/

Jin Jiang Hotel Privacy Policy

 

Published: 2026.06.01

Effective Date: 2026.06.01

 

I. Introduction

II. How we collect and use your Personal Data

III. How we share your Personal Data

IV. How we transfer your Personal Data

V. How we protect your Personal Data

VI. How we store your Personal Data

VII. Your rights

VIII. How we protect minors' Personal Data

IX. Your obligations

X. Changes to this Privacy Policy

XI. Contact information

ANNEX1 Additional privacy provisions applicable to processing of Personal Data of residents of certain countries

 

I. Introduction

This privacy policy (“Privacy Policy”)  applies to the Jin Jiang Hotel Reservation website and Jin Jiang Rewards App operated by Plateno Management (HK) Limited (hereinafter referred to as we, us, or “our). We respect and recognize the importance of your privacy, and are committed to protecting the privacy, confidentiality and security of the Personal Data you provide to us or that we collect about you when you use our website [www.jinjianghotels.net/www.jinjianghotels.com.my/www.jinjianghotels.id/www.jinjianghotels.co.id/www.jinjianghotels.com.vn]  or our mobile application(s) [Jin Jiang Rewards App] and other online sites (collectively, "Site") and services by adhering to the following principles: the principle of consistency of authority and responsibility, the principle of clarity of purpose, the principle of opt-in consent, the principle of minimum use, the principle of ensuring security, the principle of participation of the data subject, and the principle of openness and transparency. At the same time, we will take appropriate security measures to protect your Personal Data in accordance with the industry's security standards and applicable law.

You will be asked to consent to the terms of this Privacy Policy when making a reservation, registering for the Jinjiang membership, corresponding with us via the Site or otherwise where required under applicable law. Subject to the requirements of applicable law, your continued use of the Site and/or our services will constitute your deemed consent or acknowledgement to the terms of this Privacy Policy.

Please read and understand this Privacy Policy carefully. 

 

As we operate in different countries, some aspects of this Privacy Policy address certain country-specific requirements under applicable privacy and data protection laws. Please refer to Annex 1 for further details. It is important that you read this Privacy Policy in full to ensure you understand all aspects that apply to you.

 

II. How we collect and use your Personal Data

Personal Data refers to all kinds of information recorded electronically or by other means that can, alone or in combination with other information, identify a specific natural person or reflect the activities of a specific natural person. In the course of your use of the Site and/or our services, we will collect and use only the information that you voluntarily provide, during or as a result of your use of the services, in the manner and for the purposes described in this Privacy Policy, to provide and optimize our services and to protect the security of your account:

1. Member registration and order fulfillment

(1) In order to complete the registration of your membership, we will ask you to provide your email address for the purpose of logging in to your account, identifying you, and providing you with functions or related services for which real-name authentication is required (e.g., to enable content uploading, posting, sharing, and commenting through the Site).

(2) You can choose to register/join for a membership through the Site. After completing the registration for becoming a member, we may automatically generate your member username, member level, member card number, member avatar and member registration time and member points (“Membership Points”).

2. Membership Points calculation and redemption

In order to record and calculate your Membership Points, we may collect information relating to your order value and the use of your Membership Points across each Jin Jiang service.

3. Message notification

You understand and agree that we may send you email notifications to your registered email address in the course of our operations for the purpose of informing users of news, identity verification, security verification, research on user experience and communication of complaints and feedback; we may also send email notifications to your registered email address to provide you with information relating to the services, feature introductions or activities that may be of interest to you. If you do not wish to receive such information, you may unsubscribe using the method provided in the email, or contact us to unsubscribe.

4. Hotel room reservation

You understand and agree that in order to reserve a room at the hotel of your choice, confirm the occupant's information, and register your arrival and departure, you will be required to provide certain personal data including your name, email address, document type and document number (of you or the actual occupant) such as passport number or national ID number, hotel reservation information (such as dates of stay, meal plan and rates) and personal preferences.

