Remove your personal information from the internet in Malaysia

What personal information exposure looks like in Malaysia

Most cases we see are not a hacked database. They are one angry post that gets copied: someone photographs your MyKad, screenshots your profile, or pins your house on a map, and a Facebook group or a TikTok comment section does the rest within hours.

• IC number and MyKad photos in a Facebook group post that calls you a cheat or a scammer
• Phone numbers listed in a Telegram channel or a TikTok caption with an invitation to “call and ask”
• Home addresses: taman, jalan and unit number, a photo of the gate, a Google Maps pin
• Workplace, car plate and children’s school, added in the comments of a viral exposé
• Loan shark posts that put a borrower’s face, IC and family contacts on public pages
• Your full name attached to accusations in a Lowyat or Cari thread that now ranks on Google

The free routes first, and where they stop

You can act without us. Report the post inside the app: since 1 January 2026 the Online Safety Act 2025 requires licensed platforms to acknowledge a user report within 1 hour, give an initial assessment within 12 hours and make harmful content inaccessible within 4 hours. You can complain to MCMC at aduan.mcmc.gov.my, make a police report at a police station, and call NSRC 997 if money was transferred to a scammer. These channels are free and they matter.

What they leave behind is the part people usually notice a week later: the same details on Google, on X, on forums, on news portals and in copies of the original post.

NetClearer can file the platform report and the MCMC report for you, because section 24 of the Act lets any user report harmful content. A police report has to be made by you, in person; we prepare the facts and the evidence pack so it takes one visit.

What Malaysian law says, and what it does not

• Doxxing is a crime since 11 July 2025. Penal Code s.507E covers publishing someone’s identity information to cause harassment or distress (up to 3 years); s.507F covers doing so to make them fear harm, or to enable it (up to 1 year).
• CMA s.233, as amended in 2025, covers grossly offensive and menacing content sent over a network, with fines up to RM500,000.
• The PDPA 2010 applies to businesses, not private individuals. Someone posting your details for personal reasons falls outside it. Against a company, section 42 lets you ask it to stop processing that is likely to cause substantial damage or distress.
• There is no right to be forgotten in Malaysia and no erasure right in the PDPA. Google removes results under its own policies, which do cover contact details, ID numbers and doxxing.

NetClearer is not a law firm and this is information, not legal advice. For an injunction or a defamation claim, speak to a lawyer.

Our personal information services

How a personal information case runs

1. Free assessment. Send the links through the contact form (Messenger also works). You do not need to send your IC or any document. We reply with what can be removed, through which route, and the fixed price.
2. Payment, then action. You pay by card through Stripe. Work starts within 48 hours, sooner on larger packs.
3. At the source. We report each post under the platform’s privacy, harassment or doxxing rules, and file the MCMC complaint where the Act applies. For forums and small sites we write to the moderators or the host.
4. On Google. We ask Google to remove the results that still show your details, and request a refresh where the page has already changed.
5. Follow-up. We chase unanswered reports, look for copies, and send you a short summary of each link and its status.

Prices in ringgit

• 1 link: RM133, action within 48 hours
• 3 links: RM316, action within 36 hours
• 10 links: RM912, action within 24 hours, with a removal report
• 20 links: RM1,600, with monitoring for re-uploads
• Monthly plans from RM362 for people whose details keep coming back

Fixed price, no extra fees. Payment by card through Stripe; online banking and e-wallets are not available yet. Full details on the pricing page. We promise actions and timelines, not outcomes: the platform or Google decides.

Discretion is part of the job

We never contact your family, your employer or the person who posted your details. We never ask for passwords or access to your accounts. Reports are filed in our name or as your authorised representative, and nothing is published about your case. If the post is already spreading, tell us in your first message so we deal with the most-shared links first.