PRIVACY POLICY

ABM CREDITZ SINGAPORE PTE LTD

Licensed Moneylender in the Republic of Singapore

1 Park Road, People’s Park Complex, #01-12, Singapore 059108

Telephone: +65 6737 3392 | Moneylender Licence No.: 46/2026

Last Updated: 22 August 2026

INTRODUCTION AND SCOPE

ABM CREDITZ SINGAPORE PTE LTD (“we,” “us,” or “our”) is a licensed moneylender regulated by the Ministry of Law (MinLaw) and the Registry of Moneylenders under the Moneylenders Act 2008 and the Moneylenders Rules. We are committed to protecting your personal data in accordance with the Personal Data Protection Act 2012 (PDPA) and all applicable regulatory requirements governing the licensed moneylending industry in Singapore.

This Privacy Policy applies to all personal data collected from:

• Loan applicants and borrowers;
• Guarantors and sureties;
• Individuals who interact with us via our website, approved business premises, telephone, email, or other channels;
• Individuals whose personal data is provided to us by authorised representatives or third parties.

By submitting your personal data to us, you acknowledge that you have read, understood, and consent to the collection, use, and disclosure of your personal data as described in this Privacy Policy.

PERSONAL DATA WE COLLECT

We collect personal data that is reasonably necessary for our moneylending operations and legal compliance. This includes:

Identity and Contact Information

• -Full name (as per NRIC, FIN, or passport);
• NRIC/FIN number, passport number, and nationality;
• Residential address and mailing address;
• Contact numbers (mobile and/or home);
• Email address;
• Date of birth, gender, and photograph.

 Employment and Financial Information

• Employment status, employer name, and employer contact details;
• Monthly income, payslips, CPF contribution statements, or tax notices;
• Bank account details (for disbursement and repayment purposes);
• Existing loan obligations and credit history.

Loan-Related Information

• Loan amount requested, purpose of loan, and preferred tenure;
• Loan application history with us;
• Repayment records, default history (if any), and correspondence;
• Notes of Contract and loan agreements.

Data from Third Parties

• Credit reports from the Moneylenders Credit Bureau (MLCB) and other approved credit bureaus;
• Information from your employer (with your consent where required);
• Publicly available information and regulatory databases;
• Information from law enforcement or regulatory authorities where permitted by law.

Sensitive and Special Categories

We do not routinely collect sensitive personal data (e.g., health information, religious beliefs). Where such data is voluntarily provided, it will be handled with additional safeguards and only processed where necessary and permitted by law.

Note: Under MinLaw regulations and the PDPA, we do not collect your Singpass or Corppass login credentials. We will never request passwords or security tokens from you.

PURPOSES OF COLLECTION, USE, AND DISCLOSURE

Primary Purposes

(a) Loan Application Processing: To assess your loan application, verify your identity, and determine your creditworthiness and eligibility for a loan;

(b) Credit Assessment: To retrieve and evaluate your credit report from the Moneylenders Credit Bureau (MLCB) and other approved credit bureaus, as mandated by Section 30N of the Moneylenders Act 2008 before granting any loan;

(c) Compliance with Aggregate Loan Caps: To verify your total outstanding unsecured loan amounts across all licensed moneylenders and ensure compliance with MinLaw’s aggregate loan caps based on your annual income;

(d) Self-Exclusion Verification: To check whether you are registered under the MinLaw Self-Exclusion Scheme and to comply with prohibitions on lending to self-excluded individuals;

(e) Contract Execution: To prepare, execute, and manage the Note of Contract and related loan documentation;

(f) Loan Disbursement and Repayment: To process loan disbursements, manage repayment schedules, issue receipts, and provide statements of account (at least twice yearly in January and July, or upon request).

Operational and Administrative Purposes

(g) Customer Service: To respond to your enquiries, complaints, and feedback;

(h) Account Management: To manage your account, update your records, and communicate with you regarding your loan;

(i) Debt Recovery: To pursue lawful debt recovery actions in the event of default, including engaging licensed debt collection agencies and legal representatives;

(j) Fraud Prevention: To detect, investigate, and prevent fraud, money laundering, and other unlawful activities;

(k) Risk Management: For internal audit, risk assessment, and operational planning.

Legal and Regulatory Compliance

(l) Statutory Obligations: To comply with the Moneylenders Act 2008, Moneylenders Rules, PDPA, and other applicable laws, regulations, guidelines, and court orders;

(m) Regulatory Reporting: To submit information to the Registry of Moneylenders, MinLaw, the Police, and other governmental or regulatory authorities as required by law;

(n) Legal Proceedings: To establish, exercise, or defend our legal rights, or to comply with legal processes.

Marketing and Communication (With Consent)

(o) To send you promotional materials, product updates, and marketing communications about our loan products and services, only where you have provided your express consent. You may opt out at any time by contacting our DPO or using the unsubscribe mechanism provided in our communications.