5. Cookies and other technologies

Cookies, device information identifiers and similar technologies are commonly used on the Internet. When you access the Site and/or use the service, we may use such technologies to place one or more cookies or anonymous identifiers on your device to collect and identify information about you when you visit or use the Site and/or services. We will not use cookies for any purpose other than those described in this Privacy Policy.

Most browsers allow users to manage or clear their browser cache data through  your browser settings. If you choose to disable or clear cookies, you may not be able to use the services or features provided by us that rely on cookies. We use cookies and similar technologies for the following purposes: (1) to ensure the safe and efficient operation of the Site and our services. We may use authentication and security cookies or anonymous identifiers to verify secure log-ins and to prevent misappropriation, fraud, or other unauthorized activities. These technologies also help us to improve the performance, efficiency and response time of our services. (2) To enhance user experience. Cookies and similar technologies may reduce the need for you to repeatedly enter the same information (such as Personal Data or search preferences), thus making your experience more convenient and seamless. (3) To recommend, display and push content that may be of interest to you. We may use such technologies to understand your preferences and usage habits and to analyze data in order to improve our Site and services and to recommend information or features that may be of interest to you.

6. Changes in the purpose of collection and use of Personal Data

Please note that as our business develops, the scope of our services may change. Where a new function or service is related to the function or service that we currently provide, the Personal Data collected and used will generally have a direct or reasonable connection to the original purpose of processing. Where there is no direct or reasonable connection, we will inform you of the new purpose, and where required, obtain your consent before processing your Personal Data.

7. Potential Investors Data Collection

In order to be considered as a potential investor in our hotel, you acknowledge and agree that you are required to provide us with your full name, email address, and the location of the property you intend to invest in. Upon receipt of such data, we will contact you via the email address provided.

8. Legal basis for processing Personal Data

(1) Necessary for the conclusion and performance of the contract between you and us;

(2) Those directly related to national security, national defense security and other national interests; and those directly related to public safety, public health, public information and other significant public interests;

(3) Directly related to the investigation, prosecution, trial and enforcement of sentences for crimes;

(4) For the purpose of safeguarding the life, property, reputation and other important legal rights and interests of you or other individuals, but it is difficult to obtain the consent of the person himself/herself;

(5) The Personal Data collected is disclosed to the public by you;

(6) Collecting Personal Data from lawful publicly disclosed information, such as lawful news reports, governmental information disclosure, and other channels;

(7) Necessary for maintaining the safe and stable operation of the Site or services provided, such as detecting and disposing of malfunctions in the Site or services;

(8) Necessary for legitimate journalism;

(9) If the Personal Data contained in the results of academic research or descriptions is de-identified when it is necessary to conduct statistical or academic research in the public interest and when the results are made available to the public;

(10) Other cases stipulated by laws and regulations.

 

III. How we share your Personal Data

1. Basic principles

(1) In order to provide relevant services to you, we may, where necessary, share your Personal Data with our partners. Unless otherwise permitted by applicable law, we will not share your Personal Data without your consent, unless the Personal Data has been anonymized and, whether on its own or in combination with other information, cannot be used to identify you.

(2) We will only share Personal Data that is necessary for legitimate, legal, necessary, specific, and clear purposes related to the provision of services to you. We will carefully assess the third party's intended use of the shared Personal Data and its ability to implement appropriate security measures, and we will require such third parties to comply with applicable legal and contractual obligations. If the third party intends to use the Personal Data for a purpose beyond the scope of the original consent, such third parties will be required to obtain your consent for such additional purpose.

2. Synchronized display of member-related information

Unless otherwise specified, you may link your membership to each Jin Jiang service. In order for us to provide you with a unified service, you authorize us to display your member-related information, i.e. email address, Membership Points and other related information, across each service. However, we will not share such information with the operators of each service.

