Privacy Policy
Last updated: 24 April 2026 · Compliant with Malaysia PDPA 2010
1. Data Controller
Threenity Capital Sdn Bhd ("we", "our", "us") is the data controller responsible for your personal data collected through threenity.my and related services. Contact: hello@threenity.my | +60 11-5695 7552 | Shah Alam, Selangor.
2. Data We Collect
We collect information you provide directly: name, NRIC number, contact details, income information, employment details, property information, and credit history details (CCRIS/CTOS status). We also collect usage data: IP address, browser type, pages visited, and session duration through analytics tools.
3. How We Use Your Data
We use your data to: (a) provide mortgage eligibility screening results; (b) connect you with relevant professionals (bankers, valuers, lawyers); (c) send you your purchased eligibility report; (d) contact you regarding your enquiry or consultation request; (e) improve our services and user experience; (f) comply with legal obligations.
4. Legal Basis for Processing
We process your data under the Personal Data Protection Act 2010 (PDPA 2010) of Malaysia on the following bases: (a) your consent; (b) performance of a contract; (c) legitimate interests in providing mortgage advisory services; (d) compliance with legal obligations.
5. Data Sharing
We share your data only with: (a) professionals you choose to connect with (bankers, valuers, lawyers) — only the minimum data required; (b) our technology service providers (Supabase, Vercel, Groq) under data processing agreements; (c) payment processors (Toyyibpay) for report purchases; (d) law enforcement when legally required. We do not sell your data.
6. WhatsApp & Meta
When you contact us via WhatsApp or we send you messages via WhatsApp Business API, your data is processed by Meta Platforms Inc. under Meta's privacy policy. We use WhatsApp solely for service communication and never for unsolicited marketing. You may opt out at any time by replying "Stop Promotions".
7. Data Retention
Screening data submitted without creating an account is retained for 30 days then deleted. Consultation and case data is retained for 7 years for regulatory compliance. You may request deletion at any time by emailing hello@threenity.my.
8. Your Rights (PDPA 2010)
Under the PDPA 2010, you have the right to: (a) access your personal data; (b) correct inaccurate data; (c) withdraw consent; (d) request deletion (where legally permissible); (e) object to processing. Submit requests to hello@threenity.my. We respond within 21 days.
9. Cookies
We use essential cookies for site functionality and analytics cookies to understand usage. You may disable cookies in your browser settings, though some features may not function correctly.
10. Security
We implement appropriate technical and organisational measures to protect your data, including encryption in transit (HTTPS/TLS), access controls, and regular security reviews. No method of transmission over the internet is 100% secure.
11. Children's Privacy
Our services are not directed at individuals under 18 years of age. We do not knowingly collect data from minors.
12. Changes to This Policy
We may update this policy periodically. Significant changes will be notified via email or a prominent notice on our website. Continued use of our services after changes constitutes acceptance.
13. Contact
Data Protection Officer: Threenity Capital Sdn Bhd | hello@threenity.my | Shah Alam, Selangor, Malaysia