1. Introduction & Scope

Collect Fun Pte. Ltd. (”Collect Fun”, “CollectFUN!”, “we”, “us”, or “our”) values your privacy. This Privacy Policy (“Policy”) explains how we collect, use, disclose, and protect Personal Data when you access our websites, mobile apps, social media pages, communications, products and services (collectively, the “Services”).

By using the Services, you acknowledge this Policy.

This Policy is designed to comply with Singapore’s Personal Data Protection Act 2012 (No. 26 of 2012) and its regulations (“PDPA”). Where we process Personal Data of individuals outside Singapore, we will comply with local laws as required.

2. Key Definitions

• Personal Data: Data, whether true or not, about an individual who can be identified from that data or from that data and other information to which we have or are likely to have access (PDPA).
• Process/Processing: Any operation on Personal Data, including collection, recording, use, disclosure, storage, deletion, etc.
• Business Partners/Service Providers: Third parties engaged by us to support our operations (e.g., payment, hosting, analytics, logistics, KYC/AML).

3. What We Collect

We collect Personal Data from you, your devices, and third parties (e.g., identity verification partners, payment processors, anti-fraud vendors), including:

3.1 Identification & Contact

Name, alias/handle, postal address, email, telephone, date of birth, country of residence, account IDs, in-app profile data.

3.2 Account, Usage & Interaction Data

Login identifiers, device and browser data, IP address, app telemetry, interaction logs, pages viewed, session replay or chat transcripts (for quality control, security, and support), preferences, likes/saves, wishlist, referral data.

3.3 Transaction & Financial Data

Purchase history, order details, payment instrument token or last 4 digits (if applicable), billing/shipping details. (We do not store full card numbers; payment processing is handled by PCI-compliant providers.)

3.4 Verification & Compliance Data

Government-issued identifiers (e.g., NRIC (masked where feasible), passport number), KYC/AML information, sanctions screening results, proofs of address/identity, and fraud/risk signals. We minimise and do not retain copies longer than necessary for verification and legal obligations.

3.5 User-Generated Content