Acceptable Use Policy

This Acceptable Use Policy applies to every organisation using the DonorCARE dashboard ("Organisation") and is incorporated by reference into our Subscription Terms. It governs the Organisation's own use of the platform, not the conduct of individual donors, which is addressed in our Terms of Service.

An Organisation must not use DonorCARE to:

• Solicit or collect donations for an unlawful purpose, or for a cause the Organisation is not legally constituted or registered to fundraise for;
• Represent a donation as tax-deductible under Section 44(6) of the Income Tax Act 1967, or issue a receipt implying tax-exempt status, when the Organisation does not hold current LHDN tax-exemption approval covering that donation;
• Upload, import, or otherwise process donor personal data without a lawful basis for doing so under the Personal Data Protection Act 2010 — including donor lists obtained without the donors' knowledge or consent;
• Send unsolicited bulk email, or email to a recipient who has not given the Organisation a basis to contact them, through the platform's built-in email-campaign sending;
• Conduct security testing, penetration testing, vulnerability scanning, or load testing against DonorCARE infrastructure without our prior written permission — report a suspected vulnerability instead, as described on our Security & Compliance page;
• Resell, sublicense, or provide access to the DonorCARE dashboard to a third party that is not part of the Organisation, without our prior written consent;
• Reverse-engineer, decompile, or attempt to extract the source code of the platform, except to the extent such restriction is prohibited by law;
• Use the platform to submit fraudulent, duplicate, or knowingly inaccurate e-invoices to LHDN through MyInvois; or
• Interfere with the availability of the platform for other Organisations, including through excessive automated requests.

A breach of this Policy is a material breach of the Subscription Terms and may result in a warning, suspension of the affected feature (for example, disabling email-campaign sending or MyInvois submission), or termination of the account, at our discretion and proportionate to the severity of the breach. Where we reasonably believe conduct is unlawful, we may report it to the relevant Malaysian authority, including LHDN, SSM, the Registrar of Societies, or the police.

If you believe an Organisation using DonorCARE is engaged in conduct that breaches this Policy, report it to [email protected]. We investigate every report we receive.

We may update this Policy from time to time; the "Last updated" date above reflects the current version. Continued use of the platform after an update constitutes acceptance of the revised Policy.