PRIVACY POLICY OF CREDIT KAAGAPAY


I. INTRODUCTION
​​Philippines Cashtrout Lending Corporation (“Credit Kaagapay”, “our”, “us”, or “we”) and its various official partners (“Partners”) are committed to protect and respect your rights to your personal data, in compliance with Republic Act No. 10173 or “the Data Privacy Act of 2012”; related rules, regulations, and issuances of the National Privacy Commission (“NPC”); and with the adoption of constantly changing commercially acceptable standards for data protection (collectively, the “Law”).
Please read our Privacy Statement to know the “whys”, “whats”, “whens”, “hows”, and “who’s/’re”, among others, of our Statement for our community’s data protection.


By expressly providing your consent to our Privacy Statement and our Terms & Conditions, or by accessing, benefitting from, or using, our varied platforms, whether in print or via our online software systems, directly or indirectly, such as the latest official build of our Credit Kaagapay Website at www.kaagapaycredit.com (“Website”) and the latest versions of our official mobile application (“App”) (collectively, “Platforms”) available on Google Play Store, Apple App Store, and other similar platforms and other services including but not limited to recording credit/payment, any mobile or internet connected device or otherwise (collectively the "Credit Kaagapay Service"), you hereby acknowledge that you have read, understood, and agree to the terms of our Privacy Statement, Terms & Conditions, and any other documents that are referred in this Privacy Statement. You agree to having your data collected, corrected, transferred, stored, retrieved, used, retained, shared, deconstructed, and/or destroyed in the manner disclosed in this Privacy Statement and our Terms & Conditions. This Privacy Statement applies to all people and entities accessing our Platforms.

This Privacy Statement (together with our Terms & Conditions and any other documents referred herein) explains our Statement regarding the collection, use, retention, disclosure and transfer of your information by Credit Kaagapay. This Statement forms part and parcel of the Terms of Use for the Credit Kaagapay Services. Capitalized terms which have been used here but are undefined shall have the same meaning as attributed to them in the Terms of Use. Users (as defined hereinafter) are requested to read this Statement in conjunction with the Terms of Use.


We respect the privacy of the users of the Credit Kaagapay Services (“Users” or “you”) and are committed to reasonably protect it in all respects. The information about the User as collected by us are: (a) information supplied by Users; and (b) information automatically tracked while using a mobile device having Credit Kaagapay Services enabled (collectively referred to as “Personal Information”).


By accessing the Site, App or otherwise using the Credit Kaagapay Services, or by clicking on the tick box, you consent to this Statement’s terms on the collection, storage, and use of the personal information you provide (including any changes thereto as provided by you) for any of the Credit Kaagapay Services that we offer.


If you do not agree to be bound by all the terms of this Privacy Statement and Terms & Conditions, please exit and uninstall from your devices our Platforms and do not access, use, and/or receive benefit from any of our Platforms and our collection of Services.


We may, at any time and at our sole discretion, amend, and update this Privacy Statement. You are responsible for, among others, regularly reviewing this Privacy Statement.


II. DEFINITIONS


“SERVICE” means the Platforms operated by Credit Kaagapay.


“PERSONAL DATA” means any personal information and/or sensitive personal information as defined under the Law, whether recorded in a material form or not, from which the identity of an individual is apparent or can be reasonably and directly ascertained, or when put together with other information would directly and certainly identify an individual from information either in our possession or likely to come into our possession.


“USAGE DATA” is data collected automatically either generated by the use of Service or from Service infrastructure itself (for example, the duration of a page visit).


“DATA CONTROLLER” or “PERSONAL INFORMATION CONTROLLER” means a natural or legal person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal data are, or are to be, processed. For the purpose of this Privacy Statement, we are a Data Controller of your data.


“DATA PROCESSOR” or “PERSONAL INFORMATION PROCESSOR” means any natural or legal person who processes the data on behalf of the Data Controller. We may use the services of various Service Providers in order to process your data more effectively.

 

DATA SUBJECT is any living individual whose Personal Data is being processed pursuant to this Privacy Statement.


“USER” is the individual using our Service via our Platforms. The User corresponds to the Data Subject whose Personal Data is protected by the Law.


III. WHAT DATA WE COLLECT

Depending on your User type, we collect several different types of Personal Data for various purposes to provide and improve our Service to you.


You provide us with personally identifiable information such as your name, email address, and physical address through various media and/or forms, such as original, notarized, and/or stamped documents in print or copies in accessible, legible, and electronic format, as may be necessary. Other Personal Data that we do not expressly require of you but which you willingly provide to us are collected as well. The information we collect depends on the features, functionalities, products, and Services that you request through our Platforms. Such information, which may or may not include personally identifiable information, includes but are not limited to the following:

 

  1. Name (First Name, Middle Name, and Last Name);
  2. Personal photographs;
  3. Gender;
  4. Age;
  5. Nationality or Citizenship
  6. Birthdate;
  7. Place of Birth;
  8. Email address;
  9. Home Address;
  10. Work Details;
  11. Business Name;
  12. Business Category;
  13. Mobile Number (including GCash Number);
  14. Credit Scoring Data and Reports; 
  15. Financial information (income, employment details such as payslips and BIR forms) 
  16. Device information;
  17. Log Data;
  18. Computer Internet Protocol address (“I.P.”) address;
  19. Valid government-issued identification cards (“IDs”) and details therein;
  20. Mobile Device Data (Model, Applications, Location, Application Usage, Frequency);


The Personal Information provided by the Users is essential for the provision and enhancement of the Credit Kaagapay Services, with the aim of providing an optimal user experience. As part of our ongoing efforts to improve the Services, we may occasionally request additional Personal Information from Users, beyond what has been previously mentioned, through the Application and/or Site, subject to the User’s explicit consent. Rest assured that we do not disclose this data to any third party, except as outlined within the provisions of this Statement. We reserve the right to verify the information and documents provided by Users using reliable sources. Users authorize Credit Kaagapay and any financial partners and/or third-party service provider to process Know Your Customer (KYC) Documents and determine their eligibility, subject to Credit Kaagapay’s Privacy Statement and Terms. The permission granted by Users for financial partners and/or third-party service providers to access KYC Documents is governed by the providers' privacy policies. The personal information collected during the KYC process is used solely for legal and regulatory compliance purposes, such as anti-money laundering (AML) and counter-terrorism financing (CTF). Credit Kaagapay maintains the confidentiality and privacy of Users' information and only shares it with authorized parties such as its financial partners with the User's explicit consent or as required by law. Credit Kaagapay is dedicated to safeguarding Users' personal data in accordance with relevant data protection laws and regulations.


We reserve the right to utilize your Personal Data for the purpose of communicating with you through newsletters, marketing materials, promotional content, and other information that may be deemed relevant and of interest to you. However, you maintain the option to unsubscribe from receiving any or all of these communications by following the provided unsubscribe link.


Any Personal Information that you provide shall not be deemed as personal information if such information does not meet the definition of personal information under Republic Act No. 10173 or the Data Privacy Act of 2012. Moreover, it is important to emphasize that any reviews, comments, messages, blogs or similar content posted, uploaded, conveyed, or communicated by Users on the public sections of the Site or an application store (such as the App Store or Play Store) shall be deemed as published content. As published content, it is possible that such information will no longer be regulated as personal information in light of data privacy laws.
 
Upon registering with the Services, it is probable that we may periodically contact you to request updates or revisions to your Information. This is intended to ensure the accuracy and currency of your provided details.

IV. INFORMATION AUTOMATICALLY TRACKED WHILE USING THE APP OR SITE

Usage Data
We may also collect information that your browser sends whenever you visit our Service or when you access our Service by or through a mobile device (“Usage Data”). This Usage Data may include information such as your computer's Internet Protocol address (e.g. IP address), the pages of our Service that you visit and other diagnostic data.


When you access our Service with a mobile device, this Usage Data may include information such as the type of mobile device you use, your mobile device unique ID, the IP address of your mobile device, your mobile operating system, unique device identifiers and other diagnostic data.


Customer Information
We maintain the contact information of your customers in our records. Additionally, we retain a comprehensive log of all credit and payment-related communications with the customers. These measures are implemented to ensure accurate record-keeping and facilitate effective communication regarding credit and payment matters.


To monitor and analyze user behavior on the App/Site, as well as to continually improve our services, we employ various tools such as Google Analytics, Firebase and other similar platforms. These tools provide valuable insights into user interactions and enable us to optimize our offerings.

Valuable Feedback
Your feedback improves our community and our Services. You consent to the collection of Personal Data whenever you transact with our customer service and support personnel. Such information collected includes but is not limited to your full name, email address, mobile number, orders made, and account numbers. Please tell us what we can do to improve our Services.
​​​​
V. WHAT WE DO NOT COLLECT
We do not collect more than what is necessary.


The only Personal Data, if any, that we collect comes from you. We collect only the minimum amount and kind of information necessary for our Services and our Partners’ products.
​​ 
VI. LINK TO FINANCIAL PARTNERS AND THIRD-PARTY SITES/AD-SERVERS
The Site may contain links to other websites such as advertisers, blogs, content sponsorships, vendor services, social networks, and more. While we strive to select reputable and reliable partners, it is important to exercise caution that these websites operate under their own distinct privacy statements, which are beyond our control. To further protect yourself, we recommend reviewing the privacy policies of these websites before providing any personal information. When you navigate away from our Site (which can be determined by checking the URL in your browser’s address bar), any information you provide is subject to the Privacy Statement of the respective website operator. We cannot provide any representation or warranty regarding how your information is stored or used on financial partners and third-party servers.
​​​
VII. WHOM WE SHARE THE DATA WITH
The Information (including Personal Information) collected may be shared with our affiliates, financial partners, and group companies to the extent required for our internal business and/or administrative purposes and/or general corporate operations and to any third-party service providers, including marketing partners, and the User hereby consents to the same. We will take reasonable steps to ensure that these third-party service providers are obligated to protect your personal information and are also subject to appropriate confidentiality/non-disclosure obligations and they comply with the applicable provisions of the data protection laws. These entities, with whom we share the Information, may market to you as a result of such sharing unless you explicitly opt-out.


The User consents that we may have access to your location and device information and we may request you to provide your PAN, Know-Your-Customer (KYC) details, and biometric data to check your eligibility for certain products/ services including but not limited to credit and payment products, etc., to enhance your experience and provide you access to the services being offered by us, our affiliates, financial partners, or other third-party service providers (including lenders). Biometric data is collected and processed, with the explicit consent of the User and in compliance with Section 12 of the Data Privacy Act of 2012, only for User verification using facial recognition and liveliness detection mechanism.


Further, the User also consents to share Personal Information, including Sensitive Personal information, when it is requested or required by law or by any court or governmental agency or authority to disclose, for the purpose of verification of identity, or for the prevention, detection, investigation including cyber incidents, or for prosecution and punishment of offenses. These disclosures are made in good faith and belief that such disclosure is reasonably necessary for enforcing the Terms of Use or for complying with the applicable laws and regulations. No Personal Information of an individual User such as name, contact number, email address, card details, etc. would be shared with any other User and/or third party unless explicitly approved by the concerned individual User himself/herself.


By using the Credit Kaagapay Services and providing Personal Information to us, Users agree and consent to the disclosure, transfer, storage, and processing of the Personal Information, including the Sensitive Personal Information, by us in the Philippines and/or in other countries to its affiliates, financial partners, group companies, and third parties. While our primary motive is to protect the disclosure of Personal Information (except in accordance with the provisions of this Statement) of Users, Users may note that countries where their Personal Information may be stored, may not have data protection laws similar to the countries where they are located.

In our data sharing activities, the following shall be observed:

 
We may disclose Personal Data that we collect, or you provide for any of the following activities:
 
Disclosure for Law Enforcement. Under certain circumstances, we may be required to disclose your Personal Data if required to do so by law or in response to valid requests by public authorities.
Business Transaction. If we or our subsidiaries are involved in a merger, acquisition, or asset sale, your Personal Data may be transferred.


Other cases. We may disclose your information also:

 

We may also share your Personal Information in the event of a business transfer, such as a merger, acquisition, or sale of our assets. In such cases, we will notify you before your Personal Information becomes subject to a different privacy policy.

​​​
VIII. INFORMATION STORAGE AND BACKUP
Periodically, we perform data backups of User information on our cloud-based database. This practice serves the purpose of ensuring that Users can recover their data in the event of data loss or unavailability on their mobile devices, such as device malfunction, loss, or when transitioning to a new device.


We shall retain User's Personal Information in our records for a period of [5] years after the termination of services or last interaction with the User, whichever is later, unless a longer retention period is required by law or for legitimate business purposes. For unsuccessful loan applications, we shall retain the data for a period of [12] months from the date of rejection. However, once the provision of company Services is no longer applicable or pertinent to a specific User, we shall expunge all Personal Information associated with that particular User from our records.
​​​
IX. INFORMATION SECURITY
We implement appropriate security measures to safeguard against unauthorized access, alteration, disclosure, or destruction of data, including accidental or intentional manipulation, and loss from unauthorized parties. These measures encompass internal assessments of our data collection, storage, processing practices, and security protocols. We employ suitable encryption and physical security measures to protect against unauthorized access to systems where personal data is stored. All Personal Information collected on the Credit Kaagapay platform is securely stored within controlled databases. Access to these servers is password-protected and strictly limited.

Our security measures undergo regular reviews and updates to align with technological advancements. While we take all reasonable steps to ensure the security of Personal Information, it is important to understand that no transmission of data over the internet or any other public network can be guaranteed to be 100% secure.


We strive to comply with applicable data protection laws to safeguard User privacy and Personal Information. We have implemented physical, electronic, and procedural safeguards that align with the laws of specific jurisdictions to protect User Personal Information. By accepting the terms of this Statement, you acknowledge that the standards and practices we have in place are reasonable and adequate for the protection of your personal information.


In the event of a breach of security, confidentiality, or integrity resulting in the unauthorized access or disclosure of your unencrypted electronically stored Personal Information, we will promptly notify you via email or any other feasible means without undue delay, to the extent consistent with the legitimate needs of law enforcement. We will take all necessary measures to investigate and remediate the breach, and restore the reasonable integrity of the data system.
​​
X. PURPOSE OF DATA PROCESSING
We will only collect and process Personal Information about you when we have a lawful basis to do so. The primary purpose of collecting your information, including Personal Information, is to provide you with personalized access to Credit Kaagapay and its various features, as well as for other lawful purposes as deemed necessary. It is important to note that if you choose not to provide consent for the collection of your Personal Information, it is possible that we may be unable to fulfill our contractual obligations to you. By "perform the contract," we are referring to the Terms of Use that govern your use of the Credit Kaagapay Service. Consequently, your access to certain features of the Credit Kaagapay Service may be restricted or we may be unable to provide you with the Credit Kaagapay Service in its entirety.


For example, we use your information where we need the Personal Information to perform the contract with you (for example, to provide the Platform or our services to you) so as to:
 


We will use your Personal Information with your explicit consent as follows:

 


XI. YOUR DATA PRIVACY RIGHTS
Under the Law, you are entitled to the following data privacy rights:

  1. the right to be informed whether your Personal Data shall be, are being, or have been processed;
  2. the right to object to the processing of your Personal Data;
  3. the right to reasonably access your Personal Data;
  4. the right to dispute the inaccuracy or error in your Personal Data and have us correct it immediately and accordingly;
  5. the right to suspend, withdraw, or order the blocking, removal or destruction of your Personal Data from our records;
  6. the right to file a complaint with the NPC for any violation of your data privacy rights;
  7. the right to be indemnified for any damages sustained due to such inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorized use of your Personal Data not in accordance with this Statement;
  8. the right to data portability of your Personal Data.


In respecting your data privacy rights, you may opt to tell us:

 

  1. not to share your information with our subsidiaries, affiliates, financial partners, or with other companies that we have business with provided that such information is not critical nor required by applicable laws and regulations in maintaining the Services that you have availed with us;
  2. to provide you with information that we currently have about you subject to restrictions applied to us as a company operating in the Philippines by certain laws and regulations;
  3. to update your Personal Data; and
  4. about your other concerns relating to how we collect, use, share, protect or dispose of your information.
  5. to opt-out of personalized ads​​


XII. ACCESSING AND UPDATING PERSONAL INFORMATION


To exercise your rights regarding access, correction, or deletion of the Personal Information you have provided, you may contact us via email:

 

Data Protection Officer

Dizon, Camille N. - Data Protection Officer - Philippine Cashtrout Lending Corp.

