PDPA Notice

1. Introduction

This Notice explains how The Omnyx Pte Ltd ("Omnyx", "we", "us") and our participating merchant partners ("Client", "Clients") collect, use, disclose and protect your personal data when you use our loyalty stamp card, membership, lucky draw and gamified campaign services (the "Service"), in accordance with the Singapore Personal Data Protection Act 2012 ("PDPA").

2. Who Collects Your Data

Omnyx operates the technology platform on which Clients run their loyalty, membership and campaign programmes. When you join a Client's programme (e.g. by scanning their QR code), both Omnyx (as the platform operator) and that Client (as the business you are joining) collect and use your personal data, each as described below. A Client only has access to the data of customers who have joined that Client's own programme.

3. What Data We Collect

• Your Telegram user ID, username, and first name (provided automatically via Telegram authentication).
• Optional details you choose to provide, such as your mobile number or birthday month.
• Your stamp, points, visit and reward redemption history with each Client you have joined.
• QR code and redemption scan logs (e.g. when and where a stamp, reward or draw entry was scanned).
• Lucky draw or campaign entry and result history.

4. Why We Collect It

• To create and operate your loyalty card or membership, including tracking stamps, points and rewards.
• To allow Client staff to verify and process reward redemptions in-store.
• To run lucky draws and gamified campaigns and determine and notify winners.
• To maintain the security and integrity of the Service (e.g. preventing fraud or duplicate accounts).
• Where you have separately and optionally consented, to send you marketing messages or promotional updates from a Client.

5. Marketing Consent is Separate

Agreeing to this Notice and our Terms & Conditions is required to use the Service. Consent to receive marketing or promotional messages from a specific Client is separate and optional, and can be given or withdrawn at any time from your profile in the Service.

6. How Your Data is Shared

A Client can only see the data of customers who have joined that Client's own programme — Clients do not have access to your data with other Clients. Omnyx, as the platform operator, may access data across Clients solely to operate, maintain and support the Service. We do not sell your personal data to third parties. We may disclose data where required by law, or to service providers (such as our cloud hosting provider) who process data on our behalf under appropriate confidentiality obligations.

7. Data Retention

We retain your personal data for as long as you maintain an active loyalty card or membership with a Client, and for a reasonable period thereafter as needed for legal, accounting, or legitimate business purposes, after which it will be deleted or anonymised.

8. Your Rights

Under the PDPA, you have the right to withdraw your consent to the collection, use or disclosure of your personal data, and to request access to, or correction of, your personal data held by us. To exercise these rights, please contact us. Please note that withdrawing consent may mean we are no longer able to provide you with the Service, such as a specific Client's loyalty programme.

9. Data Protection Officer

If you have any questions, concerns, or complaints about how your personal data is handled, please reach out via our contact page and we will direct your query to our Data Protection Officer.

10. Changes to this Notice

We may update this Notice from time to time. Material changes will be reflected by updating the "Last updated" date above. Continued use of the Service after changes take effect constitutes acknowledgement of the updated Notice.