Privacy Notice

This Privacy Notice explains how your personal data is collected, used, processed, stored and protected by ndpx. ndpx reserves the right to disclose any information that we deem necessary to comply with any applicable law and regulation. ndpx may also disclose your information when we determine that applicable law requires or permits such disclosure.

This Privacy Notice applies to our website (and its associated subdomains) and our Services. By accessing our website and/or using our Service, you signify that you have read, understood, consent to and agree to our collection, storage, use, processing and disclosure of your personal data as described in this Privacy Notice and our Terms of Service.

In this Privacy Notice, “we”, “us” or “our”, refers to National Digital Payments Network Sdn Bhd (“ndpx”) that processes your personal data and decides how it is collected and used.

Definitions

To help explain things as clearly as possible in this Privacy Notice, every time any of these terms are referenced, they have the following meanings:

  • Cookie: small amount of data generated by a website and saved by your web browser. It is used to identify your browser, provide analytics, remember information about you such as your language preference.
  • Device: any internet connected device such as a phone, tablet, computer or any other device that can be used to visit our website and use the services.
  • IP address: Every device connected to the internet is assigned a number known as an internet protocol (“IP”) address. These numbers are usually assigned in geographic blocks. An IP address can often be used to identify the location from which a device is connecting to the internet.
  • Participant(s): refers to the approved payment system operators, licensed banks or any other person(s) that may be approved by Brunei Darussalam Central Bank (BDCB) in Brunei Darussalam who may offer the Services to you subject to their own terms and conditions and/or policies.
  • Personal Data: any data or information, whether true or not, about an individual who can be identified (a) from that data; or (b) from that data and other information to which ndpx has or is likely to have access relating to an identified or identifiable  natural  person.
  • Service(s): refers to the service provided by ndpx as described on this website.
  • Third-party service: refers to advertisers, contest sponsors, promotional and marketing partners, and others who provide our content or whose products or services we think may interest you.
  • Website: ndpx’s website and all its pages, which can be accessed via this URL tarus.com.bn
  • You: a person or entity visiting the Website and/or using the Services.

Information We Collect

We collect information about you from:

  • Our Services that you use or our website that you access
  • Our Participants when you provide it to them for the purpose of using our Services
  • Other parties when we process transactions in order to provide our Services to you

Use of Information We Collected

To provide tarus Services, ndpx and the Participants will inevitably be in possession of Customer data. Collection of Customer data shall be based on what is necessary to provide tarus Services and shall be retained for the duration of its usage. We may store and process Customer data in a cloud environment provided by reputable third-party Cloud Service Providers.

We may use the information collected about you for various purposes, including:

  • Complying with regulatory, statutory, or legal obligations from relevant authorities
  • Operating and delivering our services to you
  • Detecting, preventing, or investigating security breaches or fraud
  • Keeping records for internal administrative purposes
  • Internal purposes for unidentifiable data, such as assessing marketing effectiveness, conducting market research, performing statistical analysis, research and development, and handling audit and risk management

Ndpx and Participants that have possession of/access to Customer data, whether stored in a cloud environment or otherwise, shall be responsible to have effective technical (including IT) and operational security measures, safeguards and controls that meet best international practices to:

  • Ensure confidentiality, integrity and availability of the Service Provider Transaction data and Customer information (including personal data, telephone numbers and email addresses), while processing or storing in databases or while transmitting over communication lines to and from the tarus Scheme.
  • Esure the accuracy, completeness and reliability of tarus Scheme Transactions carried out via its access channels, records and information that is either transmitted or residing in internal Participant databases.
  • Ensure access to Customer data is within the intended purpose of the data collection with legal basis.

Protection of Personal Data

We are committed to protecting your privacy and personal data and take reasonable efforts to protect your information using security measures to reduce the risk of loss, misuse, unauthorised access, disclosure or modification of your information. We endeavour to do so by abiding by the following data protection principles such as:

  • Personal data collected must be processed in a fair, legal, and transparent way and should only be used in a way that a person would reasonably expect.
  • Personal data should only be collected to fulfil a specific purpose that the person has consented to and it should only be used for that purpose.
  • Personal data should be held no longer than necessary to fulfil its purpose.

Changes To Our Privacy Notice

We may change our Services and policies, and we may need to make changes to this Privacy Notice so that they accurately reflect our Services and policies and to comply with the laws of Brunei Darussalam. Unless otherwise required by law, we will notify you (for example, through our Services) before we make changes to this Privacy Notice and give you an opportunity to review them before they go into effect. Then, if you continue to use our website and/or the Services, you will be bound by the updated Privacy Notice. If you do not want to agree to this or any updated Privacy Notice, you can cease use of our website and/or the Services.

Contact Us

Don't hesitate to contact us if you have any questions.

  • Via Email: tarus@ndpx.com.bn