5th Floor Rockwell Business Center Tower 1, Meralco Avenue, Ortigas. Ugong, City of Pasig, Metro Manila

email address: compliance@mocasa.com


Please include relevant details and specific instructions regarding your request to facilitate the efficient handling of your inquiry or request. We may request certain Personal Information from you, including government-issued identification documents, for the limited purpose of validating your identity and good faith standing as a Data Subject to make the query or request. Once your identity is validated, we will delete the information so collected, unless we hold a lawful basis to further process this information. 


When Users utilize the Site (including any sub-sites) or the App, we diligently strive to fulfill Users' requests for access to their Personal Information, provided such requests are made in good faith. Furthermore, we are committed to rectifying any identified inaccuracies or deficiencies in Personal Information or Sensitive Personal Information to the extent feasible, unless retention of such information is required by law or for legitimate business purposes. 


To facilitate the processing of access, correction, or removal requests, we kindly ask individual Users to authenticate themselves and specify the particular Personal Information they wish to access, correct, or remove. We reserve the right to decline requests that are unreasonably repetitive or systematic, entail disproportionate technical effort, compromise the privacy of others, or prove to be impractical in nature, or if access to such information is otherwise unnecessary. 


Regarding the provision of Personal Information access and correction, we undertake this service free of charge, except in cases where doing so would require a disproportionate effort.


Please note that due to the nature of certain services, deleted Personal Information may persist in residual copies for a certain period of time before being completely eradicated from our active servers. It is possible that remnants of such information may also endure in our backup systems.​​

XIII. YOUR PART IN PROTECTING YOUR DATA


The security of your data is important to us but remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.


You agree that you too play a part in ensuring your personal data and the data of others are protected. By accessing our Platforms and/or using our Services, you declare, represent, and warrant that:

​​​
XIV. REVOCATION OF CONSENT


A User can revoke his consent to the processing of his Personal Information at any time with effect for the future. Please note that withdrawing consent does not affect our right to continue to collect, use and disclose Personal Information where such collection, use, and disclosure without consent is permitted or required under applicable laws (e.g., other lawful criteria exist for the processing of personal information).
​​​
XV. DISCLAIMER


In case any Personal Information is shared by you with us, which is not requested by us during registration, (whether mandatorily or optionally), we will not be liable for any information security breach or disclosure in relation to such information. If you have any questions regarding this Statement or the protection of your personal information, please contact our data protection officer.
​​​
XVI. REASONABLE TIME FOR OUR RESPONSE AND LAWFUL INTERRUPTION THEREOF BY FORCE MAJEURE.


You agree with our terms for a response within a reasonable time; lawful interruption thereof; and force majeure in relation to the exercise of your data privacy rights. We aim to respond to your concerns within 15 working days, in line with the recommendations of the National Privacy Commission.


We shall exert our best efforts to address your concerns, complaints, or grievances, and these shall be examined with care, and professionalism, and within reasonable time from our receipt of your complete correspondence with us.


Such reasonable time depends on the circumstances of said concern, complaint, or grievance, and shall be deemed lawfully interrupted by certain events beyond the control of any party herein such as but not limited to: acts of God such as natural calamities, typhoons, tornado, volcanic eruption; acts of political instability such as revolution, civil war, insurrection, civil disobedience, riot, terrorism, economic sabotage; the threat of spread of mandatorily reportable communicable and infectious diseases such as but not limited to COVID-19, government declaration of public health emergency measures such as national and/or local quarantines and/or other management/employee restrictions; acts of authorities whether lawful or unlawful; prolonged suspension or unavailability of public transportation, telecommunication, and electric utilities; and other force majeure events (“Force Majeure Event”).
​​​
XVII. SERVICE PROVIDERS
We may employ third-party companies and individuals (“Service Providers”) to facilitate our Service, provide Service on our behalf, perform Service-related services or assist us in analyzing how our Service is used. These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.​​

XVIII. ANALYTICS
We may use third-party Service Providers to monitor and analyze the use of our Service.
​​​
XIX. CI/CD TOOLS
We may use third-party Service Providers to automate the development process of our Service.​​

XX. BEHAVIORAL MARKETING​​
We may use remarketing services to advertise on third party websites to you after you visited our Service. We and our third-party vendors use cookies to inform, optimize and serve ads based on your past visits to our Service.

XXI. LINKS TO OTHER SITES
Our Service may contain links to other sites that are not operated by us. If you click a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Statement of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.​​

XXII. QUESTIONS/GRIEVANCE REDRESSAL
In the event you have any inquiries or grievances relating to the processing of Personal Information provided by you, you may contact:

Data Protection Officer

Dizon, Camille N. - Data Protection Officer - Philippine Cashtrout Lending Corp.

5th Floor Rockwell Business Center Tower 1, Meralco Avenue, Ortigas. Ugong, City of Pasig, Metro Manila

email address: compliance@mocasa.com

​​
XXIII. UPDATES/CHANGES
This Privacy Statement is effective as of the date of its last modification and will remain in effect unless its provisions are changed in the future. Such a modified version will be in effect immediately after posting on this page dedicated to the Privacy Statement.


Credit Kaagapay reserves the right at any time to amend, change, add, or modify this Privacy Statement by posting the new/updated version, without prior notice to the users of the Credit Kaagapay App, and to add new or additional terms or conditions on use of the Services. You will also be requested to indicate your consent to the updated Statement before you access the Credit Kaagapay App and its Services. You are strongly recommended to regularly review and read this Statement, as well as any updated Statement before you indicate your consent.

 

Your continued access or use of the Credit Kaagapay App after the updated Statement is posted, confirms your acceptance and consent to be bound by the updated Statement.
​​​
XXIV. MISCELLANEOUS

  1. These Terms shall be governed by and construed in accordance with the laws of the Republic of the Philippines. The parties hereto submit to the exclusive jurisdiction of the courts of Makati City, Philippines.
  2. The Terms set forth herein shall remain effective and shall remain binding upon you, even following any discontinuation of use of the Credit Kaagapay App, to the extent permitted by law.
  3. You agree to indemnify, defend, and hold Credit Kaagapay, its affiliates, financial partners, shareholders, directors, employees, agents, service providers, suppliers, subcontractors, successors, and assigns, harmless from and against any and all claims, demands, actions, causes of action, damages, costs, and expenses, including reasonable attorney's fees and other expenses of litigation, penalties, fines, damages, and losses, made by any third party due to or arising out of your breach of the Terms stated herein and the documents they incorporate by reference, or by your violation of any law or the rights of a third party.
  4. Credit Kaagapay may subcontract any part or parts of the Services it provides to you at any time.
  5. Credit Kaagapay may assign or novate any part or parts of its rights under these Terms without your consent.
  6. Collecting any personally identifiable information from the Credit Kaagapay App, including the use of communication systems provided on the Credit Kaagapay App for any commercial solicitation purposes is not allowed. Distribution or publication of vouchers or codes, solicitation for any reason whatsoever to any users of the Credit Kaagapay App and hacking or scraping the Credit Kaagapay App are prohibited acts, which will be dealt with accordingly to the fullest extent available under the law.
  7. The Terms together with the Privacy Statement (and the respective amendments), and any undertaking you executed in relation thereto, shall constitute the entire agreement between you and Credit Kaagapay. In the event of any conflict between these Terms and any other term or provision on the Credit Kaagapay App, these Terms shall prevail.
  8. If any of the Terms shall be deemed invalid, illegal, or unenforceable, such term or condition shall be deemed not written and the remainder shall continue to be valid and in force.
  9. No delay or failure on the part of Credit Kaagapay to enforce its rights or remedies under these Terms shall constitute a waiver on its part of such rights or remedies unless such waiver is set forth and confirmed in writing by its duly authorized representatives.
  10. We may use artificial intelligence, machine learning, and other automated processing technologies to process your Personal Data for purposes including but not limited to credit scoring, fraud detection, and service improvement. Such processing shall be subject to appropriate safeguards and you maintain the right to object to such processing.

 

 

Date Updated: [April, 2025]