Privacy and PDPA Notice

Duit Ready Sdn Bhd (Registration No. 202601033421 (1695516-W)) ("Duit Ready", "we", "us") operates duitready.my, a loan matching platform. We compare loan options from licensed lenders and financial partners ("Lending Partners") and connect you with them. Duit Ready is not a lender.

Duit Ready is the data controller for the personal data described in this Notice. Our registered office is at Level 12, Tower B, Menara UOA Bangsar 5, Jalan Bangsar Utama 1, Bangsar, 59000 Kuala Lumpur.

Depending on how you use our services, we may collect:

• Identity details: full name, NRIC or passport number, date of birth, nationality.
• Contact details: mobile number, email address, home or business address.
• Financial details: income, employment details, existing loan commitments, payslips, bank statements, EPF statements and credit report information you choose to give us.
• Loan request details: the amount you need, the purpose, preferred tenure and what matters most to you.
• Business details (for business financing): SSM registration, company financial accounts, business bank statements, and details of directors and shareholders.
• Referral details: the referral code used, and the Referral Agent or Channel Partner who introduced you.
• Communication records: WhatsApp messages, emails, call notes and feedback.
• Technical data: IP address, device and browser type, pages visited and cookie data.

We do not ask for sensitive personal data such as health, religious or biometric information. If a document you send us contains such data, we will only process it with your explicit consent and only as needed for your application.

• Directly from you, when you fill in our forms, chat with us on WhatsApp, email or call us.
• From a Referral Agent or Channel Partner who introduced you, with your agreement.
• From Lending Partners, about the status and outcome of your application.
• From public sources, such as the SSM company register for business applicants.
• Automatically, through cookies and similar technology when you visit our website.

We process your personal data to:

• assess your request and compare the loan options you are entitled to;
• share your application with the Lending Partners relevant to you, so they can make you an offer;
• contact you about your application, including by WhatsApp, SMS, phone and email;
• verify your identity and prevent fraud, money laundering and misuse of our services;
• calculate and pay commission to the Referral Agent or Channel Partner who introduced you;
• keep records, handle complaints and improve our website and services;
• comply with the law and with requests from regulators, courts and authorities;
• send you news and promotions, only if you have agreed. You can opt out at any time.

Fields marked as required in our forms are obligatory. Without them we cannot compare your options or pass your application to a Lending Partner. All other information is voluntary. If you choose not to provide it, the options we can show you may be limited.

We do not sell your personal data. We only share it with:

• Lending Partners that are relevant to your application, so they can assess it and make you an offer. Each Lending Partner handles your data under its own privacy notice.
• The Referral Agent or Channel Partner who introduced you, limited to your name and the status of your application, so their commission can be tracked.
• Service providers who help us run our business, such as cloud hosting, customer management, messaging and email providers, under contracts that require them to protect your data.
• Our professional advisers and auditors.
• Regulators, courts, law enforcement and other authorities, where the law requires it.
• A buyer or successor, if our business is sold or restructured, under the same protections.

Lending Partners may run credit checks on you, for example with CCRIS or licensed credit reporting agencies, based on the consent you give them when you apply. [Confirm whether Duit Ready itself runs any credit checks.]

Some of our service providers may store or process data outside Malaysia. When this happens, we take reasonable steps to make sure your data receives a level of protection comparable to the PDPA, as permitted under the PDPA and the Personal Data Protection Commissioner's guidelines on cross-border transfers.

• Access to personal data is limited to staff who need it for their work.
• Data is encrypted in transit, and our systems are protected by access controls and monitoring.
• Referral Agents and Channel Partners are not allowed to collect or keep copies of your documents.
• If a personal data breach happens, we will notify the Personal Data Protection Commissioner and, where the breach is likely to cause you significant harm, we will notify you, within the time required by law.

We keep your personal data only as long as we need it for the purposes above, or as required by law. As a guide:

• Applications that result in a loan: [7] years after your last interaction with us.
• Applications that do not proceed: [12] months after your last interaction with us.
• Marketing preferences: until you opt out.

After that, we securely delete or anonymise it.

Under the PDPA you have the right to:

• access the personal data we hold about you (a fee may apply as permitted by law);
• ask us to correct data that is inaccurate, incomplete or out of date;
• withdraw your consent, or limit how we process your data, including for direct marketing;
• ask us to transmit your personal data to another data controller (data portability), where applicable;
• make a complaint to the Personal Data Protection Commissioner.

To make a request, contact our Data Protection Officer using the details below. We will respond within 21 days. Withdrawing consent may mean we can no longer process your application.

Our website uses essential cookies to work properly and analytics cookies to understand how it is used. You can block or delete cookies in your browser settings, but some parts of the website may not work as intended.

Our services are for individuals aged 18 and above. We do not knowingly collect personal data from anyone under 18.

We may update this Notice from time to time. The latest version will always be on this page, with the date it was last updated. If the changes are significant, we will let you know.

This Notice is available in Bahasa Malaysia and English. If there is any inconsistency between the two, the English version will prevail.

Data Protection Officer, Duit Ready Sdn Bhd

• Email: [[email protected]]
• WhatsApp or phone: +60 11-2800 8281
• Address: Level 12, Tower B, Menara UOA Bangsar 5, Jalan Bangsar Utama 1, Bangsar, 59000 Kuala Lumpur