1. Introduction and Scope
This Privacy Policy explains how CREDIBLY FINTECH SDN. BHD. (the Company, we, us, or our) collects, uses, stores, shares, protects, and deletes personal information when you access or use Credibly, including the Credibly mobile application, website, loan application services, customer support channels, repayment services, notifications, and related financial technology services.
Credibly is intended to provide personal loan, credit assessment, account management, disbursement, repayment, customer support, risk control, and related financial services in Malaysia. By creating an account, submitting a loan application, using the app, or giving permission through your device, you acknowledge that you have read this Privacy Policy and agree that your personal information may be processed as described here.
Company legal name: CREDIBLY FINTECH SDN. BHD. Registered address: 68-16-7 Persiaran Gurney Georgetown - 10250 Malaysia (MY) Website: https://credibly.my/ Data storage server: https://www.crediblymy.com/ Customer service email: crediblyfintech@gmail.com
2. Personal Information We Collect
We collect only the information that is reasonably required to provide, secure, assess, manage, and improve the Credibly loan service. The categories of information may include account registration data, identity and KYC information, contact details, employment or income information, bank or repayment information, loan application details, credit assessment information, transaction and repayment records, customer support records, device and security information, and permission-based information that you separately authorize.
Where information is uploaded or stored for the service, it is transmitted through encrypted channels and stored on our designated service server at https://www.crediblymy.com/, unless a separate processor is used for a specific regulated or technical function.
3. Account, Identity, and Loan Application Data
When you register, verify your identity, apply for a loan, sign an agreement, receive disbursement, make repayment, or contact support, we may collect your name, mobile number, email address, date of birth, identification document information, selfie or facial image where required for verification, residential address, employment information, income information, bank account or e-wallet information, loan amount, loan tenure, repayment schedule, repayment status, overdue status, and customer support communications.
This information is used to create and protect your account, verify your identity, evaluate eligibility and repayment ability, prevent fraud, prepare and perform the loan agreement, process disbursement and repayment, manage overdue accounts, respond to service requests, keep legally required records, and comply with applicable laws, regulators, courts, or law enforcement authorities.
4. Financial SMS Permission
With your explicit permission, Credibly may read and analyze financial SMS messages from the last 12 months on your device. We limit this processing to messages that appear to relate to financial activity, such as bank alerts, e-wallet activity, salary or income notifications, card transactions, repayment confirmations, loan notices, bill payments, and similar financial transaction records.
The information processed may include SMS sender, receiving time, transaction amount, transaction status, account or merchant reference where visible, and financial transaction content needed for credit assessment and fraud prevention. Credibly does not collect unrelated private messages for marketing purposes.
Financial SMS information is collected only after you grant the SMS permission in the app or device system. The information is used to verify income patterns, assess repayment ability, detect false applications, identify unusual financial risk, and support responsible lending decisions. SMS data may be encrypted during transmission and stored on our service server at https://www.crediblymy.com/ for the period needed for credit assessment, fraud prevention, dispute handling, and legal recordkeeping.
5. Contacts Permission
With your permission, Credibly may access contact information from your device for identity verification, emergency contact selection, reference contact confirmation, fraud prevention, account recovery, and lawful loan servicing. Contact information may include names, phone numbers, relationship labels selected by you, and contact frequency indicators if technically required for fraud control.
We use contact information to help confirm the authenticity of your application, support communication if you become unreachable, prevent duplicate or fraudulent applications, and manage account recovery or lawful repayment reminders. We do not sell your contacts, use them for unrelated advertising, or send marketing messages to your contacts without a lawful basis and required consent.
Contacts information is collected only after you authorize the permission or submit selected contacts manually. If stored, the data is encrypted during transmission and stored on our service server at https://www.crediblymy.com/.
6. Installed Applications Permission
With your permission, Credibly may collect limited installed application information from your device, such as app name, package name, version, installation time, update time, and whether certain application categories are present. We do not collect the content inside those applications.
Installed application information is used for device risk assessment, fraud prevention, malware or emulator detection, duplicate account control, credit risk modelling, and protection against abusive or automated activity. This information is processed only for loan service security and risk-control purposes.
If installed application information is uploaded or stored, it is encrypted during transmission and stored on our service server at https://www.crediblymy.com/.
7. Calendar Permission
With your permission, Credibly may access or create limited calendar information related to loan service reminders, such as repayment dates, billing dates, loan due dates, salary-date reminders that you provide, customer-service appointments, and other financial schedule items connected with your use of Credibly.
Calendar information is used to help you remember repayment obligations, reduce missed payments, support account management, and provide service reminders. We do not use calendar access to inspect unrelated personal events for marketing purposes.
If calendar information is uploaded or stored for reminder or risk-control purposes, it is encrypted during transmission and stored on our service server at https://www.crediblymy.com/.
8. Location Permission
With your permission, Credibly may collect approximate or precise location information when you use the app or when a loan-service action requires risk verification. Location information may include GPS location, network-based location, IP-derived location, Wi-Fi or cell tower signals where permitted, and location timestamp.
Location information is used to confirm service-region eligibility, protect account security, detect suspicious login or application activity, reduce fraud, verify that a request is made from a supported location, and support legally required risk controls. Credibly does not use location information for unrelated continuous tracking.
Location information is collected only after you grant permission. If uploaded or stored, it is encrypted during transmission and stored on our service server at https://www.crediblymy.com/.
9. Photos, Gallery, Storage, and Files Permission
With your permission, Credibly may access photos, gallery items, storage, or files that you choose or upload for the loan service. This may include identity documents, selfies, income proof, employment documents, bank card images, repayment proof, signed agreements, screenshots related to repayment or account support, and other documents that you voluntarily submit.
This permission is used to allow document upload, identity verification, application review, repayment confirmation, customer support, dispute handling, and legal recordkeeping. Credibly does not scan or upload your entire gallery or all files for unrelated purposes.
Files and images submitted through Credibly are encrypted during transmission and stored on our service server at https://www.crediblymy.com/.
10. Camera Permission
With your permission, Credibly may access your device camera when you choose to capture an identity document, selfie, liveness check image, bank card image, proof document, or other evidence required for loan application, verification, support, or repayment confirmation.
Camera access is activated only when you use a camera-related function in Credibly. We use captured images to verify identity, prevent impersonation, review documents, process your application, investigate disputes, and comply with applicable legal obligations.
Images captured through the camera function are encrypted during transmission and stored on our service server at https://www.crediblymy.com/.
11. Microphone and Audio Permission
With your permission, Credibly may access the microphone for limited loan-service purposes, such as voice verification, customer-service verification, confirming an instruction, recording consent where legally permitted, detecting suspicious activity during verification, or handling disputes related to your account or loan service.
Microphone access is used only when a specific voice-related feature is started or when you participate in an authorized service interaction that requires audio. Credibly does not conduct unrelated background audio monitoring.
Audio information, where collected, is encrypted during transmission and stored on our service server at https://www.crediblymy.com/ for verification, dispute resolution, fraud prevention, compliance, and customer-service recordkeeping.
12. Device Information and Security Data
Credibly may collect device and technical information such as device model, brand, operating system, Android ID or other permitted device identifiers, advertising ID where available, IP address, network type, SIM or carrier information where permitted, language, time zone, app version, login records, crash logs, diagnostic logs, device integrity signals, emulator or rooting indicators, and security event records.
This information is used to secure the app, prevent fraud, detect account abuse, identify duplicate registrations, maintain service stability, troubleshoot errors, improve product performance, protect loan transactions, and comply with legal and regulatory obligations.
Device and security information may be encrypted during transmission and stored on our service server at https://www.crediblymy.com/.
13. Main Account Permission
Where supported by your device operating system and with your permission, Credibly may access limited account information associated with the device, such as account identifier, account status, or account type. Credibly does not collect account passwords, private emails, cloud files, or private messages through this permission.
Main account information is used for account uniqueness checks, fraud prevention, login security, duplicate application detection, device risk assessment, and account recovery support.
If main account information is uploaded or stored, it is encrypted during transmission and stored on our service server at https://www.crediblymy.com/.
14. Call Log Permission Disclosure
With your explicit consent, Credibly may collect, upload, and store call log or call-related information from your device for identity verification, fraud prevention, credit risk assessment, account security, loan review, repayment support, and customer service purposes. The information will be securely transmitted and stored on our data storage server: https://www.crediblymy.com/.
We do not sell, rent, or share your call log information with unrelated third parties, and we do not use it for advertising or marketing purposes. Access to this information is restricted to authorized personnel only and is used solely for the loan services described in this Privacy Policy. If you refuse or withdraw this permission, some automated verification, risk assessment, or loan review functions may be limited or unavailable.
15. How We Use Personal Information
We may use your personal information to register and maintain your account, verify your identity, assess credit eligibility and repayment ability, make loan decisions, prepare and perform loan agreements, process disbursement and repayment, send service notices, provide customer support, manage overdue accounts, prevent fraud, protect our systems, improve app stability, maintain records, comply with applicable laws, and respond to regulators, courts, law enforcement authorities, or lawful requests.
