CTOS CREDIT REPORTING AUTHORIZATION & EMPLOYER DISCLOSURE

Pursuant to the Credit Reporting Agencies ("CRA") Act 2010, Central Bank of Malaysia Act 2009 and Personal Data Protection ("PDP") Act 2010, I, the undersigned User (the "Subject"), do hereby give my explicit consent to Setlary EWA Sdn Bhd ("Payd"), my current Employer, and CTOS Data Systems Sdn Bhd ("CTOS"), a registered credit reporting agency under the CRA Act, to process my personal data and credit information as follows:

1. Explicit Parties & Scope of Disclosure

The Subject (Employee): I acknowledge that I am the individual granting authorization for the retrieval of my personal credit report.

The Intermediary Platform (Payd): I authorize Payd to securely request, retrieve, and display my CTOS credit report within the application interface.

The Credit Reporting Agency (CTOS): I authorize CTOS to conduct credit/trade check including CCRIS checks on me and release the generated report to Payd.

The Employer (Authorized Recipient): I explicitly authorize Payd and CTOS to share, disclose, and release a full copy of my generated CTOS credit report directly to my registered Employer for their internal retention and review.

Data Analysis & Financial Health Scoring: I explicitly authorize Payd to process, analyze, and scrub my raw credit information and CCRIS data retrieved from CTOS in order to generate a derivative 'Financial Health Score' or similar profiling metrics. I further consent to Payd displaying and disclosing this Financial Health Score to my Employer alongside or independent of the full CTOS report to assist in their internal evaluations.

2. Approved Purposes of Consent

By this consent, I understand and agree that the retrieval and sharing of my credit report with my Employer is conducted for the following purposes:

Internal Employment & Benefit Evaluation: To assist my Employer in conducting valid Credit/Account review, Credit/Account monitoring, and Credit/Account evaluation related to my ongoing employment benefits, financial wellness assistance programs, or corporate verification requirements.

Personal Access: To simultaneously allow me to view and monitor my personal financial standing directly through the Payd mobile application.

Commercial Service Provision: I acknowledge and agree that Payd may retrieve, process, and provide my credit report to my Employer as part of a commercial service arrangement or platform subscription between Payd and my Employer.

3. Data Processing & Secure Routing

Where Payd or CTOS require any processing of my application to be processed by any processing centre located outside Malaysia, I hereby give consent to CTOS to disclose my credit information except CCRIS, to such locations outside Malaysia strictly for secure operational hosting.

4. Limitation of Liability

I acknowledge that Payd acts solely as a technology intermediary and data processor for the retrieval and scoring of my credit information. I agree that Payd shall not be held liable for any adverse employment actions, benefit denials, or decisions made by my Employer based on the contents of the CTOS credit report or the generated Financial Health Score.

5. Data Retention

I understand that Payd and my Employer will retain my credit report and Financial Health Score only for as long as necessary to fulfill the purposes stated herein, or as required to comply with relevant legal and regulatory obligations, after which the data will be securely destroyed or permanently anonymized.

6. Data Subject Rights (Withdrawal & Inquiries)

I understand that I have the right to withdraw this consent at any time by providing written notice to Payd and my Employer. I acknowledge that withdrawing consent may affect my eligibility for certain employer-provided financial benefits or programs. For inquiries regarding my personal data, I may contact Payd’s designated Data Protection Officer at [email protected]