Privacy Statement

Government Agency Privacy Statement

This Government Agency Privacy Statement (“Privacy Statement”) must be read in conjunction with the Terms of Use that accompany the applicable Government Agency digital service you are accessing or using (the “Service”). 

1.         General

1.1.   This Privacy Statement may be amended from time to time by us, with or without notice to you. By using the Service (as defined in the Terms of Use), you agree to be legally bound by this Privacy Statement and any amendment thereto from time to time. If you do not agree to this Privacy Statement (including any amendment thereto from time to time), please do not access or use this Service or any part of this Service and cease the use of this Service.

1.2.   In this Privacy Statement, all terms shall have the meanings ascribed to them in the Terms of Use, unless otherwise herein defined or the context otherwise requires.

(a)         “Government Agency” means the Government of Singapore (including its ministries, departments and organs of state) or any Singapore public sector agency (such as any statutory board); and

(b)         “we”, “us” or “our” refers to the Authority identified in Schedule 1 to the Terms of Use.

1.3.   Our obligations in respect of personal data under this Privacy Statement do not apply to:

(i)         business contact information; and

(ii)         personal data of a deceased individual. However, clauses relating to the disclosure of personal data and protection of personal data shall apply in respect of the personal data of an individual who has been dead for 10 or less years.

1.4.   Please note that:

(a)         We may use "cookies", where a small data file is sent to your browser to store and track information about you when you access or use the Service. Such cookies are used to track information such as the number of users and their frequency of use, profiles of users and their preferred digital services. While cookies may tell us when you access or use the Service and which pages you visit, it cannot read data off your hard disk.

(b)         You may choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser settings to decline cookies if you prefer. This may prevent you from using the full functions of the Service.

(c)         The Service may utilise cookies to facilitate authentication or login to the Service. If such cookies are rejected, you may not be able to access or use the Service.

1.5.   This Privacy Statement shall include the additional terms and/or information set out in the Annex. Nothing in this Privacy Statement shall be construed as limiting or prejudicing our rights at law to collect, use or disclose any data without your consent or agreement.

2.         Use of Data

2.1.   We may request or collect data from you in connection with your access or use of the Service. The data that may be requested/collected include (but are not limited to) those identified in the Annex. Your data may be stored in our servers, systems or devices, in the servers, systems or devices of our third party service providers or collaborators, or on the Device you use, and may be used by us or our third party service providers or collaborators to facilitate your access or use of the Service. We or our third party service providers or collaborators may collect system configuration information and traffic information (such as an IP address) and use information or statistical information to operate, maintain or improve the Service or the underlying service of the third party service provider or collaborator. For the avoidance of doubt, in this Privacy Statement, a reference to a third party service provider or collaborator includes parties that provide a service or collaborate with our third party service provider or collaborator.

2.2.   If you provide us with personal data, or where we collect personal data from you, you agree that:

(a)         We may use, disclose and process such personal data for any one or more of the following purposes:

         (i) to assist, process and facilitate your access or use of the Service;

         (ii) to administer, process and facilitate any transaction or activity by you, whether with us or any other Government Agency or Third Party Service provider or collaborator, and whether for your own benefit, or for the benefit of a Third Party on whose behalf you are duly authorized to act;

         (iii) to carry out your instructions or respond to any query, feedback or complaint provided by (or purported to be provided by) you or on your behalf, or otherwise respond to or deal with your interactions with us;

         (iv) to monitor or track your access to or usage of the Service, to conduct research, data analytics, surveys, market studies and similar activities, in order to assist us in understanding your interests, concerns and preferences and improving the Service (including any service of a third party service provider or collaborator) and other services and products provided by Government Agencies. For the avoidance of doubt, we may also collect, use, disclose and process such information to create reports, produce statistics and/or improve recommendation algorithms related to your transactions with us and your usage of the Service and other services and products provided by Government Agencies for record-keeping, reporting, or publication purposes (whether internally or externally). Your personal data used in such reports and statistics will be anonymised before publication;

         (v) to store or create backups of your personal data (whether for contingency or business continuity purposes or otherwise), whether within or outside Singapore;

         (vi) to enable us to contact you or communicate with you on any matters relating to your access or use of the Service, including but not limited to the purposes set out above, via email, push notifications or such other forms of communication that we may introduce from time to time depending on the functionality of the Service and the Device you use;

         (vii) to prevent or investigate any fraud, unlawful or illegal activity or omission or misconduct, or cybersecurity incident, whether or not there is any suspicion of the aforementioned, even if the disclosure of such data may be potentially incriminating;

         (viii) if we choose to integrate sign-up services directly into the Service, to share your data with these sign-up services via their sign-up APIs;

         (ix) to carry out verification checks, due diligence or other screening activities (including background checks) as may be required by us;

         (x) to investigate and/or respond to any feedback or complaint from or about you or your Account;

         (xi) to do anything incidental or necessary to achieve any of the purposes set out in this Clause 2.2(a); and

         (xii) for any other purpose that does not appear above where permissible under any applicable law.

        (collectively, the “Purposes”).

(b)         We may share necessary data with other Government Agencies, and third party service providers or collaborators in connection with the Service, so as to improve or facilitate the discharge of public functions and/or provide the Service to you in the most efficient and effective way unless such sharing is prohibited by law.

