Privacy Policy

This Privacy Policy explains how personal information is collected, used, stored, and protected when users access or use the WCIC – World Citizen Identity Committee Application (the “WCIC App”). The WCIC App supports the WCDI – World Citizen Digital Identity Card, a digital identity system designed to provide secure digital identification, authentication, and identity verification services. The WCIC App is developed, operated, and distributed by Cooper Group Technology Sdn Bhd (“CGT”), which acts as the technology provider, system developer, and mobile application publisher. The World Citizen Digital Identity Card (WCDI) program is administered by the World Citizen Identity Committee (“WCIC”), which acts as the Card Issuing Authority. The WCIC digital identity framework operates under the regulatory oversight of the World Digital Identity and Currency Authority (“WICA”), which serves as the Regulatory Authority responsible for certification standards, regulatory governance, and compliance oversight. By accessing or using the WCIC App, users agree to the collection and use of information in accordance with this Privacy Policy.

2.1 Technology Provider and App Developer The WCIC App is developed and maintained by: Cooper Group Technology Sdn Bhd (CGT) Responsibilities include: • Mobile application development • Platform infrastructure management • System security and maintenance • Distribution via Apple App Store and Google Play Store • Technical operation and system support for the WCIC App 2.2 Card Issuing Authority The WCDI – World Citizen Digital Identity Card is issued and administered by: World Citizen Identity Committee (WCIC) Responsibilities include: • Issuing digital identity credentials • Identity verification governance • Identity program administration • Policy management of the WCDI digital identity framework 2.3 Regulatory Authority The WCIC digital identity ecosystem operates under regulatory supervision by: World Digital Identity and Currency Authority (WICA) Responsibilities include: • Digital identity certification standards • Regulatory supervision • Compliance governance for digital identity systems • Oversight of identity authentication frameworks

The WCIC App and the WCDI digital identity infrastructure may be subject to periodic regulatory audits and compliance reviews conducted by WICA to ensure adherence to applicable digital identity certification standards and operational governance frameworks. Regulatory audit and compliance assessments may include review of: • Digital identity verification procedures • System security architecture and cybersecurity protocols • Data protection and privacy safeguards • Compliance with digital identity certification standards • Operational integrity of the WCIC digital identity platform These regulatory oversight measures are designed to ensure transparency, accountability, and security within the WCIC digital identity ecosystem.

When users interact with the WCIC App, the following categories of information may be collected. 4.1 Personal Identity Information • Full legal name • Date of birth • Nationality or citizenship information • Government-issued identification data • WCDI digital identity number 4.2 Identity Verification Data To establish a secure digital identity, the system may collect: • Identity verification documents • Facial recognition or biometric verification data • Liveness detection information • Authentication credentials 4.3 Contact Information • Email address • Mobile phone number 4.4 Device and Technical Information The WCIC App may automatically collect technical information including: • Device type and model • Operating system version • IP address • App usage data • Device identifiers • Security logs 4.5 System Interaction Data To maintain system integrity and authentication records: • Login activity • Identity verification events • Access timestamps • System audit logs

Information collected through the WCIC App may be used to: • Create and manage a WCDI digital identity account • Verify user identity and authenticate access • Prevent fraud, identity misuse, and unauthorized access • Provide digital identity authentication services • Maintain system security and operational stability • Improve platform performance and user experience • Comply with regulatory and certification requirements

Personal information will not be sold or commercially distributed. Information may be shared only under the following circumstances. Technology Operations Information may be processed by Cooper Group Technology Sdn Bhd for: • System development • Technical maintenance • Infrastructure security monitoring Identity Program Administration Information may be shared with World Citizen Identity Committee for: • Identity issuance • Identity verification processes • Digital identity program administration Regulatory Compliance Information may be disclosed to World Digital Identity and Currency Authority (WICA) when necessary for regulatory supervision, certification, or compliance review. Legal Requirements Information may be disclosed when required by law, court order, or legal authority.

To support identity verification and security functions, the WCIC App may request certain device permissions including: • Camera access for identity verification and facial authentication • Storage access for secure document upload • Network access for system communication and authentication services • Biometric authentication (Face ID or fingerprint) where supported by the user’s device Users may control or disable permissions through their device settings; however, certain application features may not function properly without required permissions.

WCIC and its technology provider implement strong security measures, including: • End-to-end encryption of sensitive data • Secure identity authentication protocols • Access control and identity management systems • Secure cloud infrastructure • Continuous monitoring and system security audits These measures are designed to protect personal information from unauthorized access, misuse, disclosure, or alteration.

Personal information will be retained only for as long as necessary to: • Maintain the WCDI digital identity system • Fulfill regulatory and certification requirements • Maintain security and audit records After the retention period expires, personal information will be securely deleted or anonymized in accordance with applicable data protection practices.

Due to the global nature of the digital identity ecosystem, information may be processed in multiple jurisdictions where infrastructure providers, technology partners, or regulatory entities operate. All such processing will follow applicable security and data protection standards.

Users may have the right to: • Access their personal information • Request correction of inaccurate data • Request deletion of personal data where legally permitted • Withdraw consent for certain data processing activities Requests may be submitted through official WCIC support channels.

The WCIC App is not intended for individuals under the age of 18 unless permitted by applicable identity verification regulations.

WCIC and its technology provider reserve the right to update this Privacy Policy periodically to reflect: • Regulatory updates • System improvements • Operational changes Updated versions will be published within the WCIC App or official platforms.