Privacy Policy

Last Updated: 13 March 2026

1. Introduction

FinDoc Sdn Bhd ("FinDoc," "we," "us," or "our") is committed to protecting your personal data and complying with the Personal Data Protection Act 2010 ("PDPA") and other applicable laws in Malaysia. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal data when you access our website, platform, or mobile applications ("Platform"), or use our services.

By accessing the Platform or using our services, you agree to the terms outlined in this Privacy Policy. If you do not agree to this Privacy Policy, please discontinue your use of the Platform and services.

2. What Personal Data We Collect

We may collect and process the following types of personal data:

• Personal Information: Name, identification card number, passport number, date of birth, nationality, address, phone number, and email address.
• Financial Information: Income, employment details, assets, liabilities, credit history, and other relevant financial details.
• Technical Information: IP address, browser type, operating system, device information, cookies, and usage data.
• Sensitive Personal Data: Where applicable, personal data that is classified as sensitive personal data under the PDPA, including e-KYC ("Know Your Customer") related information and other data collected with your explicit consent.

By providing your personal data to FinDoc, you confirm that the data is accurate and that you have obtained any necessary consent from third parties whose data you may submit on our Platform.

3. How We Use Your Personal Data

We may collect and process your personal data for the following purposes:

• Loan Eligibility Assessment: To assess your eligibility for financial products, such as loans or credit.
• Financial Support and Assessment: To provide credit-related assessment, profiling, support services, and information based on your submitted data, subject to any applicable written agreement.
• Customer Support: To respond to your inquiries, manage your account, and provide technical support.
• Marketing and Promotions: To send you information about our services, promotional offers, or updates, with your consent.
• Compliance with Legal Obligations: To comply with applicable laws and regulations, including anti-money laundering (AML) and know-your-customer (KYC) obligations, where applicable.
• Research and Analytics: To analyze data for improving our services, conducting market research, and understanding user preferences.

Your personal data will only be used for the stated purposes, unless you have consented to its use for other purposes, or where it is permitted or required by law.

4. Disclosure of Personal Data

We may disclose your personal data to the following third parties, for the purposes outlined in this Privacy Policy:

• Service Providers: Companies or individuals that provide services to FinDoc, such as IT support, data processing, marketing agencies, and hosting services.
• Credit Reporting Agencies: CTOS, Experian, and other credit reporting agencies, where you have authorized such disclosure or where permitted under the applicable law, for generating credit reports and assessing credit-related information.
• Financial Institutions: Banks, lenders, and financial institutions to process and manage your loan applications and transactions.
• Government and Regulatory Authorities: Where required by law, we may disclose your data to regulatory or enforcement agencies.
• Professional Advisors: Auditors, legal advisors, accountants, and other professionals engaged to ensure compliance and governance.

We ensure that these third parties comply with applicable privacy laws and adhere to our data protection standards when processing your personal data.

5. Data Security

We take data security seriously and employ reasonable measures to safeguard your personal information. These measures include:

• Encryption: Sensitive data is encrypted during transmission and storage.
• Access Controls: Access to your personal data is restricted to authorized personnel.
• Monitoring and Firewalls: Our systems are protected by firewalls and monitored to detect any unauthorized access or security breaches.
• Data Masking: Sensitive financial information is masked to protect against unauthorized access.

While we strive to protect your personal data, please note that no method of transmission over the internet is completely secure. By using our Platform, you acknowledge that there are inherent risks in transmitting data online. These measures are implemented on a reasonable efforts basis and do not constitute a guarantee of absolute security.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law or for FinDoc's legitimate business purposes (including audit, compliance, dispute resolution, or enforcement). Once your personal data is no longer needed, we will take appropriate steps to securely delete or anonymize it.

7. Transfer of Personal Data Outside Malaysia

FinDoc does not ordinarily transfer your personal data outside Malaysia. Where such transfer becomes necessary, FinDoc will take reasonable steps to ensure compliance with applicable legal requirements and appropriate safeguards.

8. Your Rights

You have certain rights concerning your personal data, which include:

• Right to Access: You may request access to the personal data we hold about you. We may charge a reasonable fee for processing such requests, as permitted by law.
• Right to Correction: You may request correction of any inaccurate, incomplete, or outdated personal data.
• Right to Withdraw Consent: You may withdraw your consent to our collection, use, or disclosure of your personal data at any time by contacting us. Please note that withdrawal of consent may affect our ability to provide you with certain services.
• Right to Opt-Out of Marketing: You may opt-out of receiving marketing communications from us by following the unsubscribe instructions in our emails or contacting us directly.

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section below.

9. Cookies and Tracking Technologies

Our Platform uses cookies and other tracking technologies to enhance user experience, analyze usage patterns, and improve functionality. Cookies are small text files that are placed on your device when you visit our website.

You can adjust your browser settings to refuse cookies or to alert you when cookies are being used. However, disabling cookies may impact your ability to access certain features on the Platform.

10. Changes to This Privacy Policy

We reserve the right to amend or update this Privacy Policy from time to time. Any changes will be posted on our website, and the updated policy will take effect upon publication. By continuing to use the Platform following any changes, you signify your acceptance of the revised Privacy Policy.

11. Relationship with Other Agreements

Where you have entered into a separate written agreement with FinDoc in relation to specific services, the terms of such agreement shall prevail to the extent of any inconsistency with this Privacy Policy.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or your personal data, or if you wish to exercise your rights as outlined above, please contact us at: