Notis Privasi

Last updated: 30 Oct 2026

This notice explains how Poket Go Sdn Bhd (“PoketGo”, “we”, “us”) collects, uses, shares and protects your personal data when you use the PoketGo app, in line with Malaysia’s Personal Data Protection Act 2010 (PDPA).

We are a licensed moneylender (licence no. WL6200/15/01-1/160401). Poket Go Sdn Bhd (198803151234). Email: support@poketgo.com.

Personal data we collect

• Account details: your full name, MyKad or passport number, mobile number, email address and 6-digit PIN (stored in protected form, never in plain text).
• Loan application details: loan amount and repayment period; personal details (date of birth, sex, nationality, ethnicity, education, marital status and home address); work and income (job, industry, employer or business, employment type, time in the job, income range and pay frequency).
• Emergency contacts: the names, mobile numbers and relationship of two people you choose. We only contact them if we cannot reach you about your loan; please tell them before you give us their details.
• Identity verification: photos of your MyKad (front and back) or passport photo page, and a short selfie video, which we compare to confirm that you are the person applying and to prevent fraud. Comparing your face in the selfie with the photo on your ID uses facial features, which is biometric data; we use it only for identity verification and fraud prevention.
• Payout and payment details: the bank and account number where you want your loan paid, and bank transfer slips you upload.
• Loan records: approved loans, repayment schedules, due-date extensions, payments, promo codes used and receipts.
• Messages you send to our support team.
• Device identifier: a random ID created when you install PoketGo and sent with every request. Each phone can be linked to only one PoketGo account, so we use it to keep your account secure and to stop one device being used for many accounts. It is reset if you uninstall the app or clear its data.
• Technical data needed to run the service securely, such as the app version, the language and time zone set on your phone, and its screen size.
• Fraud-prevention data: checks on your device — whether it is a genuine phone running a genuine copy of PoketGo installed from Google Play (using Google Play Integrity), or an emulator or automated tool; whether developer options, USB debugging or a VPN are switched on; whether a SIM card is present; and the number of processor cores and amount of memory — and a summary of how this application was filled in, such as how long each step took and whether details were typed, pasted or autofilled. This never includes the characters you type or your PIN.
• Approximate location: if you allow it when the app asks, your approximate location (to about 1 km, never your precise location) when you sign up, sign in, submit an application or accept a loan. We use it to confirm you are applying from Malaysia and to prevent fraud. You can turn it off at any time in your phone’s settings, and the app works the same without it.
• Install and advertising measurement: after you agree to our Disclosure Statement, the AppsFlyer and AppVero services record how you came to install PoketGo (which advertisement, link or campaign, if any, and the install information from Google Play), your device’s advertising ID and App Set ID, an install ID of their own, your IP address, device model, operating system, language, time zone and mobile network name, when you open the app, and when you sign up or sign in (with your PoketGo customer number, never your name, phone number or MyKad). We use it to measure our advertising and to link your PoketGo account to the campaign that brought you. You can reset or delete your advertising ID in your phone’s settings.

What the app accesses on your phone

The camera is used only while you take your ID photos and selfie video, and only after you allow it. PoketGo never reads your photo library: a file is read only when you choose it to upload, such as a transfer slip. With your permission, PoketGo reads your approximate location (never your precise location) for fraud prevention. PoketGo does not access your contacts, precise location, call logs, SMS messages or the list of apps on your phone.

How we use your data

• To create, secure and manage your account.
• To assess your loan application, including eligibility and affordability.
• To provide your loan, manage repayments and send you statements, receipts and payment reminders.
• To answer your questions and provide support.
• To prevent fraud and automated (bot) applications, including by checking your device and reviewing a summary of how this application was filled in. A member of our team reviews anything these checks flag; they are never the sole basis for a decision on your loan.
• To meet our legal and regulatory obligations, including under the Moneylenders Act 1951 and anti-money-laundering laws.
• To maintain and improve the app.
• To measure which of our advertisements bring people to PoketGo (AppsFlyer and AppVero). We do not show advertisements in the app.

We do not sell your personal data.

Who we share it with

• Service providers acting for us (for example cloud hosting and storage, identity verification, payment processing and messaging), under confidentiality obligations.
• Google, which checks that your device and copy of PoketGo are genuine (Google Play Integrity) when you sign up, sign in or apply.
• AppsFlyer and AppVero, which measure our advertising for us (install attribution). They process the data described above on our behalf and may share it with the advertising network that showed you our advertisement, only to confirm that their advertisement led to your install. AppVero stores this data in Malaysia.
• Credit reporting agencies, where the law permits and with your consent.
• Regulators, law-enforcement agencies and courts, where the law requires.
• Our professional advisers, and a successor business if PoketGo is sold or merged.

How long we keep it

We keep personal data only as long as we need it for the purposes above. Records of loans and repayments are kept for the period required by law, even after you close your account. Other data is deleted or anonymised when it is no longer needed.

Security

We protect your data with technical and organisational measures, including encrypted connections and restricted staff access.

Your rights

You may ask to access or correct your personal data, withdraw your consent, or limit how we use it, by emailing us. Withdrawing consent may mean we cannot process an application or provide a loan.

You can delete your account at any time in the app (Profile → Personal details → Delete account) or as described at https://poketgo.com/delete-account.html.

Children

PoketGo is only for people aged 18 and over.

Changes to this notice

We will post any changes here and, if they are significant, tell you in the app.

Contact us

Poket Go Sdn Bhd (198803151234). Email: support@poketgo.com.