a) We may collect the following categories of personal data when you use our platform or services:

• Identity Data: Full name, identification/passport number (for regulators), and company registration number
• Contact Data: Email address, mobile number, billing address
• Technical Data: IP address, browser type, device data, cookies
• Marketing Preferences: Newsletter subscriptions, promotional consents

b) We only collect data necessary to deliver our services, comply with legal obligations, and improve user experience.

a) Your data is processed for the following purposes:

• To comply with applicable legal and regulatory obligations
• For fraud prevention and system security
• With your consent, to send promotional offers, newsletters, and marketing campaigns

a) In accordance with PDPA and GDPR, we process personal data under the following lawful bases:

• Contractual necessity: To fulfill our services
• Legal compliance: To meet consumer protection laws
• Legitimate interests: To enhance platform functionality and prevent fraud
• Consent: For email marketing or when storing optional data

a) We may disclose personal data to the following parties:

• Regulatory Authorities: As required by Malaysian law or court order
• Third-Party Service Providers: For analytics, cloud hosting, email marketing, or support tools (bound by confidentiality)

b) We do not sell or trade your personal data.

a) While Stratford Credit Sdn Bhd is based in Malaysia, some data may be processed by service providers in jurisdictions outside Malaysia or the EU.

b) In such cases, we ensure adequate safeguards are in place, such as standard contractual clauses (SCCs) under GDPR or equivalent agreements.

a) Personal data will be retained only as long as necessary to fulfill the purposes outlined in this Policy.

b) Data related to financial or tax reporting may be retained up to 7 years as per Malaysian law.

c) You may request deletion of your data unless it is required for legal purposes.

a) Depending on your location, you have the right to:

• Access your personal data
• Correct or update your personal data
• Withdraw consent to processing
• Request deletion ("right to be forgotten")
• Object to certain processing activities
• Request data portability (GDPR only)

b) To exercise these rights, contact us at admin@orixresources.com

a) We use cookies and similar technologies to:

• Remember user preferences
• Track website performance
• Analyze visitor behavior (e.g., Google Analytics)

b) You may disable cookies in your browser settings, though this may affect functionality.

a) Stratford Credit Sdn Bhd implements appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, or destruction, including:

• SSL encryption
• Role-based access control
• Secure cloud hosting (ISO 27001 certified)
• Regular security audits

a) Stratford Credit Sdn Bhd does not knowingly collect personal data from any individual below the age of 21 years of age with or without parental consent.

b) If we become aware of such data, it will be deleted promptly.

a) This Policy may be revised from time to time.

b) The latest version will be posted on our website.

c) We encourage users to check regularly for updates.