Privacy Policy

(i) Personal Information from you, such as your name, biodata/personal profile, profile picture, contact information, email address, telephone number, age, home/mailing address, location, marital status, education, type of residence, occupation, financial information, income, assets, vehicle registration numbers, and liabilities and passwords provided by you when you create an account for the Platform, and any other information you directly give us through the Platform (including, but not limited to messages that you send through the Platform).

(ii) Information about your interactions on the Platform including, your engagement with particular service provider and/or the end users, and the products and services you have sold and/or purchased.

(iii) Information necessary to complete a transaction through the Platform, including your name and NRIC/passport number where applicable.

(iv) Information such as files, pictures, graphics, videos, audios and/or messages that you store using the Platform.

(v) Working/employment information such as your gross income and company of your employment.

(vi) Information from written communications when you provide us feedback or contact us, e.g. your name and e-mail address, as well as any other content included in the e-mail, in order to send you a reply.

(vii) Information on photograph or video image, investment and risk preferences in respect of loan, financial and/or investment type products, personal data of family members/next-of-kin, personal data of the beneficiaries or nominees relevant to the processing of loan, financial, insurance/takaful claims, the provision of the loan, financial, insurance/takaful and related products and services.

(viii) Such other personal data required with your consent.

(i) Information from you, including your web browser type, Internet Protocol (IP) address (a number that is automatically assigned to your computer when you use the Internet, which may vary from session to session), domain name, user profiles, and/or a date/time stamp for your visit, and, with respect to your mobile phone, the unique device identifier.

(ii) Information from third party service providers, with your consent, which may include your profile content or other types of personally identifiable information.

(iii) Cookies and URL information to gather information regarding the date and time of your visit and the information for which you searched and viewed. “Cookies” are small pieces of information that a website sends to your computer’s hard drive while you are viewing a website. We may use both session Cookies (which expire once you close your web browser) and persistent Cookies (which stay on your computer until you delete them) to provide you with a more personal and interactive experience on the Platform. Persistent Cookies can be removed by following web browser’s directions.

(iv) Information from corresponding technologies used in connection with mobile phones, including your device identifier, to record date, time, search and viewing information related to your mobile phone.

(v) Information about how you use and interact with the Platform and the services via third party analytics services which may use Cookies to gather information such as the pages you visited, your IP address, a date/time stamp for your visit and the sites that redirected you to the Platform.

(a) To send you information about products and services which we anticipate may be of interest to you.

(b) To enable you to access and use Finology’s services, including the conduct of loans, financial, insurance and takaful business.

(c) To perform our obligations under the written agreement, including customer service, complaints handling, conservation, including any value-added services that are connection but not directly connected to such agreement, where such agreement shall include but not be limited to loan agreement, life insurance, general insurance, family takaful, general takaful, medical insurance/takaful, group insurance policies or group takaful certificates, agency contract, broking arrangements, and employment contracts.

(d) To conduct investigation during underwriting and claims assessment or at any time during the concurrence of the insurance policy/takaful certificate that is necessary and reasonable to identify any possible non-disclosure of material information in an insurance/takaful fraud or conspiracy claim, including but not limited to the purposes of medical/health/life insurance, requesting and verifying information with any medical practitioner, hospital, medical institution or any person (whether incorporated or not) who has ever attended to you or has records on the health of the you; the purposes of motor insurance, requesting and verifying information with any motor companies, workshops, or any person (whether incorporated or not) who has ever attended to you or has records on the motor vehicles belonging to you; and we and/or our relevant data processors may keep such records for future possible cases of underwriting and claims assessment.

(e) To exercise the right of subrogation/recovery.

(f) To prevent, investigate, report or otherwise in relation to actual or suspected money laundering, terrorist financing, bribery, corruption, actual or suspected fraud including but not limited to loan/financial/insurance/takaful fraud, tax evasion, evasion of economic or trade sanctions, and criminal activities generally or other unlawful activities.

(g) To conduct research, audit and risk assessment/survey, including statistical/actuarial research or data analytics/study. In the event such data was required for this purpose, your personal data are not to be published, and only figures, statistics and general information in the findings of the study/research are to be published.

(h) To cooperate or assist in investigations undertaken by another banker, lender, insurer, takaful operator, agents and/or any third parties.

(i) To share information with the insurance and takaful associations such as the General Insurance Association of Malaysia (PIAM) and Malaysian Takaful Association (MTA) and any information-sharing systems.

