Skip to content

Privacy Policy

How EVG Gold collects, uses, and protects your personal data

Effective Date: February 2025

EVERGREEN DIGITAL GOLD SDN. BHD. (202501010260 / 1611674-H)

This Privacy Policy explains how Evergreen Digital Gold Sdn. Bhd. ("EVG Gold", "we", "us", or "our") collects, uses, discloses, and protects your information when you use our digital gold trading platform, websites, and mobile applications (collectively, the "Services"). By using our Services, you agree to the practices described in this Privacy Policy.

1. Information We Collect

We collect the following types of information:

Account Data

  • Full name (as per NRIC/identification document)
  • Email address
  • Phone number
  • Identity verification details (NRIC, selfie photos for KYC)
  • Bank account information for withdrawals
  • Communication preferences

Transaction Data

  • Buy and sell orders
  • Gold balances and holdings
  • Payment confirmations and receipts
  • Withdrawal requests and history
  • Commission and referral earnings

Technical Data

  • Device information (device type, operating system)
  • IP address
  • Browser type and version
  • Cookies and similar tracking technologies
  • Usage analytics and app interaction data
  • Location data (country/region for compliance purposes)

2. How We Use Your Information

We use your personal information to:

  • Provide Services: Operate and maintain your EVG Gold account, and enable you to buy, sell, and withdraw Au 999.9 digital gold
  • Process Transactions: Quote prices, execute buy/sell orders, send confirmations and receipts, and maintain your balances and transaction history
  • Identity Verification: Complete KYC (Know Your Customer) requirements as mandated by Malaysian regulations
  • Security: Maintain platform security, prevent fraud, detect abuse, and protect user accounts
  • Legal Compliance: Comply with applicable laws, regulations, anti-money laundering requirements, and audit obligations
  • Communication: Send service updates, transaction notifications, and respond to support inquiries
  • Improvement: Analyze usage patterns to improve our platform, features, and user experience

3. Legal Bases for Processing

We process your personal data based on the following legal grounds:

  • Contractual Necessity: Processing required to perform our agreement with you (e.g., executing transactions, managing your account)
  • Legal Obligation: Processing required to comply with Malaysian laws, including the Personal Data Protection Act 2010 (PDPA), anti-money laundering regulations, and Bank Negara Malaysia requirements
  • Legitimate Interests: Processing for our legitimate business interests (e.g., fraud prevention, platform security, service improvement), provided these do not override your rights
  • Consent: Where you have provided explicit consent for specific processing activities

4. Cookies and Similar Technologies

We use cookies and similar technologies to:

  • Remember your login status and preferences
  • Maintain session state for security
  • Analyze traffic and usage patterns
  • Enhance platform security and prevent fraud

You may control cookies through your browser settings. However, disabling certain cookies may affect the functionality of our Services.

5. Sharing Your Information

We may share your information with:

  • Service Providers: Third-party companies that support our operations, including hosting providers, analytics services, and customer support tools
  • Payment Partners: Banks and payment gateway providers to facilitate deposits/top-ups, withdrawals, refunds (if any), and transaction settlement
  • Gold Custodians: Authorized vault operators and gold suppliers for physical gold custody/allocation and (where applicable) physical gold withdrawals
  • Regulatory Authorities: Malaysian regulators, Bank Negara Malaysia, law enforcement, or other authorities when required by law
  • Professional Advisors: Auditors, lawyers, and consultants for compliance and business purposes
  • Business Transfers: In connection with any merger, acquisition, sale of assets, or business reorganization

We do not sell your personal information to third parties for marketing purposes.

6. Google Sign-In / Google User Data

If you choose to sign in using Google, we receive limited Google account information such as your name, email address, profile picture (if available), and a Google account identifier as part of the authentication process.

We use this information only to:

  • Authenticate you and create/link your EVG Gold account
  • Secure your account and prevent fraud/abuse

We do not use Google Sign-In to access or read your Gmail, Google Drive, Google Contacts, or any other Google data beyond what is necessary for sign-in.

7. International Data Transfers

Your data is primarily stored and processed in Malaysia. If we transfer your data to other countries (e.g., for cloud hosting or backup purposes), we ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

8. Data Retention

We retain your personal data for as long as necessary to:

  • Provide the Services and maintain your account
  • Comply with legal and regulatory requirements (including record-keeping obligations)
  • Resolve disputes and enforce our agreements
  • Support legitimate business purposes

When your data is no longer needed, we will securely delete or anonymize it.

9. Security Measures

We implement industry-standard security measures to protect your data, including:

  • Encryption of data in transit and at rest
  • Secure authentication mechanisms
  • Regular security assessments and monitoring
  • Access controls limiting data access to authorized personnel
  • Secure physical gold custody with insured, audited vaults

While we take reasonable precautions, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your information.

10. Your Rights

Under the Personal Data Protection Act 2010 (PDPA), you have the right to:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of inaccurate or incomplete data
  • Withdrawal of Consent: Withdraw consent for processing where consent is the legal basis
  • Complaint: Lodge a complaint with the relevant data protection authority

To exercise these rights, please contact us using the details below. We may need to verify your identity before processing your request.

11. Children's Privacy

Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us immediately so we can take appropriate action.

12. Third-Party Links

Our Services may contain links to third-party websites, services, or applications. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Services. The "Effective Date" at the top indicates when this policy was last revised. We will notify you of significant changes through the app or by email. Your continued use of our Services after any changes constitutes acceptance of the updated Privacy Policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Evergreen Digital Gold Sdn. Bhd.

Notis Privasi (Bahasa Malaysia)

Saya mengisytiharkan bahawa saya telah membaca dan faham serta bersetuju tertakluk kepada Notis Privasi EVERGREEN DIGITAL GOLD SDN. BHD. (202501010260 / 1611674-H) dan saya memberikan persetujuan serta kuasa kepada EVG:

  • Untuk meminta dan memperolehi semua maklumat dan data peribadi bagi tujuan memproses permohonan dan bagi tujuan lain yang diperlukan berkaitan dengan produk dan perkhidmatan yang ditawarkan oleh EVG.
  • Untuk memaklumkan data peribadi saya kepada entiti lain dalam EVG serta pihak luar apabila dikehendaki.
  • Untuk mengumpul dan memproses data peribadi sensitif saya untuk tujuan permohonan ini, yang mana berkaitan.

Dengan menggunakan perkhidmatan kami, saya mengesahkan bahawa kesemua data peribadi yang saya telah berikan adalah benar, terkini dan tepat. Sekiranya terdapat apa-apa perubahan pada mana-mana data peribadi saya, saya akan maklumkan kepada EVG dengan serta merta.