, no method of transmission over the internet or electronic storage is completely secure. While we take reasonable steps to protect your personal data, we cannot guarantee absolute security.

If you believe your account or personal data has been compromised, please contact us immediately at Support@RoboChefWorld.com.

14

Privacy Policy Section

14. Your Rights

Depending on your location and applicable law, you may have rights in relation to your personal data. These may include the right to:

Request access to personal data we hold about you.

Request correction of inaccurate, incomplete, or outdated personal data.

Request deletion of personal data, where applicable.

Request restriction of processing, where applicable.

Object to certain processing, including direct marketing.

Withdraw consent where processing is based on consent.

Request portability of your personal data, where applicable.

Request information about how your personal data is used and shared.

Opt out of certain marketing communications.

Request human review of certain automated decisions, where required by law.

Lodge a complaint with a relevant data protection authority.

Exercise any other rights available under applicable privacy laws.

To exercise your rights, contact us at:

Support@RoboChefWorld.com

We may need to verify your identity before responding to your request. We may also request additional information to help us locate your records and process your request.

Your rights may be subject to exceptions, limitations, and legal requirements. For example, we may retain certain data where required or permitted for legal, contractual, tax, accounting, audit, payment, fraud prevention, security, dispute resolution, or legitimate business purposes.

15

Privacy Policy Section

15. Marketing Communications

Where permitted by law and based on consent where required, we may send you business, franchise, investment, partner, operator, recipe collaboration, event, update, promotional, or marketing communications.

These communications may be sent by email, phone call, WhatsApp, SMS, social media, advertising platforms, CRM systems, or other communication channels.

You may opt out of marketing communications at any time by:

Using the unsubscribe link in our email, where available.

Replying to the relevant message with an opt out request.

Contacting us at Support@RoboChefWorld.com.

Even if you opt out of marketing communications, we may still send you non marketing messages, including messages about your account, application, contract, payment, royalty, commission, payout, operational matter, security notice, legal notice, service notice, or compliance matter.

16

Privacy Policy Section

16. WhatsApp, Phone, and Messaging Communications

If you provide your phone number or WhatsApp number, we may contact you through phone call, WhatsApp, SMS, or other messaging channels for purposes related to your inquiry, application, franchise interest, partnership interest, account, payment, business relationship, operational support, updates, and marketing communications where permitted by law.

Messaging platforms are operated by third parties. Your use of those platforms is subject to their own terms and privacy policies.

You may request that we stop sending marketing messages through a particular communication channel by contacting us.

17

Privacy Policy Section

17. Payments and Financial Information

Our website and platform may collect online payments using various payment methods available through our payment processors, payment gateways, and supported payment systems.

Payment processing may involve Stripe, PayPal, payment gateways, banks, card networks, e wallet providers, and other payment service providers. These providers may collect and process payment information, card information, billing details, authentication data, transaction details, fraud screening data, and settlement data.

We may collect and retain payment related records, including payment amount, payment status, transaction reference, invoice, receipt, billing details, payout details, bank details, refund status, tax records, and related accounting information.

Payment providers are independent third parties and may process your personal data according to their own privacy policies and terms.

18

Privacy Policy Section

18. User Accounts, Portals, and Dashboards

Users may create accounts by themselves on our website or platform.

When you create or use an account, portal, dashboard, franchise system, operator dashboard, investor portal, agent portal, CRM linked area, or reporting system, we may collect and process:

Account registration details.

Login credentials.

Authentication data.

Profile information.

Role and permission data.

Account activity.

Dashboard activity.

System access logs.

Sales data.

Royalty data.

Payout data.

Commission data.

Marketing data.

Performance data.

Campaign data.

Operational support data.

Technical support data.

Communications and notifications.

You are responsible for maintaining the confidentiality of your login details and for using the account lawfully. You must notify us immediately if you suspect unauthorised access, misuse, or a security issue.

19

Privacy Policy Section

19. Automated Decision Making, AI Assessment, and Profiling

We use automated lead scoring, AI assessment, credit assessment, investor screening, fraud screening, and automated application decision tools.

These tools may be used to:

Evaluate franchise applications.

Assess investor or operator suitability.

Assess financial readiness.

Identify fraud or security risk.

Prioritise leads.

Support credit or funding related assessment.

Review operational readiness.

Screen business opportunities.

Detect suspicious activity.

Assist with compliance review.

Support internal business decisions.

Automated processing may involve information you provide, documents you submit, account activity, payment records, CRM records, application information, business records, risk indicators, and third party verification data.

We may use automated outputs to support decisions about whether to approve, reject, prioritise, request more information, escalate, investigate, or review an application or account.

