Privacy Notice

1. Scope and the services involved

This notice covers information handled through this portal and related support requests. Identity verification, card issuance and payment processing may involve separate service providers. Their own notices explain the information they collect directly and their responsibilities.

Please read the notice presented in a provider’s verification or payment service before submitting information there. The privacy notices of other websites linked from this portal apply to those websites.

2. Information we handle

The information required depends on the service you choose and the stage of your application. It can include:

• Identity and contact details: your name, email address, calling code, mobile number and country or region of residence.
• Application details: application references, consent records, verification status, relevant verification identifiers and correspondence about your application.
• Card service information: selected product, printed name and delivery address where required, card status, account references, balances, funding orders and transaction records available through the service.
• Access and support information: session credentials, security and service-operation records, language preference, and information you provide when requesting help.

3. Identity documents and verification

Passport images, proof of address, facial images and liveness evidence are submitted directly in the hosted identity verification service. This portal does not provide an upload facility for those documents or store those original verification files. It receives the verification results, status and identifiers needed to continue the application.

Please provide accurate information and use the designated verification channel. Do not send identity documents, full card details, PINs or recovery codes in an ordinary support email.

4. Why information is used

Information is used as needed to provide the services you request and manage their security and operation. These purposes include:

• Creating and recovering your application, checking identity and eligibility, and communicating application decisions or requests for information.
• Processing card requests and delivery, displaying card activity, and handling funding, support and transaction enquiries.
• Preventing misuse, investigating errors or suspected fraud, keeping appropriate audit records, and meeting applicable legal or regulatory requirements.

5. Your consent and choices

The consent on the identity application form is for identity verification and the necessary sharing described there. It does not by itself apply for a card or authorise unrelated marketing. Separate card requests and any other purpose requiring additional consent will be presented separately.

You can decline to provide optional information. If information needed to verify your identity or perform a requested service is missing, we may be unable to proceed. You may contact us to withdraw consent; we will explain any effect on the service. Withdrawal does not undo prior lawful processing or prevent processing permitted or required by applicable law.

6. When information is shared

Relevant information may be shared with the identity verification and card service providers involved in your request, authorised personnel supporting your application, and service providers needed to operate the portal. A delivery provider may receive the details needed to deliver a physical card.

Information may also be disclosed where required by law or to handle a lawful regulatory request, investigate fraud, or establish or defend a legal claim. Sharing should be limited to the purpose and information needed; access is not an authorisation for unrelated use.

7. Processing in other countries

A verification, card, hosting or support provider may process information in a country different from your place of residence. Where cross-border protection requirements apply, appropriate safeguards must be used for the transfer. You can ask us for information about the arrangements relevant to your application.

8. How long information is kept

Retention depends on the type of information and the purpose for which it is held. Application and service records may be needed while a service is active and afterwards for legal obligations, security investigations, complaints or disputes.

Information should be deleted or anonymised when it is no longer needed for a lawful business or legal purpose. Closing an application or withdrawing consent does not necessarily permit immediate deletion of every record. The verification and card providers apply their own applicable retention requirements to information they hold.

9. Security and protecting your access

The portal uses access controls and encryption for sensitive stored application fields. Application access codes have a cryptographic digest for sign-in checks and an encrypted copy so authorised service staff can help restore access. Staff access is recorded. No system can guarantee absolute security.

Protect your device, recovery information and login links. Sign out or clear the device session when using a shared device, and contact support promptly if you believe someone has accessed your application without permission. A report will be assessed and any required notifications handled in accordance with applicable requirements.

10. Cookies and browser storage

Session cookies are used to keep authorised access to applications or linked accounts. Browser local storage remembers your language preference. Blocking or clearing these items may sign you out or reset that preference.

Reading a notice in the application-page dialog keeps the form open in the current page. Opening or closing that dialog does not submit the form or accept a consent checkbox on your behalf. This reading feature does not save your form fields to browser storage.

11. Access, correction and other requests

Subject to applicable law, you may request access to information held about you, ask for inaccurate information to be corrected, withdraw consent, or ask whether information can be deleted or its use limited. Some requests may be subject to lawful exceptions or retention requirements.

Contact us using the details below and describe the request. We may need to verify your identity before disclosing or changing information. If a request concerns records controlled by a separate provider, we will explain the relevant channel. We will explain any applicable charge or reason a request cannot be fulfilled where required.

12. Eligibility, changes and questions

The application service is intended for people who meet the relevant eligibility and legal-capacity requirements. If you believe information was submitted without authority, including information about a child, please contact us.

Updates to this notice will be identified by the date above. Material changes will be brought to your attention through an appropriate service channel, and additional consent will be sought where required. The English and Chinese versions describe the same practices; please ask us if any wording is unclear.