Singapore Privacy Policy

Introduction

DolRise is a global platform committed to trust, accountability, and responsible use of technology. This Singapore Privacy Policy explains how DolRise collects, uses, discloses, and protects personal data of individuals located in Singapore, in accordance with the Personal Data Protection Act 2012 (PDPA).

DolRise recognises that personal data represents individual identity, behaviour, and context. In line with Singapore’s regulatory expectations, DolRise processes personal data in a transparent, proportionate, and purpose-driven manner.

This Singapore Privacy Policy operates alongside the DolRise Global Privacy Policy. The Global Privacy Policy establishes baseline privacy standards applicable worldwide, while this policy provides additional disclosures and safeguards required under Singapore law. Where there is any inconsistency, this policy prevails for individuals located in Singapore.

Under the PDPA, DolRise acts as an organisation responsible for personal data under its control. DolRise collects and uses personal data only for purposes that a reasonable person would consider appropriate in the circumstances and does not process personal data beyond those purposes without lawful basis.

DolRise may rely on global technical infrastructure to deliver its services, including systems for security, payments, data storage, and operational reliability. Where personal data is transferred outside Singapore, DolRise applies reasonable steps to ensure that the data continues to receive a standard of protection comparable to that provided under the PDPA.

Certain categories of personal data, including identity verification (KYC) information and financial details, are collected only where necessary and are protected using appropriate technical and organisational safeguards such as encryption, access controls, and monitoring.

This policy reflects DolRise’s commitment to openness, user choice, and responsible data governance for individuals located in Singapore.

Scope & Applicability

This Singapore Privacy Policy applies to individuals located in Singapore whose personal data is collected, used, disclosed, or otherwise processed by DolRise in the course of providing its services.

This policy applies regardless of whether personal data is processed within Singapore or outside Singapore, provided that such processing is connected to DolRise’s operations, services, or business activities involving users in Singapore.

For the purposes of this policy, “personal data” has the meaning given under the Personal Data Protection Act 2012 (PDPA), and refers to data, whether true or not, about an individual who can be identified from that data, or from that data and other information to which DolRise has or is likely to have access.

This policy does not apply to data that has been irreversibly anonymised such that no individual can be identified, or to information that is excluded from the scope of the PDPA.

Where DolRise processes personal data on behalf of another organisation acting as the primary data controller, DolRise will process such data only in accordance with the instructions of that organisation and applicable legal requirements.

This Singapore Privacy Policy should be read together with the DolRise Global Privacy Policy. The Global Privacy Policy sets out baseline privacy principles applicable worldwide. Where additional or specific obligations arise under Singapore law, this policy prevails for individuals located in Singapore.

Consent & Purpose Limitation

DolRise collects, uses, and discloses personal data only for purposes that a reasonable person would consider appropriate in the circumstances and only where such purposes have been communicated to the individual.

Where required under the Personal Data Protection Act 2012 (PDPA), DolRise obtains an individual’s consent before collecting or processing personal data. Consent may be expressed or implied, depending on the nature of the data and the context in which it is provided.

Individuals may withdraw their consent at any time by using available account controls or by contacting DolRise. Upon withdrawal of consent, DolRise will cease processing the relevant personal data unless continued processing is permitted or required by law.

DolRise limits the collection of personal data to what is reasonably necessary for identified purposes, including:

• Providing and operating the DolRise platform;
• Ensuring safety, integrity, and misuse prevention;
• Processing payments, identity verification, and compliance with legal obligations;
• Improving system reliability and user experience in a privacy-preserving manner.

Personal data is not used for purposes that are unrelated, excessive, or incompatible with the reasons for which the data was originally collected, unless further consent is obtained or permitted under applicable law.

DolRise does not use personal data to perform psychological profiling, behavioural manipulation, or automated decision making that produces legal or similarly significant effects on individuals.

Access, Correction & Accuracy of Personal Data

In accordance with the Personal Data Protection Act 2012 (PDPA), individuals have the right to request access to their personal data that is in the possession or under the control of DolRise, as well as information about how such personal data has been used or disclosed.

Individuals may also request the correction of personal data that is inaccurate or incomplete. DolRise will take reasonable steps to verify the identity of the requester before processing any access or correction request.

DolRise may decline or limit access or correction requests where permitted under applicable law, including where such requests would reveal personal data about another individual, threaten system security, or conflict with legal or regulatory obligations.

To ensure data accuracy, DolRise takes reasonable measures to ensure that personal data collected and processed is accurate and complete, particularly where such data is likely to be used to make decisions that affect the individual.

Individuals are encouraged to keep their account information up to date and may review or update certain personal data directly through available account settings.

Requests relating to access or correction of personal data may be submitted by contacting DolRise using the contact details provided in this policy.

Protection, Retention & Security of Personal Data

DolRise implements reasonable administrative, technical, and physical safeguards to protect personal data in its possession or under its control against unauthorised access, collection, use, disclosure, copying, modification, disposal, or similar risks.

Security measures adopted by DolRise include, where appropriate, encryption of sensitive data, access controls based on role and necessity, secure authentication mechanisms, and monitoring for unauthorised or suspicious activity.

Personal data that is particularly sensitive in nature, such as identity verification information, payment-related details, or security credentials, is subject to enhanced protection and restricted access.

DolRise retains personal data only for as long as it is reasonably necessary to fulfil the purposes for which it was collected, or as required or permitted by applicable law.

When personal data is no longer required for legal or business purposes, DolRise takes reasonable steps to securely delete, anonymise, or otherwise dispose of such data in a manner that prevents unauthorised access or recovery.

DolRise regularly reviews its data protection practices and may update security measures to address evolving risks, technical developments, and regulatory requirements.

Transfer of Personal Data Outside Singapore

DolRise may transfer personal data outside Singapore in the course of providing its services, including for purposes such as cloud hosting, security operations, payment processing, and operational support.

Where personal data is transferred outside Singapore, DolRise takes reasonable steps to ensure that the transferred data continues to receive a standard of protection that is comparable to that provided under the Personal Data Protection Act 2012 (PDPA).

Such safeguards may include contractual obligations imposed on overseas recipients, organisational controls, technical security measures, and assessments of the data protection practices of service providers.

DolRise does not transfer personal data overseas for purposes that are unrelated to the delivery, security, or lawful operation of the platform.

By using the DolRise platform, individuals acknowledge that their personal data may be transferred to and processed in jurisdictions outside Singapore, subject to the safeguards described in this policy.

Contact Information & Complaints Handling

DolRise is committed to addressing questions, concerns, and complaints relating to the handling of personal data in a fair, timely, and transparent manner.

Individuals located in Singapore may contact DolRise regarding matters related to personal data protection, including requests for access or correction, withdrawal of consent, or concerns about compliance with the Personal Data Protection Act 2012 (PDPA).

DolRise has designated a responsible contact for data protection matters. Communications may be directed to:

Email: [email protected]

DolRise will make reasonable efforts to acknowledge and respond to data protection-related inquiries and complaints within a reasonable timeframe.

If an individual believes that DolRise has not adequately addressed a concern relating to personal data protection, they may also contact the Personal Data Protection Commission (PDPC) of Singapore for further guidance or resolution.