Legal

Privacy Policy

Last updated: 12 November 2026

This Privacy Policy explains how PeGeBak Pte. Ltd. (“PeGeBak”, “we”, “us”) collects, uses, discloses and protects personal data in connection with the PeGePay website (pegepay.com, the “Site”), the PeGePay Business mobile application (the “App”), our APIs, apps and messaging commerce bots (together, the “PeGePay Platform”). It forms part of our Terms & Conditions.

“Personal Data” means information that identifies, or can reasonably be used to identify, an individual. Our merchants decide how they use the PeGePay Platform with their own customers, and are responsible for their own privacy notices to those customers.

1. WHAT WE COLLECT

We collect the following categories of information, depending on how you interact with us.

  • Enquiry information. When you submit the contact form on the Site: your name, company, work email, the bank that issued your QR IDs, number of outlets, area of interest and your message. We also record your IP address and technical signals used to detect automated submissions.
  • Account information. When you register: your name, email address, mobile number, business details, and the verification and authentication information needed to secure your Account.
  • Payment settings information. When you configure payments: your business and bank details, QR IDs and related identifiers such as Store ID, Terminal ID and Shift ID.
  • Transaction information. Payment status, amounts, references, timestamps and callbacks relating to payments processed through the PeGePay Platform, which may include limited information about payers supplied by banks.
  • Messaging commerce information. When a buyer uses a merchant’s bot on Facebook Messenger, Instagram or Telegram: the channel identifier assigned by that provider, the messages and selections needed to complete an order, delivery details the buyer provides, and order and receipt records.
  • Device and usage information. Browser type, IP address, time zone, pages viewed, interactions with the Site and the App, and log data, collected through cookies, log files and similar technologies.
  • Mobile device information. When you use the App, device location information needed to discover and communicate with Bluetooth printer devices you have paired.

2. HOW WE USE IT

  • To respond to your enquiry and to onboard you, including verifying your business and QR IDs.
  • To provide, secure, support and improve the PeGePay Platform, including generating payment QR codes, reporting payment status, reconciling by store, terminal and shift, and operating the bots.
  • To prevent fraud, abuse and automated misuse, and to protect our users and systems.
  • To send service notices, and, where permitted, marketing messages that you can opt out of at any time.
  • To meet legal, regulatory and accounting obligations and to establish or defend legal claims.

3. WHO WE SHARE IT WITH

We share Personal Data only as needed to run our business and provide the PeGePay Platform:

  • Banks and the DuitNow network, as required to provision QR IDs and process payments.
  • Service providers that help us deliver the service, such as cloud hosting, email delivery, bot verification, mapping, delivery and logistics, analytics and customer support providers.
  • Messaging channel providers (Meta for Facebook Messenger and Instagram, and Telegram) where a merchant uses the bots.
  • The merchant you transact with, where you are their customer.
  • Professional advisers, and parties to a business transfer such as a merger or sale, on a need-to-know basis.
  • Regulators, government bodies, law enforcement and courts, where required or permitted by law, including to detect or prevent crime or fraud.

We do not sell Personal Data.

4. COOKIES AND SIMILAR TECHNOLOGIES

We use cookies, log files and similar technologies to operate the Site, remember your preferences, protect forms from abuse and understand how the Site is used. Most browsers let you block or delete cookies, but parts of the Site may not work without them. We do not change our practices in response to “Do Not Track” signals. For more on cookies, visit allaboutcookies.org.

5. INTERNATIONAL TRANSFERS

We and our service providers may process Personal Data in Singapore, Malaysia and other countries. Where we transfer Personal Data outside your country, we take reasonable steps to ensure it receives a standard of protection comparable to that required by applicable data protection laws.

6. RETENTION

We keep Personal Data only for as long as needed for the purposes described above, to provide the service to you, and to meet legal, tax, accounting and regulatory requirements. Enquiries that do not lead to an Account are kept only for as long as needed to follow up and manage our business relationships. When Personal Data is no longer needed, we delete or anonymise it. Deleted data may remain for a limited time in backups and archives.

7. SECURITY

We use reasonable technical and organisational measures to protect Personal Data, including access controls, encrypted connections and monitoring. No system is completely secure. Please keep your credentials, API keys and callback secrets confidential and tell us immediately at support@pegepay.com if you suspect they have been compromised.

8. YOUR CHOICES AND RIGHTS

Subject to applicable law, you may ask to access or correct the Personal Data we hold about you, withdraw your consent, object to certain processing, ask us to delete your Personal Data, or opt out of marketing emails using the unsubscribe link. To make a request, email support@pegepay.com. We may need to verify your identity, and may keep information we are required or permitted by law to retain. If you are a customer of one of our merchants, please contact that merchant first, as they decide how your data is used.

9. YOUR RESPONSIBILITIES

Please give us accurate and up-to-date information. If you give us Personal Data about other people, such as your staff or customers, you are responsible for informing them and obtaining any consent required by law before you do so.

10. CHILDREN

The PeGePay Platform is not intended for individuals under 18, and we do not knowingly collect their Personal Data.

11. CHANGES TO THIS POLICY

We may update this Privacy Policy to reflect changes in our practices or for legal, regulatory or operational reasons. We will post the updated version on the Site with a new “last updated” date and, for material changes, notify you by email or a notice on the Site before they take effect.

12. CONTACT US

For questions, requests or complaints about our privacy practices, contact us by email at support@pegepay.com.