Global Cookie & Tracking Policy

Last Updated: 9 May 2026 Version: 1.0

---

1. Introduction and Scope

This policy explains how BITSTRIC uses cookies and similar tracking technologies across its website, subdomains, landing pages, and embedded services.

It applies to website visitors, prospects, leads, clients, and users interacting with BITSTRIC digital properties.

This policy should be read together with BITSTRIC's main privacy policy and any client-specific data processing agreement where applicable.

2. Cookie Categories

BITSTRIC uses the following broad categories of cookies and similar technologies:

Cookie Category	Purpose	Typical Legal Basis
Strictly Necessary	Session management, security, and core website operation	Legitimate interest
Functional	Preferences, language settings, and experience improvements	Legitimate interest or consent where required
Analytics	Traffic measurement, usage analysis, and performance reporting	Consent
Marketing	Campaign measurement, audience insights, and personalization	Consent

3. What Cookies Do

Cookies are small text files or similar browser-stored identifiers that help websites remember a visitor's device or browser.

They support:

• Core functionality such as session persistence and authentication.
• User experience enhancements such as language and preference storage.
• Analytics and performance tracking.
• Marketing and personalization, where consent has been given.

4. How We Use Cookies and Similar Technologies

BITSTRIC may use cookies, web beacons, pixels, scripts, and similar technologies to:

• Operate the website and keep it secure.
• Measure performance, traffic, and page usage.
• Improve user experience and diagnose issues.
• Prevent fraud, abuse, and suspicious activity.

Non-essential cookies should not be activated before consent where consent is required.

5. Representative Cookie Inventory

The following is a representative inventory of cookies used on our platform:

Cookie Name	Provider	Purpose	Lifespan	Category
_session_id	First-party	Maintains user session state	Session	Strictly Necessary
cookie_consent	First-party	Stores user consent preferences	6-12 months	Strictly Necessary
_ga	Google Analytics	User behavior analytics and performance	2 years	Analytics
_gid	Google Analytics	Session-level analytics	24 hours	Analytics
_fbp	Meta	Ad conversion tracking	3 months	Marketing
user_lang	First-party	Stores language preference	12 months	Functional

The full cookie inventory is maintained internally and reviewed periodically.

6. Consent and Control

Where required, BITSTRIC uses a cookie banner or preference manager to offer users meaningful control.

Users may:

• Accept, reject, or manage cookie settings where the preference tool is available.
• Adjust browser settings to block or delete cookies.
• Withdraw consent at any time where consent is the legal basis.

Disabling cookies may affect website functionality.

7. Third-Party Services and Transfers

BITSTRIC may use third-party analytics, hosting, security, or marketing providers to support website operations.

Some service providers may process data outside Malaysia, including in the United States or European Economic Area.

Where such transfers occur, BITSTRIC should apply appropriate safeguards such as:

• Contractual protections, including standard contractual clauses where relevant.
• Vendor due diligence and security review.
• Data minimization and pseudonymization controls where appropriate.

8. Security Controls

Cookies and related tools are configured with security controls appropriate to the use case, including:

• Secure for HTTPS-only transmission.
• HttpOnly where script access should be blocked.
• SameSite=Lax or SameSite=Strict where appropriate.

BITSTRIC also uses monitoring and review practices to reduce risks such as script injection, session fixation, and unauthorized manipulation.

9. Misuse Prohibited

BITSTRIC prohibits misuse of cookies and tracking technologies, including:

• Unauthorized cross-site tracking or fingerprinting.
• Scraping, interception, or manipulation of cookie headers.
• Use of the technology for man-in-the-middle or session-hijacking activity.

Violations may lead to access restrictions, legal action, or reporting to relevant authorities.

10. Retention and Deletion

Cookie-related data is retained only as long as needed for the purpose for which it was collected.

Data Type	Retention Approach
Session data	Session-based
Consent logs	Up to 12 months
Analytics data	Aggregated or anonymized where feasible

Expired cookies should be removed automatically when their purpose ends.

11. User Rights

Users may request access, correction, deletion, restriction, or objection where those rights apply under applicable law.

Users may also:

• Update cookie preferences through the available website controls.
• Clear cookies through browser settings.
• Contact BITSTRIC about privacy questions or consent withdrawal.

12. Updates and Contact

BITSTRIC may update this policy from time to time to reflect regulatory, technical, or business changes.

For privacy-related inquiries, please contact BITSTRIC at [email protected].