(j) To send you administrative e-mail notifications, such as security or support and maintenance advisories.

(k) To administer and manage our services.

(l) To notify users about updates to our services.

(m) To personalize and enhance aspects of our overall service to you and our other users, as well as carrying out research such as analyzing market trends and customer demographics.

(n) To refer you to the loan, insurance and/ or financial product(s), and/ or financial institutions (or their authorized representatives) specified by you upon completion of application forms on our website.

(o) To improve and customize the quality of experience when you interact on the Platform.

(p) To communicate with you, in order to verify the personal information provided, or to request any additional information that is essential to fulfilling the service that you have applied for.

(q) For our day to day operations and administrative purposes including account management, billing and collection, audits, reporting and investigations.

(r) To assess and/or verify your eligibility, credibility and/or credit worthiness.

(s) To investigate, process and resolve any service issues, complaints, communications or other enquiries that you may submit to us regarding the Platform.

(t) To maintain records required for security, claims or other legal purposes.

(u) To comply with any guidelines, circulars or directives issued and to cooperate with the Personal Data Protection (PDP) Commission, Bank Negara Malaysia (BNM) or any other relevant authority to conduct an audit, examination or investigation which is authorised under any applicable Malaysian laws or international treaties/agreements affecting us.

(v) For compliance with the requirements of any law, any regulations or guidelines, any present or future contractual or other commitment with any legal, regulatory, judicial, administrative, public or law enforcement body, whether in or outside Malaysia, that are issued by regulatory or other authorities with which we or any other of our group members need or are expected to comply, including but not limited to making any enquiries, any investigation, disclosure or reporting requirements and/or meeting obligations pursuant to such law, regulations guidelines and/or the relevant authorities.

(w) To perform obligations under any lawful scheme of transfer of business.

(x) To process personal data for marketing and promotional purposes by our agents, bankers, financiers, lenders, and/or insurer(s) upon completion of purchase of the insurance and/or application for loan, whereas you shall have the rights to request us to cease or not begin processing your personal data for purposes of direct marketing.

(y) For handling applications to apply for loan, purchase insurance policies/participate in takaful certificates and/or requests for advice and product recommendations.

(z) For regular assessment after application for loan, purchase of insurance/participation in takaful products.

(aa) For re-insurance/re-takaful, co-insurance or co-takaful.

(bb) To establish, exercise or defend a legal claim.

(cc) To meet other specific legal or contractual obligation.

(dd) For prospecting new insurance/takaful markets, including research for product and service development.

(ee) For disclosure to third parties.

(ff) For discharging regulatory or legislative obligations.

(gg) For such other purposes as may be directed or consented by you.

(hh) To match personal data held in relation to you for any purposes contained in this Clause.

(ii) To conduct investigation on us and our third party service providers for any allegation of fraud, conspiracy, breach of any laws, rules and regulations, codes of practice including this Privacy Policy, misconduct or any unethical behaviours or practices.

(jj) For all other purposes in relation to or incidental to the above.

(kk) For all the other processing operations mentioned under this Clause.

(a) You choosing to register and use our online services such as our loan comparison tools or when you sign up for our weekly newsletters.

(b) You requesting for loan eligibility checks or loan pre-approval through our Platform, our mobile application(s) and/or any third parties who uses our technologies.

(c) You applying for products or services from our website.

(d) Third parties we deal with or are connected with you in order to provide you with the services that we offer you through the Platform; to facilitate creation of accounts; to provide technical support and/or to provide other services to us.

(e) Professional advisors including but not limited to legal advisors, tax advisors, financial advisors, auditors, insurance brokers.

(f) Government or other regulatory authorities who have the power and/or authority to disclose such information.

(g) Such other sources where you have given your consent for the disclosure of information relating to you where otherwise lawfully permitted.

(a) Enable us to conduct our insurance/takaful business, including but not limited to the processing for the purposes described in Clause 4.1 above.

(b) Enable us to manage and process your requests for loan eligibility checks, loan pre-approval and/or loan application submission.

(c) Carry out your instructions, including but not limited to updating the insurance policy/takaful certificate, updating personal data, enquiring about premium payment status of an insurance policy/takaful certificate.

(d) Confer an interest or a benefit on you under a life insurance, general insurance, family takaful, general takaful, medical insurance/takaful, group insurance policies or group takaful certificates.

