Privacy Policy

Your data security is our top priority.

This policy explains what information Diyana Marketplace collects, how we use it, and who we share it with as part of operating the gold pawn redemption platform.

Last updated: 13 July 2026
01

Information We Collect

We collect information you provide directly — your name, IC number, phone number, and email when you register; pawn letter details (shop name, loan amount, gold items, and the pawn letter image itself) when you submit a listing; and KYC documents when you register as an Agent. If you place a bid or arrange a settlement, we also collect the banking details needed to complete that transaction. Chat messages sent through the platform are stored and automatically screened for prohibited content.

02

How We Use Your Information

Your information is used to verify your identity, match customers with agents, calculate and distribute commissions to affiliates, monitor service-level compliance for agents, detect duplicate or fraudulent accounts, and send you updates about your listing, bid, or settlement by email and WhatsApp.

03

Automated Processing & AI

When you upload a pawn letter, the image is processed by OpenAI's models to automatically extract details such as the pawner's name, IC number, loan amount, and gold items, so you don't have to type them in manually. This image may contain personal data and is sent to OpenAI solely for this purpose. We also use automated tools to generate performance and earnings insights for agents and affiliates.

04

Who We Share Your Data With

We rely on a small number of trusted service providers to operate the platform: Google Firebase for authentication, our database, file storage, and hosting; OpenAI for pawn letter data extraction and AI insights; Resend for transactional emails; Twilio for WhatsApp verification codes; and BillPlz for FPX payment processing. Each provider only receives the minimum data needed to perform its function, and none of them may use your data for their own purposes.

05

Identity Masking & Verification

Your direct contact details are hidden from agents until HQ finalises a match, so agents cannot reach you before a deal is confirmed. Agents must complete a full KYC process — including IC verification — before they are allowed to bid, and their verification status is periodically re-checked and expires if not renewed.

06

Data Security

We use role-based access controls so that only the relevant parties — you, the matched agent, and our admin team — can see the details of a specific deal. Sensitive documents such as pawn letters and KYC images are stored in access-controlled cloud storage, and financial writes such as commission payouts are processed as atomic, auditable transactions.

07

Data Retention & Your Rights

We retain your data for as long as your account is active and as needed to meet legal and record-keeping obligations for completed transactions. You may request access to, correction of, or deletion of your personal data at any time by contacting us, subject to any records we are legally required to keep. You may also opt out of non-essential marketing emails from your account's notification settings.

08

Changes to This Policy

We may update this policy as our platform evolves. Material changes will be communicated through the platform or by email before they take effect. Continued use of Diyana Marketplace after an update means you accept the revised policy.