Last Updated: August 5, 2026

Debel App (“Company”, “we”, “us”, or “our”) is committed to protecting and respecting your personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

This Policy outlines how we collect, use, process, and safeguard your Personal Data when you access or use debel.app and its integrated services, including our identity verification partner, Didit.

1. Source and Collection of Personal Data

We collect Personal Data directly from you during account registration, service utilization, or through automated interactions. In accordance with PDPA requirements, the data collected includes:

  • Basic Identity Data: Name, email address, phone number, and contact details.

  • Verification & Identity Data (via Didit Integration): Identity credentials, government-issued document details, public cryptographic wallet addresses, and verification status outcomes generated through our Didit integration.

  • Technical & Usage Data: IP address, device identifiers, browser type, and interaction logs on debel.app.

2. Purpose of Data Processing

We process your Personal Data strictly for specified, lawful purposes directly related to our operations, including:

  1. Identity Verification & Authentication: Utilizing Didit to verify your identity, prevent fraud, and ensure platform security.

  2. Service Delivery: Providing access to core functions and features of debel.app.

  3. Legal & Regulatory Compliance: Meeting statutory requirements, anti-money laundering (AML) controls, and fraud prevention measures.

  4. Platform Optimization: Enhancing user experience, resolving technical issues, and system security monitoring.

3. Disclosure and Sharing of Personal Data

Your Personal Data is kept confidential. However, to fulfill the purposes outlined above, we may disclose your data to:

  • Didit (Identity Provider): Third-party identity verification processing services. Didit acts as a data processor operating under strict data processing agreements to perform verification on our behalf.

  • Regulatory Bodies & Law Enforcement: Government authorities or legal entities when required by law or judicial order.

  • Authorized Service Providers: IT hosting providers, cloud storage facilities, and security auditors bound by confidentiality obligations.

4. Third-Party Integrations & Didit Protocol

debel.app integrates Didit to process identity verifications.

  • Data Minimization: Didit utilizes privacy-preserving protocols to minimize unnecessary raw data exposure. Where possible, verification results are stored as cryptographic proofs or verification tokens rather than unencrypted identity documents.

  • Independent Data Processing: For information regarding how Didit processes cryptographic parameters or biometric data during the verification process, please refer directly to Didit’s Privacy Notice.

5. Security & Data Retention

We implement technical, physical, and organizational security measures to protect your Personal Data from loss, misuse, unauthorized access, or disclosure.

  • Retention Period: We retain Personal Data only for as long as necessary to fulfill the operational purposes for which it was collected or to comply with statutory retention mandates.

  • Secure Erasure: Once data is no longer legally or operationally required, it is securely deleted or anonymized.

6. Your Rights Under the PDPA

Under the Malaysian Personal Data Protection Act 2010, you have the right to:

  • Access: Request a copy of your Personal Data held by us.

  • Correction: Request the correction or updating of inaccurate, incomplete, or out-of-date Personal Data.

  • Withdrawal of Consent: Withdraw your consent to process your Personal Data at any time (subject to legal or contractual restrictions). Note that withdrawing consent for identity data may limit your ability to use debel.app.

  • Limit Processing: Request restriction on how your Personal Data is processed or shared.

To exercise any of these rights, please contact our Data Protection Officer using the details below.

7. Data Protection Officer (DPO) Contact Information

For inquiries, data access/correction requests, or concerns regarding your Personal Data, contact us at:

  • Data Protection Officer: debel.app Compliance Team

  • Email: This email address is being protected from spambots. You need JavaScript enabled to view it. 

  • Address:  DEBEL 69 SDN BHD (1478147-V) ,Level 7, Menara Arina Uniti, Jalan Raja Muda Abdul Aziz, 50300, Kuala Lumpur. MALAYSIA