Privacy and Cookie Policy

Introduction

This Privacy and Cookie Policy outlines how iPOS, powered by PosPay Sdn Bhd under CardBiz Group of Companies, manages and safeguards personal data in compliance with the Personal Data Protection Act 2010 (“Act”) and other applicable regulations. By using our website, services, and products, you consent to the practices described in this Policy.

This Policy applies to iPOS and all associated operations under the CardBiz Group of Companies, including CardBiz Solutions, CardBiz Payment Services, CardBiz Technologies, and CardBiz eServices.

Scope of Personal Data

Personal data includes any information that directly or indirectly identifies you, such as:

  • Contact Information: Name, address, email, phone number, nationality, gender, identification number (e.g., NRIC or passport), and date of birth.
  • Billing Information: Credit card details, payment history, and bank account information.
  • Transaction Data: Service usage records, payment information, and account status.
  • Preferences: Information related to your business needs and preferences for products or services.

Sensitive personal data (e.g., health, political opinions, or religious beliefs) will only be collected with explicit consent or as permitted by law.

Purpose of Data Collection

We collect and process your personal data to:

  • Provide and manage iPOS services and products.
  • Process transactions and payments securely.
  • Verify identity and assess creditworthiness.
  • Maintain and improve our systems, services, and customer experience.
  • Send product updates, promotional materials, and relevant communications.
  • Comply with legal and regulatory requirements.
  • Conduct internal quality checks and data analysis.

Data Sources

Personal data may be collected directly from you (e.g., during registration, inquiries, or transactions) or third parties such as:

  • Financial institutions and regulatory bodies.
  • Public records and authorized databases.
  • Third-party service providers or business partners.

Retention and Disposal

iPOS retains personal data for as long as it is necessary to fulfill the purposes outlined in this Policy. When no longer required, we will securely dispose of your data or anonymize it to prevent identification.

Disclosure of Personal Data

We may share personal data with:

  • Business partners, service providers, and agents involved in delivering our services.
  • Regulatory authorities, law enforcement agencies, and other entities to comply with legal obligations.
  • Affiliates within the CardBiz Group of Companies for operational purposes.

We do not sell or rent personal data to third parties for marketing purposes.

Data Security

While iPOS implements stringent security measures to protect your personal data, we cannot guarantee that data transmission over the internet is completely secure. Any information you provide is at your own risk, but we will make every effort to protect it once received.

Your Rights

Under the Act, you have the right to:

  • Access and correct your personal data.
  • Withdraw consent for certain processing activities.
  • Restrict or limit the use of your personal data.

To exercise these rights or address concerns, contact us using the details provided below.

Cookies

iPOS uses cookies to enhance your browsing experience and improve our services. Cookies help us track website usage, remember user preferences, and personalize your experience. You may choose to disable cookies through your browser settings, but doing so may limit the functionality of our website.

We also collect non-personal data such as IP addresses to manage our systems and ensure security.

Links to Third-Party Websites

Our website may contain links to external sites. iPOS is not responsible for the content, privacy practices, or policies of third-party websites. Please review their terms and policies when visiting those sites.

International Transfers

If necessary, your personal data may be transferred to service providers or affiliates outside Malaysia. Such transfers will comply with applicable laws, and we will ensure that your data is adequately protected.

Policy Updates

This Privacy and Cookie Policy may be updated periodically. Changes will be published on our website, and the updated version will apply to all collected and stored data.

Contact Us

For inquiries, complaints, or requests regarding personal data, please contact:

Office Hours: 9:00 AM to 5:30 PM
Telephone: +603- 7890 3000
Email: sales@cardbiz.com.my
Address: Level 30, MYEG Tower, No. 8 Jalan Damansara, Empire City, PJU 8, 47820 Petaling Jaya, Selangor, Malaysia

We may charge a fee for data access requests or refuse certain requests as permitted by law.