Security policy
Last updated: October 2026
1. Our approach
We aim to protect borrower information with appropriate safeguards designed to support privacy, confidentiality, integrity, and availability. This page provides a general overview and does not describe every internal control in detail.
2. Data protection
Sensitive information, including account data, e-KYC information, identity documents, and loan records, is protected using encryption and related safeguards. Data for this service is stored in Malaysia, kept encrypted, and backed up to support resilience and recovery. The website is also protected using SSL/TLS encryption to help secure data in transit between users and the portal.
3. e-KYC and identity documents
e-KYC data and identity documents are used for identity verification, fraud prevention, compliance, safe lending, and related loan operations. Access to such data should be limited to authorized personnel and approved providers who need it for legitimate operational or compliance purposes.
4. Passwords and account security
Passwords are protected using secure handling practices and are not intended to be exposed or stored in plain text through normal use of the portal. Users should keep login credentials private, use strong passwords, and notify us promptly if they suspect unauthorized access.
5. Digital signing
Verified identity information may be used to support issuance of a digital signing certificate for PKI signing. This helps link the signing process to the verified borrower and helps protect the integrity of the signed agreement.
6. Related policies
For more information, please also review our Terms of Use, Privacy Policy, PDPA Notice, and Cookie Policy.