We view and treat your Personal Data seriously.

In order for us to provide you with the best possible advice and offers on financial and non-financial products and services, we, DuitMY, will be processing your Personal Data when you register on our website, DuitMY or our mobile application (“App”). Therefore, we have put together a Privacy Policy and Notice that informs you how we will collect, record, hold, disclose, transfer, store and otherwise process your Personal Data. All of these activities are essential for our business so that we keep this great service completely free for you to use. Your consent is given to DuitMY jointly and severally.

By providing your Personal Data to us (whether through our website/App, or any other channels), you hereby consent that we may collect, record, hold, disclose, transfer, store and otherwise process all or any part of your Personal Data in accordance with this Privacy Policy and Notice. This consent shall remain valid so long as we do not receive any written notice of withdrawal of consent from you.

Please take some time to read our Privacy Policy and Notice so that you understand your rights on the matter.

1. Collection and Use of Personal Data

Your Personal Data is information that relates directly or indirectly to you, who is identified or identifiable from that information or from that and other information. For the avoidance of doubt, the term "Personal Data" as used herein includes any sensitive personal data, including but not limited to your political opinion, religious belief or any other beliefs, and any information relating to the commission or alleged commission of any offences by you. During the course of your transactions and dealings with us and/or our trusted business partners and agents, you may be requested to furnish your Personal Data from time to time. We gather data and work with our trusted business partners and agents in compliance with this Privacy Policy and Notice to provide, support and improve our products and services to you.

2. Personal Data that we may collect

When you register to become a user of our website/App or send information to us via our official WhatsApp communications channel or any other channels, we may collect a variety of your Personal Data, which may include (but not limited to) your:

• Name;
• National registration identity card number;
• Gender;
• Race, ethnic origin and religious beliefs;
• Postal address;
• Telephone number (home, mobile, office);
• Email address;
• Contact preferences;
• Age;
• Employer details and/or supporting documents;
• Occupation;
• Income and/or supporting documents;
• Physical or mental health or medical condition;
• Medical preference;
• Hobbies, pastimes, sports, shopping, digital lifestyle and restaurant preferences;
• Social Media account Username;
• Frequency of travel;
• Mobile line/Carrier provider;
• Smartphone brand preferences;
• Banking needs & preferences;
• Preferred media channels;
• Insurance needs & preferences;
• Utilities supplier;
• Marital status;
• Residential status;
• Car ownership and/or supporting documents;
• Investment preferences;
• Location Data;
• Family and household information and Credit card details;
• Physical or Digital Signatures;
• Biometric Identifiers (such as thumbprints or voice identification) and URL;
• Financial objectives and goals;
• Financial information such as assets, liabilities, incomes, expenses and insurance policies; and/or
• Information on commission or alleged commission of any offence or proceedings for any offence committed or alleged to have been committed, the disposal of such proceedings or the sentence of any court in such proceedings.

The list of Personal Data stated above is not exhaustive and may include other personal data depending on the nature of dealings or transactions. The request for these other personal data may be indicated on the relevant form that you need to fill in, depending on the nature of the dealings or transactions, and for which your consent granted here with extends to such personal data, unless you inform us otherwise in writing.

3. How we use your Personal Data

We may process your Personal Data for our existing and future business purposes, including to provide better services to you by delivering and supporting any products and services which we believe you may find useful or appropriate to you and which we may communicate, directly or indirectly, to you (save for any specific products or services which you have opted out of in writing). Listed below are non-exhaustive details of how we use your personal data. Personal Data under this Privacy Policy and Notice shall refer to personal data that is collected prior to, on or after the date of your consent to this Privacy Policy and Notice or the date of this Privacy Policy and Notice.

3.1 We collect, use, disclose, and otherwise process your Personal Data for (but not limited to) the following purposes:

• responding to your queries and requests; and responding to complaints;
• in all matters pertaining to the contract entered or to be entered in to between you and us, or between you and any financial institutions;
• managing the infrastructure and our business operations and complying with our internal policies and procedures;
verifying your identity;
• protecting and enforcing our contractual and legal rights and obligations;
• conducting audits, reviews and analysis of our internal processes, action planning and managing commercial risks;
complying with any applicable rules, laws and regulations, codes of practice or guidelines or to assist in law enforcement and investigations by relevant authorities;
• directly or indirectly circulating, transmitting and/or delivering to you, by any means (including emails, phone calls, video calls, short messaging services, regular mails, push notifications on mobile devices and other means), any promotional, informational, advertising materials (including products, services, new launches, upcoming events, promotions, advertisements, marketing and commercial materials) in respect of our products and services, or third party products and services (which may or may not be related to the type of products/services we provide). In doing so, we may work with our trusted business partners and agents. This means that we may give them access to your Personal Data for the purposes stated herein;
• For the purposes of record-keeping in the ordinary course of our business;
• any other purpose relating to any of the above; and/or
• for the implementation and execution of any of the above, including our or third party products and services you may have opted for.

