Privacy Policy

Last updated: 19 June 2026

This Privacy Policy explains how Mortgage Manager (“we”, “us”, “our”) collects, uses, discloses and protects your personal data when you use our website and services. We are committed to handling your data in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA).

1. Information we collect

Depending on how you use the service, we may collect:

• Identity & contact data — full name, NRIC/identity document, date of birth, email address, phone number.
• Financial & employment data — income, employment details, existing commitments, and information needed to estimate your Debt Service Ratio (DSR) and loan eligibility.
• Documents you upload — e.g. identity documents, payslips, bank statements and credit-report information you provide for your application.
• Account & usage data — username, role, log-in activity and technical data such as your session cookie.

2. How we use your data

• To provide mortgage pre-qualification, DSR estimates and eligibility results;
• To prepare and manage your loan case and match it with relevant partner banks/lenders;
• To communicate with you about your application, account and our services;
• To operate, secure and improve the platform, and to comply with legal obligations.

3. Disclosure of your data

We may disclose your personal data to the partner banks / lenders you choose to apply to or that are relevant to your case, to the mortgage agent assisting you, and to service providers who help us operate the platform. We may also disclose data where required by law or regulatory authority. We do not sell your personal data.

4. Consent

By creating an account and submitting your details, you consent to the collection, use and disclosure of your personal data as described in this policy. Where you provide another person’s data (e.g. a co-applicant), you confirm you are authorised to do so. You may withdraw your consent at any time (see “Your rights” below), though this may mean we can no longer provide certain services.

5. Data security & retention

We use reasonable technical and organisational measures to protect your data, including encrypted transmission (HTTPS) and access controls so that your case data is only accessible to authorised parties. We retain your data for as long as needed to provide the service and to meet legal, tax or regulatory requirements, after which it is deleted or anonymised.

6. Your rights under the PDPA

You have the right to request access to and correction of your personal data, to limit its processing, and to withdraw consent. To make a request or raise a concern, contact us at the address below. We may need to verify your identity before acting on a request.

7. Cookies

We use a strictly necessary session cookie to keep you logged in. We do not use it for advertising. You can clear cookies in your browser, but you may then be unable to log in.

8. Changes to this policy

We may update this policy from time to time. The “Last updated” date above shows when it was last revised. Material changes will be made available on this page.

9. Contact us

For any privacy questions or to exercise your rights, contact us at aslm2l1k123@gmail.com.

This page is a general policy and not legal advice. Please consult your own legal counsel to confirm it meets all applicable requirements for your business.