Personal Data Protection Policy

1. Collection of Your Personal Data

The personal data collected by the Company includes any information that can directly or indirectly identify you, as follows:

• 1. Identification Information: Such as full name, date of birth, national ID number, telephone number, email address, home address, Muslim status, occupation, number of household members, number of bedridden patients, elderly persons (aged 60+), persons with disabilities, orphans, photos of your residence, current living conditions, and future expectations or proposed solutions.
• 2. Platform Usage Information: Including date and time of use, and the devices used to access the Platform.
• 3. Financial Information: Including donation history, transaction date and time, payment method, payment proof (such as bank transfer slip), Zakat welfare request amount, applicant type, welfare type, request date, supporting documents, amount of government aid received, amount of Zakat aid received from other organizations, household monthly income, family debt obligations, other household expenses, and bank account information.
• 4. Communication Information: Including your preferred communication channels for receiving updates, service information, or customer support (e.g., email, Line Chat, Facebook Chat), and phone numbers used to contact the Company’s customer service department.
• 5. Preferences and Feedback: Including your opinions, feedback, and interactions with the Company through any form of communication such as telephone, email, chat, or social media. This also includes information provided when participating in promotional campaigns or surveys organized by the Company.
• 6. Technical Information: Such as IP address, login details, browser type and version, cookie data, time zone settings, browser plug-in types and versions, operating system, and platform.
• 7. Visiting Information: Such as full Uniform Resource Locators (URLs) linking to, through, and from our Platform (including date and time), products viewed or searched for, page response times, download errors, visit duration per page, page interaction data (such as scrolling, clicks, and mouse movements), and methods used to exit pages.

2. Sources of Personal Data

The Company may obtain your personal data from the following three sources:

• 1. Direct Interaction: You may provide your personal data directly when making donations, registering, subscribing on the Platform, searching for the Company’s products or services through social media, communicating with the Company via telephone, email, or social media, or participating in promotional activities or surveys organized by the Company.
• 2. Automated Technologies or Interactions: When you interact with the Company’s application, technical information about your device may be automatically collected through cookies or similar technologies.
• 3. Data Received from Other Sources: The Company may receive your personal data from individuals connected to you (e.g., family, friends, or referrers), as well as from third parties such as partners, business allies, website operators, payment providers, advertising agencies, data analytics providers, and data research service providers (“Company’s Partners”).

1. When you visit or use third-party websites or applications associated with the Company.
2. When you use or request services from external providers affiliated with the Company, such as payment service providers.
3. When you connect your account to third-party websites or applications, whereby the Company may automatically generate an internal code to facilitate data exchange.
4. You may also access the Company’s Platform via social media logins such as Line, Facebook, Google, or Apple. In doing so, you consent to the Company accessing and storing your public social media information and related data for service purposes.

If the Company receives your personal data from any source other than directly from you, the Company will notify you within 30 days of collection and ensure that appropriate consent has been obtained, unless otherwise permitted by applicable legal grounds.

3. Purpose of Collecting, Using, and Disclosing Personal Data

The Company will collect, use, or disclose your personal data only when necessary, including for the purpose of legal compliance, contractual obligations, legitimate interests, your consent, and/or other lawful bases as applicable. The purposes for processing your personal data are as follows: