We at SINOPAY (MALAYSIA) SDN BHD and our subsidiaries respect the privacy of individuals regarding Personal Data. This Privacy Statement is formulated in accordance with the Malaysia Personal Data Protection Act 2010. This policy covers how our payment services and digital platforms collect, use, and keep your data safe.

By engaging with SINOPAY (MALAYSIA) SDN BHD, our subsidiaries, or our digital platforms, including our websites and payment portals, you acknowledge that you have reviewed this Privacy Statement and provide your express consent for the collection, use, and processing of your Personal Data

Should any discrepancy arise between the English version and translations in other languages, the English text shall prevail. SINOPAY (MALAYSIA) SDN BHD and its subsidiaries reserve the right to amend or update this Statement at any time by posting the revised version on our website. Your continued engagement with our services or communication with us constitutes acceptance of these updates, unless you notify us otherwise in writing.

Collection of Personal Data

"Personal Data" encompasses any information relating to you that has been provided to SINOPAY (MALAYSIA) SDN BHD and its subsidiaries. This includes, but is not limited to, your name, address, contact numbers, NRIC or passport number, email address, and personal preferences, as well as any other identifiable data collected, stored, or processed by us over time.

While the provision of your Personal Data is voluntary and based on your consent, please be advised that failing to provide such information may prevent SINOPAY (MALAYSIA) SDN BHD from communicating with you, processing your transactions, or delivering the services you require.

Purposes of Processing

You hereby agree that SINOPAY (MALAYSIA) SDN BHD and its subsidiaries may collect, retain, and process your Personal Data for purposes including, but not limited to:

• Communication with you regarding our services and inquiries;

• Sending updates on events, promotions, marketing materials, and information regarding our future expansions;

• Conducting research on your preferences or performing statistical analysis of your behaviour to better meet your needs;

• Compliance with legal obligations and making such disclosures as may be required by law or relevant authorities.

How to Opt-Out

If you do not consent to SINOPAY (MALAYSIA) SDN BHD or its subsidiaries processing your Personal Data for the purposes listed above, please notify us by using the contact details provided below. Please note that withdrawing your consent may limit our ability to provide certain services to you.

Disclosure to Third Parties

Personal Data provided to SINOPAY (MALAYSIA) SDN BHD will generally be kept confidential. However, you hereby consent and authorise SINOPAY (MALAYSIA) SDN BHD to provide access to or disclose your Personal Data to the following classes of third parties (which may be located within or outside of Malaysia) for the purposes stated in this Privacy Statement:

Subsidiaries and Affiliates: Any companies within the SINOPAY (MALAYSIA) SDN BHD, including those established in the future.

Service Providers: Third-party vendors who perform functions on our behalf, including but not limited to:

Ø Information technology (IT), software, and website hosting providers.

Ø Payment gateways and financial institutions for processing transactions.

Ø Logistics, delivery, and courier service providers.

Ø Data entry, administrative, and storage service providers.

Ø Professional Advisors: Our auditors, legal counsel, tax agents, and other professional consultants.

Ø Regulatory Authorities: Relevant governmental agencies, statutory bodies, or law enforcement agencies to comply with legal, audits, or government requirements.

Ø Business Transfers: Potential buyers, transferees, or assignees in the event of any re-organisation, merger, or disposal of our business or any part thereof.

SINOPAY (MALAYSIA) SDN BHD shall take reasonable steps to ensure that these third parties are contractually bound to protect your Personal Data and use it only for the specific services they are contracted to provide.

Confidentiality and Privacy Principles

SINOPAY (MALAYSIA) SDN BHD and its subsidiaries are committed to protecting your Personal Data through the following core privacy principles:

Confidentiality & Non-Disclosure: We treat all Personal Data provided to us as strictly confidential. We do not sell, rent, or trade your Personal Data to third parties for their independent marketing purposes.

Access Control: Access to your Personal Data is strictly limited to authorized employees, agents, and third-party service providers of SINOPAY (MALAYSIA) SDN BHD who require such information to perform their specific duties.

Data Security: We implement appropriate administrative, physical, and technical security measures (such as encryption, firewalls, and secure servers) to protect your Personal Data against unauthorized access, accidental loss, or destruction.

Accuracy & Integrity: We take reasonable steps to ensure that the Personal Data we process is accurate, complete, and up-to-date for the purposes for which it is to be used.

Retention Limitation: We will only retain your Personal Data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable laws and regulations.

Right of Access, Correction, and Inquiries

You have the right to request access to, and correction of, your Personal Data held by SINOPAY (MALAYSIA) SDN BHD and its subsidiaries. Specifically:

Access & Correction: You may request a copy of your Personal Data or request that we correct any inaccuracies or outdated information.

Withdrawal of Consent: You may withdraw your consent for the processing of your Personal Data at any time, subject to legal or contractual restrictions.

Limitation of Processing: You may request that we limit the processing of your Personal Data (e.g., opting out of marketing communications).

How to Reach Us:

If you wish to exercise any of the rights above, or if you have any inquiries or complaints regarding the handling of your Personal Data, please contact our Data Protection Officer (DPO) at:

Email: dpomy@sinopaygroup.com

Postal Address:

Sinopay (Malaysia) Sdn Bhd

Lot 1-82 First Floor,

Viva Shopping Mall,

85, Jalan Loke Yew,

55200 Kuala Lumpur.

Attention: Data Protection Officer

Please note that as permitted under the PDPA, we reserve the right to charge a prescribed fee for processing your data access request and may decline requests that are unreasonably repetitive or jeopardize the privacy of others.