Additional Terms & Updates to StraitsX Data Privacy Policy

This article outlines additional terms and clarifications relating to updates made to the StraitsX Data Privacy Policy. These updates are intended to improve transparency and ensure compliance with applicable data protection requirements.

New Updates Effective from 26 January 2026

The following updates will take effect from 26 January 2026: 

• Withdrawal of Consent (Clause 1.2): Clarified instructions on how users may withdraw their consent, and an explanation of how withdrawal of consent may affect access to StraitsX services.
• Identity Verification (Clause 3.3): Clarified that personal data may be submitted to third-party partners strictly for Know Your Customer (KYC) and Know Your Business (KYB) verification purposes.
• Direct Submission of Personal Data (Clause 3.4): Clarified that personal data must be submitted directly by the individual to whom the data relates, and not through third-party representatives.
• Data Access Requests (Clauses 7.2 and 7.3): Added information on how users may request access to personal data collected by StraitsX, including details on how such data is used and the potential application of administrative fees for these requests.
• Data Retention and Disposal (Clause 8.7): Updated to clarify that personal data will be retained until the purposes outlined in Clause 4 are no longer applicable, or where there is no longer a valid legal or business purpose for retention. The secure data disposal process has also been updated to specify that physical documents are disposed of through shredding.

For full details, please refer to the complete StraitsX Data and Privacy Policy. Continued use of StraitsX services on or after 26 January 2026 constitutes acceptance of the updated policy.

Previous Updates

• Clause 6.1.13: Updated to clarify that StraitsX may disclose personal data to service providers for compliance and operational support purposes.
• Clause 6.2: Introduced to explain the measures implemented by StraitsX to protect personal data when transferring data overseas, including due diligence processes and contractual safeguards.