Privacy Policy

PRIVACY NOTICE AND CONSENT This Privacy Notice explains how ES Producation Services Sdn Bhd ("Company", "we", "us", or "our") collects, uses, discloses, stores, and protects your personal data when you download, install, register, access, or use the ESPS mobile application ("App"). By creating an account, accessing, or using the App, you acknowledge that you have read and understood this Privacy Notice and consent to the collection, processing, use, disclosure, and retention of your personal data in accordance with the Personal Data Protection Act 2010 ("PDPA") and applicable laws. 1. TYPES OF PERSONAL DATA COLLECTED We may collect and process the following categories of personal data: (a) Identity Information — full name, National Registration Identity Card (NRIC) number or other identification details, date of birth, gender, and nationality. (b) Contact Information — mobile telephone number, email address, and residential or correspondence address. (c) Account Information — username and password, and security questions and authentication credentials. (d) Financial Information — bank account details, payment card information, tax identification number for e-invoicing purposes, transaction history, e-wallet information, billing and payment records, and CTOS information. (e) Device and Technical Information — device identifier, device model and operating system, IP address, browser information, app usage logs, and mobile network information. (f) Location Information — GPS location data and geographical location information, where permitted and enabled by you. (g) Verification Information — selfie photographs, biometric verification data, identity verification documents, and Know-Your-Customer (KYC) records. 2. PURPOSE OF PROCESSING Your personal data may be processed for the following purposes: (a) Creating and managing your account. (b) Verifying your identity and conducting KYC procedures. (c) Processing payments, transfers, refunds, and transactions. (d) Preventing fraud, money laundering, terrorism financing, and other unlawful activities. (e) Providing customer support and responding to enquiries. (f) Improving, maintaining, and securing the App. (g) Monitoring and detecting unauthorized access or suspicious activities. (h) Sending transaction notifications, alerts, and service-related communications. (i) Complying with legal, regulatory, audit, taxation, and reporting obligations. (j) Conducting internal analytics, business operations, and risk assessments. (k) Enforcing our Terms and Conditions. (l) Any other purpose directly related to the operation of the App and services provided by us. 3. DISCLOSURE OF PERSONAL DATA We may disclose your relevant personal data, according to the purpose of processing, where necessary to: (a) Our employees, authorized personnel, and our affiliate group of companies. (b) Payment gateways and payment processors. (c) Financial institutions and banking partners. (d) Identity verification and KYC service providers. (e) Cloud hosting providers and technology vendors. (f) Professional advisers including lawyers, auditors, consultants, and insurers. (g) Regulatory authorities, law enforcement agencies, courts, tribunals, and government bodies. (h) Third-party service providers engaged by us for operational purposes. (i) Any party where disclosure is required or permitted by law. We shall not sell your personal data to third parties or use it for other purposes not connected to the services provided by us. 4. CROSS-BORDER TRANSFER Where necessary, your personal data may be transferred to, stored, or processed in jurisdictions outside Malaysia, subject to appropriate safeguards and compliance with applicable legal requirements. 5. SECURITY OF PERSONAL DATA We implement strict administrative, technical, and physical security measures to protect your personal data against loss, misuse, unauthorized access, disclosure, alteration, or destruction. These measures may include encryption, secure authentication mechanisms, access controls, activity monitoring, security audits, and data backup and recovery procedures. 6. RETENTION OF PERSONAL DATA We will retain your personal data only for as long as necessary to fulfil the purposes stated in this Notice, comply with legal and regulatory obligations, resolve disputes, and enforce our rights. When personal data is no longer required, it will be securely deleted, anonymized, or destroyed. 7. YOUR RIGHTS Subject to applicable laws, you may: (a) Request access to your personal data. (b) Request correction of inaccurate or incomplete personal data. (c) Withdraw consent to processing of your personal data, subject to legal or contractual restrictions. (d) Request limitation of certain processing activities. (e) Request information regarding the processing of your personal data. Requests may be submitted to our Data Protection Officer using the contact details below. 8. MARKETING COMMUNICATIONS Where permitted by law, and with your consent, we may send you information regarding products, services, promotions, rewards, and updates. You may opt out of receiving marketing communications at any time through the App settings or by contacting us. 9. COOKIES AND SIMILAR TECHNOLOGIES The App may use cookies, software development kits (SDKs), device identifiers, and similar technologies to enhance user experience, security, analytics, and performance. 10. CHANGES TO THIS NOTICE We reserve the right to amend this Privacy Notice from time to time. Any updates will be published within the App and will take effect upon publication. 11. CONTACT DETAILS If you have any questions regarding this Privacy Notice or wish to exercise your rights under the PDPA, please contact: Data Protection Officer (DPO) ES Producation Services Sdn Bhd Email: esp.credit.my@gmail.com Telephone: 012-5652091 Address: 46 C, Jalan Lang Indah A/1, Pusat Perniagaan Lang Indah, 30010 Ipoh, Perak By tapping "I Agree", you confirm that you have read and understood this Privacy Notice and consent to the collection, use, disclosure, storage, transfer, and processing of your personal data as described above, including the Company conducting identity verification, customer due diligence, and fraud prevention checks where required. Last updated: June 3, 2026