We will not use your personal data for purposes other than those stated above unless we obtain your additional consent or are permitted or required by law.

LEGAL BASIS FOR PROCESSING

 Consent

Your consent is our primary legal basis for collecting, using, and disclosing your personal data. By submitting your loan application and personal data, you consent to the processing activities described in this Privacy Policy.

Deemed Consent

We may rely on deemed consent under the PDPA where:

• You voluntarily provide personal data for a specific purpose and it is reasonable that you would do so;
• Consent is given for disclosure to another organisation for a particular purpose.

Exceptions to Consent

We may collect, use, or disclose personal data without consent where permitted by the PDPA, including:

• Where necessary for any investigation or proceedings;
• Where required for evaluative purposes (subject to PDPA limitations);
• Where necessary to respond to an emergency that threatens the life, health, or safety of an individual;
• Where required or authorised by law, including the Moneylenders Act 2008.

DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES

We take your privacy seriously and will not disclose your personal data to third parties without your consent, except as set out below or as permitted or required by law:

Regulatory and Government Bodies

• The Registry of Moneylenders and Ministry of Law (MinLaw);
• The Moneylenders Credit Bureau (MLCB) and other approved credit bureaus;
• The Singapore Police Force and other law enforcement agencies;
• The Personal Data Protection Commission (PDPC);
• Courts, tribunals, and other dispute resolution bodies.

Service Providers and Professional Advisers

• Legal advisers, debt collection agencies (licensed), and private investigators (where lawful);
• IT service providers, cloud hosting providers, and data analytics providers;
• Payment processing and banking partners;
• Auditors, accountants, and compliance consultants.

Related Organisations

Our related corporations, affiliates, or successors-in-title, where necessary for business asset transactions or business improvement purposes in compliance with the PDPA.

Other Disclosures

• Where disclosure is necessary to protect our rights, property, or safety, or the rights, property, or safety of our customers or the public;
• In connection with any merger, acquisition, or sale of all or part of our business.

All third parties to whom we disclose personal data are contractually bound to protect your data in accordance with standards comparable to the PDPA and are permitted to use your data only for the purposes for which it was disclosed.

USE OF NRIC AND FIN NUMBERS

In compliance with the PDPC’s Advisory Guidelines on the PDPA for NRIC and Other National Identification Numbers, we collect NRIC, FIN, and passport numbers only where:

• It is required under the Moneylenders Act 2008 and Moneylenders Rules for identity verification and loan documentation;
• It is necessary to accurately establish and verify your identity for loan assessment and fraud prevention;
• It is required by law or by the Registry of Moneylenders.

We do not collect NRIC or FIN numbers where alternative identifiers would suffice. Such data is subject to heightened security measures.

MONEYLENDERS CREDIT BUREAU (MLCB) AND CREDIT CHECKS

Under the Moneylenders Act 2008, we are legally required to retrieve your credit report from the MLCB before granting any loan. By applying for a loan with us, you acknowledge and consent to:

• Our retrieval of your credit report from the MLCB;
• The MLCB’s collection, use, and disclosure of your loan and repayment information to licensed moneylenders in Singapore;
• Our disclosure of your loan information to the MLCB for recording and reporting purposes.

This enables the industry-wide enforcement of aggregate loan caps and protects borrowers from over-indebtedness.

SELF-EXCLUSION SCHEME

MinLaw operates a Self-Exclusion Scheme to help individuals regulate their borrowing behaviour. We are legally prohibited from granting unsecured loans to individuals registered on this scheme. By submitting your application, you consent to our verification of your self-exclusion status with the MLCB.

DATA RETENTION

We retain your personal data for as long as:

• It is necessary to fulfil the purposes for which it was collected;
• It is required for legal, regulatory, or business purposes, including debt recovery and dispute resolution;
• It is required by the Moneylenders Act 2008, Moneylenders Rules, or other applicable laws (e.g., tax records, statutory limitation periods).

Once the retention period expires and retention is no longer necessary, we will securely destroy, delete, or anonymise your personal data in accordance with our data retention policy and the PDPA’s Retention Limitation Obligation.

DATA SECURITY AND PROTECTION

We implement reasonable and appropriate technical, administrative, and physical safeguards to protect your personal data against unauthorised access, collection, use, disclosure, copying, modification, disposal, or similar risks. These measures include:

• Access Controls: Restricted access to personal data on a need-to-know basis;
• Encryption: Use of encryption for sensitive data in transit and at rest, where appropriate;
• Secure Premises: Physical security at our approved business premises;
• Staff Training: Regular training for employees on data protection obligations and confidentiality;
• Vendor Management: Contractual obligations requiring service providers to maintain comparable security standards;
• Incident Response: Procedures to detect, respond to, and report data breaches in accordance with the PDPA.

While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security.

OVERSEAS TRANSFER OF PERSONAL DATA

Your personal data is primarily stored and processed in Singapore. However, we may transfer personal data outside Singapore in limited circumstances, such as:

• Cloud hosting or IT services provided by overseas vendors;
• Legal or regulatory requirements involving foreign jurisdictions.

