CreditXpress Privacy Policy
Effective Date: August 6, 2026
CreditXpress ("CreditXpress", "we", "our", or "us") provides mobile loan application and related financial services through the CreditXpress mobile application, website, and related services (collectively, the "Services"). This Privacy Policy explains how we access, collect, use, transmit, store, share, protect, and delete personal information and sensitive device data when you use our Services.
This Privacy Policy applies to CreditXpress and to the Services operated for CreditXpress by OPG Capital Holdings. Our official service website and data processing domain is https://malasia.creditxpress.com.my.
Please read this Privacy Policy carefully before using CreditXpress. By creating an account, applying for a loan, using our Services, or giving permission in the app, you acknowledge that you have read and understood this Privacy Policy. Where required, we will ask for your clear consent before accessing sensitive data or requesting Android runtime permissions.
We collect only the information needed to provide loan services, verify identity, review eligibility, prevent fraud, protect account security, process transactions, and comply with legal or regulatory requirements.
When you register or apply for a loan, we may collect your name, mobile phone number, identification number, date of birth, residential address, employment information, income information, bank or wallet information, application details, and other information you provide for identity verification, loan application review, repayment management, customer support, and fraud prevention.
When required for loan verification or emergency contact purposes, we may collect contact or reference information that you provide or confirm, such as the contact person's name, phone number, relationship to you, and related verification details. We use this information only for loan verification, account recovery, fraud prevention, lawful collection-related communication, and customer service. We do not sell contact information or use it for unrelated marketing.
If the app requests access to device contacts in a specific version, we will request your explicit consent before access. Contact information that is collected or confirmed for loan verification is encrypted and transmitted to https://malasia.creditxpress.com.my.
With your permission, CreditXpress may use your device camera when you actively take a photo of your government-issued ID, upload supporting documents, complete selfie verification, or complete facial liveness verification during the KYC process.
We may collect ID document images, selfie images, facial verification results, and related verification records to confirm that the loan application is submitted by the real account holder, prevent identity fraud, and complete loan eligibility review. Camera access is used only when you start the relevant verification step. We do not use the camera in the background.
Images and verification data are encrypted in transit and transmitted to https://malasia.creditxpress.com.my for identity verification, fraud prevention, and loan application review.
When supporting documents are required, you may upload specific files or images, such as ID documents, income proof, bank card images, repayment proof, or signed agreements. We use uploaded files only for loan application review, KYC verification, repayment verification, customer support, fraud prevention, and compliance.
CreditXpress does not intentionally scan, upload, modify, or analyze unrelated personal photos, videos, or files. Uploaded files are encrypted in transit and transmitted to https://malasia.creditxpress.com.my.
With your permission, CreditXpress may collect approximate or coarse location information while you are using the app to confirm service-region eligibility, support loan application review, prevent regional fraud, detect abnormal account access, and protect account security.
We do not continuously track your location in the background after you close the app, and we do not use location data for advertising. Location data collected for loan review or fraud prevention is encrypted and transmitted to https://malasia.creditxpress.com.my.
With your explicit consent, CreditXpress may access SMS records from the last 12 months during the loan application and risk review process. We use SMS access to identify messages related to financial transactions, bank or wallet activity, salary or income information, loan repayment, payment status, account security, and fraud-risk assessment.
The SMS information we may collect includes sender, message time, transaction-related message content, amount, transaction status, and other structured financial indicators needed for loan eligibility review, credit risk assessment, financial activity verification, fraud prevention, and account security.
SMS information is encrypted in transit and transmitted to https://malasia.creditxpress.com.my. We do not sell SMS data, use SMS data for advertising, or share SMS data for unrelated purposes. We do not intentionally collect or upload non-financial or personal SMS history that is unrelated to loan eligibility review, financial activity verification, fraud prevention, or account security. SMS access occurs only after you give affirmative consent and is not used for unrelated background tracking.
If you refuse or withdraw SMS permission, we may not be able to complete automated loan eligibility review or credit risk assessment.
With your explicit consent, CreditXpress may access calendar information related to repayment reminders, billing dates, financial schedules, salary dates, or loan-service reminders. Calendar information is used to help you manage repayment dates, support credit review, verify financial schedule consistency, and prevent overdue repayment.
We do not intentionally collect calendar events unrelated to loan services, and we do not modify, delete, or share personal calendar events for unrelated purposes. Calendar information that is collected for loan-service purposes is encrypted and transmitted to https://malasia.creditxpress.com.my.
If a version of CreditXpress requests call log permission, we will request your explicit consent before accessing call log data. With your consent, we may collect limited call log information, such as phone number, call type, call time, call duration, and related status, only for identity verification, fraud prevention, account security, risk assessment, and verification of loan-related communications.
Call log access does not record call audio. Call log information is encrypted in transit and transmitted to https://malasia.creditxpress.com.my. We do not sell call log data, use it for advertising, or share it for unrelated purposes. You may refuse or withdraw call log permission in your device settings, but this may limit certain verification or risk review functions.
If a version of CreditXpress requests microphone permission, we will request your explicit consent before accessing the microphone. Microphone access may be used only for customer support, voice verification, fraud prevention, or identity verification features that you actively start in the app.
We do not use the microphone for background recording, advertising, or unrelated monitoring. Any audio information collected through a user-started feature is encrypted in transit and transmitted to https://malasia.creditxpress.com.my only for the stated service, verification, security, or support purpose.
We may collect device and security information, such as device model, operating system version, app version, IP address, network status, SIM or network status where available, language and region settings, device risk signals, crash logs, and security status.
We use this information for account security, duplicate account detection, fraud prevention, risk control, service diagnostics, app stability, compliance review, and protection against unauthorized access. Device and security information is transmitted through encrypted channels to https://malasia.creditxpress.com.my.
We collect the mobile phone number and account information you provide to register, log in, verify your identity, protect account security, prevent duplicate or fraudulent applications, communicate loan status, and manage repayment services. This information is encrypted and transmitted to https://malasia.creditxpress.com.my.
With your permission where required, CreditXpress may send service notifications, OTP messages, account security alerts, loan status updates, repayment reminders, policy notices, and customer support messages. We do not use sensitive permission data, such as SMS, call logs, contacts, location, microphone data, or identity documents, for advertising.
We use the information described above for the following purposes:
We do not sell personal information or sensitive device data. We do not use SMS data, call log data, contact data, camera data, microphone data, identity documents, or precise verification data for unrelated advertising.
For sensitive permissions, CreditXpress will display an in-app disclosure before requesting consent or Android runtime permission. The disclosure will describe the data being accessed or collected, how the data is used, whether it is transmitted or shared, and whether the permission is needed for the relevant feature.
You may refuse a permission request or withdraw permission later in your device settings. If you refuse or withdraw a permission that is required for identity verification, loan eligibility review, credit risk assessment, fraud prevention, repayment reminders, or account security, some services may be limited or unavailable.
We may share personal information only when necessary for the purposes described in this Privacy Policy:
We require service providers to process personal information only for authorized purposes and to protect the data with appropriate security measures. We do not sell personal information or sensitive device data.
Personal information and sensitive permission data collected by CreditXpress may be encrypted and transmitted to https://malasia.creditxpress.com.my and processed by authorized systems and service providers for the purposes described in this Privacy Policy.
Where data is transferred or processed outside your country or region, we take reasonable steps to protect the data in accordance with applicable legal requirements, including encryption in transit, access controls, and purpose limitation.
We retain personal information only for as long as necessary to provide the Services, review and manage loan applications, process repayments, prevent fraud, protect account security, resolve disputes, maintain business records, and comply with applicable legal, tax, audit, and regulatory requirements.
When personal information is no longer needed for the purposes described in this Privacy Policy, we will delete, anonymize, or securely retain it only where required by law or legitimate compliance needs.
You may request deletion of your account and associated personal information through the CreditXpress app, by visiting https://malasia.creditxpress.com.my, or by contacting us using the contact details below. If we must retain certain information for fraud prevention, dispute resolution, legal, accounting, tax, audit, or regulatory reasons, we will retain only the information necessary for those purposes and delete or anonymize it when retention is no longer required.
Subject to applicable law, you may have the right to:
You can update certain account information in the CreditXpress app. You can also withdraw Android permissions through your device settings. Withdrawing a permission does not affect processing that occurred before withdrawal, but it may affect our ability to provide some Services.
We use reasonable technical and organizational measures to protect personal information, including HTTPS encryption in transit, access controls, internal authorization controls, security review, data minimization, and monitoring for unauthorized access.
No method of transmission or storage is completely secure. You are responsible for keeping your account credentials, device, and verification information confidential and for notifying us promptly if you suspect unauthorized access.
CreditXpress is intended for adult users who are legally eligible to apply for financial services. We do not knowingly provide loan services to children or knowingly collect personal information from children. If we learn that we have collected information from a child without proper legal basis, we will take appropriate steps to delete it.
CreditXpress may use third-party SDKs or service providers for app analytics, crash diagnostics, attribution, security, notifications, verification, hosting, payment, and customer support. We are responsible for ensuring that third-party code and service providers used in the app handle user data consistently with this Privacy Policy and applicable Google Play policies.
Third-party service providers may process limited data only as necessary to provide their services to CreditXpress. We do not authorize third parties to sell personal information or sensitive device data collected through CreditXpress.
We may update this Privacy Policy from time to time due to changes in our Services, legal requirements, security practices, data processing activities, or business operations.
When we make material changes, we will provide notice through the app, website, or other appropriate means. Where required, we will request your consent before collecting or using personal information in a materially different way.
If you have questions, requests, or complaints about this Privacy Policy or how CreditXpress handles personal information, please contact us:
App: CreditXpress
Developer/Company: OPG Capital Holdings
Official Website: https://malasia.creditxpress.com.my
Privacy Contact Email: opgcapital3@gmail.com