This Privacy Notice outlines how PayAllZ Sdn Bhd, its subsidiaries, affiliates and agents (“PayAllZ”) collects, uses, maintains and discloses your personal data in respect of commercial transactions and how we safeguards your personal data.
"PayAllZ" or "We" in this Privacy Notice refers to PayAllZ Sdn Bhd, including our subsidiaries, affiliates and agents in Malaysia and other countries or, as the context may require, any of them.
When you request information or sign up for our services and products or when you enter into any commercial transactions with PayAllZ, you may be required to provide PayAllZ with your personal data.
In doing so, you consent to its use by PayAllZ in accordance with this Privacy Notice. Your personal data may have otherwise been provided to us by a third party (for example your authorised signatory or representative, a company in which you are a director, an officer or a shareholder, or a partnership in which you are a partner) for services or products that these third parties have sought from us on pursuant to commercial transaction entered into with PayAllZ.
In this context, the term "you" or "your" in this Privacy Notice extends to any individual whose personal data has been provided to PayAllZ and/or has been collected in other circumstances as described in Section 3 & Section 4 of this Privacy Notice.
We could and may collect sensitive personal data (including data relating to your physical or mental health, the commission or alleged commission of offences etc.) when you apply for certain services and products which may require you to disclose such personal data to us.
We will only use your personal data to provide the service(s) which you signed up. When we collect, use, maintain or disclose your sensitive personal data, we will explicitly ask for your consent in writing.
You have the choice, at any time, not to provide your personal data/sensitive personal data or to revoke your consent to us processing of your personal data/sensitive personal data.
However, failure to provide such personal data/sensitive personal data or revocation of your consent to process personal data/sensitive personal data provided may result in PayAllZ being unable to provide you with effective and continuous services and products.
Personal data refers to any information that relates directly or indirectly to an individual or merchant or subscriber, who is identified or identifiable from that information or from that and other information in our possession, including any sensitive personal data and expression of opinion, online chat recordings made through our chat helpline, online voice recordings made through Voice over Internet Protocol from our helpline, online video recordings made through Video Over Internet Protocol placed for security reasons and any audio recordings about the individual.
The types of personal data we collect may include, but is not limited to, your name, address, other contact details, age, occupation, financial information like income or income tax particulars, your MYKAD/ identity card/ passport, credit and transaction history, and others.
The personal data we collect can be either obligatory or voluntary.
Obligatory personal data are those that we require in order to provide you with our services and products. If you do not provide us with obligatory personal data, we surely will not be able to provide you with our services and products.
Voluntary personal data are those that are not mandatory in order for us to provide you with our service and products. If you do not provide us with voluntary personal data, you can still subscribe or use our services and products.
Obligatory and voluntary personal data differ for each of our services and products and will be indicated in the application forms.
We obtain your personal data in various ways, such as:
when you sign up for or use our services or when you register at our website; and/or
when you contact us through various methods such as application forms, emails and letters, telephone calls and conversations you have with our staff, helpline or agents. If you directly contact us or when we contact you by voice call on the telephone or via Voice over Internet Protocol, we may monitor or record those conversations for quality assurance, training and security purposes; and/or
from our analysis of your history of transactions (e.g. payment settlement history, subscription payment, balances, credit or debit card purchases); and/or
when you participate our customer surveys or service improvement questionnaires or when you sign up for any of our competitions or promotions; and/or
when we obtain any data and information from third parties (e.g. credit reference agencies, regulatory and enforcement agencies, employers, company directors, joint account holders, guarantors, legal representatives and/or companies/partnership that you hold directorships, shareholdings or partnership in); and/or
when you enter into any commercial transactions with us including but not limited to you providing goods and/or services or your professional services; and/or
from publicly available sources.
An IP address is a number that is automatically assigned to your computer when you signed up with an Internet Service Provider (ISP). When you visit any of our website or login via your smartphone or mobile device, your IP address is automatically logged in our server. We use your IP address to help diagnose problems with our server, improve our infrastructure performance, administer our online and mobile services, and website. From your IP address, we may identify the general geographic area from which you are accessing our services and website. We will never link your IP address to anything that can enable us to specifically identify you, unless required by law and regulation.
You can adjust browser settings so that you will automatically be prompted and notified when you receive a cookie. Please refer to your browser documentation to check if cookies have been enabled by default on your computer or to reject cookies by default on your computer.
