Privacy Notice

Information We Collect

Personal Data: Information you voluntarily provide, such as name, email address, phone number, pictures, biometrics, digital or electronic signatures, company details and other personal data that you submit to us voluntarily when filling out our forms. Automatically collected data such as browser type, IP address, and browsing patterns via cookies and similar technologies.

By giving us your personal data, you are deemed to have given us your consent to collect, use and disclose your personal data under the terms of this policy and any relevant privacy and data protection laws in Malaysia.

Where any sensitive personal data is involved, you acknowledge and confirm that you have voluntarily provided your explicit consent to the processing of such data by us in accordance with Section 40 of the Personal Data Protection Act 2010 ("Act", "PDPA" or "PDPA 2010"), as well as all other applicable laws, regulations and our internal policies. Sensitive personal data includes, but is not limited to, the following:

• your physical or mental health conditions;
• your political opinions;
• your religious beliefs or other beliefs of similar nature;
• your commission or alleged commission of any offence;
• or biometric data.

How We Use Your Information and Disclosure of your Information

The majority of information we collect are provided directly by you, such as through application forms, information request form, survey forms, emails, queries or any other type of correspondences, job application forms, resume, business cards, telephone conversations, recordings or through any other lawful means. Sometimes we might collect personal data about you from other sources, such as publicly available materials or trusted third parties like our marketing and research partners.

We will process your personal data for the following purposes, including but not limited to:

• to better inform, personalise, and improve our services;
• to validate the personal data you provide;
• to communicate with you in relation to our services, including updates, notices, and customer support matters;
• to manage our business relationship with you, including responding to enquiries, feedback, or requests;
• to process payments, transactions, and fulfil contractual obligations;
• to comply with applicable legal, regulatory, and compliance obligations;
• to detect, prevent, and investigate fraud, security breaches, or other potentially prohibited or unlawful activities;
• to maintain internal records for administrative, operational, auditing, and reporting purposes;
• to support corporate governance, risk management, and business continuity objectives, including data backup and recovery;
• To promote our brand through delivering to you our newsletter and/or marketing materials;
• To improve website traffic through usage of cookies;
• To process your job application, including pre-recruitment checks to assess a person's suitability for available employment position and subsequently, to manage your employment with us;

We may disclose your Personal Data within Paydaes Sdn Bhd and/or to the Vendors (as hereinafter defined), as well as to other third parties for the Purposes set forth hereinabove, in accordance with the terms and conditions set out herein. Such third parties may include, without limitation:

• our affiliates, subsidiaries, and related companies;
• our professional advisers (including legal, audit, tax, or financial consultants);
• service providers and data processors acting on our behalf (including IT service providers, cloud hosting providers, and customer support providers);
• our business partners, agents, distributors, and representatives;
• banks, payment processors, and financial institutions in connection with any transactions;
• regulatory authorities, law enforcement agencies, or other governmental bodies, where required or authorised by law;
• and any party to whom we are under a duty to disclose in order to comply with any legal or regulatory obligation, or as required to protect our rights, property, or safety and that of our customers or others

We are responsible for the Personal Data under our control, including Personal Data disclosed by us to a Vendor (often referred to third party service providers). "Vendor" in this Privacy Notice means in relation to Personal Data, any person or entity (other than our own employee) who processes the Personal Data on behalf of us and/or who provides third party services for us. "Processing", in relation to Personal Data means for example obtaining, recording, holding, storing or using the Personal Data in carrying out any operation or set of operations on the Personal Data and/or providing its respective services to us, including the organization, adaptation, alteration, retrieval, consultation, disclosure, correction, erasure or destruction of personal data.

We take reasonable and appropriate security measures to ensure that any disclosure of your personal data to any third parties is implemented in a safe and secure manner. These measures include role-based access, transmission of data through secured channels, and regular security risks update.

Storage and Retention of Personal Data

We use appropriate measures such as access control, firewalls and antivirus system to keep your personal data confidential and secure. Please note, however, that these measures do not apply to information that you choose to share in public domain such as third-party social networks.

We may transfer or store your personal data at a place outside Malaysia, and only where it is necessary in the course of business for us to disclose and transfer such personal data. Where such transfers are necessary, we will take reasonable steps to ensure that the destination country has in force laws that are substantially similar to the PDPA or the country provides an adequate level of protection in relation to the processing of personal data which is at least equivalent to the level of protection afforded by the PDPA.

We will only retain your personal data for a period of seven (7) years or for as long as necessary to fulfil the Purposes ("Retention Period"). Upon the expiry of the Retention Period, we will take reasonable steps to ensure your personal data will be disposed of and or permanently removed from our records in accordance with the Act.

How We Protect Your Information

We implement reasonable security measures to ensure the confidentiality of your information, such as data encryption, transmission of data through secure channels and access controls.

We will take reasonable measures to ensure that our Vendors provide a level of protection for personal data that is comparable to ours, including by incorporating contractual obligations requiring them to implement appropriate security measures and comply with the PDPA.

However, please note that no method of transmission over the Internet is 100% secure. We shall not be responsible or be held liable for any security breaches or any unauthorised disclosures of personal data that may occur a result of acts or omissions by our Vendors.

Sharing Your Information

We do not sell, trade, or rent your information to third parties. However, we may share information with our trusted Vendors who provides us with third party services and assist us in operating our website and services, under strict confidentiality agreements.

Your Rights

Under the Personal Data Protection Act 2010, as a data subject you have the right to:

• Have your data deleted or corrected where it is inaccurate;
• Access your data which we process and stored with us;
• Stop any of our newsletters or marketing material sent to you;
• Withdraw your consent for us to process your personal data;
• Transmit your Personal Data to another Data Controller of your choice, subject to technical feasibility and compatibility of the data format.

You have the rights to access, correct or update your personal data and/or subsequently limiting the processing of personal data or withdraw your consent to our processing of your personal data by submitting your request in writing via email at support@paydaes.com.

Please note that we may refuse access to your personal information in certain situations, such as when we are unable to confirm your identity or if we receive repeated requests for the same information. We may also decline your request for access, correction or update where permitted or required under applicable laws and regulations. In such cases, we will inform you of the reasons for our inability to comply with your request.

Should you withdraw your consent to our processing of personal data, we may not be able to provide or continue to provide the services requested by you; or perform the purpose for which the personal data was collected for or provide you with certain or all access, features or functionalities on our website.

Cookie

Cookies are small text files containing small amounts of information which are downloaded and may be stored on your user devices such as your computer, smartphone or tablet. These cookies and similar techniques are sometimes necessary to remember your account settings, language, and country, but also enable us to measure and analyse your behaviour and may be for showing you personalised advertisements on our website or on third party websites.

Where required, you will be asked for consent to our use of cookie. You are always free to decline cookies if your device permits, although in that case you may not be able to access or use certain features of our website. We use cookies to enhance user experience. You can choose to disable cookie via your browser settings, but some functionalities may be affected.

Disclaimer

The accuracy and completeness of your Personal Data depends on the information you provide. We assume that the information you have provided is accurate, up to date and complete unless you inform us otherwise.

Changes to This Notice

We reserve the right to update this Privacy Notice from time to time. The updated Privacy Notice will be posted on our website www.paydaes.com with the revised date. We highly recommend that you revisit our website from time to time to remain informed of any changes to the Privacy Notice.

Language

This Privacy Notice has both English and Bahasa Malaysia versions. In the event of any inconsistency between the English version and the Bahasa Malaysia version of this Notice, the English version shall prevail.