Ifmal
| Primary URL | Location | Industry | ifmal[.]com |
Country
Malaysia
|
Retail
|
|---|
Profile
The organisation operates as an e-commerce platform headquartered in Malaysia, known by the alias Ifmal. Its core function is to facilitate online retail transactions between sellers and buyers within the Malaysian market. The platform provides a digital marketplace where vendors can list products for sale, and consumers can browse and purchase goods. Its services are confined to the domestic Malaysian e-commerce sector, serving local customers and sellers. The platform's operational scope is defined by its national focus, with no indication of international market expansion in the available information. Its business model centres on connecting third-party sellers with end-users, acting as an intermediary rather than a direct retailer of its own inventory. The platform's infrastructure supports standard e-commerce functionalities, including product listings, payment processing, and order management for its registered users. Its existence as a named entity in the Malaysian digital marketplace is established through its public responses to a significant data incident.
A defining characteristic of the platform, as evidenced by a 2021 incident, is its stated data collection policy. When a seller attempted to sell a database allegedly containing personal details of 200,000 Malaysians, claiming it originated from this platform, the organisation explicitly denied the assertion. The platform maintained that its registration process does not collect national identification numbers, a key sensitive data point in the alleged dataset. It further contended that its overall customer base was smaller than the 200,000 records suggested, directly challenging the dataset's purported link to its systems. Independent verification supported the platform's claim regarding its registration process, confirming that such high-risk identification data is not solicited from users. This incident highlights the platform's public position on user data minimisation, specifically avoiding the collection of national ID numbers. The episode also underscored the platform's role as a subject of data security scrutiny within Malaysia's digital economy, prompting calls for official examination of personal information exposure. The unresolved question of the data's true source points to broader risks in the e-commerce ecosystem, while the platform's documented practices form a clear, evidence-based distinction in its operational approach to user information.
