Privacy Policy

1. Introduction

TML Remittance Center Sdn. Bhd. ("TML", "we", "us" or "our") is a licensed Money Services Business operating under MSB Licence Number 00455 and regulated by Bank Negara Malaysia (BNM).

This Privacy Policy explains how we collect, use, process, disclose, store and protect your personal data when you register for, access or use the TML Remit Mobile App ("App") and our remittance services.

This Policy should be read together with our Terms and Conditions. By using the App, you consent to the collection and processing of your personal data as described in this Policy.

2. Who We Are

TML Remittance Center Sdn. Bhd. is a Licensed Money Services Business in Malaysia (Perniagaan Perkhidmatan Wang Berlesen / Money Transfer Business), holding MSB Licence Number 00455 issued under the Money Services Business Act 2011.

We are the data controller responsible for the personal data processed through the App.

You may verify our licence status with Bank Negara Malaysia at www.bnm.gov.my.

3. Personal Data We Collect

Depending on how you use the App, we may collect the following categories of personal data:

• Identity & KYC data — full name, date of birth, gender, nationality, identification type and number (e.g. passport, MyKad, work permit), photographs of identification documents and a selfie image.
• Contact data — mobile number, email address, residential address, postcode, state and city.
• Employment & financial data — occupation, employer or company name, source of funds and purpose of transfer.
• Transaction data — beneficiary details, destination country, amount, exchange rate, payment method and transaction history.
• Account & security data — username, password (stored in encrypted form), OTP and biometric authentication settings.
• Device & technical data — device identifiers, IP address, operating system, app version and log data.

4. How We Collect Your Data

We collect personal data:

• Directly from you when you register, complete KYC verification, add beneficiaries or initiate transactions.
• When you visit a TML Remittance Center branch for verification or assistance.
• Automatically through your use of the App (device, log and usage data).
• From third parties such as payment partners, correspondent banks and regulatory or sanctions-screening databases, where permitted by law.

5. How We Use Your Data

We process your personal data for the following purposes:

• To register and verify your identity (KYC) and establish your account.
• To process and execute international money transfer transactions.
• To comply with our legal and regulatory obligations, including Anti-Money Laundering (AML), Counter Financing of Terrorism (CFT) and sanctions screening.
• To detect, prevent and investigate fraud, financial crime and unauthorized activity.
• To provide customer support and respond to your enquiries.
• To send transaction confirmations, receipts, OTPs and service notifications.
• To maintain the security, integrity and proper operation of the App.
• To improve our services and remember your preferences (such as your language).

6. Legal Basis & Regulatory Obligations

We process your personal data in accordance with the Personal Data Protection Act 2010 (PDPA), and to meet our obligations as a licensed Money Services Business under the Money Services Business Act 2011, the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA), and the requirements and guidelines issued by Bank Negara Malaysia.

Certain personal data is mandatory. Without it, we may be unable to verify your identity, open your account or process your transactions.

7. Disclosure of Your Data

We may disclose your personal data to:

• Bank Negara Malaysia and other regulatory, supervisory or enforcement authorities, where required by law.
• Correspondent banks, payout partners, paying agents and beneficiary banks necessary to complete your transfer.
• Payment service providers and financial institutions facilitating your payment (e.g. FPX).
• Sanctions and watchlist screening service providers for compliance checks.
• Professional advisers, auditors and IT service providers bound by confidentiality obligations.
• Law enforcement agencies or courts, where required by law or to protect our legal rights.

We do not sell your personal data to third parties.

8. Cross-Border Transfers

Because we provide international remittance services, your personal data (including beneficiary information) may be transferred to and processed in countries outside Malaysia in order to complete your transactions.

Where personal data is transferred abroad, we take reasonable steps to ensure it is handled securely and in accordance with applicable laws.

9. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described in this Policy and to comply with our legal, regulatory and record-keeping obligations.

As a licensed Money Services Business, we are required to retain transaction and customer due diligence records for the minimum periods prescribed under Malaysian law (including AML/CFT requirements), typically not less than seven (7) years after the end of the business relationship or completion of a transaction.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption, access controls and secure authentication (such as OTP and biometric login).

While we take reasonable steps to safeguard your data, no method of transmission or storage is completely secure. You are responsible for keeping your login credentials, OTP and device secure.

11. Your Rights

Subject to the PDPA and applicable laws, you have the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete personal data.
• Withdraw your consent or limit the processing of your personal data (which may affect our ability to provide services).
• Enquire about how your personal data is processed.

To exercise these rights, please contact us using the details in the "Contact Us" section below. Please note that certain data cannot be deleted while we are legally required to retain it.

12. Cookies & Tracking Technologies

Our website and App may use cookies and similar technologies to function correctly, keep your session secure, remember your preferences (such as your selected language) and understand how our services are used.

We use the following categories of cookies:

• Strictly necessary — required for the website to operate, including security and remembering your cookie choice. These cannot be switched off.
• Preference — remember settings such as your chosen language.
• Analytics (where enabled) — help us understand usage so we can improve our services.

When you first visit our website, you will be asked to Accept or Decline non-essential cookies. If you Decline, only strictly necessary cookies will be used. You can change your choice at any time using the Cookie Settings link or by clearing your browser storage.

13. Children & Minors

The App is intended for individuals who are at least 18 years old. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a minor without appropriate consent, we will take steps to delete it.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will be made available through the App and our website and takes effect from the date published. Your continued use of the App constitutes acceptance of the updated Policy.

15. Contact Us

If you have any questions, requests or complaints regarding this Privacy Policy or your personal data, please contact us:

• Email: tmloperation@i-tml.com
• Operation Team: 07-438 1268
• Website: www.i-tml.com / www.i-tml.net

You may also verify our licence or refer regulatory matters to Bank Negara Malaysia at www.bnm.gov.my.