Imaju Privacy Policy – Your Personal Data Protection

Imaju ("we", "our platform") is fully committed to protecting the privacy and personal data of every member who uses our platform. This Privacy Policy explains in detail how we collect, process, store, and protect your personal information when you use the imaju website, mobile app, and all related services.

This document is prepared in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection standards. We take a transparent and responsible approach to every aspect of managing your personal data.

By registering or using the imaju platform, you agree to the data processing practices described in this Privacy Policy. Please read this document carefully and contact our support team if you have any questions.

Imaju collects various categories of personal data depending on how you interact with our platform. The following are the types of data we collect:

In addition to data you provide directly during registration or platform use, we also collect data automatically through cookies and web tracking technologies as described in section 6 of this document.

Every piece of personal data we collect is used only for legitimate and transparent purposes. imaju uses your data for the following:

• Account management – registering, verifying, and maintaining your account on the imaju platform.
• Transaction processing – processing deposits, withdrawals, and all financial activities securely and accurately.
• Identity verification (KYC) – ensuring all users meet the required age and identity eligibility criteria.
• Fraud prevention – identifying and preventing fraud, money laundering, and account misuse.
• Customer support – providing assistance and resolving any issues reported by you.
• Service communications – sending important notifications related to your account, transactions, and policy changes.
• Platform improvements – analysing usage patterns to improve quality and the overall user experience.
• Legal compliance – meeting reporting requirements to regulatory authorities when necessary.

Imaju understands how important your trust is. We do not sell, rent, or disclose your personal data to third parties for their own commercial purposes. However, there are limited situations where we may need to share your data with the following parties:

• Payment service providers – licensed and authorised payment processors that assist in processing your transactions. They are bound by strict confidentiality agreements.
• KYC service providers – recognised identity verification platforms that help verify your documents securely.
• Regulatory authorities – government agencies or regulatory bodies with valid legal authority to request specific information.
• Professional advisors – lawyers, accountants, or consultants bound by strict professional confidentiality obligations.
• Business successors – in the event of a merger, acquisition, or asset sale, where the buyer will be bound by this Privacy Policy.

All third parties with whom we share data are required to comply with data protection standards equal to or stricter than those of imaju itself.

Protecting your personal data from unauthorized access, loss, or misuse is imaju's highest priority. We implement a comprehensive range of technical and organizational security measures:

• 256-bit SSL encryption for all communications between your device and imaju servers.
• Hashed passwords using modern cryptographic algorithms — even we cannot view your password in its original form.
• Two-factor authentication (2FA) available for all accounts as an additional security layer.
• 24/7 activity monitoring by automated security systems that detect suspicious login attempts.
• Strict access controls ensuring only authorised staff can access sensitive data according to their role requirements.
• Regular security audits by independent third parties to identify and address any system vulnerabilities.
• Incident response plan tested to ensure a rapid response in the event of any data breach.

While we take all reasonable steps to protect your data, no system can guarantee absolute security. We encourage you to take personal protective measures as well, such as using a strong, unique password and never sharing your login credentials.

Imaju uses cookies and similar tracking technologies to enhance the user experience and ensure the platform operates at its best. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential cookies – required for core platform functions such as session authentication and security. These cookies cannot be disabled.
• Performance cookies – collecting information on how you use the platform to help us improve the user experience.
• Functional cookies – remembering your preferences and settings such as language and display options for your convenience.
• Analytics cookies – helping us understand platform usage patterns in aggregate and anonymous form.

You can manage your cookie settings through your web browser preferences. Please note that disabling essential cookies may affect the functionality of the imaju platform.

Your personal data is stored on secure, protected servers. imaju retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or for the duration required by applicable laws and regulatory requirements.

• Active account data – retained for as long as your account remains active on the imaju platform.
• Transaction records – retained for a minimum of seven years in line with financial compliance requirements.
• KYC Documents – retained for the period required by data protection and anti-money laundering legislation.
• Communication logs – retained for a reasonable period for customer support and dispute resolution purposes.

Once the retention period expires or you request data deletion, we will securely delete or destroy your data using industry-recognised methods, ensuring it cannot be recovered.

As an imaju platform user, you have the following rights regarding your personal data, which we fully protect and respect:

To exercise any of the above rights, please contact the imaju data protection team. We will process your request within 14 working days from the date of receipt. We may require identity verification before processing any request to ensure the security of your data.

The imaju platform is exclusively for individuals aged 18 years and above. We do not knowingly collect personal data from children or minors under the age of 18.

If we discover that we have collected data from someone under the age of 18, we will take immediate action to delete that data and close the relevant account. Parents or guardians who become aware that their child has registered on the imaju platform are urged to contact us immediately.

Imaju reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or improvements in security technology. Any material amendments will be communicated to you via:

• Prominent notices on the imaju homepage or your account dashboard.
• A notification email will be sent to the address registered to your account.
• In-app notifications on the imaju mobile app.

Amendments take effect seven days after notice is given, except where immediate changes are required for security or legal reasons. Continued use of the imaju platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by imaju, please contact our Data Protection Officer team:

We value every piece of feedback and every enquiry. Our team is ready to help you understand your privacy rights and ensure your experience on the imaju platform is safe, comfortable, and trustworthy.