3. Commissioning

In order to analyze the usage of our services, develop new functions, maintain the services and improve your experience, we may commission our affiliates or third parties to process your information, including information about the device and network you use and your usage behavior. We will conduct due diligence and sign contracts with the affiliates or third parties that we entrust to process your information to ensure that they comply with this Privacy Policy and all applicable laws and regulations.

4. Changes in operations

As our business develops, we may undergo mergers, acquisitions, divisions, or asset transfers, and your Personal Data may be transferred as a result. In the event of such changes, we will notify you of the name and contact information of the recipient, and require the recipient to protect your Personal Data in accordance with applicable laws and regulations and to maintain security standards no less stringent than those set forth in this Privacy Policy. If the recipient intends to process your Personal Data for purposes or in a manner different from the original purpose or method of processing, we will require the recipient to obtain your authorization and consent for such additional purposes or methods.

5. Your publishing and sharing

You acknowledge and understand that if you post or share information, or submit other content for viewing by others in the course of using the service, such information may be accessible to the public or other users of our service. Such information may appear in search engine results or on other publicly available platforms and may be accessed or indexed by third parties. As a result, certain content may remain publicly accessible even after we delete your Personal Data stored on our servers at your request. We encourage you to exercise caution when sharing your Personal Data.

 

IV. How we transfer your Personal Data

1. You understand and agree that we may transfer Personal Data to other jurisdictions as necessary for the purposes described in this Privacy Policy. In particular, we may transfer your Personal Data to the hotels you have booked, which may be located in jurisdictions that do not provide the same level of data protection as the jurisdiction in which your Personal Data was originally collected. Additionally, we may transfer your Personal Data to Singapore where our main servers are located.

2. When we transfer your Personal Data to other countries or jurisdictions, we will protect that data as described in this Privacy Policy and in accordance with applicable law. Where required under applicable law, we will put in place binding contractual obligations with the data recipient to safeguard your data protection rights. Furthermore, we will notify any data transfer and/or data transfer mechanisms to the competent supervisory authority where required under applicable law.

3. By agreeing to this Privacy Policy, you hereby consent to the transfer of your personal data to jurisdictions outside of your country of residence.

 

V. How we protect your Personal Data

1. We take the security of your Personal Data very seriously and will implement reasonable security measures to protect your Personal Data from improper use or unauthorized access, public disclosure, use, modification, damage, loss or leakage. We will use no less than industry-standard encryption technology (e.g. SSL), anonymization and other reasonably practicable means to protect your Personal Data. Access to your Personal Data will be restricted to authorized individuals for legitimate business purposes. 

2. In the event of a Personal Data security incident, we will, where required and in accordance with applicable laws and regulations, promptly inform you of: the nature of the security incident and its possible impact, the measures we have taken or will take to address it, recommendations for you to independently mitigate risk, and any available remedial measures. We will promptly notify you by email, letter, push notification, or other appropriate means. Where it is not feasible to notify each affected individual directly,, we will take reasonable and effective  steps to make a public announcement.

3. Please understand that, despite the implementation of reasonable and effective security measures and compliance with the standards required by applicable laws and regulations, technological limitations and the potential presence of malicious activities, mean that it is not possible to guarantee that 100% of the information will always remain completely secure.

 

VI. How we store your Personal Data

1. Storage location

Your Personal Data will be stored on servers located in Singapore.

2. Storage period

We retain your Personal Data for as long as necessary to provide you with our services, comply with applicable laws, resolve disputes, or to accommodate our business needs, including the detection and prevention of fraud or other malicious activities. All retained Personal Data is subject to this Privacy Policy.  

If you have questions about the retention period for any specific Personal Data we process, please contact us using the contact information below.

Member Contact Email [itts@jinjianghotels.com.cn ] 

3. Deletion of information

We will delete your Personal Data in any of the following cases, unless otherwise  required under applicable laws:

(1) The purpose for processing the Personal Data has been achieved, cannot be achieved, or is no longer necessary;

(2) We no longer operate the Site or provide the services, or the retention period has expired;

(3) You withdraw your consent;

(4) The Personal Data has been processed in violation of applicable laws, regulations or contractual agreements;

(5) Other cases as required by applicable laws.

