This Privacy Policy (hereinafter referred to as the “Policy”) outlines the manner in which ATX MYLOANHUB SDN. BHD [Company Registration No. 202001030236], with its registered address at 8-1 , Tower 9, Avenue 5, The Horizon, Bangsar South, No.8 Jalan Kerinchi 59200 Kuala Lumpur, Malaysia, and operating under the brand name “Nimbura” (hereinafter referred to as “Nimbura”, “we”, “our” or “us”), collects, uses, or otherwise processes your personal data in accordance with the laws of Malaysia, including but not limited to the Personal Data Protection Act 2010 (hereinafter referred to as “PDPA”).
Nimbura is committed to ensuring that your personal data is protected and processed in a manner consistent with the provisions of PDPA and all other applicable laws and regulations, including but not limited to those relating to anti-money laundering. We shall retain your personal data for as long as it is necessary, or for any extended period as may be mandated by applicable laws.
(I) ACKNOWLEDGEMENT AND CONSENT
By communicating with Nimbura, engaging with Nimbura, accessing Nimbura’s website, submitting any information to Nimbura, or using Nimbura’s products and services, you acknowledge that you have read, understood, and agreed to the terms of this Policy. You consent to the collection, use, processing, disclosure and transfer of your personal data by Nimbura as described in this Policy.
You may also withdraw your consent at any time, by providing written notice or by completing the form available on our website.
However, please note that the withdrawal of consent may affect Nimbura’s availability to provide services to you, and in certain circumstances, such as where legal or contractual obligations remain in force, Nimbura may not be able to accommodate your request.
In the event that Nimbura needs to process your personal data for purposes not stated in this Privacy Policy, or where an exemption under laws applies, we will inform you of such processing and the legal basis for doing so, where required by law.
Any emails sent to you by Nimbura will include an unsubscribe option, allowing you to opt out of the mailing list at any time.
(II) THE RIGHTS OF DATA SUBJECT
In accordance with PDPA, you have the following rights in respect of your personal data:
- The right to be informed whether your data is being processed by an organisation;
- The right to access your personal data;
- The right to correct personal data;
- The right to withdraw consent to process your personal data;
- The right to prevent processing of your personal data that may cause damage or distress;
- The right to prevent processing of your personal data for direct marketing purposes.
If you wish to exercise any of the above rights, or if you have any inquiries or complaints, you may contact us in writing at Nimbura’s registered address, via email at [email protected] or by calling our hotline at 03 2739 6815.
(III) SECURITY OF PERSONAL DATA
Nimbura is committed to protecting your personal data and ensuring its confidentiality, integrity, and availability. Nimbura implements and maintains appropriate technical and organisational security measures to safeguard your personal data against accidental or unlawful destruction, loss, misuse, alteration, unauthorised disclosure or access.
These measures include, but are not limited to, the following:
- Encryption: Personal data is encrypted both in transit and at rest using industry-standard encryption protocols.
- Access Control: Access to personal data is restricted to authorised personnel on a strict need-to-know basis and is protected by authentication and access control mechanisms.
- Secure Storage: Data is stored in secure environments, including secure servers and compliant cloud service providers with robust physical and network security safeguards.
- Ongoing Security Reviews: Security policies, procedures and technologies are regularly reviewed and updated to address emerging and evolving threats and vulnerabilities.
- Third-Party Compliance: Where Nimbura engages third-party service providers to process personal data on its behalf, Nimbura requires them to adhere and comply with strict data protection and security standards equivalent to those observed by Nimbura.
- Incident Response: Nimbura has established incident management and response procedures to manage, handle and mitigate any suspected or actual data breaches promptly, in compliance with applicable laws and regulatory requirements.
While Nimbura takes reasonable precautions to secure your personal data, please be aware that no method of transmission over the Internet or method of electronic storage is completely secure. Therefore, Nimbura cannot guarantee absolute security but we strive to protect your data to the best of our abilities.
(IV) CHANGES TO PRIVACY POLICY
Nimbura reserves the right to amend or update this Policy from time to time at its sole discretion and without prior notice. Any changes will be published on Nimbura’s official website, and the revised Policy will take effect upon publication.
You are encouraged to review this Policy periodically to stay informed of any updates or modifications.
(V) COLLECTION OF PERSONAL DATA
The collection of your personal data is necessary for Nimbura to fulfill the purposes outlined in this Policy, which relate to Nimbura’s business activities.
In the event that Nimbura needs to collect sensitive personal data as defined under PDPA, your explicit consent will be sought separately, and such data will be processed only for purposes permitted by applicable laws.
(VI) DATA SUBJECT’S OBLIGATION
It is necessary for Nimbura to obtain and to retain your personal data in order to provide high quality services and comply with applicable legal and regulatory requirements. Therefore, you are required to provide accurate, complete and up-to-date personal data to Nimbura.
You shall promptly notify Nimbura of any changes to your personal data to ensure that our records remain current and accurate.
If you do not provide your personal data, Nimbura will be unable to process such personal data for the purposes specified in section VIII of this Privacy Policy or effectively deliver Nimbura’s services. As a result, Nimbura may be unable to offer or continue providing services to you, and reserves the right to suspend or terminate any existing relationship or agreement without liability.
