DISCLOSURE STATEMENT AND PRIVACY POLICY
Last Updated: September 1, 2026
About Us
Company Name: MICRODOT LENDING CORPORATION
SEC Registration Number: CS201951287
Certificate of Authority to Operate a Financing/Lending Company: No. 2921
Registered Office: 6/F Aster Business Center, Mandala Park, 312 Shaw Boulevard, Mandaluyong City, Metro Manila 1550, Philippines.
CashBaka ("CashBaka", "we", "us", or "our") is operated by MICRODOT LENDING CORPORATION.
We adopt this Privacy Policy in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012, its Implementing Rules and Regulations, and other applicable laws and regulations of the Republic of the Philippines.
This Privacy Policy explains what information we collect when you use the CashBaka mobile application and related services, why we collect and process such information, how we use and protect it, with whom it may be shared, how long it may be retained, and the rights available to you as a data subject.
Please read this Privacy Policy carefully before using CashBaka.
1. Personal Information We Collect
When you use CashBaka, we only collect information reasonably necessary to provide our services, verify your identity, process your application, conduct credit and fraud assessments, comply with legal obligations, and protect our users and business.
Depending on the services you use and permissions you provide, we may collect the following information.
1.1 SMS Information
With your explicit consent and subject to applicable laws and platform requirements, CashBaka may access financial-related SMS information necessary for credit assessment, fraud prevention and transaction analysis.
We do not intend to access or process private SMS messages that are unrelated to financial transactions.
Financial SMS information may be used to analyze transaction patterns, financial behavior, multiple-loan risks, cash flow, repayment capacity and potential fraudulent activities. Such information may also assist us in making more accurate credit eligibility and credit limit assessments.
Where collected, SMS information will be transmitted using appropriate security measures and stored on our secured servers:
https://www.microdotlending.com/
1.2 Camera
With your consent, CashBaka may request access to your device camera.
Camera permission is used to allow you to take photographs of identification documents, KYC documents, selfies, facial verification images, supporting documents or other information required during the loan application and identity verification process.
CashBaka will not activate your camera without your authorization.
Images submitted through the application may be encrypted during transmission and stored on our secured servers.
1.3 Image Information
CashBaka may collect images that you voluntarily take, select and upload during your loan application.
These images may include identification documents, KYC documents, selfies, proof of identity or other supporting documentation required for identity verification, fraud prevention and loan processing.
CashBaka does not intend to access, retrieve or collect unrelated photographs from your device gallery.
Images collected through CashBaka may be encrypted and uploaded to:
https://www.microdotlending.com/
1.4 Installed Application Information
Where permitted by applicable laws, operating-system policies and with your authorization where required, CashBaka may collect information relating to applications installed on your device.
As a financial services application, this information may be used for fraud prevention, risk assessment, device security analysis and assessment of eligibility for suitable financial products.
CashBaka will only process such information for legitimate purposes relating to financial risk management, fraud prevention and provision of our services.
1.5 Phone and Device Information
CashBaka may collect technical and device-related information necessary to provide, secure and improve our services.
This information may include:
- mobile device brand and model;
- operating system and operating system version;
- device identifiers;
- mobile network information;
- Wi-Fi and network environment;
- device status;
- SIM-related information where permitted;
- mobile phone number;
- application information;
- device memory information;
- application version;
- device security information; and
- other technical information reasonably required to identify devices, prevent fraud and provide our services.
Where available and permitted, SIM phone number information may be used to simplify registration, login and account verification.
Device information is also used to identify potentially fraudulent activity, unauthorized account access or activities conducted by third parties pretending to be you.
1.6 Location Information
With your permission and where necessary for our services, CashBaka may collect location-related information, including approximate or precise mobile device location, IP-based location and time-zone settings.
Location information may be used for identity verification, fraud detection, account security, transaction risk assessment and compliance purposes.
1.7 Account and Identity Information
When you register for or use CashBaka, we may collect information you provide directly to us, including your:
full name, mobile phone number, date of birth, gender, residential address, email address, government-issued identification information, employment information, income information, emergency contact information, bank account or electronic wallet information and other information required to process your application.
1.8 Loan and Transaction Information
We may collect information concerning your applications and transactions with CashBaka, including loan amount, loan term, approval status, repayment information, payment history, outstanding obligations, transaction records and communications relating to your account.
1.9 Additional Information
We may request additional documents or information when reasonably necessary to verify information you provide, satisfy regulatory requirements, prevent fraud or provide our services.
By submitting information to CashBaka, you confirm that the information provided is accurate, complete and not misleading.
2. How We Use Your Personal Information
CashBaka may collect, use, process or disclose your Personal Data for legitimate purposes relating to the provision of our financial products and services.
These purposes may include:
1. verifying and authenticating your identity;
2. registering and maintaining your CashBaka account;
3. assessing, processing and managing applications for CashBaka products and services;
4. conducting credit assessment, credit scoring, underwriting and eligibility evaluation;
5. evaluating your financial needs and repayment capacity;
6. preventing, detecting and investigating fraud, identity theft, money laundering and other illegal activities;
7. conducting KYC and other regulatory compliance procedures;
8. maintaining your credit and transaction history for current and future reference;
9. managing loans, accounts, repayments and other transactions;
10. collecting amounts legally due and enforcing contractual obligations;
11. communicating with you regarding applications, transactions, repayments, overdue accounts, account security and customer service;
12. responding to questions, complaints, requests and disputes;
13. providing service notifications, repayment reminders, promotional communications, coupons or offers, subject to your rights and applicable laws;
14. conducting internal research, analytics, statistical analysis and product development;
15. improving CashBaka products, services, systems, security and user experience;
16. preventing unauthorized access to CashBaka accounts;
17. verifying information against information obtained from authorized third parties;
18. conducting business, operational, compliance, financial and risk monitoring;
19. complying with court orders, regulatory requirements, legal obligations and lawful government requests;
20. establishing, exercising or defending legal claims;
21. transferring or assigning rights and obligations arising from agreements between you and CashBaka;
22. processing or storing information in local or foreign jurisdictions subject to appropriate safeguards; and
23. performing any other processing required or permitted by applicable law.
CashBaka may also use cookies, pixels, SDKs and similar technologies on its websites or mobile application to understand application usage, measure advertising effectiveness, analyze user behavior and improve our products and services.
3. Automated Decision-Making and Profiling
CashBaka may use automated systems to assist in making decisions relating to your eligibility for products and services.
Lending Decisions
When you submit a loan application, CashBaka may use automated processing to determine whether you are eligible for a loan and to determine matters including the loan amount, loan term or other applicable conditions.
Our credit and underwriting systems may use statistical models, data analysis and machine-learning technologies to process information collected in accordance with this Privacy Policy.
These technologies allow us to provide faster credit assessments, including for individuals who may have limited traditional credit history or financial records.
Automated processing may result in a determination that you are not eligible for a loan or are eligible only for a particular amount, term or product.
We endeavor to regularly evaluate our credit and underwriting processes to maintain their accuracy, effectiveness and fairness.
Fraud Detection
CashBaka may also use automated technologies to identify, prevent and investigate suspected fraud, money laundering, identity theft or other unauthorized activities.
Our systems may identify potentially suspicious activities when information or behavior appears inconsistent, fraudulent or indicative of attempts to conceal an individual's true identity.
Where an account or transaction presents a significant fraud or security risk, we may restrict, suspend or refuse access to certain services, subject to applicable law.
Review of Automated Decisions
If your application is declined as a result of an automated credit, underwriting or fraud assessment, you may contact CashBaka to request further information or a review where such right is available under applicable law.
Please contact:
4. How We Communicate With You
CashBaka may use your contact information to communicate with you regarding the services you use.
Such communications may include account notifications, OTP or authentication messages, loan application updates, repayment reminders, overdue reminders, transaction information, customer service responses, security alerts, product updates, coupons and promotional offers.
Marketing communications will be provided subject to applicable laws and your right to opt out.
5. Who We Share Your Information With
CashBaka does not sell your Personal Data.
We may disclose or transfer information only where reasonably necessary for the purposes described in this Privacy Policy, to provide our services, comply with legal obligations or protect legitimate interests.
Recipients may include:
- MICRODOT LENDING CORPORATION and its authorized affiliates or related companies;
- employees, directors, officers, contractors and authorized representatives;
- cloud hosting and data storage providers;
- KYC, identity verification and fraud prevention providers;
- credit bureaus and authorized credit reference agencies;
- banks, financial institutions and payment service providers;
- licensed electronic wallet providers;
- payment processors and settlement providers;
- telecommunications and messaging service providers;
- customer support service providers;
- analytics and technology providers;
- external collection agencies where an obligation remains unpaid;
- auditors, lawyers and professional advisers;
- government agencies, regulatory authorities and law enforcement agencies where required by law;
- tax authorities; and
- parties involved in an authorized merger, acquisition, restructuring, financing or transfer of business assets.
Where reasonably possible, information provided to third parties may be anonymized, aggregated or limited to the information necessary for the relevant purpose.
Third-party service providers processing Personal Data on our behalf are expected to handle such information in accordance with applicable privacy and data protection requirements.
We may also disclose information where required by a subpoena, court order, regulatory request or other lawful process, or where we reasonably believe disclosure is necessary to prevent fraud, financial loss, physical harm or other illegal activity.
6. Retention of Personal Information
CashBaka retains Personal Data only for as long as reasonably necessary to provide our services, complete transactions, meet legitimate business requirements and comply with legal and regulatory obligations.
Information may be retained for longer periods where necessary:
to comply with applicable laws and regulatory requirements; to establish, exercise or defend legal claims; to maintain required financial and transaction records; to investigate fraud or suspicious activities; to comply with requirements of authorized credit agencies or government authorities; or where otherwise permitted or required by law.
Once Personal Data is no longer required, CashBaka will take reasonable steps to securely delete, anonymize or otherwise dispose of such information in a manner designed to prevent unauthorized access, disclosure or further processing.
Backup and archival copies may continue to exist for a limited period in accordance with our legitimate data backup, retention and disaster recovery procedures.
7. Storage and International Transfer of Information
CashBaka may store Personal Data, including transaction information, using secure cloud infrastructure and third-party cloud service providers, including Amazon Web Services and Alibaba Cloud where applicable.
Your Personal Data may be processed or stored outside the Philippines, including in jurisdictions such as the United States or Singapore.
Where information is transferred outside the Philippines, CashBaka will use reasonable safeguards required under applicable privacy and data protection laws to protect your Personal Data.
We require service providers processing information on our behalf to implement appropriate organizational, technical and security measures.
8. Third-Party SDKs and Technologies
CashBaka may integrate third-party software development kits ("SDKs") and services to provide application functionality, analytics, security, identity verification, messaging and advertising measurement.
Firebase Cloud Messaging
CashBaka may use Firebase Cloud Messaging ("FCM"), provided by Google LLC.
FCM may process information including Firebase installation identifiers, FCM registration tokens, application information, device information, notification delivery status and interactions with notifications.
CashBaka uses FCM to provide push notifications, service messages, application updates, repayment reminders, overdue reminders, account security alerts, coupons, promotional offers and other communications relating to CashBaka products and services.
Information transmitted through FCM is protected using secure transmission technologies such as HTTPS.
Google Privacy Policy:
https://policies.google.com/privacy
Facebook Android SDK
CashBaka may use the Facebook Android SDK, provided by Meta Platforms, Inc. or its affiliates.
This SDK may collect information including advertising identifiers and application activity, such as application interactions, page visits, clicks or other events.
The information may be used to understand how users interact with CashBaka and to measure the performance and effectiveness of advertising campaigns.
Adjust SDK
CashBaka may use Adjust SDK, provided by Adjust GmbH.
Adjust may collect advertising identifiers, Android identifiers where permitted, device type, device model, operating system information and application events.
Application events may include registration, application submission, application opening, sessions and other interactions with CashBaka.
We may use this information to measure advertising effectiveness, user acquisition performance, application usage and campaign return on investment.
Data transmitted through the SDK is subject to appropriate security measures.
Liveness Detection SDK
CashBaka may use a liveness detection and facial verification SDK during identity verification.
The SDK may process information including device type, device model, operating system, application name, application version and sensor information such as accelerometer, gyroscope, magnetic field and gravity sensor data where supported.
Such information is used to detect identity fraud, spoofing, photograph or video replay attacks, deepfakes and other attempts to circumvent identity verification.
9. Your Rights as a Data Subject
Subject to the Data Privacy Act of 2012 and other applicable laws, you may have the following rights regarding your Personal Data.
Right to Be Informed
You have the right to know whether your Personal Data is being collected or processed and to receive information regarding the purposes, methods and extent of such processing.
Right to Access
You may request access to Personal Data held by CashBaka concerning you, subject to limitations permitted by applicable law.
Right to Rectification
You may request correction of Personal Data that is inaccurate, incomplete or outdated.
We may request supporting documentation where necessary to verify the requested correction.
Right to Erasure or Blocking
Subject to applicable laws and legitimate retention requirements, you may request deletion, removal or blocking of Personal Data where:
the information is no longer necessary for the purpose for which it was collected; consent has been withdrawn and there is no other lawful basis for processing; the processing is unlawful; or deletion is otherwise required under applicable law.
