Privacy & PDPA Policy

Personal Data Protection Notice for Hunter Repo Application, operated by Hunter Analytix Sdn Bhd.

OPERATED BY
Hunter Analytix Sdn Bhd
EFFECTIVE DATE
01/03/2026
LAST UPDATED
21/03/2026
GOVERNING LAW
PDPA 2010 (Malaysia)
1

Introduction

This Personal Data Protection Notice ("Notice") is issued by Hunter Analytix Sdn. Bhd. ("Hunter", "Company", "we", "us", or "our") pursuant to the Personal Data Protection Act 2010 (Malaysia).

This Notice applies to:

  • Creditors (banks, leasing companies, financial institutions)
  • Repossession agents and recovery agencies
  • Vehicle owners / borrowers
  • Authorised users of Hunter Repo
  • Visitors and system users

By accessing or using the Hunter Repo application ("Platform"), you consent to the collection, processing, storage, use, and disclosure of personal data in accordance with this Notice.

2

Role of Hunter

Hunter operates strictly as a technology platform provider and data intermediary facilitating data aggregation, monitoring, analytics, coordination, and reporting.

Hunter:

  • Does NOT own vehicle loan accounts
  • Does NOT issue loans
  • Does NOT determine default status
  • Does NOT initiate repossession
  • Does NOT act as a licensed repossession agent
  • Does NOT provide legal advice
  • Does NOT verify legal validity of enforcement actions

All data is submitted by authorised users (creditors and agents).

Hunter shall NOT be liable for:

  • Accuracy of submitted data
  • Legality of repossession instructions
  • Actions taken by creditors or agents
  • Disputes between borrowers and financial institutions
3

Categories of Personal Data Collected

A. Creditors & Corporate Users
  • Full name, IC / Passport number
  • Contact number, email address
  • Company name, business registration number
  • Job title / designation, login credentials
  • IP address, system access logs
B. Repossession Agents / Field Operators
  • Full name, IC number
  • Contact details, email address
  • EPS licence number & expiry
  • Assigned organisation
C. Vehicle Owners / Borrowers (Submitted by Creditors)
  • Full name, contact details, residential address
  • Vehicle registration number, make & model, chassis number
  • Loan information (arrears, outstanding amount)
D. Vehicle & Detection Data
  • Vehicle plate numbers (captured via ANPR)
  • Vehicle images and video captures
  • Time, date, and GPS location of detection
  • Confidence scores (AI recognition output)
  • Movement patterns and detection history
E. Mobile Device & Technical Data
  • Device model, OS version, device identifiers (including IMEI where permitted)
  • App version, network type, IP address, connection logs
  • Real-time GPS location and background location (where enabled)
  • Camera, photo gallery, storage, Bluetooth / WiFi access
F. Security & Forensic Data
  • Login attempts and session logs
  • Device behaviour analytics, tampering / reverse engineering signals
  • Root / jailbreak detection status, error logs and crash reports
G. Derived & Analytical Data
  • Risk scoring profiles, behavioural analytics
  • Detection trends, location intelligence patterns
  • AI-driven predictions and correlations
4

Purpose of Data Processing

CORE PLATFORM OPERATIONS
  • · Vehicle detection and ANPR matching
  • · Case assignment and coordination
  • · Monitoring and tracking activities
  • · Recovery workflow management
ANALYTICS & INTELLIGENCE
  • · Big data analysis and pattern recognition
  • · AI model training and improvement
  • · Operational insights and reporting
SECURITY & INTEGRITY
  • · Fraud detection and prevention
  • · Cybersecurity monitoring and anti-tampering enforcement
  • · System integrity protection
COMPLIANCE & LEGAL
  • · Regulatory compliance (PDPA and applicable laws)
  • · Audit trails and evidentiary logs
  • · Law enforcement cooperation (where required)
5

Source of Data

Personal data may be obtained from:

  • Creditors / financial institutions
  • Repossession agents
  • Direct user registration
  • Device-generated data
  • System-generated analytics
  • Law enforcement (where applicable)

Hunter does not independently source borrower data outside creditor submissions.

6

Disclosure of Personal Data

Personal data may be disclosed to:

  • Authorised creditors
  • Repossession agents
  • Internal system administrators
  • Cloud and infrastructure providers
  • AI and analytics processing systems
  • Legal advisors
  • Regulators and law enforcement agencies

Hunter does NOT sell personal data.

7

Data Security & Protection Measures

Hunter implements:

  • End-to-end encryption (where applicable)
  • Secure API architecture
  • Role-based access controls
  • Multi-factor authentication
  • Device-level security validation
  • Continuous monitoring systems
  • Audit logs and forensic tracking

Despite these measures, Hunter does not guarantee absolute security and shall not be liable for breaches beyond reasonable control.

8

Data Retention

Data is retained:

  • As required by creditors
  • For legal and regulatory obligations
  • For dispute resolution
  • For audit and system integrity

Hunter may anonymise data for analytics or delete data when no longer required.

9

Data Accuracy Disclaimer

Hunter relies entirely on user-submitted data.

Hunter:

  • Does NOT verify loan status
  • Does NOT validate arrears
  • Does NOT confirm legal compliance

Users are responsible for data accuracy.

10

Data Subject Rights (PDPA)

Data subjects may:

  • Request access to personal data
  • Request correction of inaccurate data
  • Withdraw consent (subject to legal limitations)

To exercise your rights, contact: support@hunterrepo.com

Hunter may charge administrative fees as permitted by law.

11

Cross-Border Data Transfer

Data may be stored or processed outside Malaysia. Hunter ensures reasonable safeguards aligned with PDPA requirements.

12

Limitation of Liability

To the fullest extent permitted by law, Hunter shall NOT be liable for:

  • Actions taken by repossession agents
  • Disputes between creditors and borrowers
  • Losses from enforcement activities
  • Data inaccuracies from users
  • System downtime or failures
  • Security breaches beyond control
  • Indirect or consequential damages
13

Indemnity

Users agree to indemnify Hunter Analytix Sdn. Bhd. against claims arising from:

  • Misuse of data
  • Unlawful repossession
  • Breach of laws
  • Violation of privacy rights
  • Improper use of Hunter Repo
14

User Obligations

Users must:

  • Provide lawful and accurate data
  • Comply with Malaysian laws
  • Obtain necessary consents
  • Use data responsibly
  • Not misuse the Platform
15

Consent

Users confirm:

  • They have authority to submit data
  • They have obtained required consents
  • They understand Hunter acts as a platform provider only
16

Automated Decision-Making & AI

Hunter Repo may use AI and automated systems. Such outputs:

  • Are probabilistic
  • Do NOT constitute legal decisions
  • Must be independently verified by users

Hunter is not liable for decisions made based on AI outputs.

17

Amendments

Hunter reserves the right to amend this Notice at any time. Continued use of Hunter Repo constitutes acceptance of the updated Notice.