Data Processing Agreement (PDPA)

This Data Processing Agreement ("DPA") explains how ZenPay processes personal data on behalf of Merchants.

1. Processing Activities

ZenPay may process:

• Customer names
• Contact information
• Payment information
• Transaction records
• Device information

2. Security Measures

ZenPay implements reasonable technical and organisational safeguards, including:

• Encryption where appropriate
• Access controls
• Activity logging
• Secure data storage

3. Confidentiality

ZenPay personnel are required to maintain the confidentiality of personal data.

4. Sub-processors

ZenPay may engage trusted service providers to assist in delivering the Services. Such providers are required to implement appropriate safeguards for the protection of personal data.

5. Data Retention

Personal data will be retained only for as long as necessary to fulfil the purposes of processing, comply with legal obligations, resolve disputes, and enforce agreements.

6. Governing Law

This Agreement shall be governed by the laws of Malaysia, including the Personal Data Protection Act 2010 (PDPA), where applicable.