(a) Our subsidiaries and affiliates.

(b) Companies and/or organisations that assist us in processing and/or otherwise fulfilling transactions and providing you with services through the Platform that you have requested or subscribed for.

(c) Companies, corporations and/or entities that act as our service providers, gateway providers, agents, contractors and/or professional advisers.

(d) Law enforcement agencies, government authorities/agencies, courts, tribunals, regulatory bodies and/or statutory agencies or bodies or any other person we are under an obligation or required or expected to make disclosures to detect, prevent, or otherwise address fraud, security or technical issues.

(e) Industry associations and federations.

(f) Doctors, medical specialists, hospitals, clinics or healthcare institutions.

(g) Our business partners and other parties for purposes that are related to the purpose of collecting and using your personal data set out in this Privacy Policy, on a strictly confidential basis.

(h) Banks, credit card companies or other financial institutions for purposes of collection or refund of any monies due or payable.

(i) Banks, lenders, financiers, financial institutions or any related corporations and/or institutions for purposes of promoting their financial products, and to manage, process, compile, collect and/or submit your loan application to them.

(j) Any person permitted by you or, as the case may be, your executor, administrator or legal personal representative.

(k) Information-sharing systems, for purposes of enabling exchange of information between insurers takaful operators in order to facilitate fraud prevention and detection.

(l) Any person to whom disclosure is necessary for the purpose of investigation into any allegation of our and our third party service providers’ breach of any laws, rules and regulations, codes of practice, misconduct or unethical behaviours or practices.

(m) Any person to whom the disclosure is necessary for the purposes of investigations under any written law, criminal proceedings or civil proceedings, or any person to whom the disclosure is required to be made under court order.

(n) Any other parties, companies, organizations or individuals outside us when we obtain your consent to do so subject at all times to any laws (including regulations, guidelines and/or obligations) applicable to us.

(o) Individuals or organizations within our parent/holding companies, as well as our subsidiaries and subsidiaries for both our parent/holding companies strictly on a need to know basis.

(p) Bancassurance partners, third party outsourcing service providers, third party call centres, independent insurance/takaful broker, lenders, loan adviser or financial adviser.

(q) Re-insurers/re-takaful service providers or retrocessionaires.

(r) Claims investigation companies or loss adjusters/surveyors or other parties necessary to process the personal data for claims purposes.

(s) Our auditors, consultants, lawyers, accountants, fund managers or other professional advisers appointed in connection with our business on a strictly confidential basis, appointed to provide services to us.

(t) Other third party service providers appointed to provide administrative, telecommunications, payment, data processing, data storage or other services to us in connection with the purposes described in Clause 4.1 above.

a) Your consent has been obtained to such use of your personal data at the point of collection of your personal data.

b) You are informed that the message communicated is a marketing message and the message is limited to products and services offered by us or any third parties, including any loans or credit products of banks and alternate lenders and/or insurance products of insurance companies.

c) You are informed of the identity of the direct marketing organisation, purpose of collecting your personal data and the persons to whom such personal data will or may be disclosed to.

d) You are given a clear and simple method of refusing to consent to the use of your personal data for direct marketing purposes at the time your data are collected.

e) All marketing communications sent to you by way of email will contain an “unsubscribe”/”opt out” option at the end of the email, which allows you the opportunity to choose not to receive such communications or subsequent marketing messages.

(a) You are not entitled to have access to the information relating to evaluation of your loan, financial, insurance/takaful claims as that information is considered as confidential commercial information;

(b) Subject to Clause 8.8(c) below, you, other than the policyholders/certificate holders, are only entitled (during the lifetime of such policyholders/certificate holders) to have access to your own personal data and you must first obtain the consent of the policyholders/certificate holders before you make any personal data access request. We have the right to request you to provide evidence to show that such consent has been duly obtained; and

(c) You, other than the policyholders/certificate holders (and where such policyholders or certificate holders are deceased persons), are only entitled to have access to your own personal data and/or the deceased persons’ personal data (including the insurance policy/takaful certificate) in accordance with the requirements under the applicable laws.

(a) legal proceedings or a regulatory or similar investigation or obligation to produce the said information;

(b) a crime or misconduct is suspected or detected;

(c) information is relevant to a company in liquidation or receivership, where a debt is due to us; or

(d) information is considered to be of potential historical importance including but not limited to the purposes described in Clause 4.1 above.