Privacy policy — a summary in English
How the Bangga Group handles your personal information, in brief. This page is a summary for convenience: the official policy is the Japanese privacy policy (version of 3 October 2026), which prevails if the two differ.
Who is responsible
The three companies of the Bangga Group handle personal information together as joint controllers, under Japan's Act on the Protection of Personal Information (APPI) and Malaysia's Personal Data Protection Act 2010 (PDPA). BlancBow Inc. is the first point of contact for personal-information requests (§1, §13).
| Company | Role | Address |
|---|---|---|
| Bangga Inc. | contracting and invoicing entity | 5-14, Kinkocho, Kanagawa-ku, Yokohama, Kanagawa 221-0056, Japan |
| BlancBow Inc. | domestic front office in Japan | 1-30-8, Akabaneminami, Kita-ku, Tokyo 115-0044, Japan |
| Bangga Global Sdn. Bhd. | on-the-ground execution in Malaysia | Level 23, Exchange 106, Lingkaran TRX, 55188 Kuala Lumpur, Malaysia |
What we collect
- Name, address, phone number, email address, date of birth and nationality
- Passport number and passport images, when needed for a visa or an application
- Family, employment, education and financial information, when needed for MM2H, company formation or an application
- Payment information (billing name and payment records)
- How you use our services: access logs, IP address, device information and chat messages
- Sign-in tokens stored in cookies or your browser's local storage
How we use it
- To provide, run and improve our services, and to answer your enquiries
- To apply to authorities and institutions on your behalf (visas, applications, company registration)
- For billing and to confirm payments
- To tell you about new services (you can opt out at any time)
- To detect and prevent misuse, and to comply with the law
- Shared use within the three Bangga Group companies (§6)
Who we share it with
We do not give your personal information to third parties without your consent, except:
- as needed for the service — for example immigration and EMGS, universities and schools, banks, property owners, SSM (Companies Commission of Malaysia), Labuan FSA and other authorities, and lawyers or notaries;
- partner tax accountants, when you came to us through our referral programme for professionals;
- when required by law, to protect someone's life, body or property, or on a merger or transfer of business (§4).
Service providers handle some data on our behalf, under contract: for example Cloudflare (hosting), Stripe (payments), Resend (email delivery), Anthropic (answers in the website's AI chat and translation — the text you type is sent to it) and Google Workspace (documents). The full list is on our sub-processor page (Japanese).
Storage outside your country
Our services run on Cloudflare's global network, so your data may be stored and processed in data centres in the United States, Singapore, Japan, Malaysia and elsewhere. Data is encrypted in transit and at rest. The basis for these transfers is set out in §7 of the Japanese policy.
How long we keep it
| Data | Kept for |
|---|---|
| Customer records after a completed transaction | 7 years from completion |
| Visa and application documents | 5 years after the application is completed |
| Enquiries that did not lead to a transaction | 3 years from your last enquiry |
| Email address for news and offers | Until you opt out |
| Access and audit logs | 2 years |
Cookies
We use cookies and your browser's local storage only to keep you signed in and to remember display settings such as the language. As of 28 September 2026, we do not use cookies for advertising or analytics (if we start to, we will update this policy and ask for your consent first); our page-view statistics (Cloudflare Web Analytics) do not use cookies (§11).
Your rights and how to make a request
- You can ask us to disclose, correct, add to or delete your personal information, to stop using it or to stop providing it to third parties, and you can opt out of marketing emails.
- Email info@bangga-inc.com with the subject "DSR request". We may ask you to confirm your identity.
- We reply within 30 days (in complex cases we may extend this by 30 days and will tell you why). Requests are free of charge in principle.
- If you live in the EU, the EEA or the UK, or in Malaysia, additional rights under the GDPR or the PDPA apply (§14, §15).
Children
In principle we do not collect personal information from children under 16. Where it is needed (for example for a dependant's visa), we ask for a parent's or guardian's consent first (§18).
If something goes wrong
If we become aware of a leak, loss or damage of personal information, we notify the people affected and the relevant authorities (for EU data subjects, within 72 hours of becoming aware) (§17).
Contact
Questions about this policy: info@bangga-inc.com — BlancBow Inc., 1-30-8, Akabaneminami, Kita-ku, Tokyo 115-0044, Japan.
Official version: Privacy policy (Japanese), version of 3 October 2026. Related: Cookie policy (Japanese).