Where required by applicable law, you may request human review, request an explanation, contest a decision, or provide additional information by contacting Support@RoboChefWorld.com.

20

Privacy Policy Section

20. Children’s Privacy

Our website, franchise opportunities, investment opportunities, business partner opportunities, operator applications, dashboards, and accounts are intended for adults and business users. They are not intended for children.

We do not knowingly collect personal data from children under the age required by applicable law. If we become aware that we have collected personal data from a child without appropriate consent, we will take reasonable steps to delete it.

If you believe a child has provided personal data to us, please contact Support@RoboChefWorld.com.

21

Privacy Policy Section

21. California Privacy Notice

This section applies only to California residents where the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies to us.

Depending on your interaction with us, we may collect the following categories of personal information:

Identifiers, such as name, email address, phone number, WhatsApp number, IP address, identity card number, passport number, account ID, and similar identifiers.

Customer records information, such as contact details, financial information, application information, and business records.

Commercial information, such as franchise interest, investment interest, payment history, transaction history, royalty participation, commission records, payout information, and business relationship records.

Internet or network activity, such as website usage, dashboard usage, device data, browser data, cookies, pixels, and online activity data.

Geolocation data, such as approximate location based on IP address or location information you submit.

Professional or business information, such as company name, business experience, F&B experience, business role, and business interests.

Sensitive personal information, such as identification documents, passport or IC details, bank statements, payment information, and financial documents where required for due diligence, funded franchise evaluation, fraud prevention, or compliance.

Inferences, such as assessments of franchise interest, partner fit, lead quality, operational readiness, investor suitability, fraud risk, or business opportunity relevance.

We collect, use, disclose, and retain these categories for the purposes described in this Privacy Policy.

We do not knowingly sell personal information in the traditional sense of exchanging it for money. However, because we use Meta Pixel, advertising pixels, retargeting tools, analytics tools, and similar technologies, some disclosures to advertising or analytics partners may be considered “sale” or “sharing” under California law if they involve cross context behavioural advertising.

California residents may have the right to:

Know what personal information we collect, use, disclose, sell, or share.

Request access to personal information.

Request correction of inaccurate personal information.

Request deletion of personal information.

Opt out of sale or sharing of personal information.

Limit the use and disclosure of sensitive personal information, where applicable.

Not be discriminated against for exercising privacy rights.

California users may exercise these rights by contacting Support@RoboChefWorld.com.

Where required, we will provide a “Do Not Sell or Share My Personal Information” link or equivalent opt out mechanism for California users.

22

Privacy Policy Section

22. Malaysia PDPA Notice

Where the Malaysia Personal Data Protection Act 2010 applies, we process personal data in accordance with applicable personal data protection principles, including notice and choice, disclosure, security, retention, data integrity, and access.

By submitting personal data to us, you acknowledge that we may collect, use, process, disclose, store, and transfer your personal data for the purposes described in this Privacy Policy, including evaluating applications, communicating with you, assessing business opportunities, managing franchise and partner relationships, processing payments, providing operational support, conducting marketing where permitted, preventing fraud, and complying with legal and business requirements.

You may request access to or correction of your personal data by contacting Support@RoboChefWorld.com.

23

Privacy Policy Section

23. Singapore PDPA Notice

Where the Singapore Personal Data Protection Act 2012 applies, we will collect, use, and disclose personal data for purposes that a reasonable person would consider appropriate in the circumstances and for purposes notified to you, unless an exception applies.

You may withdraw consent, request access, or request correction of your personal data by contacting Support@RoboChefWorld.com.

Where required, we will make reasonable security arrangements to protect personal data and will cease retention or anonymise personal data when it is no longer required for legal or business purposes.

24

Privacy Policy Section

24. GDPR and UK GDPR Position

As of the Effective Date, AI RoboChef World does not actively target users in the European Economic Area or the United Kingdom.

If we later actively offer goods or services to individuals in the European Economic Area or the United Kingdom, monitor their behaviour, or otherwise become subject to the GDPR or UK GDPR, we may update this Privacy Policy and implement appropriate measures, which may include identifying lawful bases for processing, appointing an EU or UK representative where required, implementing standard contractual clauses where needed, updating cookie consent mechanisms, and appointing a Data Protection Officer where required.

25

Privacy Policy Section

25. Data Accuracy

You are responsible for ensuring that personal data you provide to us is true, complete, accurate, and not misleading.

Please notify us promptly if your personal data changes or if you believe the data we hold is inaccurate. We may request updated documents or information where necessary to maintain accurate records.

