1 Who We Are

This Privacy Policy applies to Durioo+ (the “Service”), operated by Durioo Sdn. Bhd. (“Durioo”, “we”, “us”, “our”), a company incorporated in Malaysia.

Durioo+ is a subscription-based halal streaming platform providing Islamic content for Muslim families with children aged 0–8+. The Service is accessible via our website (duriooplus.com and join.duriooplus.com), our mobile and tablet apps, and our smart TV applications.

This Privacy Policy describes how personal information is collected, used, processed, safeguarded, and shared when you access or use the Durioo+ Service. By using the Service, you agree to the practices described in this policy.

We may update this Privacy Policy from time to time. Your continued use of the Service following any update constitutes your acceptance of the revised policy. We will notify users of material changes by posting a notice on our website.

2 Information We Collect

a) Account Registration Information

To create a Durioo+ account, you provide us with your email address and a password. You may optionally add a display name, profile picture, and child profile details (such as age range) to personalise your experience.

b) Payment Information

If you subscribe via our website (join.duriooplus.com), payment is processed securely by Stripe, Inc. Durioo does not receive, store, or process your full payment card details. We only receive transaction metadata such as the transaction date, amount, and a tokenised reference. Stripe’s privacy policy is available at stripe.com/privacy.

If you subscribe via a third-party app store or platform (Apple App Store, Google Play Store, Amazon Appstore, or similar), billing is handled entirely by that platform under their respective payment and privacy policies. Where those platforms do not support native in-app billing, payment may be redirected to Stripe.

c) Automatically Collected Information

Each time you use the Service, we automatically collect certain information, which may include:

• Your IP address and approximate geographic location (country/region level)
• Device type, operating system, and browser type
• Viewing activity, playback behaviour, and content preferences
• Session timestamps, referring pages, and navigation patterns
• Internet service provider (ISP) information

We use ipapi.co to determine your country of origin for the purpose of displaying localised pricing in your local currency. This is done without storing your precise location.

d) Communications

If you contact us via email or our support channels, we retain your correspondence to assist with your query and improve our service.

3 How We Use Your Information

We use the information we collect to:

• Create and manage your account and subscription
• Deliver content and personalise your viewing experience
• Process payments and manage billing cycles
• Send transactional emails (account confirmations, subscription renewals, receipts)
• Send marketing communications, where you have consented
• Display pricing and content in your local currency and language
• Analyse how the Service is used to improve performance and content
• Provide customer support
• Detect and prevent fraud and unauthorised access
• Comply with applicable legal obligations

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

4 Payment Processing

Durioo+ uses the following payment processors depending on how you subscribe:

Stripe (Website Subscriptions)

Subscriptions purchased directly through join.duriooplus.com are processed by Stripe, Inc., a globally trusted payment processor. Stripe collects and processes your payment card information in accordance with PCI DSS (Payment Card Industry Data Security Standard). Durioo does not have access to your full card number, CVV, or other sensitive payment data.

Apple App Store

Subscriptions purchased via the Durioo+ app on iOS or iPadOS are billed through Apple’s in-app purchase system. Apple’s privacy policy governs the data Apple collects in connection with that transaction.

Google Play Store

Subscriptions purchased via the Durioo+ Android app are billed through Google Play Billing. Google’s privacy policy governs data collected in that context.

Amazon Appstore

Subscriptions purchased via the Amazon Appstore are billed through Amazon’s in-app purchasing system. Where Amazon’s native billing is not available, payment may be redirected to Stripe.

5 Disclosure to Third Parties

a) Authorised Service Providers

We share your information with trusted third-party service providers who assist in operating the Service, including payment processors (Stripe), email service providers, analytics platforms, and cloud hosting providers. These providers are contractually obligated to use your data only to provide services to us and not for their own purposes.

b) App Store & Platform Partners

Where you access Durioo+ through Apple, Google, Amazon, or similar platforms, limited account information may be shared with those platforms as required to fulfil your subscription and provide customer support.

c) Legal Requirements

We may disclose your information when required to do so by law, court order, or governmental authority, or where we have a good-faith belief that disclosure is necessary to protect our rights, enforce our Terms of Service, or protect the safety of our users or the public.

d) Aggregated & Anonymised Data

We may share aggregated, anonymised statistics about usage patterns (for example, total number of active subscribers or most-watched shows) with partners or publicly. Such data does not identify individual users.

e) Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business, your information may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.

6 Cookies & Tracking Technologies

We use cookies and similar tracking technologies to:

• Keep you logged in to your account
• Remember your preferences and playback settings
• Analyse traffic and usage patterns (via tools such as Google Analytics)
• Detect fraud and unauthorised access

You can control cookie settings through your browser preferences. Disabling cookies may affect the functionality of certain features of the Service.

We use Google Tag Manager to manage analytics and tracking scripts on our website. This may involve the collection of anonymised browsing data.

7 Email Communications

a) Transactional Emails

We send transactional emails related to your account — including welcome emails, payment confirmations, subscription renewal reminders, and important service notices. These emails are a necessary part of operating your account and cannot be opted out of while you hold an active account.

b) Marketing Emails

With your consent, we may send you emails about new shows, features, promotions, and platform updates. You may unsubscribe from marketing emails at any time using the unsubscribe link in any marketing email, or by updating your preferences in your account settings.

8 Your Privacy Rights

Depending on your country of residence, you may have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (“right to be forgotten”)
• Right to Restriction: Request that we restrict processing of your data in certain circumstances
• Right to Data Portability: Request your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent for processing at any time where consent is the legal basis

You may exercise any of these rights by logging into your account and adjusting your account settings, or by contacting us directly at support@durioo.com.

Please note that if you close your account or request deletion of your data, you will lose access to any content associated with your subscription. We may retain certain information where required by law or for legitimate business purposes such as fraud prevention.

9 Children’s Privacy

Durioo+ is a platform for children aged 0–8+, but the account holder must be an adult (18 years or older). The Service is not intended for individuals under 18 to register or manage an account independently.

We do not knowingly collect personal information directly from children. All account registration, subscription, and billing is performed by a parent or legal guardian.

Child profiles created within a parent’s account are managed by the account holder and do not involve the independent collection of children’s personal data.

10 Data Retention & Security

We retain your personal data for as long as your account is active or as needed to provide the Service. If you close your account, we may retain certain data for a reasonable period to:

• Allow account restoration if you wish to re-subscribe
• Comply with legal, tax, or regulatory obligations
• Resolve disputes and enforce our agreements
• Prevent fraud and protect the integrity of the Service

We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. However, no method of internet transmission or electronic storage is 100% secure.

Payment data is handled exclusively by PCI DSS-compliant processors (Stripe, Apple, Google, Amazon) and is never stored on Durioo’s servers.

11 International Data Transfers

Durioo is based in Malaysia. If you access the Service from outside Malaysia — including from the United Kingdom, European Union, United States, Canada, Singapore, or Australia — your personal data may be transferred to and processed in Malaysia and other countries where our service providers operate.

For users in the UK and EU, we take steps to ensure that any international transfer of personal data is subject to appropriate safeguards in line with UK GDPR and EU GDPR requirements, including reliance on adequacy decisions or standard contractual clauses where applicable.

12 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, technology, legal requirements, or other operational reasons. When we make material changes, we will update the “Last Updated” date at the top of this page and, where appropriate, notify you by email or via an in-app notice.

Your continued use of the Durioo+ Service after the effective date of any updated Privacy Policy constitutes your acceptance of that updated policy.

13 Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or would like to make a complaint, please contact us: