Privacy Policy

Last updated: 10 December 2025

Who we are: JMYR Sdn. Bhd ("JMYR", "we", "us"). Contact: help@jmyr.com.my

1. Scope

This Privacy Policy applies to all individuals and businesses who:

• Visit our websites or applications
• Register for JMYR services
• Mint, redeem, transfer, or hold JMYR
• Use our merchant or API integrations
• Contact customer support

This Policy is issued in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

2. What Personal Data We Collect

a. Identification & Verification

Name, NRIC or passport, nationality, residential address, date of birth, facial/ID images, company information (SSM), authorised signatories.

b. Compliance & Screening

Sanctions checks, KYC results, risk ratings, allow-list or blocklist status.

c. Transaction & Technical Data

Wallet addresses, blockchain transaction metadata, device identifiers, IP address, browser logs, API usage logs.

d. Financial Information

Bank account details for minting/redemption, payment history.

3. Purpose of Processing

We process Personal Data for:

• KYC/AML Compliance
• Identity verification
• Sanctions screening
• Ongoing customer monitoring
• Transaction Services
• Minting, redemption, and transfers
• Wallet management
• Notifications and receipts
• Security & Fraud Prevention
• Threat detection
• Abuse prevention
• Token freeze/blacklist operations
• Incident response
• Product Operations & Improvements
• Analytics
• Feature development
• Service announcements

4. Legal Basis of Processing

We process Personal Data under the following legal bases:

• Performance of a contract
• Compliance with Malaysian law
• Legitimate interests (security, fraud prevention)
• Your consent (where required)

5. Data Retention

Data is retained only as long as required for:

• Service delivery
• AML/record-keeping (up to 7 years)
• Dispute resolution
• Regulatory audits

Retention is detailed in our internal schedule.

6. Your Rights Under PDPA

You may request to:

• Access your data
• Correct inaccurate data
• Withdraw consent (where applicable)
• Delete data (subject to legal limitations)

Contact: help@jmyr.com.my

7. Security Measures

We implement multi-layer protections including:

• Encryption at rest and in transit
• Role-based access control (RBAC)
• Multi-factor authentication (MFA)
• WAF, IDS/IPS
• Continuous monitoring and regular audits

8. Children's Privacy

JMYR is not offered to persons below 18. No knowingly collected data from minors.

9. Cookies & Tracking Technologies

Cookies and SDKs may be used for authentication, analytics, and security. Users can manage cookie preferences via browser settings.

10. Updates to this Policy

We may update this Policy from time to time. Material updates will be communicated via email or in-app notices.

11. Contact Information

Email: help@jmyr.com.my