26

Privacy Policy Section

26. Data Minimisation

We aim to collect only personal data that is reasonably necessary for the relevant purpose. However, certain franchise, funded franchise, investor, operator, partner, introducer, payment, fraud prevention, or compliance processes may require more detailed information, including identity documents, business documents, financial documents, payment records, and operational readiness information.

If you do not provide required information, we may not be able to respond to your inquiry, create or maintain your account, assess your application, process payments, proceed with onboarding, provide support, enter into a contract, administer royalties or payouts, or comply with legal requirements.

27

Privacy Policy Section

27. Links to Third Party Websites

Our website may contain links to third party websites, platforms, social media pages, payment portals, messaging services, or partner websites. We are not responsible for the privacy practices, security, content, or policies of third party websites or services.

You should review the privacy policy of each third party service before providing personal data to them.

28

Privacy Policy Section

28. Business Transfers

If we are involved in a merger, acquisition, financing, restructuring, sale of assets, joint venture, transfer of business, insolvency, or similar transaction, your personal data may be disclosed or transferred as part of that transaction.

Where required by law, we will notify you of material changes affecting the processing of your personal data.

29

Privacy Policy Section

29. Complaints

If you have concerns about how we handle personal data, please contact us first at Support@RoboChefWorld.com so that we can review and address your concern.

You may also have the right to complain to a relevant data protection authority depending on your location and applicable law.

30

Privacy Policy Section

30. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, website, accounts, dashboards, technologies, payment methods, third party tools, advertising tools, franchise model, legal requirements, or data processing practices.

When we update this Privacy Policy, we will revise the effective date above. Where required by law, we may provide additional notice or request renewed consent.

You should review this Privacy Policy periodically to stay informed about how we protect personal data.

Privacy Contact

Contact AI RoboChef World

For privacy questions, requests, concerns, withdrawal of consent, access requests, correction requests, deletion requests, marketing opt out requests, cookie related requests, California privacy requests, automated decision review requests, or other data protection matters, please contact:

31

Privacy Policy Section

31. Contact Us

For privacy questions, requests, concerns, withdrawal of consent, access requests, correction requests, deletion requests, marketing opt out requests, cookie related requests, California privacy requests, automated decision review requests, or other data protection matters, please contact:

AI ROBOCHEF SDN BHD

Company Registration Number: 1674363-W

Registered Business Address: 74g, Lintang Sungai Pinang, 10150 Penang, Malaysia

Email: Support@RoboChefWorld.com

Website: https://robochefworld.com

Effective Date: 4 May 2026
Last Updated: 4 May 2026

1. Introduction

AI RoboChef Sdn. Bhd. respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how AI RoboChef Sdn. Bhd. collects, uses, stores, processes, discloses, transfers, protects, and retains personal data when you visit our website, contact us, apply for franchise or partnership opportunities, submit investor inquiries, interact with our business ecosystem, or use any related RoboChef services, systems, platforms, or technologies.

This Privacy Policy applies to the website:

www.robochefworld.com

In this Privacy Policy, “RoboChef”, “AI RoboChef”, “Company”, “we”, “our”, or “us” refers to AI RoboChef Sdn. Bhd.

2. Company Information

AI RoboChef Sdn. Bhd.
74G, Lintang Sungai Pinang, 10150 Penang, Malaysia
Email: Privacy@RoboChefWorld.com

AI RoboChef Sdn. Bhd. operates within the International Business Federation ecosystem and supports RoboChef related business activities, franchise development, partnerships, technology deployment, and regional expansion.

3. Scope of This Privacy Policy

This Privacy Policy applies to personal data collected from:

  1. Website visitors
  2. Investors and potential investors
  3. Franchise applicants
  4. Business partners
  5. F&B operators
  6. Recipe owners
  7. Vendors and suppliers
  8. Job applicants
  9. Event participants
  10. Restaurant operators using RoboChef systems
  11. Authorized users of RoboChef platforms, systems, robots, or related services

This Privacy Policy does not apply to third party websites, platforms, or services that are not owned or controlled by RoboChef.

4. Personal Data We Collect

We may collect personal data directly from you, automatically through our website, or through business interactions.

