Privacy Policy

1. Who we are

This website (ndpx.com.bn) is operated by National Digital Payments Network Sdn Bhd ("ndpx", "we", "us", "our"), a payment system operator approved by the Brunei Darussalam Central Bank (BDCB).

Company address: 13th Floor, PGGMB Building, Jalan Kianggeh BS8111, Bandar Seri Begawan, Brunei Darussalam.

If you have any questions about this policy, contact us at [email protected].

2. What data we collect and why

Contact form submissions

When you submit the contact form on this website, we collect your name, email address, subject, and message. This information is used solely to respond to your enquiry. Form submissions are processed and stored by Netlify, Inc. (our hosting provider) on our behalf.

Analytics (optional — requires your consent)

If you choose to accept analytics cookies, we use Google Analytics 4 to collect anonymised information about how visitors use this site — including pages visited, time spent, and general geographic region (country level). This helps us improve the site. No personally identifiable information is collected through analytics. Analytics are only activated after you explicitly accept cookies.

Your cookie preference

We store your cookie consent choice in your browser's local storage under the key ndpx-cookie-consent. This is not transmitted to us and exists only on your device.

3. Legal basis for processing

We process personal data under the Personal Data Protection Order, 2025 (PDPO) of Brunei Darussalam on the following bases:

• Contact form data — legitimate interest in responding to your enquiry, and your consent in submitting the form.
• Analytics data — your explicit consent, given via the cookie banner on this site.

4. How long we keep your data

• Contact form submissions — retained for up to 12 months from submission, or until your enquiry is resolved, whichever is sooner.
• Analytics data — retained by Google for up to 14 months, as configured in our Google Analytics account.

5. Third parties we share data with

We use the following third-party services that may process data on our behalf:

We do not sell, rent, or trade your personal data to any third party.

6. Your rights

Under the PDPO 2025, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate personal data.
• Withdraw consent for analytics at any time by clicking "Reject Non-Essential" in our cookie banner (clear your browser's local storage to reset your preference).
• Request deletion of your personal data, subject to our legal and operational obligations.

To exercise any of these rights, contact us at [email protected].

7. Links to other websites

This site contains links to external websites (including tarus.com.bn, bdcb.gov.bn, and LinkedIn). We are not responsible for the privacy practices of those sites and encourage you to review their respective privacy policies.

8. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of this website after changes are posted constitutes your acceptance of the updated policy.

9. Contact

For any questions or concerns regarding this Privacy Policy or the handling of your personal data, please contact: