Notis Perlindungan Data Peribadi (PDPA)

This Privacy Policy is drafted in compliance with the Personal Data Protection Act 2010 (PDPA) and statutory obligations under the Pawnbrokers Act 1972 of Malaysia.

Last Updated / Tarikh Kemaskini: 2026

This Privacy Policy explains how Whale Emerald Sdn. Bhd. (Registration No: 201601000973), operating as Pajak Gadai Whale Emerald (Ipoh) (KPKT License No: GL2191/08/01 – 4/311226) (“We”, “Us”, “Our”, or “WePawn”), collects, uses, processes, and protects your personal data in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA) and the Pawnbrokers Act 1972.

By visiting https://wepawn.com.my, engaging our pawn services, or communicating with us via WhatsApp, phone, or in person at our physical branch, you consent to the collection and processing of your personal data as outlined in this policy.

1. Types of Personal Data We Collect

To provide licensed pawnbroking services and meet legal obligations, we may collect the following personal information:

Identity Data: Full name, MyKad / NRIC number, Passport number (for non-Malaysian citizens), nationality, date of birth, gender, and photograph/copy of identity documents.
Contact Information: Residential address, registered postal address, mobile phone number, WhatsApp contact details, and email address.
Pawn Transaction Data: Details of pawned collateral (gold purity, weight, serial numbers of luxury watches, jewelry specifications, electronics details), loan values, interest payment history, pawn ticket numbers, and redemption/renewal records.
Security & Surveillance Data: Closed-Circuit Television (CCTV) footage recorded when visiting our premises at No. 206, Jalan Bercham, Taman Ria, Bercham, 31400 Ipoh, Perak.
Digital & Communication Data: Inquiries sent via our website forms, WhatsApp chat records, and website usage statistics.

2. Purpose of Collecting Personal Data

Your personal data is collected and processed for the following statutory and operational purposes:

Statutory Pawnbroking Compliance: To fulfill mandatory licensing and identity verification obligations under the Pawnbrokers Act 1972 and related KPKT regulations.
Anti-Money Laundering & Crime Prevention: To comply with statutory requirements under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA) and prevent the pledging of stolen property.
Pawn Administration: To issue, renew, redeem, or manage Surat Pajak (pawn tickets), calculate statutory monthly interest (capped at 2.0%), and send reminders regarding the statutory 9-month holding period.
Customer Support & Valuations: To respond to loan valuation requests, confirm branch appointments, and address inquiries via WhatsApp or phone calls.
Premises Security: To maintain safety, physical security, and asset protection within our pawnshop premises.

3. Source of Personal Data

We obtain your personal data directly from:

Physical submission of your MyKad / Passport and pledge items during walk-in transactions.
Direct messages and valuation requests sent via WhatsApp, website forms, or phone calls.
CCTV recording systems active within our outlet.

4. Disclosure of Personal Data to Third Parties

We do not sell, rent, or trade your personal data. We disclose your data strictly to the following parties when required:

Law Enforcement & Government Authorities: The Ministry of Housing and Local Government (KPKT), Royal Malaysia Police (PDRM), and other regulatory bodies as mandated under Malaysian law.
Licensed Auctioneers: In the statutory event of unredeemed pledges reaching auction under the Pawnbrokers Act 1972.
Authorized IT & Management Software Providers: Secured pawnbroking management systems (e.g., Bright-Win Technology) and hosting providers that maintain our operational data infrastructure under strict confidentiality.
Professional Advisors: Our appointed auditors, legal advisers, and financial institutions for compliance and record verification.

5. Security & Retention of Data

Security Measures: We implement reasonable physical, technical, and administrative security measures to protect your physical pawn records and digital information from unauthorized access, loss, alteration, or disclosure.
Retention Period: We retain your transaction records for the minimum period required by the Pawnbrokers Act 1972 and Malaysian taxation laws, after which data is securely archived or disposed of.

6. Your Rights Under the PDPA

Under the Personal Data Protection Act 2010, you have the right to:

Request access to your personal data held in our records.
Request the correction or updating of inaccurate, incomplete, or outdated information.
Inquire about our policies and practices regarding personal data processing.

(Note: Certain statutory record-keeping obligations under the Pawnbrokers Act 1972 and AMLA cannot be erased or modified prior to mandatory statutory retention periods).

7. Contact Details & Inquiries

For any inquiries, data access requests, or questions regarding this Privacy Policy, contact our Data Officer:

Company: Whale Emerald Sdn. Bhd. / Pajak Gadai Whale Emerald (Ipoh)
SSM Registration: 201601000973
KPKT License: GL2191/08/01 – 4/311226
Premise Address: 206, Jalan Bercham, Taman Ria, Bercham, 31400 Ipoh, Perak
WhatsApp / Mobile: +60 10-389 2927
Telephone (Office): +60 5-548 2929
Website: https://wepawn.com.my