3.2 In addition, we may collect, use, disclose and otherwise process your Personal Data for the following purposes, depending on the nature of our relationship with you:

• if you have a subscription or membership account with us;
• to optimize and customize your user experience with our website and chatbot;
• to process your application for online subscription services;
• to maintain your account with us;
• to conduct regular credit checks at any time and from time to time as deemed fit and necessary by us with the intention to obtain regular credit score updates;
• to verify and process your personal details and payments in relation to provision of online subscription service to you;
• to provide you with the services which you have signed up for and other services which we may, directly or indirectly offer to you;
• to provide you the products which you have paid for and other products which we may, directly or indirectly, offer to you;
• to keep you posted on our latest services or product announcements and upcoming events;
• resolving complaints and handling requests and enquiries;
• to conduct market research for statistical, profiling and statistical analysis for the improvement of services provided to you;
• to send important notices, push notifications on mobile devices, emails, letters, short messaging service (SMS) and WhatsApp messages, like communications about purchases and changes to our terms, conditions, and policies;
• to share your Personal Data with our trusted business partners and agents for the purposes of (but not limited to) fulfillment of customer orders, processing and delivery of financial products to you; and/or

for any of the purposes relating to the above.

You hereby agree and understand that collection and processing of your Personal Data by us is not limited to facilitating the purchase of a single financial product. The purpose of such collection and retention and otherwise processing of Personal Data is towards our partnering/assisting you in your financial journey and any other financial and/or non-financial products or services offered by us, our trusted business partners, agents and third parties. In order to assist you with other financial and non-financial products in the future, we will retain your data even after the completion of the transaction. By filling in your Personal Data on our website or otherwise providing your Personal Data to us, you expressly consent to our retention of the same. If you do not wish to have your Personal Data being processed by us, you may opt out by contacting our Data Privacy Officer indicated at the end of this Policy and Notice.

4. Impact Resulting from Failure to Supply Data

The failure to supply Personal Data may affect our ability to deliver optimised user experience services to our registered users. In addition, failure to provide certain essential Personal Data may result in us being unable to provide you with the services and/or products that you have opted for.

5. Disclosure of Personal Data

Personal Data provided to us will generally be kept confidential but you hereby consent and authorize us to provide or disclose your Personal Data to the following categories of parties:

• A: any person or authority to whom we are compelled or required to do so under law, court order or in response to a competent or government agency;
• B: any relevant financial institutions or banks that provide financial related products or services that are referred to them by us or that are featured on our website;
• C: our business partners and affiliates that provide the services that you have opted for or related services or products in connection with our website including, but not limited to market research firms, third party marketing entities, electronic-know your customer (e-KYC) operators, and entities engaged in financial and non-financial industries and any other industries incidental to the use of your Personal Data as stated in Clause 3 above;
• D: members of our Group companies and their affiliates;
• E: government agencies and industry regulators;
• F: our auditors, consultants, accountants, lawyers or other financial or professional advisers;
• G: such sub-contractors or third party service or trusted business partners as we believe to be necessary or appropriate and whose products and/or services we believe may be of interest to you, whether or not related to our products and services.

6. Protection of Personal Data

We take the necessary precautions, both administrative and technical to safeguard your Personal Data against loss, theft, misuse and unauthorized access, disclosure, usage, alteration or destruction.

We ensure that all information collected will be safely and securely stored. We use 128-bit SSL (Secure Sockets Layer) encryption technology when processing your financial details.

7. Retention of Personal Data and Access

We shall endeavour to make it easy for you to keep your Personal Data accurate, complete and up to date. We will retain your Personal Data for the period necessary to fulfill the many different purposes outlined in this Privacy Policy and Notice unless a longer retention period is permitted or required by law. You can help ensure that your contact information and preferences are accurate, complete, and up to date by logging into our website at https://duitmy.com. For other personal information, we make good faith efforts to provide you with access so you can request that we correct the data if it is inaccurate or delete the data if we are not required to retain it by law or for legitimate business purposes. We may decline to process requests that are unreasonably repetitive, require disproportionate technical effort, jeopardize the privacy of others, are extremely impractical, or for which access is not other [email protected].

8. Collection of Computer Data not necessarily Personal Data

When you visit our website(s), our servers will automatically record information that your browser sends whenever you visit a website. This information may include (but not limited to):

• Your device’s IP address
• Browser type
• Cookies
• GTM Event Tag
• Webpage you were visiting before you came to our website
• The pages within DuitMY that you visit
• The time spent on those pages, products and information searched for on our site, access times and dates, and other statistics
• This information is collected for analysis and evaluation in order to help us improve our website and products we provide. The said information may be used in association with any other Personal Data.

9. Cookies

In order for us to improve on the quality of its services and products as well as to customise user experiences, we may track user behaviour on its websites by using “Cookies”. A cookie is a small text file that is stored on your computer that provide us with information about your online use of our website to help us customise your user experience and make our website more user friendly.

Website visitors who have yet to register as our users or have yet to log in as a user will be tracked anonymously. The data collected from such tracking will be generic and aggregated in nature and no individual data will be collected therefrom. In respect of registered users, we will use cookies to gather data on our user’s preferences provided that such cookies are secure in nature and based on HTTP only.

If you have set your web browser to warn you before accepting cookies, you should receive a notice message with each cookie. You may decline the use of cookies by opting to turn them off in your web browser but please note that in doing so, this may affect our ability to render the best user experience on our website.

10. Data Transfer & Sharing

We do not share with or transfer to third parties your Personal Data, except for circumstances where we have a good-faith belief that access, use, transfer or disclosure of such information is reasonably necessary or appropriate for the purposes of data storage or processing or providing any service or product on our behalf to you (including for the purposes set out in Clauses 3 and 5 above). We ensure that such information is provided to members of our Group companies and their affiliates and our trusted business partners and agents within or outside the country in which we or they are established, under conditions of confidentiality and similar levels of security safeguards.

11. Your Rights of Access and Correction; and Rights of Withdrawal of Consent

You have the right to request access to and correction of data about you held by us and in this respect, you may:

• A: check whether we hold or use your Personal Data and request access to such data;
• B: request that we correct any of your Personal Data that is inaccurate, incomplete or out-of-date;
• C: request that your Personal Data is retained by us only as long as necessary for the fulfillment of the purposes for which it was collected;
• D: request that we specify or explain our policies and procedures in relation to data and types of Personal Data handled by us; and;
• E: communicate to us your objection to the use of your Personal Data for marketing purposes whereupon we will not use your Personal Data for these purposes. Your non-consent may curtail our ability to perform some or all of the Purposes for which we have first collected your Personal Data; and;
• F: withdraw, in full or in part, your consent given previously, in each case subject to any applicable legal restrictions, contractual conditions and a reasonable time period.

12. Visiting Our Website from Outside Malaysia

This Privacy Policy and Notice is intended to cover collection of information on our website and other channels from residents of Malaysia. If you are visiting our website from outside Malaysia, please be aware that your information may be transferred to, stored and processed where our servers are located. The data protection and other laws of Malaysia might not be as comprehensive as those in your country. Please be assured that we take reasonable measures to ensure that your privacy is protected.

13. Use of WhatsApp Channel

We also use WhatsApp as a channel for providing its financial services to the customer, which has end-to-end encryption between us and the customer. Your use of WhatsApp as a channel to communicate with us is done at your own discretion and risk. We thus assume no responsibility for any errors or omissions in WhatsApp including but not limited to any issue arising from WhatsApp’s end to end encryption system. Further, we shall be in no event be liable to you or any third parties for any special, punitive, incidental, indirect or consequential damages of any kind, or any damages whatsoever, including, without limitation, those resulting from loss of use, lost data or profits, or any liability, arising out of or in connection with your use of WhatsApp.

14. Other Matters

If you have any questions regarding this policy, please contact the following: -

We reserve the right to update and amend this Privacy Policy and Notice from time to time. Any material changes will be posted on our website with the updated Privacy Policy and Notice.

Your continued use or access of our website and/or services shall be treated as your consent for us to process your Personal Data in accordance with the updated Privacy Policy and Notice, unless you inform us otherwise in writing in which event paragraph 4 of this Privacy Policy and Notice will apply.

Where you do not continue to use or access our website and/or services after the updated Privacy Policy and Notice comes into effect and you do not consent to us processing your Personal Data in accordance with the updated Privacy Policy and Notice, we will continue to process your Personal Data in accordance with the last version of the Privacy Policy and Notice which you have consented to, unless you inform us otherwise in writing in which event paragraph 4 of this Privacy Policy and Notice will apply.

This Privacy Policy and Notice were last updated as at 1st March 2023 and you agree that it shall apply to all of your Personal Data collected, processed, and stored by us to date.