Personal Data Protection Notice

This notice is issued under the Personal Data Protection Act 2010 (PDPA). It explains how MyOneCredit collects, uses and protects your personal data.

Source: Jabatan Perlindungan Data Peribadi · Personal Data Protection Act 2010

Data we collect

When you apply for a loan with us on WhatsApp, we may collect:

• Identity details, such as your name and MyKad details.
• Contact details, such as your phone number and address.
• Employment and income details, such as payslips, EPF statements or SSM registration documents.
• Bank statements.
• Credit reports obtained with your consent.
• The name and phone number of an emergency contact you give us, used only if we cannot reach you.

Why we use it

• To assess your loan application.
• To prepare, attest and sign your loan agreement.
• To disburse the loan, manage repayments and contact you.
• To comply with legal and regulatory requirements.

Who we may share it with

Where needed, we may share your data with:

• The Commissioner for Oaths or other authorised attestor who attests your agreement.
• Credit reporting agencies, with your consent.
• Regulators and government authorities entitled to it by law.

How long we keep it

Under Section 18 of the Moneylenders Act 1951, moneylenders must keep loan agreements and account records for at least seven years. After the required period, we delete the data securely.

Source: Attorney General's Chambers of Malaysia · Moneylenders Act 1951 (Act 400)

Where the data comes from

Most of it comes from you, in the documents and messages you send us on WhatsApp. With your consent, we also obtain your credit report from a credit reporting agency.

What you must provide, and what happens if you don't

The identity, income and bank documents we ask for are needed to assess your application and to prepare the loan agreement. Providing them is your choice, but without them we cannot assess or approve a loan.

Limiting how we use your data

You can tell us at any time to stop using your data for anything other than your loan, and you can withdraw consent you have given. Withdrawing consent does not affect processing we are required to carry out by law, such as keeping loan records.

How we protect it

We take practical steps to protect your data against loss, misuse, and unauthorised access or disclosure, and we keep it only for as long as the law or the loan requires.

Your rights

You have the right to access the personal data we hold about you and to ask us to correct anything that is inaccurate.

Questions and complaints about your data

Send any request, question or complaint about your personal data through the official channels on our contact page. If you are not satisfied with our response, you may contact the Personal Data Protection Commissioner.

Contact us

To access or correct your data, or if you have questions about this notice, reach us through the official channels on our contact page.