We may process your personal data for the following reasons:
to assess your application for any of our products and services; and/or
to verify your financial standing through credit reference checks; and/or
to manage and maintain your account and facility; and/or
to evaluate your financial needs and to continue performing the contractual obligations entered into between PayAllZ and/ or its affiliates, and you; and/or
to respond to your enquiries and complaints and to resolve disputes; and/or
for internal functions like evaluating the effectiveness of our marketing campaigns, market research functions, statistical analysis modelling, service reporting, audit and risk management; and/or
to prevent fraud or detect crime or for the purpose of investigation.
In addition, we may also use your personal data for the fulfilment of any regulatory requirements and for any other reasons connected with providing you the services you require and fulfilment of any commercial transactions entered into by you with PayAllZ Sdn Bhd.
From time to time, we may share your personal data with other PayAllZ entities/ affiliates, our agents or any authorised agents, or subject to your consent, strategic partners with whom we have a relationship with for specific products and services ("Other Entities") as PayAllZ deems fit and you may receive marketing communication from us or from these other entities about products and services that may be of interest to you.
If you no longer wish to receive these marketing communications, please notify us to withdraw your consent and we will stop processing and sharing your personal data with these other entities for the purpose of sending you marketing communications.
You have a choice to withdraw your consent for receiving marketing or promotional materials/communication; you may contact us using the contact details located at the end of this Privacy Notice. Please be aware that once we receive confirmation that you wish to withdraw your consent for marketing or promotional materials/communication, it may take up to fourteen (14) working days for your withdrawal to be reflected in our systems.
Therefore, you may still receive marketing or promotional materials/communication during this period of time. Please note that even if you opt out from receiving marketing or promotional materials, PayAllZ may still contact you for other purposes in relation to the accounts, facilities or services that you use or subscribed with PayAllZ.
We shall keep your personal data confidential at all times. However, in order to provide you with effective and continuous products and services, and subject at all times to any applicable laws (including regulatory requirements, standards, guidelines, notices and/or obligations), there may be occasions where we may need required to disclose your personal data to these following entities:
other entities within PayAllZ, subsidiaries and/or affiliates and/ or agents; and/or
our agents and service providers with whom we have contractual agreements for some of our functions, services and activities; and/or
credit reference agencies when you apply for any of our credit-based products like credit card, etc; and/or
strategic partners with whom we have a relationship with for specific products and services if consented to, by you; and/or
parties authorised and consented to, by you; and/or
enforcement regulatory and governmental agencies as permitted or required by law, authorised by any order of court or to meet obligations to regulatory authorities.
The disclosure of your data may involve the transfer of your personal data to places outside of Malaysia, and by providing us your personal data you agree to such a transfer where it is required to provide you the services you have requested, and for the performance of any contractual obligations you have with us including for storage purposes.
The security of your personal data is our priority. We will ensure all physical, technical and organisational measures are taken for the security and confidentiality of your personal data. If we disclose any of your personal data to our authorised agents or service providers, we will require them to appropriately safeguard the personal data provided to them.
We will retain your personal data only for as long as necessary to fulfil the purpose(s) for which it was collected or comply with legal, regulatory and internal requirements. We will notify you when your data is permanently deleted.
Please note that we may update this Privacy Notice from time to time. If there are material changes to this Privacy Notice, we will notify you by posting a notice of such changes on our website or by sending you a notification directly. Do periodically review this Privacy Notice to stay informed on how we are protecting your information.
This Privacy Notice was last updated in October 2017.
We are committed to ensure that the personal data we hold about you is complete, accurate, timely and up-to-date. If there are any changes to your personal data or if you believe that the personal data we have about you is incomplete, inaccurate, misleading or outdated, please contact us so that we may take steps to update your personal data.
You have the right to access your personal data. If you would like to request access to your personal data, please contact us. Please note that depending on the information requested we may charge a small fee and that we will take steps to verify your identity before fulfilling your request for access to your personal data.
If you need to contact us, you may visit us at 1-3 Street Wing, Sunsuria Avenue, Persiaran Mahogani, Kota Damansara, PJU 5, 47400 Petaling Jaya, Selangor Darul Ehsan, Malaysia during office hours 9am to 5pm, Monday to Friday, call our Customer Care hotline at 1-800 88 7299 or +603 6142 3198 (overseas) or visit us at www.payallz.com. For merchants or corporate subscribers of our services, you may directly contact your agent who manages our relationship with you.
This Privacy Notice is provided in English due to PayAllZ’s international user segment.
If you have provided us with personal data of a third party, please ensure that you have obtained the third party's consent in relation to the processing and disclosure of their personal data and that this Privacy Notice is brought to the attention of any such third party.
Last updated: October 2017