Where the retention period prescribed by applicable laws has not yet expired or if deletion of your Personal Data is technically infeasible, we will stop processing your Personal Data for other purposes while continuing to store it securely and adopting the necessary protection measures.

 

VII. Your Rights

We attach great importance to the management of your Personal Data and make every effort to protect your rights including the rights to access, copy, rectify, supplement, delete, withdraw consent or authorization, cancel membership, and submit complaints regarding your Personal Data. These rights enable you to understand and safeguard your Personal Data.

Please note that the provision of certain services may require your Personal Data. If you withdraw your consent or authorization, we may no longer be able to provide you with the corresponding services, and will stop processing the relevant Personal Data. However, your decision to withdraw your consent or authorization does not affect the lawfulness of any processing carried out prior to the withdrawal of your consent or authorization.

Generally, you have the following rights on how we process your Personal Data:

1. Setup Management

When you use certain features and services of the Service, we may request your authorisation for system notifications. You can disable these permissions in the settings page of your device system at any time. If you refuse authorization, you will not be able to use the relevant features, but this will not affect your use of other features and services.

2. Information.

You have the right to clear and easily understandable information about how we use your Personal Data, and your rights in relation to such data. This Privacy Policy provides such information.

3. Accessing, rectifying, supplementing and deleting your Personal Data

You can access, rectify, supply and delete your Personal Data, such as your email address and Membership Points record (for inquiries only), through the relevant settings page within the Jin Jiang server. If you want to access, correct, supplement or delete other Personal Data, you can contact us in the manner indicated in this Privacy Policy.

4. Copying and transferring your Personal Data

If you need to copy or transfer your Personal Data processed by us in accordance with the conditions stipulated by applicable laws , you may contact us in the manner indicated in this Privacy Policy.

5. Withdrawing Consent.

Where we rely on your consent for the processing of your Personal Data, you may withdraw that consent at any time by logging in to your account on our website (if you have one), unsubscribing from  commercial communications via email or visiting our Privacy Center here. The withdrawal of your consent will not affect the lawfulness of any processing carried out based on your consent prior to the withdrawal. Please note that we may continue to process your Personal Data for other purposes where we have a legitimate legal basis under applicable laws.

6. Account Cancellation

(1) If you no longer wish to participate in the membership program of a particular Jin Jiang server, you may cancel your account on that server which will also terminate your membership.

(2) If you wish to cancel your membership directly, you may contact us in the manner indicated in this Privacy Policy. We will cancel your account within fifteen (15) business days after verifying your personal identity, security status, and device information. You may be required to submit identity verification information as prompted by us.

(3) In order to protect the security of your account, you will need to wait for 30 days after canceling your membership before you can use the same email address to re-register for membership.

(4) You acknowledge and understand that the cancellation of a membership is irreversible. After cancellation, your membership points will be reset to zero, you will no longer be able to log in to Jinjiang server or retrieve any content or information associated with your membership (even if you re-register with the same email address).

(5) Please ensure that the membership account you request to cancel was created by yourself. We suggest that you back up any relevant information or data before canceling your membership, and  ensure that all services related to your membership have been properly handled. After cancellation, we will delete your Personal Data or anonymize it (except as otherwise provided by applicable laws and regulations).

7. Automated decision-making in constraint information systems

In certain business functions, we may make decisions solely through non-human automated decision-making mechanisms, including information systems and algorithms. If these decisions significantly affect your legal rights, you have the right to request an explanation from us in the manner indicated in this Privacy Policy, and we will provide appropriate remedies.

8. Rights of relatives of deceased members

If you are the next of kin of a deceased member, you may contact us in the manner indicated in this Privacy Policy in order to access the membership information of the deceased member and to process the Membership Points. To verify your identity, we may request documents demonstrating kinship, the deceased member’s death certificate and other supporting materials. Please understand that, for security reasons, you may not be able to change the email address associated with the deceased member’s account.

