Privacy Policy — Kredit Lab

Last updated: 27 September 2026

1. Who we are

Kredit Lab is a brand of Capital Island Sdn Bhd ("we", "us"), a company incorporated in Malaysia with its business address at Lot 5.66, 5th Floor, Wisma Central, Jalan Ampang, 50450 Kuala Lumpur. We can be reached at advisory@kreditlab.my.

2. What we collect

Documents you upload — audited financial statements, management accounts, and bank statements, which may contain personal and financial data.
Contact details — name, company, phone number, and email address when you purchase a report or submit an enquiry.
Payment records — details of your bank transfer or other payment, kept for our accounts.

3. How we use it

To produce the report or service you purchased.
To respond to enquiries you send us.
To meet legal and regulatory obligations.
To prepare anonymised examples of our work. Company names, registration numbers, individuals' names and other identifying details are removed first.

4. What we do NOT do

Your documents are not used to train AI models.
Your data is never sold or shared with third parties for marketing.
We do not pass your information to lenders or any other party without your explicit instruction.

5. Retention and deletion

We keep your documents for as long as we need them for your engagement and any follow-up work, and for as long as the law requires. After that, we delete them or remove anything that identifies you.

6. Where your data is processed, and security

We use established technology providers, such as Microsoft Azure, for hosting, storage, document processing and AI-assisted analysis. Some of them process and store data outside Malaysia. We select providers with established security practices, and our own systems use encrypted connections and access controls.

We take reasonable steps to protect your data. However, no method of storing or transmitting data over the internet is completely secure, so we cannot guarantee absolute security.

7. Your rights

Subject to the Personal Data Protection Act 2010, you may request access to, correction of, or deletion of your personal data by writing to advisory@kreditlab.my. See our PDPA Notice for the bilingual notice required under the Act.

8. Changes

We will post any changes to this policy on this page with an updated date.