Privacy Policy

1. Introduction

Aiconic Software Sdn Bhd ("we", "our", or "us") operates iLulus.my and is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

We comply with the Personal Data Protection Act 2010 (PDPA) of Malaysia and implement appropriate measures to ensure your data is protected and handled responsibly.

2. Information We Collect

We collect several types of information for various purposes to provide and improve our Service to you:

Personal Information

• Full name and identification number (NRIC/Passport)
• Contact information (email address, phone number, address)
• Date of birth and nationality
• Employment information and income details
• Banking and financial information
• Credit history and CTOS/CCRIS reports

Usage Data

• IP address and browser information
• Pages visited and time spent on our platform
• Device information and operating system
• Cookies and similar tracking technologies

3. How We Use Your Information

We use the collected information for various purposes:

• To process your loan applications and connect you with financial institutions
• To verify your identity and perform credit assessments
• To provide customer support and respond to your inquiries
• To send you important updates about your applications and account
• To improve our services and develop new features
• To prevent fraud and ensure platform security
• To comply with legal obligations and regulatory requirements
• To send promotional materials (with your consent)

4. Sharing Your Information

We may share your personal information with:

• Financial Institutions: Banks and lenders to process your loan applications
• Credit Bureaus: CTOS, CCRIS, and other credit reporting agencies for credit checks
• Service Providers: Third-party vendors who assist in operating our platform
• Legal Authorities: When required by law or to protect our legal rights
• Business Partners: With your consent, for specific services you've requested

We ensure that all third parties are bound by confidentiality agreements and comply with PDPA requirements.

5. Data Security

We implement industry-standard security measures to protect your personal information:

• SSL/TLS encryption for data transmission
• Encrypted storage of sensitive information
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms
• Employee training on data protection practices

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Your Rights Under PDPA

Under Malaysia's Personal Data Protection Act 2010, you have the following rights:

• Right to Access: Request a copy of your personal data we hold
• Right to Correction: Request correction of inaccurate or incomplete data
• Right to Withdraw Consent: Withdraw your consent for data processing at any time
• Right to Limit Processing: Request limitation on how we use your data
• Right to Data Portability: Request your data in a portable format
• Right to Complain: Lodge a complaint with the Personal Data Protection Commissioner

7. Data Retention

We retain your personal information for as long as necessary to:

• Fulfill the purposes outlined in this Privacy Policy
• Comply with legal, regulatory, or contractual obligations
• Resolve disputes and enforce our agreements

Typically, we retain loan application data for 7 years after account closure, in accordance with financial regulations. After this period, we will securely delete or anonymize your data.

8. Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience:

• Essential Cookies: Required for platform functionality and security
• Analytics Cookies: Help us understand how users interact with our platform
• Marketing Cookies: Used to deliver relevant advertisements (with consent)

You can control cookies through your browser settings, though disabling certain cookies may affect platform functionality.

9. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information promptly.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date
• Sending you an email notification (for significant changes)

We encourage you to review this Privacy Policy periodically for any changes. Your continued use of the Service after modifications constitutes acceptance of the updated Privacy Policy.