4.1 Information You Provide to Us

We may collect:

  1. Full name
  2. Email address
  3. Phone number
  4. Company name
  5. Job title
  6. Business address
  7. Country, city, or region
  8. Investment inquiry details
  9. Franchise application details
  10. Partnership inquiry details
  11. Business proposal information
  12. Recipe owner information
  13. Vendor or supplier details
  14. Event registration information
  15. Messages submitted through contact forms
  16. Documents or information voluntarily submitted to us

4.2 Information Collected Automatically

When you visit our website, we may automatically collect:

  1. IP address
  2. Browser type
  3. Device information
  4. Operating system
  5. Pages visited
  6. Time spent on pages
  7. Referring website
  8. Cookie identifiers
  9. Website usage data
  10. Analytics and performance data

4.3 Operational, Robot, and Platform Data

Where RoboChef systems, robots, software, or platforms are deployed, we may collect operational and technical data, including:

  1. Machine operating status
  2. Cooking cycle data
  3. Recipe execution data
  4. Temperature, timing, and equipment performance data
  5. Kitchen workflow data
  6. Equipment diagnostics
  7. Maintenance logs
  8. Error logs
  9. Outlet performance data
  10. Recipe usage data
  11. Order and menu related operational data
  12. System access and administrator activity logs

RoboChef generally does not collect personal customer identity data from restaurant customers unless required by a specific integration, service, or legal obligation.

5. Sensitive Data

RoboChef does not intentionally collect sensitive personal data unless it is necessary, legally permitted, and supported by appropriate safeguards.

Unless separately disclosed and agreed, RoboChef systems do not collect:

  1. Biometric identification data
  2. Facial recognition data
  3. Audio recordings
  4. Health data
  5. Religious information
  6. Political information
  7. Personal identity documents
  8. Children’s data

If any camera, audio, biometric, employee monitoring, customer analytics, or surveillance related feature is introduced, RoboChef will provide additional notice and obtain consent where required by applicable law.

6. How We Use Personal Data

We may use personal data for the following purposes:

  1. To respond to inquiries
  2. To process franchise applications
  3. To assess investor or partner suitability
  4. To communicate with potential business partners
  5. To manage franchise, investor, and partnership relationships
  6. To operate and improve our website
  7. To provide customer support
  8. To manage events, meetings, and business discussions
  9. To deploy, operate, support, and maintain RoboChef systems
  10. To monitor equipment performance, safety, and reliability
  11. To improve AI cooking performance and automation accuracy
  12. To optimize kitchen workflows and operational efficiency
  13. To protect our website, systems, users, and business
  14. To prevent fraud, misuse, unauthorized access, or illegal activity
  15. To send marketing communications where permitted by law
  16. To comply with legal, regulatory, tax, accounting, and contractual obligations
  17. To establish, exercise, or defend legal rights

7. AI and Data Usage

RoboChef may use operational, technical, and system data to improve its artificial intelligence, robotics, automation, recipe calibration, diagnostics, performance monitoring, and kitchen workflow systems.

Where possible, RoboChef applies safeguards such as:

  1. Data minimization
  2. Aggregation
  3. Anonymization
  4. Access control
  5. Security monitoring
  6. Purpose limitation

RoboChef does not use personal data for AI model training where consent or another lawful basis is required unless such consent or lawful basis has been obtained.

8. Legal Basis for Processing

Depending on the applicable jurisdiction, we may process personal data based on:

  1. Your consent
  2. Performance of a contract
  3. Steps taken before entering into a contract
  4. Compliance with legal obligations
  5. Legitimate business interests
  6. Protection of legal rights
  7. Public or regulatory requirements where applicable

Where we rely on consent, you may withdraw your consent at any time, subject to legal or contractual restrictions.

9. Cookies and Tracking Technologies

Our website may use cookies and similar technologies to support website functionality, analytics, security, performance measurement, and marketing.

Cookies may be used for:

  1. Essential website operation
  2. Security and fraud prevention
  3. Website analytics
  4. Traffic measurement
  5. User preference management
  6. Marketing and advertising where enabled

You may control cookies through your browser settings or through any cookie preference tool provided on our website.

Non essential cookies will be used only where permitted by applicable law.

10. Marketing Communications

We may send you marketing communications about RoboChef services, franchise opportunities, events, partnerships, or business updates where permitted by law.

You may opt out of marketing communications at any time by using the unsubscribe link in our emails or by contacting us at:

Privacy@RoboChefWorld.com

Even if you opt out of marketing, we may still send you important non marketing communications relating to legal, operational, security, contractual, or service matters.

11. Disclosure of Personal Data

We may disclose personal data to:

  1. International Business Federation and related business entities where relevant
  2. RoboChef affiliates, franchise partners, and master franchise partners
  3. Cloud hosting providers
  4. Technology and software providers
  5. Analytics providers
  6. Marketing service providers
  7. Payment or finance related service providers where applicable
  8. POS, delivery, or platform integration providers where applicable
  9. Professional advisors, including lawyers, accountants, auditors, and consultants
  10. Regulators, authorities, courts, or law enforcement agencies where required
  11. Potential investors, buyers, merger partners, or restructuring parties where legally permitted
  12. Other parties with your consent or as required by law

We do not sell personal data.

12. International Data Transfers

Your personal data may be transferred to, stored in, or processed in countries outside your country of residence, including Malaysia, countries in the Asia Pacific region, and locations where our cloud, technology, or service providers operate.

Where required by applicable law, we will apply appropriate safeguards for international data transfers, including contractual protections, security measures, access controls, data minimization, and transfer assessments.

13. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Our general retention periods are:

  1. Website inquiry data: up to 24 months
  2. Marketing contact data: until you unsubscribe or request deletion, subject to legal requirements
  3. Franchise application data: for the duration of the application process and up to 7 years thereafter where necessary
  4. Investor or partner inquiry data: for the duration of the business relationship or up to 7 years after last contact where necessary
  5. Contract and business records: as required by law or contractual obligations
  6. Legal, accounting, and financial records: as required by applicable law
  7. Robot, platform, and operational data: as necessary for service delivery, diagnostics, safety, warranty, maintenance, analytics, and business improvement
  8. Security logs: as necessary for cybersecurity, fraud prevention, investigation, and legal protection

When personal data is no longer required, we will delete, anonymize, or securely retain it as permitted by law.

14. Data Security

We take reasonable administrative, technical, and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, disclosure, or destruction.

These measures may include:

  1. Access controls
  2. Role based permissions
  3. Encryption in transit
  4. Encryption at rest where appropriate
  5. Secure cloud infrastructure
  6. Password controls
  7. Multi factor authentication where feasible
  8. System monitoring and logging
  9. Confidentiality obligations
  10. Vendor due diligence
  11. Incident response procedures
  12. Internal data handling controls

No method of transmission or storage is completely secure. While we take reasonable steps to protect personal data, we cannot guarantee absolute security.

15. Data Breach Response

If we become aware of a data breach affecting personal data, we will take appropriate steps to assess, contain, investigate, and remediate the incident.

Where required by applicable law, we will notify affected individuals, regulators, business partners, or relevant authorities.

16. Your Rights

Depending on your jurisdiction, you may have the right to:

  1. Request access to your personal data
  2. Request correction of inaccurate personal data
  3. Request deletion of personal data
  4. Withdraw consent
  5. Object to certain processing
  6. Restrict certain processing
  7. Request data portability
  8. Opt out of marketing communications
  9. Lodge a complaint with a data protection authority

To exercise your rights, contact us at:

Privacy@RoboChefWorld.com

We may request information to verify your identity before responding to your request.

17. California Privacy Rights

Where the California Consumer Privacy Act or California Privacy Rights Act applies, California residents may have rights to:

  1. Know what personal information we collect
  2. Know how personal information is used
  3. Know whether personal information is disclosed
  4. Request correction of inaccurate personal information
  5. Request deletion of personal information
  6. Opt out of sale or sharing where applicable
  7. Limit use of sensitive personal information where applicable
  8. Not be discriminated against for exercising privacy rights

RoboChef does not sell personal data.

18. GDPR and UK GDPR Rights

Where the GDPR or UK GDPR applies, individuals in the European Economic Area or United Kingdom may have rights to:

  1. Access personal data
  2. Rectify inaccurate personal data
  3. Erase personal data
  4. Restrict processing
  5. Object to processing
  6. Data portability
  7. Withdraw consent
  8. Lodge a complaint with a supervisory authority

Where required, RoboChef will identify and rely on an appropriate lawful basis for processing.

19. Third Party Services

Our website and services may contain links to third party websites, platforms, tools, or services.

We are not responsible for the privacy practices, content, security, or data handling of third parties. You should review the privacy policies of any third party services you use.

20. Children’s Privacy

RoboChef services are not intended for individuals under 18 years old.

We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without appropriate consent, we will take steps to delete the data where required by law.

21. Business Transfers

If RoboChef is involved in a merger, acquisition, restructuring, financing, investment transaction, sale of assets, joint venture, or similar business transaction, personal data may be disclosed or transferred as part of that transaction, subject to applicable law and confidentiality safeguards.

22. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Any updated version will be posted on this page with a revised “Last Updated” date. Where required by law, we may provide additional notice or request renewed consent.

23. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact:

AI RoboChef Sdn. Bhd.
74G, Lintang Sungai Pinang, 10150 Penang, Malaysia
Email: Privacy@RoboChefWorld.com

Yes, this version is suitable to paste into your Privacy Policy page, subject to lawyer review.