ShopeePay Privacy Policy

1. Business Principles

AIRPAY MALAYSIA SDN. BHD. (“AirPay”) shall process personal data with care and awareness in order to safeguard the interests of the customers.
Processing of personal data shall be limited to what is needed for operational purposes, efficient customer care, relevant commercial activities and proper administration of human resources.

2. Organization Requirements

2.1. Organization requirements for AirPay

2.1.1 Handling, Processing and Protection of Personal Data

Data that may be linked to any natural persons (service users or customers) shall only be processed for specified, explicit and legitimate purposes and in accordance with relevant licenses, legislation, regulations and the minimum requirements included in AirPay’s Privacy Manual.
Important elements of the minimum requirements include the following:
  1. Customers shall be properly informed when their personal data is being collected.
  2. Customers shall have the right to obtain relevant information on the processing of personal data related to them.
  3. Customers shall be able to exercise user choice and control and have appropriate rights to correct or delete their personal data. 
  4. Personal data shall be kept in a form which permits identification of customers for no longer than is necessary for the purposes for which the data were collected.
  5. Customers’ personal data shall not be disclosed unless it is permitted and/or required by relevant laws and regulation.  
  6. Transfer of personal data shall be limited to the extent required by laws and/or needs of customer care and/or administration of customers’ data.
  7. The handling and/or processing of personal data shall be properly documented.
  8. Appropriate training shall be given to relevant personnel involved in the processing of personal data.

2.1.2 Legal and Compliance Officer

The Legal and Compliance Officer shall have the ability to report incidents directly to AirPay’s top management.

2.1.3 Detection and reporting of non-conformities

AirPay shall implement routines which aim at detecting and reporting any non-conformities with the requirements set out herein. 
Non-conformities shall always be reported to the Compliance Officer. The Compliance Officer shall report the non-conformities of substance to AirPay’s top management.

2.2. Organization requirements for all employees in AirPay

AirPay’s employee or personnel shall not collect, store, disclose or otherwise process personal data regarding, customers, colleagues or others unless such employee or personnel has a legitimate purpose.

Last Updated: 2 May 2019

Back to top