Privacy Policy
Last Updated: November 2026 • Effective for SoFi Malaysia Operations
1. Introduction & Commitment
SoFi Technologies, Inc., together with its subsidiaries and regional operations including SoFi Bank, N.A. and SoFi Malaysia Regional Hub (Level 85-07, Menara Exchange 106, Tun Razak Exchange, Kuala Lumpur) ("SoFi", "we", "our"), is firmly committed to protecting your personal data and upholding your fundamental privacy rights.
This Privacy Policy details how we collect, process, disclose, and secure your personal and financial information in compliance with the Malaysian Personal Data Protection Act 2010 (PDPA) and international financial data security best practices.
2. Personal Data We Collect
When you interact with our website, request loan quotations (RM 1,000–RM 300,000), or communicate with our regional advisors, we may collect:
- Identification Details: Full legal name, Malaysian Identity Card number (MyKad/IC), date of birth, and nationality.
- Contact Information: Active mobile telephone number (+60), residential address, and verified email address.
- Financial & Employment Information: Employment status, monthly income range, intended loan purpose, preferred tenure, and nominated bank account details for loan disbursement.
- Technical & Log Data: IP address, device fingerprints, browser types, session cookies, and anonymized user telemetry.
3. Purposes of Processing
We process your personal information strictly for legitimate commercial and regulatory purposes, including:
- Assessing eligibility and determining customized personal loan credit limits and rates.
- Verifying identity, preventing fraudulent applications, and fulfilling Anti-Money Laundering (AML) / Counter-Terrorism Financing obligations.
- Executing loan agreements, managing repayments, and providing dedicated customer support via Telegram, WhatsApp, or email.
- Improving our digital banking user experience and internal risk scoring algorithms.
4. Institutional Data Security Measures
We implement defense-in-depth security architecture. All data transmissions are encrypted using TLS 1.3 / 256-bit AES encryption. Sensitive national identification data (IC numbers) are cryptographically hashed and stored in isolated, access-controlled vault environments.
5. Your Data Protection Rights
Under the Malaysian PDPA, you retain the right to:
- Request access to copies of your personal data maintained in our systems.
- Request correction of inaccurate, outdated, or incomplete data.
- Withdraw consent for direct marketing materials at any time.
6. Contact Our Data Protection Officer
For inquiries, data access requests, or privacy concerns, please contact our regional compliance team: