Published document
Privacy Policy
Last updated: 10 October 2026
This policy explains what personal information CASHFON collects when you sell a device to us, why we collect it, who we share it with, and what you can do about it. It covers cashfonasia.com, our customer app, and our stores in Malaysia and Singapore.
1. WHO WE ARE
CASHFON buys used phones, tablets, computers and watches from the public in Malaysia and Singapore.
CashFon @ JB Nusa Bestari — G06, Jalan Bestari 7/2, Taman Nusa Bestari, 79150 Johor Bahru, Johor
CashFon @ KL Puchong — 35, Jalan Kenari 12, Bandar Puchong Jaya, 47100 Puchong, Selangor
For anything in this policy, write to cashfonservice@gmail.com.
2. WHAT WE COLLECT
What you give us:
- Your name, phone number and email address, when you create an account or place an order.
- The market and area you choose.
- The device you want to sell: model, storage, colour, and your answers about its condition.
- Photos of the device, when you send them for a manual quote or an inspection.
- Your bank account details, so we can pay you.
- A delivery address, if you post the device to us or ask us to collect it.
- The identity details we are required to record for a second-hand purchase (your name and NRIC or passport number).
What we collect automatically:
- Your IP address, browser and device type, and which pages you open.
- Sign-in records: when you signed in, from what device, and which sessions are still open.
- Information stored in your own browser, so we can remember your market, your language and a quote you have not finished.
What Google gives us:
- If you choose "Sign in with Google", Google tells us your name, your email address and an identifier for your Google account. We never receive your Google password.
3. WHY WE USE IT
- To give you a quote and complete the sale.
- To pay you.
- To send you verification codes and news about your order.
- To keep your account safe, and to stop fraudulent or automated attempts on it.
- To keep the records the law requires a buyback business to keep.
- To improve the service, using totals rather than any one person's behaviour.
We do not sell your personal information, and we do not use it for advertising.
4. WHO WE SHARE IT WITH
- Our email provider, to deliver verification codes and notices.
- WhatsApp (Meta), if you choose to receive verification codes on WhatsApp.
- Google, if you choose to sign in with Google.
- The bank or payment channel we pay you through.
- The courier, if you post your device to us or ask us to collect it — your name, address and phone number only.
- The authorities, where the law requires it.
Doorstep pickup: we give your address and phone number to the runner assigned to your order — often an outside contractor — only to collect your devices or bring them back. The runner's phone location is recorded when they set off, arrive, and record the result at the door (taking the devices, handing a device back, or you not selling or not being home); these locations are deleted after 90 days. At the door the runner photographs each device (the screen on, and the back), and takes one photo when handing a device back; the photos are kept with the order to record the devices' condition. We do not record the name or ID number of the person who hands the devices over — only whether it was the account holder.
5. HOW LONG WE KEEP IT
- Transaction records — quotes, orders, payments and your points history — are kept for as long as the law requires for a business of this kind.
- Photos of your device, and any copy of your data you asked us to prepare, are destroyed when you ask us to delete your account.
- When you ask us to delete your account, we remove your name, phone number, email address and payment details, close your login for good, and keep the transaction records with your identity taken out of them.
6. YOUR RIGHTS
From your account in the app you can:
- Download a copy of your data.
- Ask us to delete your account.
- See every device signed into your account, and sign them out.
- Change your email address, your phone number and your password.
If you would rather ask us directly, or you want something corrected, write to cashfonservice@gmail.com.
7. HOW WE PROTECT IT
- Your bank account details are encrypted where they are stored.
- Sensitive changes — your payment details, your email, your phone number, your password — need you to confirm your identity again, even when you are already signed in.
- Repeated wrong passwords lock the account, and we email you when that happens.
8. CHILDREN
CASHFON is not intended for anyone under 18.
9. CHANGES
If we change this policy, the new version appears on this page and the date at the top changes with it.
This policy explains what personal information CASHFON collects when you sell a device to us, why we collect it, who we share it with, and what you can do about it. It covers cashfonasia.com, our customer app, and our stores in Malaysia and Singapore.
1. WHO WE ARE
CASHFON buys used phones, tablets, computers and watches from the public in Malaysia and Singapore.
CashFon @ JB Nusa Bestari — G06, Jalan Bestari 7/2, Taman Nusa Bestari, 79150 Johor Bahru, Johor
CashFon @ KL Puchong — 35, Jalan Kenari 12, Bandar Puchong Jaya, 47100 Puchong, Selangor
For anything in this policy, write to cashfonservice@gmail.com.
2. WHAT WE COLLECT
What you give us:
- Your name, phone number and email address, when you create an account or place an order.
- The market and area you choose.
- The device you want to sell: model, storage, colour, and your answers about its condition.
- Photos of the device, when you send them for a manual quote or an inspection.
- Your bank account details, so we can pay you.
- A delivery address, if you post the device to us or ask us to collect it.
- The identity details we are required to record for a second-hand purchase (your name and NRIC or passport number).
What we collect automatically:
- Your IP address, browser and device type, and which pages you open.
- Sign-in records: when you signed in, from what device, and which sessions are still open.
- Information stored in your own browser, so we can remember your market, your language and a quote you have not finished.
What Google gives us:
- If you choose "Sign in with Google", Google tells us your name, your email address and an identifier for your Google account. We never receive your Google password.
3. WHY WE USE IT
- To give you a quote and complete the sale.
- To pay you.
- To send you verification codes and news about your order.
- To keep your account safe, and to stop fraudulent or automated attempts on it.
- To keep the records the law requires a buyback business to keep.
- To improve the service, using totals rather than any one person's behaviour.
We do not sell your personal information, and we do not use it for advertising.
4. WHO WE SHARE IT WITH
- Our email provider, to deliver verification codes and notices.
- WhatsApp (Meta), if you choose to receive verification codes on WhatsApp.
- Google, if you choose to sign in with Google.
- The bank or payment channel we pay you through.
- The courier, if you post your device to us or ask us to collect it — your name, address and phone number only.
- The authorities, where the law requires it.
Doorstep pickup: we give your address and phone number to the runner assigned to your order — often an outside contractor — only to collect your devices or bring them back. The runner's phone location is recorded when they set off, arrive, and record the result at the door (taking the devices, handing a device back, or you not selling or not being home); these locations are deleted after 90 days. At the door the runner photographs each device (the screen on, and the back), and takes one photo when handing a device back; the photos are kept with the order to record the devices' condition. We do not record the name or ID number of the person who hands the devices over — only whether it was the account holder.
5. HOW LONG WE KEEP IT
- Transaction records — quotes, orders, payments and your points history — are kept for as long as the law requires for a business of this kind.
- Photos of your device, and any copy of your data you asked us to prepare, are destroyed when you ask us to delete your account.
- When you ask us to delete your account, we remove your name, phone number, email address and payment details, close your login for good, and keep the transaction records with your identity taken out of them.
6. YOUR RIGHTS
From your account in the app you can:
- Download a copy of your data.
- Ask us to delete your account.
- See every device signed into your account, and sign them out.
- Change your email address, your phone number and your password.
If you would rather ask us directly, or you want something corrected, write to cashfonservice@gmail.com.
7. HOW WE PROTECT IT
- Your bank account details are encrypted where they are stored.
- Sensitive changes — your payment details, your email, your phone number, your password — need you to confirm your identity again, even when you are already signed in.
- Repeated wrong passwords lock the account, and we email you when that happens.
8. CHILDREN
CASHFON is not intended for anyone under 18.
9. CHANGES
If we change this policy, the new version appears on this page and the date at the top changes with it.