PRIVACY POLICY

Last updated: 14 September 2026

INTRODUCTION

8B WORLD PTE. LTD., a company incorporated in Singapore under Unique Entity Number 202346928N, with its registered address at Joo Chiat Road #02-16, Soho Life, Singapore 427483 (“8B”, “we”, “us” or “our”), respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, disclose, retain and protect personal data, as well as the rights available to you.

This Privacy Policy covers:

your use of https://www.8b.world and submission of enquiries through the Website; and
personal data processed in connection with the provision of our payment infrastructure and related services to Customers.

Where the processing of personal data in connection with a particular service is governed by a separate service agreement or data-processing agreement, the terms of that agreement will prevail in the event of any conflict with this Privacy Policy.

In this Privacy Policy, “you” may refer to:

a visitor to https://www.8b.world (a “Visitor”); or
a prospective, current or former customer, or a representative, director, shareholder or beneficial owner of such customer (a “Customer”).

This Privacy Policy has been prepared with reference to the Singapore Personal Data Protection Act 2012 (“PDPA”) and other applicable data-protection requirements.

WHO IS RESPONSIBLE FOR YOUR PERSONAL DATA

8B determines the purposes and means of processing personal data that we collect and use for our own business purposes, including information submitted through the Website and information used for customer onboarding, due diligence, billing and administration of our business relationships.

When 8B processes personal data on behalf of a Customer in connection with payment-processing or related services, 8B acts on that Customer’s instructions and in accordance with the applicable service agreement or data-processing agreement. In such circumstances, the Customer or the relevant third party determines the purposes and means of processing.

INFORMATION WE MAY COLLECT FROM YOU

Personal data means any information relating to an identified or identifiable individual.

Information provided through our Website

When you submit an enquiry or contact form on our Website, we may collect:

your first and last name;
company name;
business email address;
telephone or WhatsApp number;
any other information you choose to include in your enquiry.

We use this information to respond to your request, communicate with you and assess how we may provide our services to your company.

Customer onboarding and due-diligence information

If your company applies to use our services, we may request additional information required to assess the application, enter into an agreement and comply with applicable legal and regulatory obligations.

Depending on the circumstances, this may include:

identification and contact details;
job title and authority to represent the company;
company registration and corporate documents;
information about directors, shareholders and beneficial owners;
identity documents;
business and payment-account information;
information required for know-your-customer (KYC), know-your-business (KYB), anti-money laundering, sanctions-screening and fraud-prevention purposes.

We collect only the information reasonably necessary for these purposes.

Where identity documents provided for these purposes contain a Singapore NRIC, FIN or another national identification number, we collect, use, disclose and retain that number only to the extent permitted under applicable law and the relevant guidance issued by the Personal Data Protection Commission. We apply appropriate safeguards, including masking or truncation where practicable.

Billing and transaction information

When we enter into a business relationship with a Customer, we may collect billing, settlement and transaction-related information necessary to perform the agreement.

This may include company billing details, payment or settlement account information, invoices, transaction records and related correspondence.

8B does not collect payment card details from Visitors for the purchase of services through the Website.

Service information

When providing our payment infrastructure and related services, we may process information generated or provided in connection with a Customer’s use of those services.

Depending on the service, this may include payment instructions, transaction status and reference data, settlement and reconciliation records, technical logs, support requests and communications.

The specific roles and responsibilities of 8B and the Customer in relation to such data may also be governed by the applicable service agreement and data-processing agreement.

Information obtained from third parties

Where permitted by applicable law, we may obtain relevant information from group companies, business partners, regulated financial institutions, compliance and identity-verification providers, sanctions and fraud-prevention databases, public registers and other publicly available sources.

We may use this information to verify the identity and authority of Customer representatives, conduct due diligence, prevent fraud, comply with legal and regulatory requirements and establish or manage a business relationship.

HOW WE USE PERSONAL DATA

We may process personal data for the following purposes:

to respond to enquiries submitted through our Website;
to assess applications for our services and communicate with prospective Customers;
to conduct customer and business due diligence, identity verification, sanctions screening and risk assessment;
to enter into and perform agreements with Customers and business partners;
to provide access to and operate our payment infrastructure and related services;
to process payment instructions and maintain transaction, settlement and reconciliation records;
to provide technical, operational and customer support;
to issue invoices and manage payments and settlements;
to prevent, detect and investigate fraud, money laundering, terrorist financing, sanctions violations and other unlawful activity;
to comply with legal, regulatory, reporting and record-keeping obligations;
to protect the security, availability and integrity of our Website, systems and services;
to monitor and improve the performance and functionality of our Website and services;
to communicate service, operational, security and policy updates;
to manage our business relationships and internal operations; and
to send relevant business and marketing communications where permitted by applicable law.