We do not use permission-based sensitive information for unrelated advertising, sale of personal information, or purposes that are inconsistent with this Privacy Policy and the consent you provide.
16. Consent and Legal Basis
We process your personal information based on your consent, your request to receive the Credibly loan service, the need to perform a loan agreement or pre-contractual request, our legitimate interest in fraud prevention and service security, legal and regulatory obligations, and other lawful grounds available under applicable Malaysian personal data protection requirements.
For device permissions such as SMS, contacts, installed applications, calendar, location, photos, files, camera, microphone, device information, and main account information, Credibly will request permission before collection where device rules require it. You may refuse or withdraw permission through your device settings, but some features may become unavailable if the permission is necessary for identity verification, credit assessment, account security, document upload, or loan servicing.
17. Sharing of Personal Information
We may share personal information only where necessary and lawful with payment providers, banks, e-wallet providers, credit assessment partners, credit bureaus where applicable, identity verification providers, anti-fraud and risk-control service providers, cloud hosting and technical service providers, customer support vendors, notification providers, debt collection or recovery service providers where lawful, legal advisers, auditors, regulators, courts, law enforcement authorities, and government agencies.
Service providers are required to process personal information only for the authorized service purpose and to apply appropriate confidentiality and security measures. We do not sell your personal information.
18. Cross-Border Transfer and Storage
Your personal information may be stored or processed in Malaysia or in other locations where our service providers operate, subject to applicable legal requirements and safeguards. Where information is transferred across borders, we use contractual, technical, and organizational measures designed to protect the information.
Our official website is https://credibly.my/. Our designated data storage server address is https://www.crediblymy.com/. Where a specific permission-based category is uploaded or stored, the relevant section above also identifies https://www.crediblymy.com/ as the service server address.
19. Retention and Deletion
We retain personal information only for as long as necessary for the purposes described in this Privacy Policy, including loan application review, loan agreement performance, repayment management, dispute handling, fraud prevention, accounting, audit, legal compliance, and regulatory recordkeeping.
Financial SMS information, where collected, is limited to financial SMS from the last 12 months and is retained only for the period needed for credit assessment, risk control, dispute handling, and legal recordkeeping. Identity, loan, repayment, and agreement records may be retained for the period required by applicable law, regulation, audit, tax, accounting, or dispute-resolution requirements.
When information is no longer required, we will delete, anonymize, or securely isolate it according to our retention procedures, unless continued retention is required or permitted by law.
20. Your Rights and Choices
Subject to applicable law, you may request access to your personal information, correction of inaccurate information, deletion of information where legally available, withdrawal of consent, restriction or objection to certain processing, and information about how your personal information is used or shared.
You may manage device permissions through your device settings. You may also contact us at crediblyfintech@gmail.com to request access, correction, deletion, consent withdrawal, or account-related privacy assistance. We may need to verify your identity before responding to a request.
21. Security Measures
We use reasonable administrative, technical, and organizational safeguards to protect personal information, including encrypted transmission, access controls, authentication controls, confidentiality obligations, logging, monitoring, risk review, and controls designed to prevent unauthorized access, loss, misuse, alteration, or disclosure.
No method of transmission or storage is completely secure. You should protect your login credentials, device, and verification codes, and you should contact us promptly if you believe your account or personal information has been compromised.
22. Children and Minors
Credibly is not intended for children or minors. We do not knowingly provide loan services to persons who are not legally eligible to enter into a loan agreement. If we discover that personal information has been collected from a person who is not legally eligible to use the service, we will take appropriate steps to delete or restrict the information, unless retention is required by law.
23. Service Communications and Marketing
We may contact you through phone, SMS, email, in-app message, push notification, WhatsApp, or other lawful communication channels for account verification, loan application updates, repayment reminders, security alerts, customer support, service notices, overdue management, and legal or regulatory notifications.
Marketing communications, where used, will be handled according to applicable consent and opt-out requirements. We do not use your contacts, financial SMS, microphone data, or unrelated permission-based information for unsolicited marketing.
24. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, technology, security practices, or business operations. The updated version will be made available in Credibly or through our official service channel. The effective date will indicate when the latest version applies.
25. Contact Us
If you have questions, requests, complaints, or concerns about this Privacy Policy or the handling of your personal information, please contact us through the following details:
Company: CREDIBLY FINTECH SDN. BHD. Address: 68-16-7 Persiaran Gurney Georgetown - 10250 Malaysia (MY) Website: https://credibly.my/ Data storage server: https://www.crediblymy.com/ Email: crediblyfintech@gmail.com