Privacy Statement

CamFinTech ("we", "us", "our") is a specialist FinTech consulting practice focused on Cambodia's digital financial infrastructure — Bakong, CamDigiKey, CamDX, CamInvoice, and related Government-as-a-Platform (GaaP) services. This Privacy Statement explains what information we collect when you visit camfintech.com or interact with us through our communication channels, how we use it, who we share it with, and the choices and rights available to you. We operate from Phnom Penh, Cambodia and our work touches enterprises, investors, and partners across Cambodia, the ASEAN region, and Australia. Cross-border data handling is described in Section 7.

"CamFinTech" is a trading name used by the operators of camfintech.com to deliver advisory and technical consulting services. We are not a bank, payment service provider, or licensed financial institution. We do not hold customer funds, hold banking credentials, or process payments on behalf of third parties. The data controller for personal information collected through this website is the operator of CamFinTech, contactable at info@camfintech.com.

Information you provide to us • Name, email address, organisation, and message content when you contact us by email or through any contact form on this site. • Information shared with us when you reach us through messaging channels such as WhatsApp, Telegram, LinkedIn, or similar — typically your display name, profile information, and message contents. • Information you share during consulting engagements, meetings, demonstrations, or correspondence. Information collected automatically • Standard server and request logs (IP address, browser type, device type, referring URL, pages requested, timestamps) generated when you visit the site. • Analytics events from Google Analytics (see Section 5). • Cookies and similar technologies (see Section 5). Information we do not collect • We do not collect banking credentials, account numbers, KHQR payment data, CamDigiKey credentials, Bakong wallet identifiers, or any other authentication factors for any third-party financial system. If a project requires us to access such systems, we do so exclusively through the client's own administrative controls, never by collecting credentials from end users.

We use the information described above to: • Respond to your enquiries and provide the information, materials, or services you request. • Deliver, manage, and improve consulting engagements with clients and partners. • Operate, secure, and improve the camfintech.com website (including diagnostics, error tracking, and performance measurement). • Understand which content and topics are most useful so we can prioritise what we publish. • Comply with applicable legal, accounting, and regulatory obligations. • Where permitted, send occasional updates about CamFinTech, the Cambodian FinTech ecosystem, or content we have published. You can opt out of any such updates at any time by replying to the message or emailing info@camfintech.com.

We use a small number of cookies and analytics services to understand how the site is used. Google Analytics — we use Google Analytics 4 (measurement ID G-QDZ83JQWVC) to collect aggregated, pseudonymised information about pages viewed, traffic sources, devices, and approximate location. This data is processed by Google LLC and is governed by Google's privacy practices. Search console verification — we verify the site with Google Search Console, Bing Webmaster Tools, and Facebook domain verification. These services do not set tracking cookies on your device. Essential cookies — the site stores a small amount of information in your browser (for example, your dark-mode preference) using browser storage. This data stays on your device. You can disable cookies and analytics in your browser settings, or use browser extensions that block analytics scripts. Doing so will not prevent you from using the site.

We rely on a small number of trusted third-party platforms to operate this site and run our practice. The principal ones are: • Vercel Inc. — hosting and content delivery for camfintech.com. • Google LLC — analytics, font delivery, search console, and (where used) Workspace email. • Microsoft Corporation — Bing Webmaster Tools verification. • Meta Platforms Inc. — Facebook domain verification. • Messaging providers — WhatsApp (Meta), Telegram, and similar platforms when you choose to contact us through them. • n8n.io — we use n8n, a workflow automation platform, on infrastructure we operate to coordinate internal tasks such as content publishing, monitoring, and structured-data validation. • Generative AI providers — we use large language models from OpenAI, Anthropic, Google, and similar providers to assist with research, drafting, and analysis. We do not feed personally identifiable information from contact forms or client conversations into public AI tools without explicit consent. Each of these providers acts as an independent data controller or processor for the information they handle and is governed by their own privacy terms.

We operate from Cambodia and use cloud infrastructure and SaaS providers that are typically hosted outside Cambodia (primarily in the United States, the European Union, and the Asia-Pacific region, including Australia and Singapore). When you contact us or browse the site, your information may be stored and processed in those jurisdictions. Where transfers occur, we rely on the standard contractual protections offered by our providers and limit the personal information we share to what is necessary to operate the service. We do not sell or rent personal information.

We retain personal information only for as long as it is needed for the purposes for which it was collected, or as required by applicable law. As a general guideline: • Contact form and enquiry messages — up to 3 years from the last interaction, then deleted or anonymised. • Server and analytics logs — typically 14 to 26 months, in line with provider defaults. • Client engagement records — for the duration of the engagement and for a reasonable period afterwards to meet legal, tax, and audit obligations. You can ask us to delete your information earlier — see Section 10.

We use reasonable technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, or destruction. These include encrypted connections (HTTPS/TLS), access controls on our internal tools, principle-of-least-privilege configuration of automation workflows, and ongoing monitoring of our infrastructure. No internet service is perfectly secure. If you believe your interactions with us may have been compromised, please contact info@camfintech.com so we can investigate.

You can ask us to: • confirm whether we hold personal information about you; • give you a copy of that information; • correct information that is inaccurate or out of date; • delete information that we no longer have a lawful basis to keep; • stop sending you direct communications. To exercise any of these rights, email info@camfintech.com. We will respond within a reasonable time and may ask you to verify your identity before disclosing or deleting information. Where the law of your jurisdiction gives you additional rights, we will honour those.

The CamFinTech website and services are intended for business, professional, and institutional audiences. We do not knowingly collect personal information from children under 16. If you believe a child has provided information to us, please contact info@camfintech.com and we will delete it.

Cambodia's data-protection and FinTech regulatory landscape is evolving. We monitor guidance from the National Bank of Cambodia (NBC), the Telecommunication Regulator of Cambodia (TRC), the Ministry of Posts and Telecommunications (MPTC), and emerging Technology Risk Management Guidance (TRMG) principles. We will update this statement as relevant Cambodian legislation, NBC circulars, and ASEAN-level data-protection norms take effect.

We may update this Privacy Statement from time to time. When we do, we will change the "Effective" date at the top of the page. For material changes, we will take reasonable steps to highlight the update — for example by posting a notice on the site or, where appropriate, by contacting people who have engaged with us directly.

Privacy questions, requests, and complaints can be sent to: CamFinTech Email: info@camfintech.com Address: 30 Preah Norodom Boulevard, Khan Daun Penh, Phnom Penh, Kingdom of Cambodia If you are not satisfied with our response, you may have the right to complain to a data-protection authority in your country of residence.