Privacy Policy

In this Privacy Policy, “Set Gaji,” “we,” “our,” or “us” refers to Set Gaji Sdn. Bhd. (Registration No.: 202401017533 (1563383-H)) a private company limited by shares incorporated under the laws of Malaysia, with its registered address at A-21-01, Tower A, EkoCheras Office Suite, No.693, Jalan Cheras, 56000 Kuala Lumpur. We are committed to protecting your privacy, and this Privacy Policy details how we handle your Personal Data when you use our services, including our mobile application “Set Gaji” and website at www.setgaji.com (collectively “the Platform”).

  1. Scope of this Privacy Policy

1.1. This Privacy Policy applies to our services and is incorporated into the User Terms and Conditions (“Terms and Conditions”) that you have agreed to in order to use our services. The terms used in this Privacy Policy have the same meaning as those defined in the Terms and Conditions as well as in any agreement that you may enter with us and/or our Affiliates in relation to our Services, unless otherwise specified or required by context. Please note the following:-

    1. This Privacy Policy does not apply to Personal Data collected through third-party services (including third-party websites or mobile apps) that may be accessed through our services;
    2. We may collect, use, disclose, and retain your Personal Data in the course of providing our Services;
    3. We may share your Personal Data with our affiliates, business partners, and third party service providers to provide our services, fulfil our obligations, facilitate our Services, enforce our rights, and to conduct our businesses (as outlined in Item 7 below); and
    4. You have rights regarding your Personal Data, which you can exercise by contacting us as described in Item 11 below.

1.2. Please read this Privacy Policy carefully to understand how we collect, use, and manage your Personal Data. By using our services, you agree to the collection, use, and processing of your Personal Data in accordance with this Privacy Policy, as updated from time to time. If you do not agree with this Privacy Policy, you must refrain from using our Services.

  1. Changes to this Privacy Policy

2.1. We may revise or add specific instructions, policies, and terms to this Privacy Policy at our discretion. Any changes will be communicated to you via our website, mobile application, direct communication, or other appropriate means. By continuing to use our Services after any changes to this Privacy Policy, you agree to the revised Privacy Policy.

  1. The Information We Collect and How We May Collect It

3.1. In providing our services, we collect and process the following types of information:-

    1. Personal Data:Information about an identifiable individual, including Identity Data, Contact Data, Biometric Data, Location Data, Log Data, Payment Data, Payroll Data, and Marketing and Communications Data, as defined under Malaysia’s Personal Data Protection Act 2010 (“PDPA”);
    2. Identity Data:Your name, gender, date of birth, identification/passport number, nationality, and photocopy of identity document or passport;
    3. Contact Data:Your residential address, mailing address, email address, and phone numbers;
    4. Location Data:Information about your location, including GPS, WiFi, compass, accelerometer, or other sensors in your device;
    5. Log Data:Technical information collected automatically when you use our services, including mobile carrier information, device configuration, web browser details, IP address, MAC address, device type, model, version, and identification number, as well as usage information;
    6. Marketing and Communications Data:Your preferences for receiving marketing information and communication preferences;
    7. Payment Data:Your bank account details, payment information, and transactional data; and/or
    8. Payroll Data:Your employment and payroll information, wages, taxes, deductions, social security, and statutory contributions.

3.2. You must ensure that the Personal Data you provide is accurate and not misleading, and keep it updated by notifying us of any changes. We may request documentation to verify your Personal Data. We disclaim liability for service failures due to inaccurate or incomplete Personal Data. You can access and update your Personal Data at any time by contacting us as detailed in the Item 12 below.

3.3. We may also collect and store your data through your relevant employment as you have agreed in the Terms and Condition and any such agreement in relation to the provision of our Services to you.