Depending on the circumstances, we process personal data because:

it is necessary to take steps at your request or to perform an agreement;
it is necessary to comply with a legal or regulatory obligation;
it is necessary for our legitimate interests or those of a third party; or
you have provided your consent.

Where we rely on legitimate interests under the PDPA, we assess the expected benefit of the processing against any likely adverse effect on you and implement reasonable measures to reduce that effect.

Where we rely on consent, you may withdraw it at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the consent was withdrawn.

DIRECT MARKETING

We may use your name, job title, company name, business email address, country and information about your interest in our services to send you relevant company news, industry insights, event invitations and information about 8B products and services.

We process this information on the basis of our legitimate interest in communicating with existing and prospective business Customers where permitted by applicable law.

We do not use your telephone or WhatsApp number to send direct-marketing calls, text messages or faxes to Singapore telephone numbers unless permitted under the PDPA, including its Do Not Call Provisions, and after checking the Do Not Call Registry where required.

You may opt out of marketing communications at any time by:

using the unsubscribe link included in the relevant email; or
contacting us at info@8b.world.

If you opt out of marketing communications, we may still send you non-marketing messages relating to an active enquiry, agreement, transaction, service, security matter or ongoing business relationship.

If the geographic scope of our marketing communications changes, we will review the applicable legal basis and obtain prior consent where required by the laws of the relevant jurisdiction.

HOW LONG WE KEEP PERSONAL DATA

We retain personal data only for as long as reasonably necessary to fulfil the purposes described in this Privacy Policy and to meet applicable legal, regulatory, accounting, reporting and compliance requirements.

Unless a longer period is required or permitted by applicable law, we apply the following retention periods:

enquiries submitted through the Website that do not result in a business relationship are retained for 12 months from the date of submission, after which the data is deleted or anonymised;
contact information used for marketing communications is retained for up to 24 months from the date of the last interaction;
following an unsubscribe request or objection to marketing, limited information may be retained for 24 months from the date of the request solely to record and respect your preference;
KYC, KYB and due-diligence documents, including information about directors, shareholders and beneficial owners, are retained for at least five years after the end of the relevant business relationship;
transaction, settlement and reconciliation records are retained for at least five years from the date of the relevant transaction;
agreements, invoices and related business correspondence are retained for at least five years;
technical, analytical and customer-support data is retained for 12 months, unless a longer period is necessary to investigate a security incident, resolve a dispute, establish or defend legal claims, or comply with applicable law.

Certain records may be retained for longer where this is required by anti-money laundering, counter-terrorist financing, sanctions, tax, accounting, regulatory or other legal obligations.

When personal data is no longer required, we will delete it, anonymise it or securely restrict its further processing, as appropriate.

USE OF SERVICES BY MINORS

8B provides business-to-business payment infrastructure and related services. Our Website and services are not intended for children or persons under the age of 18.

We do not knowingly collect personal data from children through the Website. If you believe that a child has provided personal data to us, please contact us at info@8b.world.

HOW WE DISCLOSE PERSONAL DATA

We may disclose personal data to the following categories of recipients where necessary for the purposes described in this Privacy Policy.

1. 8B group companies and affiliates

We may share personal data with relevant companies within the 8B group where necessary to assess an application, provide services, process transactions, manage settlements, perform compliance checks, provide support or administer our business relationship with a Customer.

Each group company will process personal data in accordance with applicable data-protection laws and the role it performs in providing the relevant service.

2. Financial institutions and payment partners

Where necessary to provide our services, we may share personal data with banks, payment service providers, payment systems, local payment-method operators, settlement partners and other regulated financial institutions involved in processing or supporting a transaction.

The information shared will depend on the relevant service, payment method, country, transaction and applicable legal requirements.

3. Compliance and verification providers

We may share personal data with providers supporting identity and business verification, customer due diligence, sanctions screening, fraud prevention, transaction monitoring and regulatory compliance.

4. Technology and professional service providers

We may use trusted third-party providers for Website hosting, cloud infrastructure, communications, data storage, analytics, cybersecurity, technical support and other operational services.

We may also disclose personal data to professional advisers, including lawyers, auditors, accountants, insurers and consultants, where reasonably necessary.

These providers are permitted to access personal data only to the extent required to perform their services and are expected to protect it in accordance with applicable law and contractual obligations.

5. Public authorities and regulators

We may disclose personal data to courts, regulators, supervisory authorities, tax authorities, law-enforcement agencies or other public bodies where required or permitted by applicable law.

Where legally permitted and appropriate, we may notify the affected person of such a request.

6. Corporate transactions

If 8B or any relevant part of its business is involved in a merger, acquisition, restructuring, financing, sale of assets or similar corporate transaction, personal data may be disclosed to professional advisers, prospective counterparties and their advisers, subject to appropriate confidentiality and data-protection safeguards.

7. International transfers

Because 8B operates internationally, personal data may be transferred to or processed in countries other than the country in which it was collected.

Where required by applicable law, we use appropriate safeguards for international transfers. These may include contractual clauses imposing obligations comparable to the standard of protection required under the PDPA, the ASEAN Model Contractual Clauses for Cross Border Data Flows where applicable, binding corporate rules or another legally recognised transfer mechanism.

We take reasonable steps to ensure that personal data transferred internationally is protected in accordance with this Privacy Policy and applicable data-protection requirements.

8. Employees and authorised personnel

Access to personal data within 8B is limited to employees, contractors and authorised personnel who require it to perform their responsibilities.

Such persons are subject to appropriate confidentiality and data-security obligations.

YOUR RIGHTS

The rights available to you depend on the data-protection law applicable to your circumstances.

Under the Singapore PDPA, you may have the right to:

request access to personal data we hold about you and information about how it has been used or disclosed;
request correction of inaccurate or incomplete personal data;
withdraw consent to processing where processing is based on your consent;
opt out of direct marketing communications; and
lodge a complaint with the Personal Data Protection Commission of Singapore.

Where other applicable laws provide additional rights, we will honour those rights as required.

Your rights may be subject to limitations or exemptions under applicable law. For example, we may need to retain certain customer, due-diligence, transaction or communications records to comply with anti-money laundering, counter-terrorist financing, sanctions, tax, accounting, regulatory or other legal obligations.

To exercise your rights, please contact us at info@8b.world. We may need to verify your identity before processing your request. We will respond within the period required by applicable law.

Personal data processed on behalf of Customers

Where 8B processes personal data on behalf of a Customer or business partner, you should normally direct your request to the organisation that provided the relevant product or service to you.

Where required, we will reasonably assist the relevant Customer or business partner in responding to your request in accordance with applicable law and the relevant agreement.

LINKS TO OTHER WEBSITES

Our Website may contain links to websites operated by third parties, including our partners, service providers or industry organisations.

This Privacy Policy does not apply to third-party websites or services. 8B is not responsible for their content, availability, security or privacy practices.

We encourage you to review the privacy policy of any third-party website before providing personal data.

COOKIES

Our Website uses cookies and similar technologies to operate correctly, remember preferences, understand how Visitors use the Website, measure performance and support our marketing activities.

Where required by applicable law, non-essential cookies will be used only with your consent. You can manage your preferences through the cookie banner or your browser settings.

Disabling certain cookies may affect the functionality or performance of the Website. Further information about the cookies and third-party technologies used on our Website is available in our Cookie Policy.

SECURITY

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, misuse or destruction.

These measures may include access controls, encryption, monitoring, secure infrastructure, confidentiality requirements and internal data-protection procedures, as appropriate to the nature of the personal data and the risks involved.

Access to personal data is limited to employees, contractors and service providers who require it to perform their responsibilities and who are subject to appropriate confidentiality and security obligations.

However, no method of transmitting or storing information can be guaranteed to be completely secure.

DATA BREACH NOTIFICATION

Where we determine that a data breach is likely to result in significant harm to affected individuals or is of a significant scale, we will notify the Personal Data Protection Commission as soon as practicable and, where applicable, no later than three calendar days after determining that notification is required.

Where required by applicable law, we will also notify the affected individuals.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our services, business activities, legal requirements or data-processing practices.

The updated version will be published on our Website and will take effect on the date stated at the top of the Privacy Policy. Where required by applicable law or where changes are material, we may provide additional notice through the Website or another appropriate communication channel.

We retain previous versions of this Privacy Policy for internal record-keeping and accountability purposes.

We encourage you to review this Privacy Policy periodically.

LANGUAGE

This Privacy Policy is prepared in English. Where we provide a translation for convenience, the English version will prevail in the event of any inconsistency or conflict.

DATA PROTECTION CONTACT

If you have any questions, concerns or requests regarding this Privacy Policy or our processing of personal data, please contact:

8B WORLD PTE. LTD.
UEN: 202346928N
Email: info@8b.world
Address: Joo Chiat Road #02-16, Soho Life, Singapore 427483