Privacy Policy
SKP's commitment to you
Suruhanjaya Kredit Pengguna (“SKP”) respects your privacy and is committed to protecting your personal data in accordance with the Personal Data Protection Act 2010 [Act 709] and other applicable laws.

This policy sets out SKP’s practices in relation to the collection, access, processing and disclosure of your personal data. This policy applies to personal data collected by SKP through its official channels and does not apply to any entity or individual who is not an officer or a party appointed, designated or engaged by SKP, or to any platform outside SKP’s control.
Definition of Personal Data
Personal data refers to any information relating directly or indirectly to you, by which you may be identified, including sensitive personal data and any opinion about you.

SKP may process personal data including, but not limited to, the following:

  1. Identity Data: name, title, date of birth, gender, identification number, passport number, ethnicity;
  2. Contact Data: residential address, correspondence address, email address and telephone number;
  3. Financial Data: account information, shareholdings, business interests and positions;
  4. Profile Data: username, password, feedback and survey responses;
  5. Technical Data: Internet Protocol (IP) address, login data, browser type, time zone settings and location, browser plug-in types and versions, operating system and platform, and other technology on the devices used to interact with SKP; and
  6. Usage Data: information on how you use SKP’s website and systems.
Why SKP Processes Your Personal Data

SKP adopts comprehensive data governance practices and shall only collect and process personal data to the extent necessary to carry out its functions and regulatory powers in accordance with the Consumer Credit Commission Act 2025 [Act 873] and other applicable laws.

SKP may collect personal data directly from you where necessary, reasonable or practicable. In certain circumstances, SKP may also obtain your personal data from other parties, with or without your knowledge.

How SKP Collects Your Personal Data

Apart from performing our regulatory functions and exercising powers under the Act, SKP may obtain Personal Data for other purposes, such as:

  1. when you use SKP platforms, including the website, applications or online accounts provided by SKP;
  2. when you register for events such as engagement sessions, seminars or workshops;
  3. when you contact SKP via online forms, email, post or telephone;
  4. when you participate in surveys or competitions;
  5. when you apply for employment with SKP;
  6. when you participate in procurement processes; and
  7. when you visit SKP premises.

Disclosure of Your Personal Data

Unless otherwise prohibited by law, SKP may disclose your personal data to relevant parties to enable SKP to perform its statutory functions as provided under the CCA.

Where applicable, such parties include, but are not limited to:
  1. credit providers or credit service providers, financial institutions, or relevant industry stakeholders;
  2. regulatory and supervisory authorities;
  3. the Government and its agencies, as well as regulatory bodies, to the extent permitted by law, court order, or to fulfil regulatory obligations;
  4. any external party appointed by SKP to perform its functions; and
  5. current, former or prospective employers of SKP personnel.

Where SKP appoints third-party service providers to process personal data on its behalf, SKP shall ensure that such service providers are subject to confidentiality obligations and appropriate data protection measures, and that such processing is limited solely to the intended purpose in accordance with SKP’s requirements.

Retention of your personal data

SKP implements appropriate security measures to protect personal data. Personal data will be retained only for as long as necessary and will be securely disposed of when no longer required.

Your Rights

You have the right to access, correct, withdraw consent, and lodge complaints in relation to your personal data, subject to applicable laws.

Updates to this Privacy Policy

SKP reserves the right to update this policy from time to time. Any changes shall take effect upon publication.

Contact Information

If you have any queries regarding any aspect of this Privacy Policy, or if you wish to exercise your rights in relation to your personal data, you may submit your request to the website administrator via this link.

Protect and Empower
SKP is the competent authority established under the Consumer Credit Act 2025 to protect credit consumers by regulating both conventional and Shariah-compliant credit providers, as well as credit service providers in Malaysia.

© 2026 All Rights Reserved. Suruhanjaya Kredit Pengguna.


Ooops!
Generic Popup2