(VII) DESCRIPTION OF PERSONAL DATA
To ensure the services, the personal data Nimbura may collect includes, but is not limited to:
- Name, surname;
- Email address, mobile phone number;
- Identity card or passport number;
- Current address;
- Employment information;
- Financial and income information;
- Bank details;
- Images;
- Personally identifiable information (PII) defined by international privacy laws or standards;
- Internet Protocol (IP) address;
- Other information specified in your submitted loan application, request, complaint, or provided to Nimbura while filling in the registration form or during the communication with Nimbura.
(VIII) PURPOSES OF COLLECTION OF PERSONAL DATA
Nimbura will collect, use, process your personal data for the following purposes, including but not limited to:
- ensuring your registration as a user of Nimbura’s website and/or mobile application;
- assessing and processing your application to receive Nimbura’s services;
- ensuring the functionality of Nimbura’s website;
- verifying your identity;
- verifying your financial standing, through credit reference checks;
- processing transactions and sending notices, confirmations and updates about your transactions;
- contacting and update you on the performance of our services;
- communicating with you and process your application, request or complaint;
- offering surveys, promotions and marketing communication;
- improving the quality and effectiveness of Nimbura’s services;
- providing electronic funds transfer services, credit card account processing and related services;
- delivering customer support;
- collecting outstanding and overdue payments;
- protecting and enforcing Nimbura’s legal rights and interests;
- assessing your financial needs and performing the contractual obligations entered into between Nimbura and you;
- performing internal functions such as evaluating marketing effectiveness, conducting market research, statistical analysis and modelling, reporting, audit and risk management;
- sharing your personal data with Nimbura’s joint venture or business partners to jointly develop products and services or launch marketing campaigns;
- preventing fraud or detecting crime, or for investigative purposes;
- fulfilling other legitimate purposes that are identified and declared before or as soon as reasonably practicable after the collection of your personal data; and
- complying with a legal obligation applicable to Nimbura.
(IX) MARKETING AND PROMOTIONAL PURPOSES
By giving your consent to data processing for marketing and promotional purposes, you agree to receive marketing and promotional emails, SMS, messages in messaging platforms (such as WhatsApp or similar) calls and/or push notifications from Nimbura. These may include monthly promotions and information about upcoming events. You can choose to give your consent for each form of communication individually by selecting the relevant checkboxes on our consent forms.
If you no longer wish to receive such communications, you may withdraw your consent at any time at no cost by clicking the “unsubscribe” link provided in our emails, or by contacting us in writing at [email protected] or calling our hotline at 03 2739 6815.
(X) SOURCES OF PERSONAL DATA
Nimbura may obtain your personal data from the following sources, including but not limited to:
application forms submitted by you;
- Nimbura’s mobile or software applications;
- the process of negotiating, concluding, and performing any contract or transaction;
- communications or interactions relating to applications, requests, inquiries or complaints;
- correspondence such as emails, letters, phone calls and conversations;
- third parties (e.g. credit reference agencies, fraud prevention service providers, regulatory and enforcement bodies, employers, joint account holders, guarantors, legal representatives, spouses, parents, guardians, dependents, or companies/partnership in which you hold directorships, shareholdings, partnerships);
- publicly available sources, such as government databases or official registries.
The collection of such personal data is necessary to assess your creditworthiness, ensure compliance with responsible lending practices, verify your identity, manage risk, fulfil legal and regulatory obligations, and ensure the continuity and quality of the services provided to you.
(XI) DISCLOSURE OF PERSONAL DATA
Nimbura may engage with third-party service providers to provide services on its behalf and to improve those services. These services may include, but are not limited to, performing service-related tasks, analysing service usage, or assisting in the collection of outstanding payments.
Access to your personal data is granted to third parties by Nimbura only to the extent necessary for fulfilling specific purposes and in accordance with strict confidentiality and security obligations.
Both Nimbura and every data processor are committed to complying with PDPA, including its subsidiary regulations, applicable policies, guidelines, and regulatory orders.
(XII) TRANSFER OF PERSONAL DATA OUTSIDE MALAYSIA
Nimbura is committed to ensuring that any transfer of personal data outside Malaysia is carried out in accordance with the PDPA. Such transfers will only be made to jurisdictions that provide an adequate level of personal data protection which is equivalent to that level of protection under the PDPA, or where the transfer falls within an exception permitted under the PDPA, including but not limited to cases where consent has been obtained, the transfer is necessary for the performance of a contract, or reasonable precautions and due diligence have been undertaken.
(XIII) USE OF COOKIES
Nimbura use two types of cookies on our website – functional and personalisation cookies. Functional cookies are necessary to ensure that Nimbura’s website operates correctly and cannot be refused. You may choose to give your consent for the use of personalisation cookies by clicking on the relevant checkbox.
The cookies used on Nimbura’s website do not collect any personal data that could directly identify you. Some cookies may be placed by third-party service providers engaged by Nimbura to provide Nimbura with insights into the effectiveness of its engagements and promotional activities.
You can configure your browser to notify you when cookies are being set and to block their installation on your device.
