Your Data & KYC
Last updated: 2026-09-27
This page explains, in plain language, how MYLawatan handles identity verification (KYC) and the sensitive documents involved. It expands on the Privacy Policy for this specific area.
When verification is required
You do not need to upload any identity document to browse, save items, or make a booking. Identity verification (KYC) is only required for higher-trust actions, specifically withdrawing earnings from your wallet. You stay in control of when, or whether, you start it.
What we collect for KYC
When you choose to verify, we collect images of the front and back of a government-issued identity document (such as an IC or passport), and the identity number printed on it. We use an automated text scan (OCR) to read the document and speed up review.
Where it is stored
Document images are stored in a private storage bucket that is not publicly accessible. The identity number is not stored in plain text; it is converted into a one-way keyed hash so it can be checked for duplicates without keeping the raw number readable.
Who can view it
Only authorised platform reviewers (an admin or approver) can open your documents to make an approval decision. Vendors and other customers can never see your identity documents. Access is limited to what is needed to review your submission.
How long we keep it
We keep verification records for as long as needed to support your verified status and any related withdrawals. If a submission is abandoned before it is completed, its uploaded evidence is removed. You can ask us to review or remove your documents through support.
If your submission is rejected
If a reviewer rejects your submission, you will see the reason and can submit again with a clearer or corrected document. There is no penalty for resubmitting, and a rejection does not affect your ability to browse or book.
Withdrawing consent
Verification is optional. If you do not want us to hold your identity documents, do not start KYC. You can still use the rest of the platform except withdrawals. You can also close your account, which is a soft close as described in the Privacy Policy.
