Privacy notice

1. Who we are

MyBank Credit Sdn. Bhd. (company no. 200001004910 (507515-H)) is a moneylender licensed by the Ministry of Local Government Development (KPKT) under licence WL7152/14/01. For the purposes of the Personal Data Protection Act 2010 (PDPA), we are the "data user" responsible for the personal data described in this notice.

Our registered office is at Level 10, Menara Contoh, Jalan Contoh, 50450 Kuala Lumpur (no walk-in service). We serve customers entirely online, so we never ask you to bring or post documents anywhere. You can contact our data protection officer at hello@mybankcredit.example, or by calling or sending a WhatsApp message to 011-2345 9635 during business hours.

2. What we collect on this website

When you send a quote request, we collect only what we need to contact you and give you a realistic offer:

• Your full name, mobile number and, if different, your WhatsApp number
• The loan type, amount and repayment period you are interested in
• Your employment type, a monthly income range and your state
• Your preferred contact time and language
• A one-way hash of your internet (IP) address, kept only to stop automated abuse — we cannot turn it back into your address

If you use the message form on our help page, we also collect the topic, your question and, if you give it, your email address.

3. What we collect when we verify you

If you decide to go ahead, a licensed officer verifies your identity and assesses affordability with you privately, after your enquiry, never through the website form. This happens on a short video call and through our official WhatsApp number shown on this website. During that step we see, and keep copies of:

• Your MyKad (or MyPR), shown on camera during the video call and sent as a clear photo of the front and back, to confirm who you are and your age
• With your consent, a still image taken during the video call showing your face next to your MyKad, kept as our record that we verified you
• Payslips, EPF statements or business income records, sent as photos or PDFs, to assess your income
• Bank statements, to confirm your income and existing commitments
• Your bank account details, to pay the loan into an account in your own name
• With your separate written consent, your credit reports from CCRIS and a registered credit reporting agency

We do not record the video call itself unless we ask you first and you agree. Documents you send to our official WhatsApp are saved by the officer to your encrypted loan file in our own system, normally on the same working day, and then deleted from the chat and from the device. Our WhatsApp account runs only on company-managed devices, never on staff members' personal phones, and we will never ask you to send documents to any other number, an email address or a file-sharing link.

These records become part of the loan file that licensed moneylenders are legally required to keep. If you do not go ahead, we delete them as set out in section 10.

4. Why we use your data

1. To contact you about your enquiry and explain the options available
2. To verify your identity, on a video call and from the documents you send us, and assess whether a loan is affordable for you
3. To prepare your Schedule J or Schedule K loan agreement, have you sign it electronically, stamp it through LHDN's e-stamping system and keep it
4. To manage your loan: repayments, statements, reminders and settlement
5. To meet our legal obligations, including record-keeping, anti-money-laundering checks and reporting to KPKT
6. To protect our website and our customers from fraud and automated abuse

We do not use your data for advertising by other companies, and we do not make loan decisions by automated processing alone — a licensed officer always reviews your application.

5. Your consent

By ticking the consent box on our quote form, you agree that we may process the details you give us for purposes 1 and 6 above. Before we check your credit reports or process your documents for a loan, we ask for your separate consent during the verification step and record it in writing, for example as a consent form you sign electronically or a written confirmation in our official WhatsApp chat.

You can withdraw your consent at any time by contacting us. If you withdraw it before a loan is signed, we will stop processing your enquiry and delete it, except where the law requires us to keep it.

6. How we follow the seven PDPA principles

• General Principle — we process your data only with your consent or where the law allows, and only for lending purposes.
• Notice and Choice Principle — this notice tells you what we collect and why, in English, Bahasa Melayu and Chinese, before you give us anything.
• Disclosure Principle — we disclose your data only to the parties listed in section 7.
• Security Principle — we protect your data with the technical and organisational measures in section 9.
• Retention Principle — we keep data no longer than section 10 allows, then delete or destroy it.
• Data Integrity Principle — we take reasonable steps to keep your data accurate, complete and up to date.
• Access Principle — you can see and correct the data we hold about you, as set out in section 11.

7. Who we share your data with

We never sell, rent or trade your personal data, and we never share it with other lenders or marketing companies.

8. Data stored outside Malaysia

Some of our IT providers may store data on servers outside Malaysia. Where that happens, we choose providers that protect data to a standard at least equal to the PDPA and bind them by contract to process it only on our instructions. This can include our electronic signing provider and WhatsApp, whose servers may be located outside Malaysia.

9. How we protect your data

• All traffic to this website is encrypted with HTTPS
• Only staff who need your data to do their job can access it, and every access to the admin system is logged
• Admin accounts are protected by one-time passcodes sent to registered phones
• Documents you send on WhatsApp are moved into encrypted storage in our loan system and deleted from the chat and the device; only the officer handling your loan and their supervisor can open them
• Our official WhatsApp account runs only on company-managed devices protected by a passcode and two-step verification, and staff may not use personal phones for customer conversations
• Signed agreements and LHDN stamp certificates are kept as digital files in the same encrypted storage, with encrypted backups
• Staff receive training on data protection and on recognising scams

If we become aware of a data breach that is likely to affect you, we will tell you and the authorities as required by law and explain what we are doing about it.

10. How long we keep your data

11. Your rights

• Access — ask for a copy of the personal data we hold about you
• Correction — ask us to correct data that is inaccurate, incomplete or out of date
• Withdraw consent — stop us processing your data, subject to legal record-keeping
• Limit marketing — tell us not to contact you about new products; we only do so if you have agreed

Send your request to hello@mybankcredit.example or through our official WhatsApp number. We will reply within 21 days. We may ask you to verify your identity, for example on a short video call, before releasing any data, to stop someone else obtaining it. We do not charge for a correction; for a copy of your data we may charge the fee allowed under the PDPA regulations.

12. Cookies

This website uses only the cookies it needs to work. We do not use advertising or cross-site tracking cookies.

13. Changes to this notice

We will update this notice when the law or our practices change. The date at the top shows the latest version. If a change affects how we use data you have already given us, we will tell you before it takes effect.

14. Questions and complaints

If you have a question or concern about your data, contact our data protection officer at hello@mybankcredit.example or 011-2345 9635. If you are not satisfied with our answer, you may complain to the Personal Data Protection Commissioner of Malaysia.