Legal · PDPA

Privacy notice.

How we collect, use, disclose and protect your personal data under the Personal Data Protection Act 2010.

Draft — pending legal review.

Last updated: September 2026.

This Privacy Notice explains how SMN Capital Solution ("we", "us") collects, uses, discloses and protects your personal data in line with the Personal Data Protection Act 2010 (PDPA), as amended by the Personal Data Protection (Amendment) Act 2024. It applies to personal data we receive through this website, by WhatsApp, email or phone, or in person.

1. Who we are

SMN Capital Solution is a Malaysian loan consultancy. We review documents, prepare applications and submit them to partner banks on our clients' behalf. We are not a bank or a lender, and we do not make credit decisions. SSM registration number: [to be inserted].

For any question about this notice, contact us at hello@smncapital.com.my.

2. Personal data we collect

  • Identity details, such as your name, MyKad or passport number, date of birth and nationality.
  • Contact details, such as your mobile number, email address and correspondence address.
  • Employment and income details, such as your employer, occupation, salary slips, EA form, EPF statement, business registration and tax returns.
  • Financial documents, such as bank statements, existing loan statements and property or vehicle documents.
  • Loan details, such as the type and amount of financing you are considering and your existing commitments.
  • Credit information, such as CTOS or CCRIS reports that you provide to us, or that we obtain with your consent.
  • Enquiry form data, including your loan type, amount, income range, preferred contact method and a record of your consent.
  • Website and technical data, such as your IP address, browser type, pages visited and referring website.

3. How we obtain your personal data

We collect personal data directly from you when you submit an enquiry, send us documents or speak with a consultant. With your consent, we may also receive information from credit reporting agencies, from partner banks about the progress of your application, and from people you authorise to act for you. If you give us personal data about another person, such as a joint applicant or a guarantor, you confirm that the person has agreed to this.

4. Why we use your personal data

  • to respond to your enquiry and contact you by your preferred channel;
  • to assess your financing needs and advise which partner banks may suit your profile;
  • to review your documents, prepare your application and submit it to a partner bank with your consent;
  • to follow up with the bank and keep you informed of the progress of your application;
  • to keep records, handle complaints and meet our legal and regulatory obligations;
  • to operate, secure and improve this website.

We will not use your personal data for marketing without your separate consent, and you can opt out at any time.

5. Who we disclose your personal data to

  • Partner banks and financial institutions: only with your consent, and only for the purpose of assessing the application you have asked us to submit.
  • Service providers who support our operations, such as website hosting, email and IT providers, under obligations of confidentiality and only for the services they provide to us.
  • Professional advisers, such as our lawyers and auditors, where necessary.
  • Authorities, where we are required or permitted by law, or by an order of court.

We do not sell or rent your personal data to anyone.

6. Transfers outside Malaysia

Some of our service providers, such as website hosting or email, may store or process data on servers outside Malaysia. Where this happens, we take reasonable steps to ensure that your personal data receives a level of protection comparable to the PDPA, as the Act requires.

7. Security

We take practical steps to protect your personal data from loss, misuse, unauthorised access, modification or disclosure. These include access controls, encrypted connections for this website and limiting access to staff who need it. No method of transmission or storage is completely secure, so we cannot promise absolute security. If a personal data breach occurs that is likely to cause significant harm, we will notify the Personal Data Protection Commissioner and, where required, the individuals affected.

8. How long we keep your personal data

We keep personal data only for as long as it is needed for the purpose it was collected for, and for any period required by law or needed to resolve disputes. After that, we securely delete or anonymise it. If your enquiry does not proceed, we delete your details after a reasonable period, unless you ask us to keep them. [Retention periods to be confirmed.]

9. Your rights

  • Access: ask for a copy of the personal data we hold about you.
  • Correction: ask us to correct personal data that is inaccurate, incomplete, misleading or out of date.
  • Withdraw consent: withdraw your consent to our processing of your personal data, including for marketing.
  • Limit processing: ask us to limit the processing of your personal data, or object to processing that is likely to cause you damage or distress.
  • Data portability: ask us to transmit your personal data to another data controller, where technically feasible and as provided under the Act.

To make a request, email hello@smncapital.com.my. We may need to verify your identity first, and we will respond within the time set by the PDPA. A fee may be charged for a data access request, as permitted by law. If you withdraw consent or limit processing, we may be unable to continue assisting with your application.

10. Obligatory and voluntary data

Fields marked as required in our enquiry form, and the documents a bank needs for its assessment, are obligatory. If you do not provide them, we may be unable to respond to your enquiry or assist with your application. All other information is voluntary.

11. Cookies and analytics

This website uses essential cookies so that it works properly and forms stay secure. If we use analytics tools, such as Google Analytics, they collect aggregated information about how visitors use the site. You can block or delete cookies in your browser settings; some features may then not work as intended.

12. Children

Our services are intended for adults. We do not knowingly collect personal data from anyone under 18 years of age.

13. Changes to this notice

We may update this notice from time to time. The latest version is always published on this page, with the date it was last updated.

14. Contact us

SMN Capital Solution
Email: hello@smncapital.com.my
Address: [to be inserted]

15. Language

This notice is issued in English, Bahasa Malaysia and Chinese. If there is any inconsistency between the versions, the English version prevails.