CreditXpress ("we") has created this Privacy Policy to describe how we collect, use, store, and protect personal information from our software applications ("Applications"), our website, and any other services we provide (collectively, the "Services").

This Privacy Policy aims to protect and maintain the privacy and confidentiality of our platform users. Users should carefully read this Privacy Policy before using the services provided by this platform. Users who access and use the platform's services are deemed to have read, understood, and accepted the contents of this Privacy Policy.

1: Key Information Collected

To provide safe and reliable loan services, we may collect the following information when you use our applications:

1. Personal Information: This includes name, ID number, address, and other information required for identity verification and loan applications to ensure that the application is submitted by the user and to prevent fraud.
2. Contact Information: When applying for a loan through CreditXpress, CreditXpress collects and stores contact list information (contact phone number, contact name, relationship) once the account holder authorizes access to their contact list.

   The purpose of collecting contact information is to improve user experience, prevent fraud through contact analysis, reduce credit risk in loan applications, and facilitate your selection of emergency contacts from your address book. The collected data will be securely uploaded to the security center malasia.creditxpress.com.my for encryption and will never be shared with third parties.

3. File Directory Information: You have the right to download file directory information. The purpose of obtaining this information is to conduct risk assessments and identify potential risks.
4. Camera Permission:

   To facilitate your loan application, you must authorize our use of your camera permission. We will obtain camera permission after obtaining your consent. This permission is used to access the camera or capture images and videos from the device. It is primarily used for:

   1. ID Photo Taking: Our application requires users to take photos of their ID card or other identification documents for identity verification and to complete the steps required for the loan application.
   2. Facial Recognition: We use facial recognition technology to verify and authenticate user identity to ensure the accuracy and security of loan applications. (Personal facial biometric recognition is used to verify your identity.)
   3. To prevent financial fraud and other malicious activities, we require you to upload a selfie and identification documents as part of the KYC process. Our review team will verify that the facial data in your selfie matches the photo on your ID document. If they do not match, it indicates that the application was not submitted by you, and we will reject the loan application.
5. Location Information: When users use this application to determine if they are within our service area, they only obtain location information. When you close our application, we will no longer have your location information.
6. SMS Information: With your permission, the platform only accesses SMS content related to financial transactions within the past 12 months (such as sender, transaction details, and amount) to assess the creditworthiness of unbanked customers. The platform only scans structured information and does not store SMS content; it does not view or collect any other personal information.
7. Calendar Information: For reminder purposes, including credit payment reminders, we also collect calendar event information to assist in risk analysis, thereby speeding up and improving the credit approval process.

All of the above data is not permanently retained and will be deleted after use.

8. Photo Album: The platform only accesses photos you actively select when you need to upload existing identification documents (such as ID cards).

   Uploaded images will be protected by encrypted transmission and securely stored on server malasia.creditxpress.com.my. CreditXpress will not use or view these images without your permission. To protect your privacy, we promise to completely delete these images within 3 to 5 business days.

9. Mobile Device

   We collect your mobile phone number to prevent fraud and ensure that no other mobile phone can replace your number when applying for a loan. We will not automatically obtain your mobile phone number to complete the application login; users must do so manually. Mobile phone number information will be encrypted and uploaded to our server malasia.creditxpress.com.my solely for identifying lending behavior and risk. Of course, we will not sell, trade, or rent your data to third parties without your consent.

10. Master Account

    Allow CreditXpress to upload your master account information for risk assessment and to provide you with pre-approved loan offers. Data will be encrypted and uploaded to an external server malasia.creditxpress.com.my to identify and analyze user behavior and risk, which helps prevent fraud.

11. Call Records

    If you authorize us to access your landline call records from the past hour, we will provide you with voice calling functionality, for credit risk assessment, to verify that our application is installed on your phone, and to download your call records only with your explicit consent and transmit them to a secure network environment. We will never share this data with third parties.

12. Recordings

    We need your approval to access the microphone on your device so that we can provide you with better service. We will never share this data with third parties.

2. Purposes of Collecting Personal Information:

1. To verify that the information you submit uses your real information and is not someone else impersonating you;
2. To determine your loan eligibility according to applicable terms;
3. To protect your account security and prevent fraud and abuse;
4. To process loan applications and ensure the security of the transaction process after loan approval;
5. To evaluate your loan application history and confirm your employment information;
6. To provide contract extensions or improve services;
7. To communicate with you, such as sending you service announcements, marketing information, etc.

3. How We Use the Collected Information?

1. Providing Services: Your information will be primarily used to provide you with services.
2. Service Improvement: We may use your information internally to improve our services and develop new products, services, and features.
3. Other Purposes: For example, to provide you with personalized advertising and recommendations.

4. How We Store and Protect Your Personal Information?

Our use of your personal information is limited to the purposes described above and is within the framework of laws, regulations, and compliance. We will not use your personal information for any other purpose unrelated to the above purposes unless we obtain your explicit consent or are required by applicable law.

When processing your personal information, we will take reasonable technical and organizational measures to protect the confidentiality, integrity, and availability of the data. We will also take reasonable steps to grant you authentication permissions before you open an account (if you have an account with us). However, this application cannot guarantee the security of any information you transmit to Tap, nor can it guarantee that information in this application will not be accessed, disclosed, altered, or destroyed.

Please do your best to help us. You are responsible for always keeping your login information and device identifier confidential and controlling your access permissions to communications with this application. Changes to service content caused by your connection to the social media services of this application may also affect your privacy settings. We are not responsible for the functionality, privacy, or security measures of any other organization.

5. Data Storage Guidelines

We will retain your personal data for the necessary period in accordance with applicable laws and regulations. Once the data retention period is reached or your personal data is no longer needed, we will take reasonable steps to securely delete or anonymize it.

We will take necessary security measures to protect the security of your personal data, including the use of encryption technology, access control, secure storage, and compliance review.

Please note that we are committed to using and storing your personal data only to the extent necessary and to complying with applicable laws, regulations, and privacy policies.

6. How can you access, correct, or delete your personal data, or object to its use?

If you wish to use our application, you must register a personal account. We understand that you may need to update or correct your information from time to time. You can log in to your personal account on our application and have the right to view, edit, and update your personal account.

7. How can I stay informed of changes to this Privacy Statement?

This Privacy Statement may be modified, changed, or updated due to new legal requirements, our own needs for the products or services we offer, our privacy practices, changes in our business model, or other reasons. We are committed to keeping you informed of any possible changes to this Privacy Statement through our website and mobile application.

Any revisions to this Privacy Policy will take effect upon our posting of new terms and/or implementation of new changes on the application (or as otherwise stated at the time of posting). In any event, your continued use of the application after the posting of any revised Privacy Policy constitutes your acceptance of the terms of the revised Privacy Policy. If you disagree, you can do so by sending an email to our inbox. For changes, we will issue a request via the mobile application with the explicit consent of the owner.

8. Contact Us

If you have any questions or suggestions regarding this Privacy Policy, please feel free to contact us at the following email addresses:

---