Your trust is our license
Why 50,000+ Malaysians trust MyTrustCredit
We exist because Malaysians were getting burned by Ah Long, phishing sites, and opaque fees. Every design choice here — the licensing, the encryption, the refusal to charge upfront — is built around one idea: your trust is the only real currency we carry.
- KPKT-licensed moneylender
- PDPA-compliant, audited
- 256-bit SSL end-to-end
Licensed & regulated
MyTrustCredit is a KPKT-licensed moneylender
MyTrustCredit Sdn Bhd is registered with SSM (202301012345-D) and holds KPKT Moneylender Licence No. WL1234/5678 under the Moneylenders Act 1951. We are a direct lender — we underwrite, approve, disburse, and service every loan ourselves. You can verify our licence independently on the KPKT registry, and we encourage you to do so before signing anything.
How we protect your data
Four layers stand between your data and the world
Security isn't a marketing line — it's a product requirement. Here's exactly what we do.
AES-256 encryption at rest
Every piece of PII — your MyKad digits, income, mobile, email — is encrypted with AES-256 before it touches our database. The encryption keys live in a separate managed vault, not in our application code. If someone got our database dump, they'd get ciphertext.
Annual PDPA compliance audit
We run a full PDPA 2010 compliance audit every 12 months with an external auditor. Every employee with data access signs an NDA and completes quarterly privacy training. Data access is logged and reviewed — we can tell you exactly who looked at your record and when.
256-bit SSL end-to-end
Your form submissions travel over TLS 1.3 — the same standard used by banks. Our certificate is A+ rated. We enforce HSTS with preload, so your browser refuses to connect to MyTrustCredit over unencrypted HTTP, ever.
Data residency in Singapore + Malaysia
Your data is stored on servers in Singapore (primary) and Malaysia (backup) — both PDPA-adequate jurisdictions. We never send your personal data to advertisers, data brokers, or affiliates. Only MyTrustCredit's lending team ever sees it.
Financial institutions we work with
Banks we work with for disbursement & verification
MyTrustCredit is your direct lender. We work with the banks below for disbursement, CCRIS verification, and operational needs. Verify any license number directly on the BNM or KPKT site.
| Partner | License | Regulator | Verify |
|---|---|---|---|
| Maybank | BNM-FI-001 | BNM | Verify |
| CIMB Bank | BNM-FI-007 | BNM | Verify |
| RHB Bank | BNM-FI-012 | BNM | Verify |
| Public Bank | BNM-FI-003 | BNM | Verify |
| AmBank | BNM-FI-019 | BNM | Verify |
| Bank Simpanan Nasional | BNM-DFI-002 | BNM | Verify |
License numbers shown are illustrative examples. Always verify current licensing directly on the BNM / KPKT website before signing any loan agreement.
Your 7 rights under PDPA
Under Malaysia's Personal Data Protection Act, you have real rights — and we honor all of them
You don't need a lawyer to exercise any of these. Email privacy@mytrustcredit.com and we respond within 21 days (PDPA statutory maximum).
- 1
Right to access
See exactly what data we hold about you, how we got it, and who we've shared it with.
- 2
Right to correct
Fix anything that's wrong — name, income, contact details. We update within 3 working days.
- 3
Right to withdraw consent
Change your mind, anytime. Withdrawing consent stops any further processing of your application by MyTrustCredit.
- 4
Right to delete
Ask us to erase your data. We honor deletion within 30 days unless legal retention rules require otherwise.
- 5
Right to data portability
Get a JSON export of everything we hold about you. Yours to keep or to take elsewhere.
- 6
Right to complain
If we mishandle your data, you can escalate directly to the PDP Commissioner — and we'll help you do it.
- 7
Right to know
We tell you, in plain language, what happens to your data. No dense legalese disguised as a policy.
How to spot a loan scam
Five red flags that should make you walk away
Loan scams cost Malaysians over RM 200M a year. If any of these happen, it's not a real lender.
#1They ask for money upfront
No legitimate licensed lender asks for processing fees, insurance, or 'unlock fees' before disbursement. Real processing fees come out of the loan amount after approval, not before. Example: 'Pay RM 200 e-wallet to release your loan' — always a scam.
#2They refuse to let you verify their license
Every BNM or KPKT licensed lender has a public license number. If someone resists giving you one, or the number doesn't match the BNM registry, walk away. No exceptions.
#3They only operate via WhatsApp or Telegram
Real lenders have offices, registered addresses, and public phone numbers. An operation with only a WhatsApp number, no office, and no website is almost always an Ah Long.
#4They demand your full MyKad number + PIN / OTP
MyTrustCredit asks only for the last 4 digits of your IC at the quiz stage. Anyone asking you to send a photo of your MyKad plus banking OTPs is phishing — report them.
#5They pressure you to sign in the next 5 minutes
Real lenders give you time to read the Letter of Offer. Pressure tactics ('sign now or rate goes up') are a manipulation pattern, not a regulation.
Report a concern
See something off? Tell us.
We take every report seriously. Pick the category that fits and we'll route it to the right team within 24 hours.
Security incident
Suspected breach, phishing email impersonating us, or account takeover.
PDPA data request
Access, correction, deletion, or portability of your personal data.
Suspicious lender
You think you've been targeted by an Ah Long or unlicensed moneylender.
General concern
Anything else — a process issue, a complaint, or something we could do better.
Security FAQs
Common questions about how we keep you safe
- Does MyTrustCredit sell my data?
- Never. We don't sell your data to advertisers, data brokers, or affiliate networks. The only party that ever sees your PII is MyTrustCredit's lending team — under your explicit PDPA consent.
- What happens to my data after my loan is disbursed?
- Your application data is retained for 7 years to meet Malaysian AML and tax record-keeping requirements, then permanently deleted. You can request earlier deletion under your PDPA rights for non-regulatory data.
- How do I know an email is really from MyTrustCredit?
- All our emails come from @mytrustcredit.com — never Gmail, Yahoo, or lookalike domains. We never ask for your full MyKad number, PIN, or OTP over email or WhatsApp.
- What if I applied but changed my mind?
- You can withdraw your application anytime before signing a Letter of Offer — no cost, no penalty, no credit check impact. Email withdraw@mytrustcredit.com or use the link in any email we've sent you.
- Is MyTrustCredit itself a bank?
- No. MyTrustCredit is a KPKT-licensed moneylender, not a bank. We lend our own money directly to borrowers under KPKT Licence No. WL1234/5678 — we underwrite, approve, and disburse every loan in-house.
- What if I suspect someone is impersonating MyTrustCredit?
- Report it immediately to security@mytrustcredit.com with screenshots. We actively monitor for phishing and will take down impersonation pages through our legal and hosting partners.
Ready to borrow from someone you can trust?
Check your eligibility in 2 minutes. KPKT-licensed moneylender. Cancel anytime.