Definition

Personal Data means any information that identifies or relates to an identifiable individual, whether directly or indirectly, including but not limited to name, identification details, contact information, payment information, and online identifiers.

Account means a registered user account on the Platform.

Services means all products, digital goods, prepaid balances, top-ups, codes, and related services offered on the Platform.

Scope and Applicability

This Privacy Policy applies to all users of the Platform, including visitors, registered users, buyers, and customers.

This Privacy Policy is intended to comply with:

• Malaysia’s Personal Data Protection Act 2010 (PDPA);
• Other applicable data protection laws.

Personal Data We Collect

We may collect Personal Data that you voluntarily provide, including but not limited to:

• Full name
• Email address
• Telephone number
• Date of birth
• Username and password
• Billing and/or mailing address
• Payment-related information (excluding full card data where processed by third-party payment providers)
• Transaction history
• Customer support communications
• Identity verification information (where required for compliance or fraud prevention)

When you access or use the Platform, we may automatically collect:

• IP address
• Browser type and version
• Device type, operating system, and identifiers
• Log files, access times, and referring URLs
• Usage behaviour and interaction data
• Cookies and similar tracking technologies

All payment transactions are processed by third-party payment service providers. We do not store full credit or debit card numbers. Payment data is handled in accordance with the payment provider’s privacy and security standards.

We may receive Personal Data from:

• Payment processors
• Identity verification providers
• Fraud detection services
• Law enforcement or regulatory authorities (where legally required)

Purpose of Collection and Use

We collect and process Personal Data for the following purposes:

• To create, manage, and maintain your Account
• To process orders, payments, and transactions
• To deliver digital goods, codes, top-ups, and Services
• To manage prepaid balances and transaction records
• To provide customer support and respond to enquiries
• To verify identity and prevent fraud, abuse, or illegal activity
• To comply with legal, regulatory, and compliance obligations
• To improve the Platform, Services, and user experience
• To send service-related notifications and updates
• To conduct internal analysis, audits, and reporting

Where required by law, we will obtain your consent before using your Personal Data for marketing or promotional communications.

Legal Basis for Processing

Depending on your jurisdiction, we process Personal Data based on one or more of the following legal grounds:

• Performance of a contract (to provide Services you request)
• Legal obligations (regulatory, tax, accounting, and compliance requirements)
• Legitimate interests (fraud prevention, platform security, service improvement)
• Consent (where required by applicable law)

Children’s Privacy

The Platform is not intended for children below the age required by applicable law.

We do not knowingly collect Personal Data from minors without parental or legal guardian consent.

If we become aware that Personal Data of a minor has been collected unlawfully, we will take reasonable steps to delete such data.

Disclosure of Personal Data

We may disclose Personal Data to the following parties, where necessary:

• Payment service providers
• Technology, hosting, and cloud service providers
• Fraud detection and security partners
• Customer support and communication providers
• Professional advisers (legal, accounting, compliance)
• Government authorities, regulators, or law enforcement (where legally required)

All third parties are required to process Personal Data in accordance with applicable data protection laws and contractual obligations.

International Data Transfers

Your Personal Data may be transferred to, stored, or processed in jurisdictions outside Malaysia.

Where such transfers occur, we take reasonable steps to ensure an adequate level of data protection consistent with applicable laws.

Data Retention

We retain Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.

Transaction and financial records may be retained for statutory, accounting, or regulatory purposes.

Upon account closure, Personal Data will be deleted or anonymized unless retention is required by law or for legitimate business purposes.

Data Security

We implement reasonable administrative, technical, and physical safeguards to protect Personal Data against loss, misuse, unauthorised access, or disclosure.

You are responsible for maintaining the confidentiality of your Account credentials and for all activities conducted under your Account.

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance functionality, analyse usage, and improve performance.

You may manage or disable cookies through your browser settings, subject to possible limitations in Platform functionality.

Your Rights

Subject to applicable laws, you may have the right to:

• Payment service providers
• Technology, hosting, and cloud service providers
• Fraud detection and security partners
• Customer support and communication providers
• Professional advisers (legal, accounting, compliance)
• Government authorities, regulators, or law enforcement (where legally required)

Requests may be submitted via the contact details below and may require identity verification.

Third-Party Links

The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices or content of such third parties.

Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy at any time by posting the updated version on the Platform. Continued use of the Platform constitutes acceptance of the updated Privacy Policy.

Contact us

If you have any questions, requests, or concerns regarding this Privacy Policy or your Personal Data, please contact us at:

Email: support@exicash.com