9. Responding to your other requests

In principle, we do not charge fees for reasonable requests. However, we may charge a fee to cover costs incurred for requests that are repeated beyond what is reasonably necessary. We may also refuse requests that are unnecessarily repetitive, require excessive technical means (for example, the development of a new system or a fundamental change in existing practices), pose a risk to the legal rights of others, or are highly impractical (for example, involving the backing up of information stored on magnetic tapes).

In addition, we may be unable to comply with your request in the following circumstances as permitted by applicable law or regulation:

(1) Requests related to the fulfillment of our obligations under applicable laws and regulations;

(2) Requests directly related to national security or defense;

(3) Requests directly related to public safety, public health, or significant public interest;

(4) Requests directly related to criminal investigations, prosecutions, trials or enforcement of sentences;

(5) Requests where there is sufficient evidence of malicious intent or abuse of rights;

(6) Requests for the purpose of safeguarding the life, property or other important legal rights and interests of the data subject or other individuals, but where obtaining consent is impractical;

(7) Requests where responding would result in serious harm to the legitimate rights and interests of you or other individuals or organizations;

(8) Requests involving trade secrets or confidential business information.

 

VIII. How we protect minors' Personal Data

1. We take the protection of minors' Personal Data very seriously. Where Personal Data relates to a minor under the age of 18 (or under the age of majority in your country), you represent and warrant that you are the parent, legal guardian or person with parental responsibility of such minor and that you are authorised to provide consent in accordance with this Privacy Policy and applicable laws.

2. We do not collect Personal Data from minors directly. Any Personal Data of a minor will only be processed with the consent of the parent, legal guardian or paretal responsibility of the data subject and in accordance with applicable laws.

3. If it is discovered that a minor has registered or used our Site/services without the consent of their parent or legal guardian, the parent or legal guardian may contact us through the means stated in this Privacy Policy. Upon verification, we will promptly delete the minor’s Personal Data.

 

IX. Your obligations

1. You are expected to provide Personal Data about yourself only. If you provide Personal Data about other individuals, you represent and warrant that you have obtained the consent of such individual to disclose such Personal Data to us. We may process such Personal Data in accordance with the terms of this Privacy Policy.

2. You are also expected to ensure that the Personal Data that you provide to us is accurate and complete. If there are any changes to your Personal Data or such data requires updating, you should promptly notify us.

 

X. Changes to the Privacy Policy

To improve our services, such services may be updated or changed from time to time and we may revise this Privacy Policy accordingly. If significant changes are made that will affect you (for example, if we use your Personal Data for purposes other than those stated herein), we will notify you in advance. When this Privacy Policy is updated, we will issue an updated version and notify you by appropriate means. You are also encouraged to check back regularly to stay informed of updates or changes to this Privacy Policy.

 

XI. Contact information

If you think that your Personal Data rights have been violated, or if you have any questions or suggestions regarding the protection of Personal Data when accessing the Site and/or using our services, you may contact us by email at: Member contact e-mail [itts@jinjianghotels.com.cn]. We will review your questions or suggestions as soon as possible and respond within fifteen working days after verifying your membership status.

 


ANNEX 1 Additional privacy provisions applicable to processing of personal information of residents of certain countries

 

If you are a citizen or resident of any country set out below, the relevant country-specific terms set out below will supplement (and should be read together with) the Privacy Policy. In the event of any inconsistency between such country-specific terms and the Privacy Policy, such country-specific terms will prevail to the extent of such inconsistency.

 

(a) Malaysia

In Malaysia, the applicable law governing the collection, use, process, disclose and transfer of your Personal Data is the Personal Data Protection Act 2010 (“PDPA”).

i. Personal Data

In this Privacy Policy, “Personal Data” means any personal data, including any sensitive personal data (e.g. information about an individual’s physical, mental health or condition, political opinions, religious or similar beliefs, offences committed or alleged, biometric data, or other personal data as may be prescribed by law), in electronic or non-electronic form, that relates directly or indirectly to an identifiable individual, and includes any expression of opinion about that individual. Examples of your Personal Data that may be processed by us include your name, age, date of birth and email address.

 

ii. Legal Basis for Processing Personal Data

We process your Personal Data in accordance with this Privacy Policy based on the following legal bases:

(a) your consent;

(b) necessary for the performance of a contract to which you are a party;

(c) for the taking of steps at your request with a view to entering into a contract;

(d) for compliance with any legal obligation to which we are subject, other than an obligation imposed by a contract;

(e) in order to protect your vital interests;

(f) for the administration of justice; or

(g) for the exercise of any functions conferred on any person by or under any applicable law.

By providing and continuing to provide your Personal Data to us and accessing or using the Site and /or services, you declare that you have read, understood and accepted the statements and terms in this Privacy Policy and consent to our processing of your Personal Data.

This Paragraph ii in Annex 1 shall prevail over and apply to the exclusion of Paragraph 8, Section II of the Privacy Policy.

 

iii. Your Rights

(a) Right of access

We may refuse to comply with your request for access to your Personal Data in accordance with applicable laws under the following circumstances:

(i) we are not supplied with such information as we may reasonably require: (1) to satisfy ourselves as to your identity; or (2) where you claim to be a relevant person: to satisfy ourselves as to the identity of the data subject in relation to whom you claim to be the relevant person and that you are the relevant person in relation to the data subject;

(ii) we are not supplied with such information as we may reasonably require to locate the Personal Data to which the data access request relates;

(iii) the burden or expense of providing access is disproportionate to the risks to your privacy in relation to the Personal Data;

(iv) we cannot comply with the data access request without disclosing Personal Data relating to another individual who can be identified from that information, unless: (1) that other individual has consented to the disclosure of the information to the requestor; or (2) it is reasonable in all the circumstances to comply with the data access request without the consent of the other individual;

(v) subject to applicable laws, any other data controller controls the processing of the Personal Data to which the data access request relates in such a way as to prohibit us from complying, whether in whole or in part, with the data access request;

(vi) providing access would constitute a violation of an order of a court or disclose confidential commercial information; or

(vii) such access to Personal Data is regulated by another law.

 

(b) Right to correct

We may refuse to comply with your request for correction to your Personal Data in accordance with applicable laws under the following circumstances:

(i) we are not supplied with such information as we may reasonably require: (1) to satisfy ourselves as to your identity; or (2) where you claim to be a relevant person: in order to satisfy ourselves as to the identity of the data subject in relation to whom you claim to be the relevant person and that you are the relevant person in relation to the data subject;

(ii) we are not supplied with such information as we may reasonably require to ascertain in what way the Personal Data to which the data correction request relates is inaccurate, incomplete, misleading or not up-to-date;

(iii) we are not satisfied that the Personal Data to which the data correction request relates is inaccurate, incomplete, misleading or not up-to-date;

(iv) we are not satisfied that the correction which is the subject of the data correction request is accurate, complete, not misleading or up-to-date; or

(v) subject to applicable laws, any other data controller controls the processing of the Personal Data to which the data correction request relates in such a way as to prohibit us from complying, whether in whole or in part, with the data correction request.

 

(c) Right to restrict processing

You have the right to request that we restrict the processing of your Personal Data in which case we will restrict processing to the extent permitted unless we are able to rely on one of the permitted legal grounds for processing under the PDPA. Please note that if we limit or stop processing the Personal Data, we may use it again if there are valid grounds under applicable data protection law for us to do so.

 

iv. Failure to Provide Personal Data

While the provision of Personal Data is voluntary, failure to provide certain Personal Data when requested may, as applicable, prevent us from providing specific services which require your information in order to provide.

 

v. Language of Privacy Policy

This Privacy Policy is issued in both Bahasa Malaysia and English. In the event of any conflict between the two versions, the English version shall prevail.

 

 

 

 

 

 


Close