Kage
← Home

Privacy Policy

Last updated: 26 August 2026

1. Who we are

This policy explains how Kage International Sdn Bhd (Company No. 1412562T / 202101012263) ("Kage", "we", "us") collects, uses, discloses, secures, and retains your personal data when you visit https://kagein.com/, visit our premises, or sell or buy gold with us. We are the data user under Malaysia's Personal Data Protection Act 2010 (PDPA).

2. What we collect

We collect the following personal data, only to the extent needed for our services:

  • Identity data — full name and a copy of your identification: National Registration Identity Card (NRIC) number or passport details.
  • Contact data — mobile phone number and WhatsApp number.
  • Financial data — bank account details (account holder, bank, account number) for payout of proceeds.
  • Transaction data — items transacted, weight, purity, value, date, and method of payment.
  • Technical data — IP address, browser type, and aggregated usage via Google Analytics when you browse the site.
  • Security data — CCTV footage and images captured during your visit to our physical premises.

We only collect standard personal data required for identity verification and do not collect "sensitive personal data" (such as physical or mental health records, political opinions, or religious beliefs) as defined under the PDPA. We do not knowingly collect data from minors.

3. Why we collect it (purposes)

  • To verify your identity and comply with legal obligations, notably the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 ("AMLA").
  • To process your transaction — quotation, the buy-back of gold or jewellery, and the sale of gold — and to issue invoices/receipts.
  • To facilitate payment to your chosen bank account for gold or jewellery sold to us.
  • To communicate with you about your transaction, collection, or enquiry via phone/WhatsApp.
  • To operate and improve this website, including through analytics.
  • To ensure the security and safety of our premises, staff, and customers, and to prevent, detect, and investigate theft or fraud (via CCTV monitoring).

Legal basis: Under the Anti-Money Laundering Act (AMLA), the collection and retention of a copy of your NRIC/passport and transaction records are mandatory. If you do not provide this document copy, we cannot legally complete a regulated gold transaction with you.

4. Consent

By actively providing your personal data to us (whether at our counter, by WhatsApp, or by explicitly agreeing through our website forms), you consent to its collection, use, and disclosure for the purposes above, in line with this policy. Where the law requires separate or explicit consent (for example, for marketing communications), we will obtain it explicitly.

5. Who we share it with

We do not sell your personal data. We may disclose it to:

  • Your bank — solely to remit your proceeds.
  • Authorities / regulators — where required under AMLA or other Malaysian law (e.g. Bank Negara Malaysia, the Companies Commission, or law-enforcement).
  • Our parent company — strictly for internal administrative purposes, consolidated compliance reporting, or to support the operations of our business.
  • Service providers — limited to what is needed to run our business: our banking/payment partners, IT and cloud providers, and analytics (Google). These parties process data on our instructions under confidentiality agreements.

6. Cross-border transfer

Some of our service providers are located outside Malaysia. In particular:

  • WhatsApp / Meta (communication) — data is processed in the United States.
  • Google Analytics (website usage) — data is processed in the United States.

Where we transfer personal data outside Malaysia, we do so with your consent and ensure that appropriate contractual or other safeguards are in place with these third-party providers to keep your data protected in accordance with the PDPA.

7. How long we keep it

We value your privacy and do not store your information indefinitely. We hold on to your personal data only for as long as it is actively needed to fulfil the purposes for which it was collected or to meet our ongoing legal duties. We safely organise our retention periods based on the type of data and local Malaysian laws:

  • Identity & Transaction Records: We retain these files for the duration required by Malaysian statutory laws (such as tax, accounting, and anti-money laundering regulations). This generally requires us to store transaction and identity data for at least 7 years.
  • Security Data (CCTV Footage): Our video security recordings are held on a standard rolling schedule and are automatically overwritten on a routine basis. We only preserve footage for an extended duration if it is strictly necessary to assist with an ongoing legal or police investigation.
  • General Personal Data: Any other information is regularly reviewed and will be securely destroyed or permanently anonymised as soon as it is no longer required for any business or legal purpose.

8. How we protect it

We maintain reasonable technical and organisational measures appropriate to the sensitivity of the data — including access controls, encryption in transit, secure storage of physical and digital records, and staff confidentiality obligations. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

9. Your rights

Subject to the PDPA and other applicable law, you may:

  • request access to the personal data we hold about you;
  • request correction of inaccurate or incomplete data;
  • withdraw consent for any purpose that is not legally required (note: we cannot delete transaction/identity records that AMLA requires us to keep);
  • limit the processing of your data; and
  • lodge a complaint with us or with the Malaysian Department of Personal Data Protection (JPDP).

We will respond within the timeframe required by the PDPA (generally within 21 days for access requests, subject to permitted fees and exemptions).

10. Cookies & analytics

This site uses cookies and similar technologies via Google Analytics to understand how visitors use it. You can disable cookies in your browser settings; some site functions may be affected. We do not use cookies for advertising profiling.

11. Contact us

Questions, access/correction requests, or complaints about your personal data can be sent to us via:

  • Email: admin@kagein.com
  • WhatsApp: +6017-710 8966
  • Address: Kage International Sdn Bhd, 1-12, Suria North Kiara, Jalan Sri Bintang, Segambut, 52100 Kuala Lumpur.

12. Changes to this policy

We may update this policy from time to time. The latest version will always be posted on this page with a revised "Last updated" date. Material changes will be notified where practicable.