Privacy Policy

JMYR Sdn. Bhd. (Company No. 202501052256 (1653663-P)) ("JMYR", "we", "us", or "our") is the issuer of JMYR and the controller of the personal data described in this notice. JMYR is a Malaysian private limited company that operates as a stablecoin issuer and settlement provider.

This notice applies when you:

• visit our websites, wallet portal, applications, or support channels;
• register for or use JMYR services;
• purchase, hold, transfer, or redeem JMYR;
• use a merchant, partner, or API integration involving JMYR; or
• communicate or otherwise interact with us.

This notice is intended to be read with our Terms and Conditions and is issued with regard to Malaysia's Personal Data Protection Act 2010 and other applicable laws.

Identity and verification data

This may include your name, national registration identity card or passport details, nationality, date of birth, residential address, identification images, facial or liveness-verification information, and verification results. For organisations, it may include registration information, ownership or control information, directors, and authorised representatives.

Compliance and risk data

This may include eKYC records, AML/CFT and sanctions-screening results, transaction-monitoring alerts, risk ratings, source-of-funds information, wallet-control status, and records needed to investigate suspected fraud or comply with legal requirements.

Financial and transaction data

This may include bank-account information used for purchases or redemptions, payment and redemption records, wallet addresses, balances, and blockchain transaction identifiers and metadata.

Device, usage, and support data

Our systems and service providers may process IP address, browser and device information, timestamps, requested pages, session information, cookie or analytics identifiers, API and security logs, and the details you provide when contacting support.

We may obtain personal data:

• directly from you when you register, verify your identity, transact, or contact us;
• from an organisation or representative acting for you;
• from payment, identity-verification, compliance, banking, and regulated partners;
• from public registers, sanctions lists, fraud-prevention sources, and blockchain records; and
• automatically from the systems used to deliver, measure, and protect our services.

We process personal data to:

• create and manage accounts, wallets, and service access;
• perform identity verification and ongoing customer due diligence;
• apply AML/CFT, sanctions-screening, transaction-monitoring, and fraud controls;
• process purchases, transfers, redemptions, notifications, and support requests;
• secure our services, investigate incidents, enforce limits, and protect users;
• comply with law, valid regulatory or law-enforcement requests, and record-keeping duties;
• operate, troubleshoot, measure, and improve our website and services; and
• establish, exercise, or defend legal claims.

Depending on the activity and applicable law, we rely on the need to provide the service you request, compliance with legal obligations, our legitimate interests in operating a secure service, and your consent where required.

We disclose personal data only where reasonably needed:

• Service and technology providers. Providers may support hosting, identity verification, analytics, security, communications, and customer support.
• Payment and regulated partners. Banks, payment providers, remittance providers, custodians, and other appropriately regulated parties may process data for activities within their regulatory perimeter.
• Authorities and professional advisers. We may disclose data where required by law, valid legal process, or a competent authority, or to protect rights, safety, and financial integrity.
• Business changes. Data may be disclosed in connection with a financing, reorganisation, merger, sale, or transfer, subject to applicable safeguards.

We do not sell personal data.

JMYR is issued on the Zetrix blockchain. Blockchain transactions may record wallet addresses, token amounts, transaction identifiers, timestamps, and related metadata on a ledger that can be visible to network participants or the public.

Blockchain records are designed to be persistent. JMYR may not be able to alter, hide, or delete information recorded on the network, even when we can delete or restrict related information in our own off-chain systems. Avoid placing personal information in transaction fields unless it is necessary.

JMYR operates from Malaysia, but our providers and partners may process or store personal data in other countries. Privacy laws in those places may differ from Malaysian law.

Where required, we use contractual, organisational, and technical safeguards intended to provide an appropriate level of protection for transferred data.

We retain personal data only for as long as reasonably needed to provide and secure our services, meet legal and regulatory obligations, investigate fraud or incidents, resolve disputes, and preserve appropriate business records.

Some KYC, AML/CFT, transaction, and financial records may need to be kept for up to seven years or another period required by applicable law. Backup, security, audit, legal-hold, and blockchain records may remain for longer where deletion is not immediately possible or legally permitted.

We use administrative, technical, and organisational safeguards designed for the nature of our services. These may include encryption in transit and at rest, role-based access controls, multi-factor authentication, network and application protections, monitoring, audits, and incident-response procedures.

No internet or blockchain service is completely secure. Please protect your credentials and promptly report suspected unauthorised access to [email protected].

Subject to applicable law and exceptions, you may ask to access or correct your personal data, withdraw consent where processing depends on consent, limit certain processing, or request deletion of data that we are not required to retain.

Some information is necessary to verify users, comply with law, or provide a requested service. Withdrawing consent or requesting deletion may therefore affect your ability to use JMYR services. Send privacy requests to [email protected].

We use Google Analytics to measure visits and interactions so we can understand and improve our website. Google Analytics uses cookies and similar technologies and may process usage and session statistics, browser and device information, IP-derived information, and approximate location.

We use Microsoft Clarity to understand website interactions through behavioural metrics, heatmaps, and session replay. Website usage data may be captured using first- and third-party cookies and similar technologies. Learn more in the Microsoft Privacy Statement.

You can manage cookies in your browser. You can also install the Google Analytics Opt-out Browser Add-on. Blocking cookies may affect some website features.

JMYR services are not intended for anyone under 18 years old, and we do not knowingly collect personal data from children. Contact us if you believe a child has provided personal data to us.

We may update this notice to reflect changes to our services, practices, or legal obligations. We will publish the updated version here and change the date above. Where appropriate, we may also provide notice by email, through a service message, or by another reasonable method.

Email: [email protected]
Website: jmyr.com.my