  1. How We May Use Your Personal Data

4.1. We may use your Personal Data for various purposes, including but not limited to:-

    1. Providing our services to you;
    2. Processing transactions or communications with third parties (e.g., your employer) via our services;
    3. Identification, verification, due diligence, or know-your-customer purposes;
    4. Responding to, processing, or fulfilling your requests for products and services, and notifying you of service issues and unusual account actions;
    5. Enforcing our Terms and Conditions or any other applicable agreements that you may enter into in relation to our provision of the Services;
    6. Customer service, security, fraud-detection, archival, and backup purposes;
    7. Understanding how you access and use our services to improve them and respond to customer preferences, including language and location customization, personalized help, and instructions;
    8. Conducting due diligence or screening activities in compliance with legal or regulatory obligations or our risk management procedures;
    9. Auditing our services and business;
    10. Investigating any actual or suspected violations of our Terms and Conditions, fraud, unlawful activity, omission, or misconduct;
    11. Storing, hosting, and backing up your Personal Data;
    12. Developing new services and improving existing ones;
    13. Software verification or administering software upgrades;
    14. Conducting business and commercial transactions; and/or
    15. Any other purposes notified to you at the time of obtaining your consent.

4.2. If we rely on your consent to use your Personal Data in a specific way and you change your mind, you may withdraw your consent by contacting us as detailed in Item 12 below. Upon receipt of such withdrawal notice, we will stop using your Personal Data. However, withdrawing your consent may impact our ability to provide you with our Services.

  1. Security Practices

5.1. We employ a variety of security technologies and procedures to prevent the loss, misuse, unauthorized access, or disclosure of your Personal Data. We implement stringent security measures, although we cannot guarantee absolute security unless required by applicable laws or regulations.

  1. Advertising

6.1. We may use your Personal Data for advertising purposes in accordance with this section. This includes offering advertising that is more relevant to you or sending you direct marketing information or materials promoting our products and services or those of our affiliates, business partners, and service providers.

6.2. We will honour your request not to use your Personal Data for marketing purposes. You can make such a request by contacting us as detailed in Item 12 below, following relevant instructions on our marketing communications, or adhering to service-specific guidance. We do not share your Personal Data with advertisers but may share anonymized or pseudonymized data with them to offer more relevant advertising.

  1. Sharing of Your Personal Data

7.1. We will not transfer your Personal Data to third parties except as permitted under this Privacy Policy and/or the Terms and Conditions as you have agreed in utilizing out Services or with your consent. We may share your Personal Data with our Affiliates, business partners, and service providers to provide our services, fulfil our obligations, enforce our rights and conduct our business.

7.2. Any third-party collection and use of your Personal Data will be in compliance with this Privacy Policy and subject to appropriate confidentiality and security measures. You consent to such third-party use and sharing of your Personal Data as described herein.

7.3. Under certain circumstances, we may be required to retain, preserve, or disclose your Personal Data to comply with legal requirements, including:-

    1. Complying with applicable laws or regulations;
    2. Responding to a court order or other legal process; and/or
    3. Responding to requests by government authorities, law enforcement agencies, or similar bodies.
  1. Communications from Us

8.1. We may send you notifications via email, SMS and/or our Platform. You can opt out of these notifications at the website user account level or device level. However, you cannot opt out of service-related announcements necessary for service maintenance.

  1. Third-Party Services on Our Services

9.1. Our services may include or link to third-party services or websites. Your use of such services, including any Personal Data provided to third parties, is governed by their respective terms and privacy policies. This Privacy Policy does not apply to any third-party services, and we bear no liability for their use of your Personal Data.

  1. Retention of Your Personal Data

10.1. We retain your Personal Data as long as necessary for business requirements or legal obligations. We will take reasonable steps to delete or anonymize your Personal Data once it is no longer needed for these purposes.

  1. Your Rights

11.1. You have the right to request access to Personal Data we hold about you, subject to certain conditions and exceptions under applicable laws. If you wish to do so, please email your request to us using the details set out in Item 12 below.

11.2. We strive to be as transparent as possible but may withhold information if legally permitted. You also have the right to:-

    1. Request updates or corrections to your Personal Data;
    2. Request erasure or cessation of processing of your data, subject to exceptions;
    3. Receive your Personal Data in a structured, machine-readable format and transmit it to another data controller; and/or
    4. Lodge a complaint with the appropriate data protection authority or seek a legal remedy if you believe your rights have been breached.

11.3. To exercise any of these rights, please contact us using the details set out in Item 12 below

  1. Contact

12.1. If you wish to contact us regarding this Privacy Policy or to exercise your rights under the PDPA, please contact our team via email at [email protected].