Privacy Policy

Your personal data and assets are our highest priority. We are fully committed to safeguarding them.

Makmur Paycore collects and retains data essential to your trading practice. Our methods for collecting and storing this data are detailed in the Privacy Policy below.

Our policy is underpinned by the following principles:

• In the interest of full transparency about our processes for collecting and storing your personal data:

Our goal is to ensure you clearly understand how we collect and process all data, so you can make well-informed decisions. We maintain clear, documented guidelines and processes for managing data on this website, at all times. Our policy outlines the specific methods we use, providing you with clear, concrete information about how it is used. You're in control.

We will always share information promptly when we determine you should be informed. Transparency is central to how we operate.

Our trained team is always ready to answer any questions you may have about any aspect of our processes, including our obligations under the laws of Malaysia. You can contact us at: info@makmur-paycore.com

• We do not permit any other use of personal data beyond what is set out in our Privacy Policy.

We may process personal data for the following purposes, including the essential operation of Makmur Paycore services and connecting trader-members with third-party trading platforms. It may also be required for maintaining and improving website features and services; safeguarding our rights, and complying with regulatory or other legal obligations. Finally, insofar as this data is necessary for the provision of administrative and other business functions related to the Services provided to you, the client.

To deliver services tailored to your preferences and needs, Makmur Paycore processes personal data.

• To access and use essential tools that help protect your personal data and safeguard your rights:

At any time, you may contact us to access all of your personal data. We can also update or delete it as needed. In addition, we can support requests to transfer that data to you or to a designated third party. We offer these services and support to help you better exercise your rights to privacy and control.

• Secure your personal data:

Our security systems meet the highest standards, with banking-level protections. While a 100% guarantee is not possible, we remain committed to continuously enhancing our systems to the highest achievable level and strengthening the safeguards we have in place.

We maintain a detailed, comprehensive privacy policy and the highest-level security systems.

1. The Scope?

This policy outlines our procedures for collecting, processing, and sharing personal data relating to natural persons.

The terms of this policy apply to all natural persons who are identifiable or have been identified. This expressly covers any natural person who can be, or has already been, identified in relation to data entrusted to us, or data we can access and/or combine.

As defined in the Privacy Policy, data processing specifically refers to the storage, management, and organisation of that personal data.

We do not collect, or seek to collect, any information about individuals under 18. We also do not permit individuals under 18 to use our platform for any purpose. If we discover a user or any data relating to a person under 18, that information will be deleted immediately.

2. What personal data do we retain?

When you register with us, we collect the personal data necessary to enable your use of our services. Where required, we may also request additional personal data to verify account ownership, for example. To maintain and improve service quality, we collect and analyse data about your use of our platform and the services of our third-party partners.

3. You are under no obligation to provide the company with your personal data.

While you are not required to share your data with us, declining to do so may limit the range of services we can provide. It may also result in restrictions on your ability to access or use our platform.

4. What personal data do we collect? When you visit our website, we may collect the following personal data:

We do not collect data that can personally identify you. We do, however, collect details such as your account activity, IP addresses, and the dates and times of access. For maintenance, security, and support, we retain system crash reports, browser details, and the type of device used to access your account. We also record your account’s language preference.

Regarding personal data collection, we collect and retain only the information you consent to provide to us when you connect to a third-party trading platform through us.

The personal data you have supplied to third-party platforms may include your full name, address, telephone number, and email address.

5. Why does the company need my personal data, and is it lawful for them to collect it?

The company collects, stores, and processes your personal information solely for the purposes set out in the Policy. All such activities are conducted in accordance with the relevant laws of Malaysia.

The company will only handle, process, or transmit your data in accordance with the applicable laws in Malaysia. The legal grounds for doing so are:

• By providing your personal data to the company, you consent to its collection, storage, and processing by us. You also authorise us to transfer your data to the relevant third-party trading platform, where necessary and appropriate, as part of providing our services. Your consent includes the processing of your personal data for one or more specified purposes.
• To improve services, pursue legitimate interests, and establish or defend legal claims, among other purposes, the company may need to store and process your personal data.
• Data processing is required to comply with legal obligations.

For more information about the data processing activities the company is required to perform, please contact us via email.

Below you will find a list of the specific purposes and the legal basis we rely on, where applicable, for processing your personal data.

