Cash-X is a premium mobile lending application owned and operated by G.A. OROBIA LENDING CORP. (SEC Registration Number: CS201911568, Certificate of Authority No. 3035). Within this document, "Cash-X," "we," "us," or "our" refers to the operational entity. We are dedicated to maintaining the highest privacy standards for our users, aligning our practices with global data protection frameworks such as GDPR, CCPA, and the latest Google Play Developer Policies.
This Privacy Policy serves to clarify how our platform gathers, evaluates, stores, manages, and safeguards your personal credentials when you interact with our mobile application or utilize our digital credit services.
During the account creation and credit application processes, you will be requested to input specific personal details, which include:
- Personal Profile: Full legal name, gender designation, and date of birth.
- Identity Documentation: Images and structural details of your government-issued identification cards.
- Contact Particulars: Active mobile number, email address, and current residential location.
- Professional & Financial Status: Current occupation, monthly income brackets, and associated banking or e-wallet account details.
- Emergency Contact Details: Names, relational descriptions, and telephone numbers of up to five designated contacts.
- Statutory Disclosures: Supplementary data fields (such as educational level or religious background) only when mandated by local statutory frameworks.
The aforementioned information is processed for the following operational necessities:
- Executing Know-Your-Customer (KYC) procedures and identity validation via accredited third-party verification networks.
- Mitigating financial fraud, conducting risk management analysis, and blocking unauthorized platform access.
- Generating credit evaluation scores and determining loan product eligibility.
- Delivering critical transaction alerts, platform announcements, and tailored marketing materials (which users can opt out of at their discretion).
- Resolving consumer grievances, facilitating customer care, and managing legal disputes.
- Ensuring full compliance with corporate regulatory obligations.
Subject to your explicit prior authorization, we may retrieve supplementary data from verified third-party channels, including authorized credit bureaus and identity verification institutions. This data ingestion is used exclusively to refine risk profiling and prevent identity fraud.
All telemetry and data transactions with external partners are conducted via highly secure, encrypted HTTPS channels. Your personal information will never be shared with third-party entities without your affirmative consent, except where required by judicial or regulatory mandates.
The security of your personal information is our paramount priority. All data payloads collected by Cash-X are encrypted using industry-standard 128-bit SSL protocols during transit and housed within fortified server environments. Data transmission is restricted to secure cryptographic pathways pointing directly to our endpoint: https://api.cashxapp.net.
Our technical teams perform continuous system diagnostics, vulnerability assessments, and comprehensive security audits to maintain an impenetrable defense environment that satisfies global data compliance standards.
To fulfill mandatory KYC and identity verification requirements, Cash-X requires permission to utilize your device’s camera. This access is limited to capturing real-time facial photographs and scanning physical government IDs during the application process. The application does not browse, index, or harvest any existing media files, photos, or videos stored in your local gallery. Declining this permission will prevent the completion of the identity verification process.
Users are permitted to manually designate up to five emergency contacts to assist in the risk assessment and account verification process. If you utilize the contact picker interface, our system only records the specific entries you explicitly select and confirm. Cash-X does not crawl, scrap, or upload your entire contact directory. All chosen contact data is transmitted in an encrypted format and stored securely.
With your clear consent, Cash-X will deploy push notifications to your mobile device regarding real-time account movements, upcoming repayment milestones, or system feature updates. You maintain full control over these alerts and can deactivate them at any time via your device's application settings.
Upon receiving your explicit authorization, Cash-X may scan limited metadata regarding the applications installed on your device (including application package titles and identifiers). This data assists our risk models in recognizing fraudulent patterns, emulators, or malware environments. This activity is carried out in strict accordance with relevant consumer privacy laws.
We collect localized geolocation metrics (including GPS coordinates, network-based location indicators, and corresponding timestamps) to validate that account activities are occurring within authorized jurisdictions and to prevent account takeover attempts. Logins originating from anomalous locations may prompt secondary identity verification challenges.
- ACCESS_WIFI_STATE: Allows the application to examine Wi-Fi connectivity parameters, enabling the system to evaluate network safety and potential security risks.
- ACCESS_NETWORK_STATE: Monitors active network availability and IP addresses to maintain connection stability and detect automated bot traffic.
- AD_ID (Google Advertising ID): Collected to track and measure marketing campaign performance. Users can reset or opt out of personalized tracking through their Google account settings at any time.
We execute data processing operations solely under lawful, transparent, and justified grounds, which encompass:
- Executing core credit processing functions and system account administration.
- Performing mandatory KYC evaluations and determining borrowing limits.
- Guarding platform integrity through advanced fraud detection algorithms.
- Complying with statutory laws, including anti-money laundering (AML) and counter-terrorist financing guidelines.
- Providing efficient customer service and continuously improving application features.
- Delivering promotional outreach and system updates (subject to user opt-out preferences).
To secure your data against accidental loss, unauthorized alteration, or illicit disclosure, we enforce rigorous organizational protocols:
- Standardized encryption of all sensitive data blocks during transit and at rest.
- Strict role-based access controls ensuring only authorized personnel handle data.
- Mandatory data privacy training and compliance protocols for all company employees.
- Continuous internal tracking, vulnerability scanning, and data lifecycle management.
Pursuant to the Philippine Data Privacy Act of 2012 (RA 10173), you are entitled to exercise comprehensive statutory rights over your personal data, which include:
- The right to be explicitly informed regarding how your data is handled.
- The right to access, inspect, and update your personal profiles.
- The right to object to processing activities or withdraw previously granted consents.
- The right to order the erasure, blocking, or destruction of your data records.
- The right to data portability to transition your information between services.
- The right to lodge formal complaints regarding grievances with the National Privacy Commission (NPC).
By activating an account and engaging with Cash-X, you explicitly declare that you have thoroughly reviewed, understood, and consented to the stipulations outlined in this Privacy Policy. This policy works in tandem with our Terms of Service to govern your user relationship with our digital platform.
If you have any questions, require clarifications, or wish to exercise your legal data rights under the Data Privacy Act, please contact our dedicated Data Protection Officer through the following official channels:
- Email Address: cs@cashxapp.net
- Official Website: https://www.cashxapp.net
We reserve the right to modify or restructure this Privacy Policy periodically to reflect changing regulatory environments or operational upgrades. Material alterations to this policy will be highlighted via prominent in-app notices or dispatched directly to your registered email address. Continued use of Cash-X following an update constitutes your agreement to the modified terms.
You have the right to request the permanent deletion of your application profile and associated personal data from our operational databases, provided there are no active financial liabilities or legal retention holds.
- Irreversibility: Account deletion is absolute and permanent. Once finalized, profiles, credit histories, and reward tiers cannot be retrieved.
- Regulatory Retention: Please note that under local financial regulations and tax compliance laws, certain transaction summaries, identity verifications, and financial logs must be retained in compressed archives for a legally mandated period before final destruction.
To initiate a formal account termination and data erasure request, please contact our customer service department via the communication details listed above.