Privacy Policy
Last Updated: July 2026 • Aligned with Malaysia Personal Data Protection Act 2010 (PDPA)
1. Introduction
RinggitChain Technology Sdn. Bhd. ("RinggitChain MY", "we", "us", or "our") is committed to protecting the privacy, security, and confidentiality of personal data provided by our users ("you" or "your"). This Privacy Policy explains how we collect, process, store, and safeguard your personal information when accessing our platform, products, and services in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA) and guidelines issued by Securities Commission Malaysia.
2. Information We Collect
- Personal Identity Data: Full legal name, MyKad or Passport number, date of birth, nationality, residential address.
- Contact Information: Email address, Malaysian mobile phone number.
- Financial & Bank Details: Malaysian bank account numbers, FPX payment transaction references, source of funds declarations.
- eKYC & Identity Documents: Copies of government-issued identity documents (MyKad / Passport) and selfie verification biometric snapshots.
- Technical & Usage Data: IP address, device identifier, browser type, login timestamps, and transaction audit logs.
3. How We Use Your Data
We process your personal information strictly for legitimate business and regulatory purposes, including:
- Verifying your identity in compliance with Malaysian Anti-Money Laundering and Anti-Terrorism Financing Act (AMLA).
- Facilitating instant FPX deposits, wallet transactions, and DuitNow withdrawals.
- Allocating capital to chosen Sukuk, Bursa equity, and ETF portfolio plans.
- Preventing fraudulent activities, unauthorized access, and cyber threats.
- Communicating portfolio performance updates, monthly distribution notices, and market alerts.
4. Data Protection & Security
We enforce 256-bit SSL encryption for data in transit, encrypted storage databases, segregated account architecture, and multi-factor authentication controls to ensure bank-level protection of user records.
5. Your PDPA Rights
Under the PDPA, you have the right to request access to your personal data, request correction of inaccurate records, or withdraw consent for marketing communications. To exercise your rights, contact our Data Protection Officer at dpo@ringgitchain.my.