Privacy Policy
Last Updated: June 15, 2023
1. Overview
Theta Nexaflow Malaysia respects your privacy and complies with the Personal Data Protection Act 2010 (PDPA). This Privacy Policy explains how we collect, use, and safeguard your personal data when you use our investment services in Malaysia.
2. What We Collect
We may collect the following categories of personal data:
- Identity & Contact: Full name, email address, phone number, and residential address
- Financial Data: Information required to process investments and perform due diligence (KYC/AML)
- Technical Data: IP address, device type, browser details, and platform usage behavior
- Tracking Technologies: Cookies and similar tools for performance, personalization, and analytics
3. Why We Use It
Your personal data is used to:
- Provide secure access to your account
- Execute financial transactions and investment instructions
- Comply with legal requirements under Malaysian law
- Send service-related updates and alerts
- Offer tailored financial advice and investment opportunities
- Enhance platform usability and technical performance
- Prevent fraud, detect threats, and maintain cybersecurity
- Deliver marketing content (only with your explicit consent)
4. Data Retention
Your data will be retained only as long as necessary for business and regulatory purposes. Once no longer required, it will be securely deleted or anonymized.
5. Data Security
We implement comprehensive security practices to protect your personal data, including:
- End-to-end encryption
- Access control based on roles and responsibilities
- Routine vulnerability assessments and third-party audits
- Secure data storage and infrastructure hosted in reputable environments
6. Your Rights Under PDPA
You have the right to:
- Request access to your personal data
- Request correction or updates to your data
- Withdraw consent at any time
- Object to processing or restrict certain uses
- Request erasure where applicable
- Receive a copy of your data (data portability)
7. Disclosure to Third Parties
We may share your data with trusted partners who assist with infrastructure, analytics, customer service, or compliance. All third parties must adhere to strict confidentiality and data protection standards.
8. Analytics & Cookies
We use tools like Google Analytics to understand visitor behavior, troubleshoot technical issues, and improve our services. Data collected through cookies is anonymized wherever possible and used in compliance with Malaysian regulations.
9. Children’s Data
Our platform is intended only for users aged 18 and above. If we learn that data has been collected from a minor, it will be removed promptly upon request.
10. Updates to This Policy
We may revise this policy to reflect changes in legal requirements or operational practices. Major updates will be communicated through email or within the platform.
11. Contact Us
If you have questions regarding your privacy or personal data protection in Malaysia, please contact our Data Protection Officer at: [email protected]