Privacy Policy

Effective Date: 2 October 2025
Reference No: Privacy Policy 2025 Version 1.0

World Digital Gold Bullion Pty Ltd (WDGB) [ACN: 651854410] is committed to safeguarding the privacy and confidentiality of all customers’ personal data. We comply with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), Malaysia’s Personal Data Protection Act 2010 (PDPA), and other applicable data protection laws. This Privacy Policy explains the categories of personal data we collect, the purposes for which it is used, the circumstances in which it may be shared, and the safeguards applied.

  1. Types of Personal Data Collected

    WDGB may collect and process the following categories of personal data, to the extent permitted or required by applicable laws:

    • Identification Data: Full name, identification numbers (e.g., NRIC, passport), and date of birth.
    • Contact Information: Address, telephone numbers, and email addresses.
    • Financial Information: Bank account details, payment records, and transaction history.
    • Biometric Data: Face data, including selfie images and video recordings, used exclusively for identity verification in connection with Know-Your-Customer (KYC) and anti-money laundering (AML) obligations. This includes biometric matches between the selfie image or video and the customer’s identity documents, as well as liveness checks to verify authenticity.
  2. Purpose of Collecting Personal Data

    Personal data is collected for the following purposes:

    • Provision of Products and Services: Deliver products and services as requested by the customer.
    • Identity Verification: Fulfill legal obligations such as KYC and anti-money laundering (AML) regulations. Face data is specifically collected to verify the customer’s identity and ensure compliance with these requirements.
    • Transaction Processing: Process payments, manage orders, and support transactions.
    • Regulatory Compliance: Meet statutory and legal requirements.
    • Customer Support: Provide assistance and respond to inquiries.
  3. How Personal Data Is Used

    Personal data is used only for the purposes outlined above. Biometric data is used solely for identity verification as part of the KYC process. WDGB applies strict security measures to protect confidentiality and integrity.

  4. Sharing of Personal Data

    WDGB may share personal data only under the following circumstances:

    • Within Group Companies: WDGB may share personal data with its parent entities, subsidiaries, affiliates, and any other entities under common ownership or control, whether existing now or established in the future, to support service provision and compliance.
    • Regulatory Authorities and Law Enforcement: When required by law or regulation.
    • Service Providers: Third-party providers engaged under written agreements that require confidentiality, compliance with applicable data protection laws, and the implementation of appropriate technical and organisational measures. WDGB conducts due diligence and oversight to ensure standards are maintained.
    • Strategic Partners: For the purpose of introducing relevant products or services, unless the customer has opted out of such communications.

    WDGB does not sell or otherwise disclose personal data to unauthorised third parties for marketing or advertising purposes.

  5. Retention of Personal Data

    Personal data, including biometric data collected during the KYC process, will be retained for as long as necessary to fulfil the purposes outlined in this Privacy Policy or to comply with applicable legal and regulatory obligations. Once retention is no longer required, the data will be securely deleted or anonymised.

  6. Sources of Personal Data Collection

    WDGB may collect personal data from:

    • Direct Customer Input: Information provided directly by customers or their authorised representatives.
    • Public and Legal Sources: Publicly available sources or records maintained pursuant to law.
    • Biometric and Digital Interactions: Interactions with WDGB’s systems, applications, or biometric verification processes.
  7. Use of Face Data

    Why Do We Collect Your Face Data?

    WDGB collects and uses face data solely for identity verification and liveness detection as part of its KYC obligations, in accordance with legal and regulatory requirements.

    What Types of Face Data Do We Collect?

    We collect your selfie image and video recordings during the KYC process. These are used to perform biometric matching and ensure the authenticity of the image through liveness detection.

    How Long Do We Store Your Face Data?

    Face data is retained only for as long as required by law and securely deleted thereafter.

    Do We Share Your Face Data with Third Parties?

    No. Face data is not shared with third parties except where legally required by regulators or law enforcement. WDGB does not sell or disclose face data for marketing or advertising purposes.

    Do We Share Your Face Data with Third Parties?

    No. Face data is not shared with third parties except where legally required by regulators or law enforcement. WDGB does not sell or disclose face data for marketing or advertising purposes.

  8. How We Safeguard Personal Data

    WDGB applies stringent security protocols, both physical and digital, to protect personal data, including face data. These measures are regularly reviewed for effectiveness. All WDGB employees and authorised third parties must adhere to these standards. While WDGB implements strong safeguards, customers should be aware that no method of transmission or storage can be guaranteed as completely secure.

  9. Customers Rights

    Customers have the following rights concerning their personal data, subject to applicable laws and regulatory requirements:

    • Access: The customer may request access to personal data held by WDGB. A fee may apply, depending on the nature of the data requested.
    • Correction: The customer may request corrections to inaccurate or outdated personal data.
    • Withdrawal of Consent: The customer may withdraw consent for the processing of personal data, subject to legal and contractual obligations (for example, AML and KYC requirements).
  10. Data Protection Contact

    Customers may direct inquiries or requests concerning this Privacy Policy to WDGB at info@wdgbullion.com.au. All correspondence received will be referred internally to the personnel responsible for data protection and compliance matters.

  11. Updates to This Privacy Policy

    This Privacy Policy may be amended from time to time to reflect changes in law, regulation, or internal practices. The most current version will be published on WDGB’s website and mobile applications. Where changes are material, WDGB will provide direct notice to customers through appropriate channels, such as email or in-app notification.

Scroll to Top