Shopee Buyers to Your Own WhatsApp List: How to Do It Legally in Malaysia (2026)

You shouldn’t copy Shopee buyers into a WhatsApp list: buyer details are there to fulfil the order, Shopee Malaysia bans redirecting buyers off the platform, and TikTok Shop’s US policy forbids using customer data for anything else. The legal route to a Shopee buyers WhatsApp list is to let fans find your own channels, message you first and opt in. Broadcasts then are illustrated here at RM0.35 each in Meta fees.

Can you add Shopee buyers to your WhatsApp list?

Short answer: not by copying their details. But you can invite the same people to find you.

Every Shopee or TikTok Shop order shows you a name, a phone number and a delivery address. It is tempting to paste those numbers into WhatsApp and start a Shopee buyers WhatsApp list. Don’t. That data was given to the platform to deliver one order. TikTok Shop’s US policy says so explicitly, and the purpose principle in Malaysia’s PDPA points the same way.

Shopee Malaysia tells buyers plainly that sellers are not allowed to redirect buyers to make transactions outside of the Shopee platform, and that Shopee Guarantee protection only applies to on-platform orders. The Customer Service Policy on TikTok Shop’s US Seller University goes further. It lists “diverting transactions off TikTok Shop” as a violation, bans sending QR codes, other messaging accounts or contact details to customers, and says customer information must not be used for anything other than fulfilling TikTok Shop orders. That page is written for US sellers; if you sell on TikTok Shop Malaysia, check the equivalent rules in your own Seller Centre, which may be worded differently.

Marketplaces enforce these rules with measures such as penalty points, listing removals, lower visibility and, in serious cases, account suspension. If your business depends on marketplace sales, that account is worth far more than a few hundred WhatsApp contacts.

What do Shopee and TikTok Shop seller policies prohibit?

Marketplace policies differ by country and change often, so always read the current version in your own Seller Centre. As of this writing, these actions are the ones most likely to get a Malaysian seller into trouble:

Notice the pattern. What is banned is taking buyers from the marketplace. What is fine is earning customers on channels you own, where they choose to contact you.

Why does PDPA matter for a marketplace seller?

Even without platform rules, Malaysia’s Personal Data Protection Act 2010 (amended in 2024) applies to businesses that process personal data in commercial transactions. Two principles matter most here:

• Purpose. Personal data may only be used for the purpose it was collected for. A phone number given for delivery was not given for marketing.
• Direct marketing. People have the right to stop direct marketing, and you need their consent before sending it.

So a compliant WhatsApp opt-in list needs three things for every contact: they gave you their number themselves, they said yes to updates, and you recorded when and where they said it. That record protects you if someone later asks why they received a message.

No consent record? Treat the contact as not on your list.

How do you build a WhatsApp opt-in list the legal way?

Here is the method we recommend to e-commerce sellers. We will use a fictional example: Kopi Rimba Roasters, a small coffee roaster in Ipoh that sells beans on Shopee and TikTok Shop and wants a direct line to its regulars.

1. Put your WhatsApp link on channels you own. Your TikTok and Instagram bio, Facebook page, website, Google Business Profile and email signature. These are your channels, not the marketplace’s.
2. Give people a reason to message you. A brewing guide, a monthly roast calendar, or early notice of limited batches. Value earns opt-ins; discounts for leaving the marketplace break the rules.
3. Run Click-to-WhatsApp ads. Meta ads that open a WhatsApp chat bring people who chose to talk to you.
4. Collect contacts offline. At pop-up booths, bazaars and workshops, show a WhatsApp QR code on a stand so visitors message you themselves.
5. Ask for opt-in in the first reply. “Want new roast updates here? 1️⃣ Yes please 2️⃣ No thanks.” Only “1” goes on the list.
6. Record the consent. Save the name, number, date, source and consent answer in one sheet.
7. Honour STOP immediately. Opt-outs are logged in the sheet, and your team removes them before the next broadcast.

Existing marketplace fans can still find you: a buyer who liked an order may look up the brand on TikTok or Instagram. When they follow you there and message you, the conversation starts on your channel, with their permission.

Can you put a WhatsApp number or QR code in your Shopee parcels?

Be careful here. Parcels shipped for marketplace orders are part of that marketplace transaction, and the rules on what an insert may include are strict and change over time. An insert that says “Order direct on WhatsApp for 15% off” clearly steers the buyer off the platform, and so does a WhatsApp QR code.

A more cautious approach:

• Thank-you card with brand name only. A short thank-you, brewing tips and your brand name, with no phone number, QR code or off-platform offer.
• Ask for a review on the platform. This helps your shop and is allowed.
• Let the brand do the work. Customers who love the product look up the brand name themselves and find your official pages.

Before you print anything more, read the current insert and communication rules in your Shopee and TikTok Shop Seller Centre for Malaysia. If the rules say contact details are not allowed, leave them out. Losing your shop is not worth a few extra contacts.

What does a compliant WhatsApp opt-in conversation look like?

The first reply matters most. It answers the question, then asks for permission in plain words, with no pressure. Here is an illustrative chat for Kopi Rimba Roasters, where the customer found the brand through a TikTok video and tapped the WhatsApp link in the bio:

A few details make this compliant and friendly:

• The customer messaged first, from the brand’s own channel.
• The opt-in question is separate from the answer, so saying no changes nothing.
• The message says how often updates come and how to stop.
• If the customer wants to buy through Shopee, the AI shares the brand’s shop name. Customers who contacted you directly can also buy from you directly.

Ask the opt-in question in the customer’s own language: “Nak terima update roast baru?” gets a clearer yes or no than an English line to a Malay-speaking customer. ChatsHero’s AI follows the language the customer uses (see mixed-language chats).

How do you keep a clean record of your WhatsApp list?

A list you cannot explain is a list you cannot trust. With ChatsHero, the AI records each enquiry in Google Sheets: who messaged, what they are interested in, their answer to “Where did you find us?” and their reply to the opt-in question, with the date. Your team checks the sheet and keeps it clean before any broadcast.

• SourceTikTok bio, Instagram, ad or booth — from the customer’s answer or filled in by your team.
• Opt-in replyThe customer’s answer and date are saved, so you can show it later.
• StopOpt-outs are logged in Google Sheets so your team can remove them before the next broadcast.

Keep marketplace order exports in a separate place and never merge them into this sheet. If a phone number appears in both, that is fine only when the person opted in through your own channel.

How much does it cost to message your WhatsApp list?

On the official WhatsApp Business API, Meta charges per message, billed to your own WhatsApp account and separate from your ChatsHero plan. In Malaysia, a marketing message is illustrated here at RM0.35, and a utility message such as an order update roughly RM0.06 (see Meta’s pricing page). From 1 October 2026, Meta also charges eligible service replies above the monthly 1,000-message allowance per phone number inside the customer-service window, using an illustrative utility-rate assumption, as this summary of the change explains.

These are examples, not quotes; Meta sets and changes the rates. The lesson: segment by interest and send less. A small list of people who asked to hear from you costs less and gets fewer blocks, which protects your number’s quality rating.

Will messaging your WhatsApp list get your number banned?

No tool can promise zero risk, but the official API plus real opt-in keeps the risk low. WhatsApp’s Business Messaging Policy requires opt-in before you message people, and numbers that many users block or report get a lower quality rating, paused templates and no limit increases.

• Message only people who opted in through your own channels.
• Send useful updates, not daily promotions.
• Make STOP easy, and have your team remove opt-outs before every send.
• Never use unofficial blasting apps with imported number lists.

Think of the list as a slow build: ten willing contacts from a bazaar weekend are worth more than a thousand numbers copied from order slips. When you’re ready to put the replies and the opt-in record on autopilot, pick a plan or read who we are first.

Frequently Asked Questions