Right to Restrict Processing
Where permitted by applicable law, you may request that CashBaka restrict certain processing of your Personal Data, including where the accuracy or legality of the processing is disputed.
Right to Data Portability
Where applicable, you may request a copy of certain Personal Data in a structured, commonly used and machine-readable format.
Right to Object
You may object to certain processing of Personal Data, including processing based on legitimate interests or processing for direct marketing purposes, subject to applicable laws.
Right to File a Complaint
You have the right to file a complaint with the National Privacy Commission of the Philippines if you believe that your rights under applicable privacy laws have been violated.
There may be circumstances where CashBaka cannot comply fully with a particular request, including where retention or processing is required by law, necessary for the establishment or defense of legal claims or justified by compelling legitimate grounds.
To exercise your data privacy rights, please contact:
10. Advertising and Marketing
CashBaka may send you information regarding products, services, coupons, promotional activities and other offers that may be relevant to you, subject to applicable legal requirements.
You may request to stop receiving promotional or marketing communications at any time by contacting:
Opting out of marketing communications will not prevent CashBaka from sending necessary transactional or service communications, such as OTP messages, account security notifications, loan status information or repayment reminders.
11. Deletion of Personal Information
If you no longer wish to use CashBaka, you may request deletion of eligible Personal Data.
You may submit a deletion request by contacting:
Upon receiving and verifying a valid request, we will process the request within the period required by applicable law and our privacy procedures.
CashBaka may automatically delete or anonymize eligible Personal Data after you have ceased using our services for more than twelve (12) months, subject to legal, regulatory, fraud prevention and record-retention requirements.
If you have an outstanding loan, unpaid obligation, unresolved transaction, dispute, legal claim or other ongoing obligation with CashBaka, certain information cannot be deleted until the relevant obligation has been settled or applicable retention requirements have expired.
Information that CashBaka is legally required to retain may continue to be retained even after an account deletion request.
12. Consent and Authorization
By registering for or using CashBaka and providing consent where required, you acknowledge that you have read and understood this Privacy Policy.
Where permitted by applicable law and subject to any specific consent requested through the CashBaka application, you authorize CashBaka to collect, use, store, disclose and otherwise process your Personal Data for the purposes described in this Privacy Policy.
You confirm that information you provide to CashBaka is true and accurate to the best of your knowledge.
You authorize CashBaka to verify information you provide where reasonably necessary for credit assessment, identity verification, fraud prevention or compliance purposes.
You further acknowledge that CashBaka and MICRODOT LENDING CORPORATION may be required by applicable laws or regulations to provide certain information to authorized government or regulatory bodies, credit bureaus or other competent authorities.
13. Security of Your Personal Information
CashBaka takes reasonable administrative, organizational and technical measures to protect Personal Data against unauthorized access, accidental loss, destruction, alteration, disclosure or misuse.
These measures may include encrypted transmission, access controls, authentication mechanisms, security monitoring, restricted employee access, data backup and other security practices appropriate to the nature and sensitivity of the information processed.
However, no electronic transmission or storage system can be guaranteed to be completely secure. Users should also take appropriate precautions to protect their CashBaka account credentials, OTP codes and mobile devices.
14. Children's Privacy
CashBaka products and services are intended only for persons who are legally eligible to enter into financial transactions and use lending services under applicable Philippine laws.
CashBaka does not knowingly provide lending services to minors.
If we become aware that Personal Data belonging to an individual who is not legally eligible to use our services has been collected improperly, we will take reasonable steps to delete or otherwise appropriately process such information in accordance with applicable law.
15. Changes to This Privacy Policy
CashBaka may update this Privacy Policy from time to time to reflect changes in our services, technology, business practices, legal requirements or regulatory obligations.
Where material changes are made, we will provide appropriate notice through the CashBaka application, our website, email or other available communication channels.
The effective or updated date displayed at the beginning of this Privacy Policy indicates when the latest version became effective.
Continued use of CashBaka after an updated Privacy Policy becomes effective will be subject to applicable notice and consent requirements.
16. Contact Us
If you have questions regarding this Privacy Policy, wish to exercise your rights as a data subject, wish to request deletion of your information or have concerns regarding the processing of your Personal Data, please contact:
MICRODOT LENDING CORPORATION
CashBaka Privacy Support
Email: support@cashbaka.net
Registered Office:
6/F Aster Business Center, Mandala Park,
312 Shaw Boulevard, Mandaluyong City,
Metro Manila 1550, Philippines.