Privacy Pol

 The Personal Data Protection Act 2010 (“PDPA”) regulates the processing of personal data in commercial transactions and applies to Onpym Sdn Bhd (“Company,” “our,” “us,” or “we”) as a data user. This written notice (“Notice”) informs you of how we may use and process your personal data. For the purposes of this Notice, “personal data” and “processing,” along with related terms, have the meanings defined in the PDPA.

By providing your personal data to us, using our services or products—including any software applications or demos we offer—or by accessing our website at www.onpym.comand any other site owned by us, you confirm that you have read and understood this Notice and consent to our processing of your personal data as outlined herein.

You must provide your personal data where applicable. If you fail to do so, we may be unable to process and/or disclose your data for the purposes stated below.

1. SCOPE
This Privacy Notice details how we manage the personal data you share with Payment Options.

2. PERSONAL DATA

“Personal data” refers to information that can identify you as an individual or legal entity, such as your name, mailing address, email address, age range, and other information defined as Personal Information under APPI. We collect personal data when you voluntarily provide it, and we use this data to better understand your needs and interests to improve our services.

3. DATA SUBJECTS
This Privacy Notice applies to individuals or corporations accessing the Platform or registering for services who voluntarily provide personal data (“you” or “your”).

4. PAYMENT OPTIONS PRIVACY PRINCIPLES
Your privacy is important to us. Our business is founded on the trust between our customers and us. To maintain the confidentiality of the information you provide, we adhere to the following principles:

a) We will obtain your consent to collect, use, or disclose your personal data unless it is unreasonable to do so.
b) We only collect personal data that is relevant and necessary for conducting our business.
c) We use your personal data to enhance our customer services and products.
d) With your consent, your personal data may be shared with third parties, including Payment Options group companies or agents, as permitted by law. Contracts with these third parties will ensure compliance with APPI regarding data protection.
e) We may be required to disclose your personal information to governmental or judicial bodies if mandated by law.
f) We will take reasonable measures to ensure that your personal data in our possession is accurate and up to date.
g) We will implement security measures to protect your personal data from unauthorized access, use, disclosure, or disposal. By upholding these principles, we aim to honor the trust you place in us.

This notice will specify:

a) Our purposes for collecting personal data.
b) The controls we implement to protect personal data.
c) The categories of individuals we may share personal data with.
d) Your rights to access and correct your personal data.
e) Our policies regarding data transfer.
f) The use of personal data in direct marketing.
g) Our retention policy for personal data.
h) Your right to withdraw consent.

5. PURPOSES OF DATA COLLECTION
a) You may need to provide personal data when opening or maintaining accounts or receiving services from us.
b) Failure to provide personal data may hinder our ability to offer you services.
c) We may also collect personal data as part of our ongoing business relationship, such as when you utilize our services through the Platform.
d) We or authorized third parties may use your personal data for the following purposes:

• Conducting checks during your application for our products.
• Maintaining credit assessments.
• Ensuring your ongoing creditworthiness.
• Designing services or related products for your use.
• Marketing services, promotional materials, or other products.
• Determining any indebtedness you owe.
• Enforcing obligations, including collections (including disclosures to credit-reporting or debt collection agencies).
• Complying with applicable laws and regulations, including:
      i. Any existing or future laws binding on us.
      ii. Any guidance from legal, regulatory, governmental, or industry bodies.
      iii. Any current or future contractual obligations with local or foreign    authorities.
      e) Complying with obligations for sharing data within our group companies      and for compliance with anti-money laundering and terrorism financing      regulations.

6. WHAT KIND OF PERSONAL DATA DO WE COLLECT AND RESERVE?
The types of personal data we collect depend on the product or service you request, including but not limited to:
a) Contact and personal information: Title, name, date of birth, email, mobile number, address, personal identity document data, photo, signature, employment status, source of funds, and driving license number.
b) Other information: Video and audio recordings, telephone conversations, IP address.
c) Usage data: Details of visits to our website and use of the Platform.
d) For direct marketing: Name, telephone number, email, address, date of birth, location, nationality, industry type, and cookies.
e) For recruitment: Name, nationality, address, employment status, telephone number, email, education, work experience.
f) For analysis: Anonymized and aggregated datasets for modeling and reporting.
g) For legal entities: Personal identification numbers, identity document details, workplace information, bank account details, transaction data.
h) My Number: Collected and used only as required by applicable laws.

7. IMPORTANT CONTROLS EMPLOYED BY PAYMENT OPTIONS FOR PROTECTION OF PERSONAL DATA.
a) Personal data will be kept confidential. We will take reasonable technical and organizational precautions to prevent loss, misuse, or alteration of your personal data. All personal data will be stored on secure servers.
b) Physical copies will be secured with restricted access.
c) While we strive for 100% security, no data transmission over the internet is completely secure. We will manage data loss according to legal requirements, notifying relevant stakeholders, and providing periodic updates on actions taken.

8. CLASSES OF PERSONS WE CAN TRANSFER PERSONAL DATA
Payment Options may share personal data for the purposes outlined in Section 6 with:
a) Payment Options Pte Ltd. and its global group companies.
b) Agents, contractors, or third-party service providers involved in our operations.
c) Confidential individuals within our group companies on a need-to-know basis.
d) Any entity we are obligated to disclose personal data to under applicable laws.
e) Other parties seeking to establish a business relationship with us. Contracts with third parties will mandate compliance with APPI regarding personal data.

9. ACCESS TO AND CORRECTION OF PERSONAL DATA
You have the right to:
a) Verify if we hold your personal data.
b) Access and correct your personal data.
c) Request the correction or deletion of inaccurate data.
d) Inquire about our policies regarding personal data.

Requests can be sent to:
a) The Compliance/Data Protection Officer at compliance@onpym.com.
b) Verification of your identity may be required for access.
c) Services may be suspended if deleted information is essential.
d) A fee may be charged for accessing your personal data, in line with our Schedule of Fees.

10. DATA TRANSFER
With your consent and in accordance with applicable laws, your personal data may be processed, stored, transferred, or disclosed to any country, including our group companies in Singapore, Malaysia, Hong Kong. We will notify you if new jurisdictions are added.

11. USE OF DATA IN DIRECT MARKETING
We will obtain your explicit consent before using your personal data for direct marketing. We may offer you similar products if you have previously signed a contract with us. If you wish to opt out, please notify us (see 14. Contact Us).

12. RETENTION OF PERSONAL DATA
We will retain your personal data only as long as necessary to fulfill the purposes outlined in this Privacy Notice, unless a longer retention period is required by law.

13. WITHDRAWAL OF CONSENT
You may withdraw your consent for our collection, use, or disclosure of your personal data at any time by contacting our Compliance Officer (see 14. Contact Us).

14. CONTACT US
For inquiries, please contact us at:
Attention: Merchant Support
Email: wecare@onpym.com

15. COOKIE POLICY
If you access our Platform or website, we use cookies. For details on controlling cookie settings and deleting cookies, please refer to our Cookie Policy available on our website.

16. DATA PROTECTION OFFICER
Our Data Protection Officer (DPO) monitors our privacy compliance and addresses data protection matters. You may contact our DPO regarding issues related to the processing of your personal data at dpo@onpym.com.

17. LANGUAGE
In the event of a dispute regarding this Privacy Notice, the English version shall prevail. The English language version will control in all respects, superseding any translated versions. Nothing in this Privacy Notice limits your rights under applicable laws.