(c)         We may share your personal data with entities which are not Government Agencies that have been authorised to carry out specific Government Agency services. We will NOT share your personal data with other entities which are not Government Agencies, except where such sharing is necessary for such entities to assist us in providing the Service to you or for fulfilling any of the purposes herein.

(d)         We may display to you data you had previously provided to us or other Government Agencies. This is to speed up the transaction and save you the trouble of repeating previous submissions. Should such data displayed to you be out-of-date, please supply us the latest up to date data.

2.3.   Please note that we may be required to disclose your data by law, including any law governing the use or provision of any service of a third party service provider or collaborator.

2.4.   You may withdraw your consent to the use and disclosure of your data by us with reasonable notice and subject to any prevailing legal or contractual restrictions; however, doing so may prevent the proper functioning of the Service and may also result in the cessation of the Service to you. Notwithstanding the withdrawal of such consent, we may continue handling, collecting, storing, using, disclosing and processing your data for any or all of the Purposes if we are permitted to do so under the law or there is an applicable public interest reason to disallow such withdrawal.

3.         Protection of Personal Data

3.1.   To safeguard your personal data, all electronic storage and transmission of personal data in connection with the Service is secured with appropriate security technologies.

3.2.   The Service may contain links to external sites or services whose data protection and privacy practices may differ from ours. We are not responsible for the content and privacy practices of these other websites or services and encourage you to consult the privacy notices of those sites or services.

4.         Contact Information

4.1.   Any communication, correspondence or notice for the following purposes shall be in writing and shall be emailed to pango@gt.tech.gov.sg:

(a)         enquires or feedback on our data protection policies and procedures;

(b)         information on or access to data which you have provided to us in the past; or

(c)         if you wish to withdraw your consent to the use and disclosure of your data.

4.2.   We may change the electronic mail address referred to above from time to time without giving you written notice of the change. Any notice sent by electronic mail shall be deemed not to have been received if the sender receives, within 24 hours after sending such electronic mail, a system-generated notification that such electronic mail has not been successfully delivered.

This version of the Privacy Statement is dated 21 08 2026.

Annex

1.         Name of Service: AntiScam Pango

2.         Types of Data Requested/Collected

2.1.   Contents of messages received by you through supported third party messaging applications, and the sender ID and/or contact number of the sender, where you submit the same to us through the reporting feature of the Service

2.2.   The date and time of a reported message, the messaging application through which it was received, the assessment generated by the Service in respect of it, and the application and model versions of the Service

2.3.   Where you have enabled analytics: the categories of scam pattern detected by the Service on your Device, the actions taken by you in response to an Alert, feature usage, application and model versions, device model, operating system version, and an identifier generated for your installation of the Service

2.4.   Diagnostic information generated where the Service stops unexpectedly or encounters an error, including the error concerned, the state of the application at the time, device model, operating system version, application and model versions, and an identifier generated for your installation of the Service

2.5.   Information relating to your Device and your installation of the Service, transmitted in the course of downloading or updating the models comprised in the Service and verifying that your installation is genuine

2.6.   The contents of any enquiry, feedback or complaint submitted by you, and any contact details provided by you

3.         Data Processed on Your Device

3.1.   The contents of message notifications from supported third party messaging applications, your contact list (where contact access is granted), messages flagged by the Service, your alert history, your Trusted Senders list and your settings are processed and stored locally on your Device. Save as set out in paragraph 2, they are not collected by us or transmitted to us. The contents of message notifications are deleted from your Device on expiry of the retention period selected by you.

4.         Recipients

4.1.   Data submitted by you under paragraph 2(a) may be disclosed to the Singapore Police Force, including the Anti-Scam Command, ScamShield, and such other Public Agencies as are responsible for the investigation of scams or the operation of scam blocklists. The data described in paragraphs 2(c), 2(d) and 2(e) is processed on our behalf by Google LLC on servers located outside Singapore.

5.         Further Acknowledgements on Purpose of Data Requested/Collected

5.1.   The types of data you may submit, such as message contents, may contain your personal data and the personal data of other individuals. You further acknowledge and agree that if such submitted data contains personal data, (i) we may use and process such data (including your personal data), and disclose such data to the recipients identified in paragraph 4 in connection with the Service; and (ii) the recipients identified in paragraph 4 may use and process the data for the purpose of training, evaluating and improving scam detection models, systems and products, subject to obligations of confidentiality and data protection. Any further disclosure by such recipients to sub-processors shall be subject to equivalent data protection obligations.

5.2.   Data submitted by you under paragraph 2.1 may be used by us to train, evaluate and improve the models comprised in the Service and other scam detection systems operated by or on behalf of Public Agencies.

5.3.   The Service applies automated detection to identify and mask NRIC and FIN numbers appearing in the contents of a message before it is submitted. Automated detection may not identify all such numbers, including where they are not presented in a recognised format. Other personal data appearing in the message contents, such as names, contact numbers or financial information, is submitted as it appears in the message and is not automatically redacted. The contents of a report are displayed to you before submission for your review. If you do not wish to submit any personal data appearing in the message, do not submit the report.

5.4.   The collection of the data described in paragraphs 2.4 and 2.5 is necessary for the operation and maintenance of the Service and cannot be disabled separately from the Service. Analytics under paragraph 2.3 may be enabled or disabled by you at any time within the Service and is disabled by default.

5.5.   A report submitted by you cannot be withdrawn once submitted.