Privacy Policy
Your privacy matters deeply to us at Toriventa
Introduction and Our Commitment
At Toriventa, we understand that trust forms the foundation of every meaningful business relationship. This privacy policy explains how we collect, use, protect, and share your personal information when you interact with our financial services platform. We're committed to being transparent about our data practices because your privacy isn't just a legal requirement for us—it's fundamental to how we operate.
When you choose Toriventa's financial services, you're entrusting us with sensitive information. We take this responsibility seriously and have implemented comprehensive measures to ensure your data remains secure and is used only in ways that benefit your experience with our platform.
Information We Collect
We collect information in several ways to provide you with personalized financial services and maintain the security of our platform. Here's what we gather and why:
Personal Identification Information
- Full name, email address, and phone number for account creation and communication
- Government-issued identification numbers as required by Malaysian financial regulations
- Address information for service delivery and compliance purposes
- Date of birth and employment details for identity verification
Financial Information
- Banking details and account information necessary for transactions
- Income verification documents and financial statements
- Transaction history and payment patterns to improve our services
- Credit history and risk assessment data as permitted by law
Technical and Usage Data
- Device information, IP addresses, and browser details for security monitoring
- Usage patterns and feature preferences to enhance platform functionality
- Login timestamps and location data for fraud prevention
- Cookies and similar technologies to maintain session security
How We Use Your Information
Every piece of information we collect serves a specific purpose in delivering exceptional financial services while maintaining the highest security standards. We never use your data for purposes unrelated to our financial services platform.
- Service Delivery: Processing transactions, managing your account, and providing customer support
- Risk Management: Detecting and preventing fraud, money laundering, and other financial crimes
- Regulatory Compliance: Meeting Malaysian banking and financial service regulations
- Platform Improvement: Analyzing usage patterns to enhance features and user experience
- Communication: Sending important account updates, security alerts, and service notifications
- Personalization: Tailoring financial products and services to your specific needs
Important: We never sell your personal information to third parties or use it for marketing purposes unrelated to our financial services. Any marketing communications you receive will be directly related to Toriventa's financial products and services.
Data Sharing and Third-Party Relationships
We maintain strict controls over when and how your information is shared. Any sharing occurs only when necessary for service delivery, legal compliance, or with your explicit consent.
Authorized Sharing Scenarios
- Banking partners and financial institutions for transaction processing and account management
- Regulatory bodies and government agencies as required by Malaysian law
- Trusted service providers who assist with platform operations under strict confidentiality agreements
- Credit bureaus and risk assessment agencies for legitimate business purposes
- Legal authorities when required by court orders or legal proceedings
All third-party partners must meet our strict data protection standards and are contractually bound to protect your information with the same level of care we provide. We regularly audit these relationships to ensure compliance with our privacy standards.
Your Privacy Rights and Control
You have significant control over your personal information and how it's used. Malaysian privacy laws, combined with our commitment to transparency, provide you with several important rights.
Your Rights Include
- Access Right: Request a complete copy of all personal information we hold about you
- Correction Right: Update or correct any inaccurate or incomplete information
- Deletion Right: Request deletion of your data where legally permissible
- Portability Right: Receive your data in a structured, machine-readable format
- Restriction Right: Limit how we process your information in certain circumstances
- Objection Right: Object to processing based on legitimate interests
To exercise any of these rights, contact our privacy team using the information provided below. We'll respond to all requests within 30 days and may require identity verification to protect your account security.
Data Security and Protection Measures
Protecting your financial information requires multi-layered security approaches that go beyond basic encryption. We've implemented comprehensive security measures that reflect the sensitive nature of financial data.
- Advanced encryption protocols for all data transmission and storage
- Multi-factor authentication and biometric security options
- Regular security audits and penetration testing by independent firms
- 24/7 monitoring systems for unusual account activity and potential threats
- Secure data centers with physical access controls and environmental protections
- Employee training programs and background checks for all staff with data access
- Incident response procedures for rapid containment of any security events
Despite our comprehensive security measures, no system is completely immune to threats. We maintain cyber insurance and work with leading security firms to stay ahead of emerging risks. If a security incident affects your account, we'll notify you promptly and provide clear guidance on protective actions.
Data Retention and Deletion
We retain your information only as long as necessary to provide services and meet legal requirements. Malaysian financial regulations require us to maintain certain records for specific periods, but we don't keep data longer than required.
Retention Periods
- Active account information: Maintained throughout your relationship with Toriventa
- Transaction records: Seven years from transaction date as required by banking regulations
- Identity verification documents: Five years from account closure
- Marketing communications: Until you unsubscribe or request deletion
- Technical logs: 18 months for security and system optimization purposes
When retention periods expire, we securely delete or anonymize your information using industry-standard data destruction methods. You can request early deletion of certain data types, though regulatory requirements may limit our ability to delete some records.
International Data Transfers
While we primarily store and process data within Malaysia, some limited international transfers may occur when necessary for service delivery or security purposes. Any international transfers comply with Malaysian data protection laws and include appropriate safeguards.
When we transfer data internationally, we ensure recipient countries have adequate data protection laws or implement contractual protections that meet Malaysian standards. You'll be notified if significant changes to our data transfer practices affect your information.
Policy Updates and Changes
Financial services and privacy regulations evolve continuously, and we update this policy to reflect changes in our practices or legal requirements. Significant changes will be communicated through your registered email address and prominently displayed on our platform.
We encourage you to review this policy periodically. Continued use of our services after policy updates indicates your acceptance of the changes. If you disagree with significant changes, you can close your account or contact us to discuss your concerns.
Privacy Questions and Contact Information
Address: 85-01, Jln Adda 3/1, Taman Adda, 81100 Johor Bahru, Johor, Malaysia
Phone: +6072373755
Email: [email protected]
Privacy Officer: Available Monday through Friday, 9:00 AM to 6:00 PM MYT
This privacy policy is governed by Malaysian law and complies with the Personal Data Protection Act 2010. If you have concerns about how we handle your personal information, you may also contact the Department of Personal Data Protection Malaysia.