1. Introduction

Straitmere ("we", "our", "us") is committed to protecting the privacy and personal data of our clients and visitors. This Privacy Notice explains how we collect, use, store and protect your personal data when you use our case support services.

By using our services you agree to the practices described in this Privacy Notice. If you do not agree with it, please do not use our services.

This Privacy Notice is issued in accordance with the Personal Data Protection Act 2010 (Act 709) of Malaysia ("PDPA") and applies to personal data processed in connection with commercial transactions in Malaysia.

2. Data we collect

2.1 Data you provide directly

• Given name and family name
• Email address and phone number
• Postal address
• Information about the fraud (type, amount, circumstances)
• Identification documents and supporting evidence
• Bank details relevant to the recovery of funds

2.2 Data collected automatically

• IP address and browsing data
• Information about the devices you use
• Cookies and similar technologies
• Website usage data

3. How we use your data

We use your personal data for the following purposes:

• Providing our case support services
• Communicating with you about your case
• Handling enquiries and preparing documentation
• Meeting legal and regulatory obligations
• Improving our services
• Preventing fraud and unlawful activity

4. Basis for processing under the PDPA

Under the PDPA we process your personal data on the following bases:

• Consent (General Principle): where you have given your consent to the processing of your personal data
• Performance of a contract: where processing is necessary for the performance of a contract to which you are a party, or to take steps at your request with a view to entering into a contract
• Legal obligation: where processing is necessary for compliance with a legal obligation to which we are subject
• Legitimate purposes: where processing is necessary for our legitimate interests, such as improving our services and preventing fraud, provided this does not unduly prejudice your rights

Where we process sensitive personal data — for example information relating to the commission or alleged commission of an offence — we do so only with your explicit consent or where otherwise permitted under section 40 of the PDPA.

5. Disclosure of data

We do not sell, rent or share your personal data with third parties, except in the following circumstances:

• With your express consent
• With our legal and financial partners for the purpose of pursuing the recovery of your funds
• With banks, payment providers and platforms involved in your case
• With regulators, law enforcement or authorities where required by law
• With service providers who process data on our behalf and under our instructions

This reflects the Disclosure Principle under the PDPA: your data is disclosed only for the purpose for which it was collected, or a directly related purpose.

6. Data retention

In line with the Retention Principle under the PDPA, we keep your personal data only for as long as necessary to fulfil the purposes for which it was collected, or for as long as required by law. When personal data is no longer required for those purposes, it is destroyed or permanently deleted.

7. Your rights under the PDPA

Under the Personal Data Protection Act 2010 you have the following rights:

• Right of access: to request access to the personal data we hold about you
• Right to correct: to request that inaccurate, incomplete or out-of-date data be corrected
• Right to withdraw consent: to withdraw your consent to the processing of your personal data at any time
• Right to prevent processing likely to cause damage or distress: to require us to stop processing where it would cause you unwarranted damage or distress
• Right to prevent processing for direct marketing: to require us to stop processing your data for direct marketing purposes

To exercise any of these rights, contact us using the details in section 13. Please note that withdrawing consent may mean we can no longer act on your case.

8. Data security

In line with the Security Principle under the PDPA, we take practical steps to protect your personal data from loss, misuse, unauthorised access, alteration or disclosure. These include restricting access to those who need it, protecting our systems, and requiring our service providers to apply equivalent safeguards.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security — but we treat the material you send us with the seriousness it deserves, because in fraud cases it is often sensitive.

9. Cookies and similar technologies

We use cookies to operate the site, understand how it is used and remember your preferences. You can choose which categories to allow through the cookie settings on this site, and change your choice at any time. Essential cookies are required for the site to function and cannot be switched off.

10. Transfers outside Malaysia

Online fraud rarely stays in one country. Pursuing your case may require your personal data to be transferred to parties outside Malaysia — for example banks, payment providers, platforms or authorities in the jurisdictions where your money went. Where we transfer personal data outside Malaysia, we do so in accordance with section 129 of the PDPA and take steps to ensure it remains adequately protected.

11. Minors

Our services are intended for persons aged 18 or over. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us and we will remove it.

12. Changes to this Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in our practices or in the law. The date at the top of this page shows when it was last revised. We encourage you to review it periodically.

13. Contact us

If you have questions about this Privacy Notice, or wish to exercise any of your rights under the PDPA, you can reach us at:

• Enquiry form: Send us your case
• Phone: +60 3-2181 7460
• Address: Level 22, Q Sentral, 2A Jalan Stesen Sentral 2, 50470 Kuala Lumpur

14. Supervisory authority

If you believe your personal data has been processed in breach of the Personal Data Protection Act 2010, you may lodge a complaint with the Personal Data Protection Commissioner (Jabatan Perlindungan Data Peribadi), the authority responsible for enforcing the PDPA in Malaysia.