6. Disclosure of Personal Data to Third Parties

For the purposes of storing and processing IP addresses, conducting user surveys and analyses, and performing other related services, the company may share anonymised personal data with third-party service providers.

At your request, we may share specific personal data you provide with third-party services. In such cases, the use of your data will be governed by that company’s privacy policies. This may include multiple digital trading platforms.

To enhance the services we provide to clients and improve overall service quality, the company may share personal information with its affiliates and partner companies.

Where required by law, or to safeguard the company's rights and assets and those of our third-party partners, we may disclose data to the relevant legal or regulatory authorities.

In the event of a significant business transaction—such as a company sale or the pursuit of investment or financing—relevant data may be shared in a lawful and appropriate manner. This also applies in the event of any merger, restructuring, consolidation, or bankruptcy, as required by law.

7. Use of Cookies and Third-Party Services

We may use cookies and similar technologies for site analytics and in collaboration with advertising partners, in accordance with applicable laws and industry standards.

Cookies—small pieces of code stored on your device when you visit a website—are used to collect information about browsing behaviour, preferences, and similar details. Their purpose is to personalise and enhance your user experience. They allow us to remember your settings and preferences, and to tailor our services accordingly. These cookies are also used for site analytics and to gather statistics for strategic planning.

Generally, there are two types of cookies used on this site. Session cookies are stored only for the duration of your visit and are deleted when you close your browser. Persistent cookies, on the other hand, remain in your browser even after your session ends. These enable the site to recognise you when you return and help streamline your experience on the site.

Types of cookies:

Cookies may be used where necessary, in line with their intended purpose:

Cookies are blocked or have been deleted

If you wish to delete or block cookies, you can do so through your browser settings. Follow the links below for step-by-step instructions on how to do this in the most popular browsers.

• firefox
• Microsoft Edge
• Google Chrome
• safari

Blocking cookies will prevent some site functions and features from working properly.

ONLINE TRACKING NOTICE

Your personal data will be stored for as long as necessary to perform the operations described in this policy. It may be retained longer if required by local laws, regulations, or company policies.

Your personal data will be shared—only at your request and discretion—with third-party trading platforms for 12 months. After that period, and with your consent, the data will be shared for a further 12 months.

Our operations include regular reviews of all personal data to determine whether it remains necessary.

9. Transfers of personal data to third countries or international organisations

When necessary to provide our services and/or for security reasons, we may transfer personal data to countries outside your home country and to international organizations using robust security protocols. We apply the highest standards of data security to protect your information and ensure you have access to legal remedies and rights in all cases.

All residents in the EEA (European Economic Area) are covered by data protection laws and safeguards.

• All data transfers are carried out under the EU’s legal jurisdiction and competence, in line with the standard data protection requirements set out in Article 45(3) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”)
• All transfers of data between public entities or authorities comply with Article 46(2). They are subject to a legally binding and enforceable agreement.
• The European Commission’s Standard Contractual Clauses, issued under Article 46(2)(c) of the GDPR, set the conditions for data transfers and are applied accordingly. The Clauses are available at https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en.

For further details on the specific security measures the company uses to safeguard your personal data during transfers to third countries, please email your request to info@wealthwaydigital.uk

10. Protection of Personal Data

We protect personal data using the highest-level technical and organisational measures, following gold-standard procedures. These measures effectively prevent unlawful or accidental destruction of data, as well as its loss or alteration.

Although we apply the highest standards of care and legally mandated procedures for data protection, it is impossible to guarantee in all circumstances that your personal data will always remain free from error. Accordingly, we cannot be held liable for any disclosure of personal data, or for damage of an incidental, intangible, or consequential nature. This includes situations beyond our control, such as disclosures arising from transmission errors, unauthorised third-party access, or any other similar cause.

If required by law or by lawful demands from regulators or other authorities, we may be obliged to disclose your personal data to them. Once disclosed under legal compulsion, we cannot control how those authorities handle, store, or protect your data.

Anything transmitted over the internet, including personal information, may be intercepted and is not fully secure. The Company cannot guarantee the security of any data transmitted online.

11. Links to Third-Party Websites

On this website, you may encounter links to third-party applications and websites. Please note that these third parties are not our affiliates and are not under the company’s control, and our privacy policy does not apply to them. They maintain their own policies and practices for the collection and processing of personal data, and we are not responsible for their activities. Use at your own discretion.

Always review the privacy policy of any company or service when visiting their website, before sharing any personal data. Confirm that their data collection, use, and processing policies align with your preferences and priorities. Any data you choose to share should be provided directly to the service provider.

12. Policy Amendments

We reserve the right to update or modify our Privacy Policy at any time. We will notify you of any changes via this website and other appropriate channels. The latest version of this Privacy Policy will be posted on the website and will take effect immediately upon publication, unless stated otherwise.

13. Your Personal Data Rights

You retain full control and the ultimate decision over how your personal data is used, including verifying its accuracy, correcting errors, and choosing to delete it or limit the scope and nature of our processing.

On this page, EEA residents will find information relevant to them:

Your personal data is protected under the rights described herein. By emailing the address below, you can exercise those rights immediately.

Accessing Your Rights

Provided the personal data you have given us is accurate, you may access that information at any time. Any of your personal data that we process is accessible to us and therefore verifiable for accuracy.

You may request your personal data for verification at any time, and it will be provided to you in electronic format. If you request additional copies of the data we process, beyond the initial copy provided, a reasonable fee may be charged.

Rights granted under the law and our Privacy Policy must not infringe upon the rights of others. The company reserves the right to deny or restrict access to personal data if providing such access would infringe upon the rights and freedoms of others.

Right to Rectify Errors

Any errors in your personal data, whether due to omissions or incorrect details, may be corrected by you or by the Company to ensure proper processing.

Erasure Rights

You have the right to request deletion of your personal data under the following circumstances. 1) If your personal data has been processed without your consent or without a lawful basis. 2) If you request its removal and the Company has no legal obligation to retain it. 3) If you withdraw consent or object to any processing by us, even if lawful and based on our or a third-party provider’s legitimate interests. 4) If we are required by applicable law to delete your data.

The right to erasure may be overridden or superseded by legal obligations imposed under EU or member state law. Likewise, data may be retained where required for the exercise of or defence against legal claims.

Right to Restrict Data Processing

You have the right to request a restriction on the processing of your personal data where you believe it contains inaccuracies.

If you request that the use of your personal data be restricted, it will be deleted except under the following circumstances: 1) where the laws of the European Union or any Member State prevent this. 2) With your consent, if needed to establish, exercise, or defend legal claims. 3) To protect the rights of another natural person.

Data Portability Rights

You have the right to access and review any personal data you have provided, if you have consented in any manner to its collection and the processing is conducted by automated systems.

You have the right to request the transfer of any or all personal data to another company or organisation, where technically feasible. This does not affect your right to have your data erased. This right does not apply where its exercise would infringe on the rights or freedoms of another natural person.

Right to object to data processing

While the Company or a third-party service provider may rely on legitimate interests, you retain the right to object to processing and request that it be stopped. This right does not apply where there is a compelling legal basis to continue the processing, including to defend against, establish, pursue, or enforce legal claims. In such circumstances, we may lawfully continue the processing of your personal data.

You may at any time request that your personal data not be processed for any direct marketing purposes.

Right to Refuse or Withdraw Consent

You have the right to withdraw your consent to our processing of your personal data at any time and, where possible, with immediate effect. This does not apply retroactively to processing performed before your withdrawal of consent.

If you are dissatisfied for any reason, you have the right to file a complaint with any legal, regulatory, or other supervisory authority.

If you believe your rights and freedoms have been violated regarding the processing of your personal data, European Union Member States have established regulatory and supervisory authorities to handle such matters. You may lodge a complaint with these authorities at your discretion.

Section 13 outlines circumstances where your personal data rights may be limited under European Union law or the laws of its Member States.

Upon receiving your request concerning your personal data and its processing, we will provide access to the information you have requested, as outlined in Section 13 of this policy. We may extend this timeframe by up to two months, depending on the volume of requests and the nature of your request. If an extension is required, we will notify you of the new deadline within one month of receiving your request.

We will provide the requested information electronically at no charge, unless doing so would conflict with applicable law or with the provisions of Section 13. We may charge a reasonable fee, or decline a request, if it is considered unfounded, excessive, or repetitive.

We reserve the right to request additional proof of identity whenever there is reasonable doubt about the individual requesting personal data, to protect personal data and maintain security.