This Privacy Policy sets out the following:

• The type of personal data being processed;

• The purposes for collecting and further processing the personal data;

• The source or origin of the personal data;

• The persons and/or authorities to whom we disclose or may disclose your personal data;

• Where it is obligatory for you to supply the personal data, the consequences to you if you fail to supply the personal data;

• The choices and means that you may limit the processing of your personal data, including personal data relating to other persons who may be identified from that personal data; and

• Your right to request access to and to request correction of your personal data and how to contact us for inquiries or complaints in respect of the personal data.
  

  TYPE OF PERSONAL DATA
  Personal data refers to all information that relates directly or indirectly to you, including both sensitive personal data and expression of opinion about you. Sensitive personal data refers to any personal data regarding your physical or mental health or condition, your political opinions, your religious beliefs or other beliefs of a similar nature, the commission or alleged commission by you of any offence or any other personal data as may be determined by law from time to time.
  The personal data collected by us may include (but are not limited to) the following:

  • Contact information: for example, your name, date of birth, identification number (such as NRIC or passport number), gender, nationality, race, address, contact number, fax number, email address.

  • Billing information: this includes your credit card details and bank account information.

  • Service status: details regarding services you have obtained from us or subscribed to, such as account number, account balance, account activities, and payment history.

  • Transaction information: information requested by you from our services.

  • Personal interests and preferences: these are utilised to customise offerings of our services and products that align with your preferences.

  Third parties or publicly available sources.
  We may receive personal data about you from various third parties and publicly available sources, as set out below:

  Technical Data:

  • Analytics providers such as Google within Malaysia or the Regional Comprehensive Economic Partnership (“RCEP”);

  • Advertising networks within or outside Malaysia or RCEP; and

  • Search and profile information providers within or outside Malaysia RCEP.

  Contact, Financial, and Transaction Data:

  • Providers of technical, payment and delivery services within or outside Malaysia or RCEP.

  Identity and Contact Data:

  • Data brokers or aggregators based within Malaysia or RCEP.

  • Publicly available sources within Malaysia or RCEP.

  If necessary, we will seek your explicit consent before processing sensitive personal data. However, it is important to note that we may process personal data without your consent in specific situations as permitted by law.

  PURPOSE OF PROCESSING PERSONAL DATA
  We may collect and process personal data from you or from the third parties, for one or more of the following purposes:

  • To verify your identity
  • To assess and process your application(s)/request(s) for our services
  • To provide the information and/or services you have requested from Zetrix and/or its designated representatives and/or business partners and ancillary matters thereto
  • To administer and manage our services
  • To investigate, process, and resolve any service issues, complaints, communications, or other enquiries regarding our services
  • To assess and/or verify credit worthiness
  • To keep in contact with you and provide requested information, services and/or products offered by us and/or changes thereto, or by our service providers and/or business partners
  • To maintain and develop our services, products, business systems and infrastructure
  • To manage staff training and quality assurance
  • To produce data, reports and statistics which shall be anonymised or aggregated in a manner that does not identify individuals
  • To investigate, respond to, or manage claims involving Zetrix
  • To conduct marketing activities
  • To maintain records required for security, claims or legal purposes
  • To detect and prevent fraudulent activity
  • To comply with legal and regulatory requirements
  • For any other purposes that is required or permitted by laws, regulations, guidelines and/or relevant regulatory authorities
  • To facilitate the uploading of certificates of origin by exporters/importers to our blockchain platform and linking with the Chinese customs (GACC) systems to streamline and ease the import/export process.

  SOURCE OF PERSONAL DATA
  We may collect personal data through various sources, including customer application forms, registration on or visit to websites owned and/or operated by Zetrix, registration for specific service provided by us, utilisation of our services, documents submitted to us by you, participation in our surveys, participation in competitions, contests, promotions, programmes organised by us, request for product-related information, commencement of any business or commercial relationship with us, and/or any communication made with us.

  We may also obtain your personal data from:

  • Third parties we have dealings with or who are associated with you (e.g. Credit reference agencies or financial institutions)
  • Government or regulatory authorities who have the power and/or authority to disclose such information
  • Public domain and such other sources where you have given your consent for the disclosure of your information
  • Where otherwise lawfully permitted.

  TRANSFER OF YOUR PERSONAL DATA OUTSIDE MALAYSIA
  It may be necessary for us to transfer your personal data outside Malaysia, always subject to adhering to the Act, if any of our service providers or strategic partners (“overseas entities”) involved in providing part of our services are located in countries outside Malaysia, or if you utilise our services from a country other than Malaysia. Under these circumstances, you provide your consent to us for transferring your personal data outside Malaysia. We shall take reasonable measures to ensure that any such overseas entities are contractually bound not to use your personal data for any purpose other than to provide the services they are contracted by us to deliver, and to adequately safeguard your personal data.

  We possess the right to transfer your personal data to third parties abroad for the purposes of the data processing described in this Privacy Policy. This concerns especially to the following receiver(s):

  • Our websites service providers; and/or
  • E-commerce providers such as payment solution providers who assist us in processing your online payments.

  DISCLOSURE OF PERSONAL DATA
  We will process personal data for the following purposes and may disclose to the following third parties:

  • To provide, maintain, protect, and enhance our services as well as to develop new ones
  • For internal and marketing purposes of Zetrix
  • Companies and/or organisations that assist us in processing and/or otherwise fulfilling transactions and providing you with services that you have requested or subscribed for
  • Companies, corporations and/or entities that act as Zetrix service providers, gateway providers, agents, contractors and/or professional advisers
  • Law enforcement agencies, government agencies and/or to detect, prevent, or otherwise address fraud, security, or technical issues.
  • Our business partners and other involved parties may utilize your personal data for purposes closely aligned with the intent of collecting and utilizing such information, as outlined in this privacy policy.
  • Zetrix will share personal data with other parties, companies, organizations, or individuals outside of Zetrix when you have given your consent to do so subject at all times to any laws (including regulations, guidelines and/or obligations) applicable to Zetrix.

  Zetrix shall be entitled to retain all data and information provided by you for the use of Zetrix, notwithstanding the termination or suspension of our services to you.

  WE ARE DEDICATED TO SAFEGUARDING YOUR PRIVACY
  While we are committed to safeguarding your privacy, it is important to acknowledge that no data transmission over the internet can be guaranteed 100% secure. Despite Zetrix’s efforts to protect your personal data, Zetrix cannot ensure or warrant the security of any information you transmit to us, or to or from our online products or services. All such transmission of information is carried out at your own risk. However, upon receiving your transmission, we will take reasonable measures to ensure its security in our systems.

  WHETHER OBLIGATORY TO PROVIDE PERSONAL DATA AND CONSEQUENCES OF NOT PROVIDING
  In instances where it is indicated (e.g. on our website, registration/application forms), it is obligatory to provide your personal data for us to process your service application. Should you decline to provide or limit processing such obligatory personal data, we may be unable to process your application or offer you our services.