Privacy Policy

Privacy Policy

Last updated: 24th June 2025

Important – please read this privacy policy carefully. This privacy policy applies every time you access this website and any web pages thereof or using the online services. By accessing and/or using the website and our services, you agree to be bound by the following privacy policy (“Privacy Policy”) and any changes and updates we may make from time to time. If you do not accept this Privacy Policy or any subsequent changes or updates, you must immediately discontinue your access and/or use of the website and our services. YOUR PRIVACY IS IMPORTANT TO US This Privacy Policy applies to any services provided by or in connection with X Star Official Website (the “Website”), including websites, applications, software and related services accessed via any platform or device that link to this Privacy Policy (collectively, the “Services”). By accessing and/or using the Website and our Services, you agree to be bound by the following Privacy Policy and any changes and updates we may make from time to time. In this policy, “we”, “us” means X STAR TECHNOLOGY PTE. LTD. (“X STAR”) and its affiliates and subsidiaries, “you” means the persons to whom this Privacy Policy applies, including but not limited to users, subscribers, publishers, members, and others who visit and use the Website and our Services. The security of your Personal Data is important to us. We have in place safeguards to protect the Personal Data shared with us. This Privacy Policy describes how we may collect, use, disclose, process and manage your Personal Data. This policy applies to any individual’s Personal Data collected through the Website and our Services which is in our possession or under our control in accordance with the Personal Data Protection Act 2012 (the “PDPA”). By providing your Personal Data, you hereby agree and consent to the processing your Personal Data in the manner set forth in the prevailing Privacy Policy which may be updated or modified from time to time. WHAT PERSONAL DATA WE COLLECT We define “Personal Data” as data that can be used to uniquely identify a natural person. Personal Data can be collected from various sources (including through interfaces powered by artificial intelligence (“AI”)) and processed by us. To provide you with our Services, the Personal Data that we may collect and process includes:
  1. personal particulars (e.g. name, contact details, residential address, date of birth, identity card/FIN/passport details, vehicle information, and/or education details);
  2. specimen signature(s);
  3. financial details (e.g. income, expenses, and/or credit history);
  4. images and biometrics such as thumbprints, voice and video recordings of you, including our conversations with you for verification or other purposes;
  5. employment details (e.g. occupation, directorships and other positions held, employment history, salary, and/or benefits);
  6. artificial intelligence model training, live streaming, and other legitimate business purposes;
  7. tax and insurance information;
  8. information about your risk profile, investments, investment objectives, knowledge and experience and/or business interests and assets;
  9. financial information (e.g. account numbers and financial transactions);
  10. your personal opinions made known to us e.g. through feedback or surveys;
  11. information relating to your activities, habits, preferences and interests arising from your use of the Website and our Services, our partners or vendors; and/or
  12. other electronic data or information relating to you such as IP addresses, activity logs, online identifiers and location data through your usage of the Website and our Services or as part of their delivery to you.
You may have provided the Personal Data to us personally or authorized other individuals to provide the Personal Data to us and consent (on your behalf) to our collection of your Personal Data from these individuals. Where you give us Personal Data about other individuals, you confirm that you are authorized to disclose and consent, on their behalf, to the processing of such Personal Data for the purposes described in the section “How We Use the Personal Data”, or other purposes for which your consent has been sought and obtained. You should ensure that all data submitted to us is complete, accurate, true and correct. Failure on your part to do so may result in our inability to provide you with our Service you have requested, or process any requests and applications you may have made to us. HOW WE USE THE PERSONAL DATA
  1. Generally, we may use the Personal Data you provided for our purposes as set out below:
  1. developing and providing financial facilities, products or services (whether made available by us or through us), including but not limited to:
    1. executing Hire Purchase, commercial or other transactions and requests, including processing, settlement, clearing or reporting on these transactions;
    2. carrying out research, planning and statistical analysis and conducting surveys; or
    3. analytics for the purposes of developing or improving our products, services, security, service quality, advertising or customization strategies;
  2. assessing and processing applications, instructions or requests from you;
  3. communicating with you, including providing you with updates on changes to products, services and financial facilities (whether made available by us or through us) including any additions, expansions, suspensions and replacements of or to such products, services and financial facilities and their terms and conditions and collecting your opinions through surveys;
  4. managing our infrastructure, business operations and complying with internal policies and procedures;
  5. responding to queries or feedback;
  6. addressing or investigating any complaints, claims or disputes;
  1. verifying your identity for the purposes of providing financial facilities, products or services, granting security clearance and allowing access to our systems;
  1. conducting credit checks, screenings or due diligence checks as may be required under applicable law, regulation or directive;
  2. complying with all applicable laws, regulations, rules, directives, orders, instructions, guidance and requests from any local or foreign authorities, including regulatory, governmental, tax and law enforcement authorities or other authorities;
  3. monitoring products and services provided by or made available through us, including to prevent, detect and investigate crime/fraud;
  4. complying with obligations and requirements imposed by us from time to time by any credit bureau or credit information sharing services of which we are a member or subscriber;
  5. creating and maintaining credit and risk related models;
  6. financial reporting, regulatory reporting, management reporting, risk management (including monitoring credit exposures), audit and record keeping purposes;
  7. enabling any actual or proposed assignee or transferee, participant or sub-participant of our rights or obligations to evaluate any proposed transaction;
  8. enforcing obligations owed to us;
  9. in connection with performance of our duties and obligations when seeking consultancy or professional advice, including legal advice;
  10. administering benefits or entitlements in connection with our financial relationship with you or arising from your participation in events, campaigns, or marketing promotions by us or in conjunction with our partners. This will include the administration of loyalty, rewards programs, lucky draws, and/or sending gifts and awards;
  1. facilitating attendance at events/ functions organized by us or in which we are involved;
  2. evaluating and improving our products and services; and/or
  3. for purposes that are ancillary to or in furtherance of the above purposes.
  4. In addition, we may collect, use and disclose your Personal Data for the following purposes, depending on the nature of our relationship with you:
    • If you apply to be a member of the XPORT Dealer Portal, or if you have already been a member of the XPORT Dealer Portal:
i.to process your application for the services; ii.to maintain your account with us; iii.to provide you with the services which you have applied for; iv.to communicate with you to inform you of changes and updates to our policies, terms and conditions and other information; v.to resolve complaints and handle requests and enquiries; vi.to conduct market research for statistical, profiling and statistical analysis for the improvement of services provided to you; and vii. any other purpose relating to or reasonably necessary for any of the above. 2.2 If you submit an application to us as a candidate for employment or an internship: i.to process your application including pre-recruitment checks; ii.to collect information about your suitability for the position applied for; and iii. any other purpose relating to or reasonably necessary for any of the above. In addition to the above purposes, we may also use Personal Data for purposes set out in the Terms and Conditions on the Services that govern our relationship with you. USE OF PERSONAL DATA FOR MARKETING PURPOSES We may use your Personal Data to recommend you products or services, including special offers, promotions, contests or entitlements that may be of interest to you or for which you may be eligible. Such marketing messages may be sent to you in various modes including but not limited to electronic mail, direct mailers, short message service, telephone calls, facsimile and other mobile messaging services. In doing so, we will comply with the Personal Data Protection Act of Singapore (PDPA). In respect of sending telemarketing messages to your Singapore telephone number via short message service, telephone calls (voice or video), facsimile and other mobile messaging services, please be assured that we shall only do so if:
  1. you have provided your clear and unambiguous consent in writing or other recorded form;
  2. you have not indicated to us in our ongoing relationship that you do not wish to receive telemarketing messages sent to your Singapore telephone number and you have not registered that number with the National Do Not Call Registry.
To find out more on how you can change the way we use your Personal Data for marketing purposes, please contact us (please see the “CONTACT US” section below). At the same time, we may continue to send you messages as part of our ongoing relationship with you and nothing in this section shall vary or supersede the terms and conditions that govern our relationship with you. DISCLOSURE AND SHARING OF PERSONAL DATA We may from time to time and in compliance with all applicable laws on data privacy, disclose your Personal Data to any personnel of us or to third parties, whether located in Singapore or elsewhere, in order to carry out the purposes set out above. Please be assured that when we disclose your Personal Data to such parties, we require them to ensure that any Personal Data disclosed to them are kept confidential and secure. For more information about the third parties with whom we share your Personal Data, you may, where appropriate, wish to refer to the agreement(s) and/or terms and conditions that govern our relationship with you. You may also contact us for more information (please see the “CONTACT US” section below). You agree that, in order to carry out the purposes set out above, we may transfer, store, process and/or deal with your Personal Data outside Singapore. In doing so, we will comply with the PDPA. THIRD-PARTY WEBSITES/APPLICATIONS We may provide links or references to other websites or platforms operated by X STAR, its affiliates, subsidiaries, or third parties. These platforms are not governed by this Privacy Policy. When accessing third-party platforms (including those operated by X STAR or its affiliates or subsidiaries), you must review their privacy policies, as they govern your use of those websites/applications. We do not control, review, or endorse these third-party platforms or their content, and we assume no responsibility for their practices. The terms of this Privacy Policy do not extend to third-party websites, applications, or content, nor to any data collection that occurs after you click on links to these third-party websites, applications or content.

CHILDREN AND TEENS

We do not knowingly collect or maintain Personal Data from individuals under 18 years-of-age (“Young User”). If we learn that Personal Data of Young User has been collected on or through the Website and our Service, we will take appropriate steps to delete this information. If you believe that we have inappropriately collected Personal Data from a Young User, please contact us as soon as possible. RETENTION OF PERSONAL DATA Your Personal Data and other information are retained as long as the purpose for which it was collected and remains until it is no longer necessary for any other legal or business purposes. You may request deletion of your account at any time by sending your request to us via email listed in CONTACT US. Following such request with appropriate review by us, we will delete the information that it is not required to retain for purposes of regulatory, tax, insurance, litigation, or other legal requirements. For example, we retain location, device, and usage data for these purposes for a reasonable period as may be necessary; while it retains such data, it may also use it for purposes of safety, security, fraud prevention and detection, and research and development. In certain circumstances, we may be unable to delete your account, such as if there’s a balance on the account or an unresolved claim or dispute. Upon resolution of the issue preventing deletion, we will delete the account as described above. We may also retain certain information if necessary for purposes of safety, security, and fraud prevention. For example, if we deactivate a user’s account because of unsafe behavior or security incidents, we may retain certain information about that account to prevent that user from opening a new account on the Platform in the future. If you violate our any policies or conditions on the Platform, we may remove your profile and user content from public view immediately, but may keep other information about you to process the violation.

DATA SECURITY

We take appropriate administrative, technical and physical security measures to safeguard your Personal Data from unauthorized access and disclosure. For example, from our side, only authorized employees are permitted to access Personal Data, and they may do so only for permitted business functions. Please be advised, however, that we cannot fully eliminate security risks associated with the storage and transmission of your Personal Data. You should use caution whenever submitting information through the Website and our Services and take special care in deciding which information you provide us with. You are responsible for maintaining the secrecy of your password and account information at all times.

ACCESS, CORRECTION AND WITHDRAW OF YOUR PERSONAL DATA

You may request access or make corrections to your Personal Data held by us or withdraw your consent. We may charge a fee for processing your request for access. Such a fee depends on the nature and complexity of your access request. Information on the processing fee will be made available to you. We may also take a reasonable period of at least 10 business days after receiving your correction request to process and update the change. Where a request is made to withdraw consent, we will inform you of the likely consequences of withdrawing consent and the timeframe to effect the withdrawal. Such requests will be processed within a reasonable timeframe, taking 10 business days or more depending on the complexity of the request. However, your withdrawal of consent will not affect the validity of the Personal Data processing activities that we have been carried out based on your consent prior to the withdrawal. In some cases, not providing the Personal Data, or withdrawing consent to the use, processing, or disclosure of the Personal Data, may adversely affect our ability to continue our Services. There are also other data protection and privacy laws that provides relevant individuals with additional rights including the right to obtain information on how we processes your Personal Data, receive certain information provided in an electronic format and/or request that these be transmitted to a third party, request for your information to be erased, object or restrict the use or processing of your information in some circumstances. These will be subject to ongoing obligations imposed on the Website and our Services pursuant to any applicable law or regulation, and/or the legitimate reason or entitlement to continue processing your information, and/or to refuse that request. Please contact us (please see the “CONTACT US” section below) for details on how you may request access, correct or exercise your rights with respect to the processing of your Personal Data. CONTACT US To contact us on any aspect of this Privacy Policy or your Personal Data or to provide any feedback that you may have, please contact us in the following ways: Via post: X STAR TECHNOLOGY PTE. LTD. 7 TEMASEK BOULEVARD, #37-03, SUNTEC TOWER ONE, SINGAPORE 038987 Attn: Customer Service Executive Via email: yvonne.liaw@xstar.sg In addition, should we be aware that your data has been compromised and is, or likely to result in significant harm to you, we will notify you and advise on the possible steps to protect yourself from further potential harm. Please be assured that you can always validate such notifications from us by contacting us. AMENDMENTS AND UPDATES OF THE PRIVACY POLICY This Privacy Policy does not affect any rights which we may have at law in connection with the handling of your Personal Data. We may amend this policy from time to time to ensure that this policy is consistent with any developments to the way we use your Personal Data or any changes to the laws and regulations applicable to us. We will make available the updated policy on the Website and our Services. You agree to be bound by the prevailing terms of the Privacy Policy as updated from time to time on the on the Website and our Services. All communications, transactions and dealings with us shall be subject to the latest version of this Privacy Policy in force at the time. When we update the Privacy Policy, we will notify you by updating the “Last Updated” date at the top of this policy and posting the new Privacy Policy or providing any other notice required by applicable law. Your continued access to or use of the Website and our Services after the date of the updated policy constitutes your acceptance of the updated policy. If you do not agree to the updated policy, you must stop accessing or using the Website and our Services.