Raqamyah Platform – Privacy Policy

Last Updated: 31/12/2025
Introduction

Raqamyah for Debt-based Crowdfunding (referred to in this Privacy Policy as 'Raqamyah','we' or 'us') respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we handle your personal data and outlines your privacy rights, reflecting and ensuring compliance with the Personal Data Protection Law (PDPL) applicable in the Kingdom of Saudi Arabia. By using our platform, you agree to comply with the terms of this Privacy Policy.

This Policy should be read in conjunction with our General Terms and Conditions ('General Terms') and any other documents referenced herein or in the General Terms.

The following terms, when used in this Privacy Policy, shall have the meanings set out below:

Services: Any products, services, content, features, technologies, functions, websites, applications, or related services that we provide to you.

Platform: The websites, mobile websites, or other electronic means through which we provide our Services.

About our Company

We are a closed joint stock company established under the laws of the Kingdom of Saudi Arabia, with Commercial Registration Number 1010449309 and Tax Registration Number 310204704600003, licensed by the Saudi Central Bank under License No 67/ش أ/202301, with our head office located at 3252 Prince Mohammed bin Abdulaziz Street (Tahlia) , Al-Dughither Commercial Complex No. 2, Second Floor, Al-Olaya, Riyadh 12241–6231, Kingdom of Saudi Arabia.

What Personal Data Do We Collect?

When you register with us to receive certain Services provided through the Platform, we may collect the following personal data:

Identity Information including your name, date of birth, national ID/Iqama details, passport information, and national address.
Contact details including your email address and phone number.
Bank Account Information and financial data related to our Services, such as deposits, withdrawals, and related transactions.
Employment-related details.

Personal Data Collected Automatically

When you interact with our platform or use our services, we automatically collect the following data:

Device information such as IP address, operating system, and browser type.
Geographic location data.
Documents submitted by you.
Information required by Raqamyah for Debt-Based Crowdfunding to comply with laws and regulatory requirements issued by the Saudi Central Bank and other regulatory authorities, including AML and KYC requirements.
Website usage data when visiting the website without registration, such as servers, domain name, service provider, and referring and exit pages.
Information entered by the user, such as complaint forms or other electronic services.

We retain such data only for the period necessary to achieve the purposes of processing or as required by applicable regulations, after which it is securely deleted or destroyed.

We may use cookies to help improve your user experience. For more information, please visit :https://www.aboutcookies.org Cookies are used only after obtaining explicit user consent, and users may modify their preferences at any time through browser settings or the Platform interface.

Data Received from Third Parties or Public Sources

We may receive personal data about you from third parties or publicly available sources, including but not limited to the Saudi Credit Bureau (SIMAH), Bayan, Thiqah, and the Nafath service, based on the legal authorizations granted to us under applicable laws and, where required, after obtaining the necessary consent.

Sources of Personal Data Collection

We collect personal data from several sources, including:

Information provided directly by the customer.
Publicly available data or data obtained from official and commercial entities.
Authorized legal representatives.
Interaction with our digital platforms, whether through the website, applications, or paper forms.
Participation in surveys, submission of feedback, complaints, or inquiries. Data collection is not limited to electronic transactions and also includes manual interactions.

Processing and Sharing of Personal Data

We process customers’ personal data in accordance with the principles stipulated under the Saudi PDPL for purposes including:

Providing and improving our financial services.
Complying with legal and regulatory requirements, including those of the Saudi Central Bank.
Enhancing information security.
Complying with Sharia requirements.
Security or judicial necessities.
Explicit customer consent.

Customer data is not shared with third parties except:

With explicit consent.
To comply with legal obligations.
When dealing with service providers who are committed to providing adequate data protection.

The Company also conducts periodic assessments of service providers to ensure compliance with security requirements and discloses data to governmental and regulatory authorities upon request or where required.

Know Your Rights

As a customer of Raqamyah for Debt-Based Crowdfunding, the Data Subject has the following rights under the PDPL:

The right to be informed of the legal basis and purpose of personal data collection.
The right to access your personal data and request a readable and structured copy in a commonly used electronic format.
The right to request correction, updating, deletion, or destruction of personal data.
The right to withdraw consent to personal data processing at any time where consent is the legal basis for processing.
The right to file a complaint with the Competent Authority in the event of a violation of the PDPL or dissatisfaction with the Company’s complaint handling process.
The right to claim compensation for any material or moral damage suffered as a result of any violation of the PDPL or its Implementing Regulations.

Requests to exercise Data Subject rights will be processed within a period not exceeding 30 days from the date of receipt and may be extended for a similar period where legally justified, provided that the Data Subject is notified accordingly.

If the Data Subject is not satisfied with the outcome of complaint handling by Raqamyah, they may submit a complaint to the Saudi Data & AI Authority (SDAIA), the Competent Authority under the PDPL.

Data Retention

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected or as required by applicable laws and regulations. Once the purpose has expired, personal data is securely deleted or destroyed.

Technical and Organizational Measures and Data Security

All information is stored on secure servers located within the Kingdom of Saudi Arabia. Raqamyah implements strict technical and organizational measures, including encryption, advanced authentication mechanisms, and access controls, to protect your data from unauthorized access, alteration, or damage. Our information security programs are reviewed on a periodic basis.

Data Breach Notification

In the event of a personal data breach, Raqamyah shall notify the Competent Authority immediately upon confirmation of the breach and without undue delay, in accordance with the PDPL and related regulations. Affected Data Subjects will also be notified where required, and corrective measures will be taken to mitigate the impact and prevent recurrence.

How We Notify You of Changes to This Privacy Policy

We may make changes to this Privacy Policy from time to time. When we do so, the date on this page will be updated. You are encouraged to review this page regularly. Where material changes are made, we will endeavor to notify you in advance through email or Platform notifications before such changes take effect.

Continued use of the Platform or our Services after publication of changes constitutes acceptance of those changes.

Links to Third-Party Websites

The Platform may contain links to external websites or applications. Each of these has its own privacy policies, and we bear no responsibility for their practices. We recommend reviewing their privacy policies before providing any personal data.

For further information or to exercise your rights, please contact us by submitting a request through the Complains & Suggestions | Raqamyah or via:

Email (subject: “Privacy Policy”) contactus@raqamyah.com

Toll-free number: 8001000264

Data Protection Officer (DPO): DPO@raqamyah.com