Where such transfers occur, we will ensure that the recipient organisation provides a standard of protection comparable to that under the PDPA, either through contractual safeguards, certification schemes, or other lawful mechanisms, unless an exception under the PDPA applies.

YOUR RIGHTS UNDER THE PDPA

Right to Access

You may request access to the personal data we hold about you and information about how it has been used or disclosed in the past year. We will respond to your request within the timeframe prescribed by the PDPA, subject to applicable exceptions (e.g., evaluative opinion data, confidential commercial information, legal privilege).

Right to Correction

You may request correction of any inaccurate, incomplete, or outdated personal data. Upon correction, we will send the updated data to other organisations to which the data was disclosed within the past year, unless they no longer need it for legal or business purposes.

Right to Withdraw Consent

You may withdraw your consent for the collection, use, or disclosure of your personal data at any time by giving us reasonable notice. Upon withdrawal:

• We will inform you of the likely consequences of withdrawal;
• We will cease collecting, using, or disclosing your personal data for the withdrawn purpose, unless otherwise permitted or required by law;
• Please note that withdrawal of consent may affect our ability to provide loan services to you, process your application, or comply with legal obligations.

How to Exercise Your Rights

Submit your access, correction, or withdrawal requests to our DPO using the contact details in Section 2. We may require verification of your identity before processing your request.

DO NOT CALL (DNC) REGISTRY

In compliance with the PDPA’s Do Not Call Provisions, we will not send telemarketing messages (via voice calls, text messages, or fax) to Singapore telephone numbers listed on the DNC Registry unless:

• We have obtained your clear and unambiguous consent; or
• There is an ongoing relationship under the PDPA’s exceptions.

To opt out of marketing communications, contact our DPO or use the unsubscribe facility provided in our messages.

DATA BREACH NOTIFICATION

In the event of a data breach involving your personal data that is likely to result in significant harm to you, or that is of a significant scale, we will:

• Notify the Personal Data Protection Commission (PDPC) as soon as practicable and in accordance with PDPA requirements;
• Notify affected individuals where required by law, so that you may take protective measures.

We maintain internal breach response procedures to identify, contain, assess, and remediate data incidents promptly.

ACCURACY OF PERSONAL DATA

We rely on you to provide accurate, complete, and up-to-date personal data. Please inform us promptly of any changes to your personal data (e.g., change of address, employment, or contact details) so that we can maintain accurate records.

USE OF COOKIES AND WEBSITE TECHNOLOGIES

If you visit our website, we may use cookies and similar technologies to:

• Enhance your browsing experience;
• Analyse website traffic and usage patterns;
• Maintain security and prevent fraud.

You may manage cookie preferences through your browser settings. Our website does not use cookies to collect personal data without your knowledge.

THIRD-PARTY LINKS

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of such websites. We encourage you to review the privacy policies of any third-party sites you visit.

MINLAW COMPLIANCE AND BORROWER PROTECTIONS

As a licensed moneylender, ABM CREDITZ adheres to the following MinLaw requirements, which also inform our data handling practices:

• Transparency: We explain all loan terms, interest rates, fees, and repayment schedules in a language you understand before you sign the Note of Contract;
• Fee Caps: We comply with statutory caps on interest (maximum 4% per month) and fees (administrative fee capped at 10% of principal; late fee capped at S$60 per month);
• Documentation: We provide a copy of the signed contract, receipts for all repayments, and statements of account at least twice yearly;
• No Document Retention: We do not withhold your NRIC, passport, or other identity documents as “collateral”;
• Face-to-Face Verification: Loan applications require in-person verification at our approved business premises;
• No Unsolicited Loans: We do not grant loans unless you have submitted a written application;
• Advertising Restrictions: We advertise only through our official website, approved business directories, and signage at our registered premises.

For complaints about licensed moneylenders, you may contact the Registry of Moneylenders at 1800 2255 529 or via the MinLaw website.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or regulatory guidance. Any material changes will be notified to you via our website, email, or other appropriate channels. The updated policy will indicate the “Last Updated” date. Your continued engagement with us after such changes constitutes acceptance of the revised Privacy Policy.

GOVERNING LAW

This Privacy Policy is governed by the laws of the Republic of Singapore. Any disputes arising from this Privacy Policy shall be subject to the exclusive jurisdiction of the Singapore courts.

CONTACT US

For any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact:

ABM CREDITZ SINGAPORE PTE LTD

Email: hello@abmcreditz.com.sg

Address: 1 Park Road, People’s Park Complex, #01-12, Singapore 059108

Telephone: +65 6737 3392

Licence No.: 46/2026

Website: www.abmcreditz.sg

© 2026 ABM CREDITZ SINGAPORE PTE LTD. All Rights Reserved.

FREQUENTLY ASKED QUESTIONS (FAQ)