Privacy Policy

Effective: 1 September 2025

Moneybox Credit Fund ("Moneybox", "we", "us", "our") respects your privacy. This policy explains how we collect, hold, use and disclose personal information when you interact with moneyboxinvest.com and our associated mobile applications (together, the "Platform").

Moneybox Credit Fund is issued by Cache (RE Services) Ltd (ABN 62 616 465 671, AFSL 494886). Cache is the privacy ‘controller’ for investor data under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1 What personal information we collect

We collect information required to open and administer your account and meet our legal obligations, including:

Identity & KYC data – full name, date of birth, gender, driver‑licence / passport details.
Contact details – residential and mailing address, email, telephone.
Tax & regulatory data – Tax File Number (TFN) or ABN, FATCA/CRS self‑certification, AML/CTF risk assessments.
Financial data – bank‑account number (for funding and withdrawals), transaction history, unit holdings.
Device & usage data – IP address, browser type, operating system, referring URLs, pages visited, session timestamps, cookies and analytics identifiers.

If you apply on behalf of a company or trust we may also collect directors’ or trustees’ personal information and corporate documents (e.g. ASIC extract, trust deed).

2 Why we collect, hold and use your information

We will process your personal information lawfully, fairly and in a transparent manner. We collect and process information about you only where we have a legal basis for doing so.

Under APP 3‑6 we collect personal information only when reasonably necessary.

These legal bases depend on the services you use and how you use them, meaning we collect and use your information only where:

open, operate and administer your Moneybox account.
comply with the Corporations Act 2001 (Cth), Anti‑Money Laundering & Counter‑Terrorism Financing Act 2006 (Cth), FATCA/CRS and other laws.
process applications, redemptions, distributions and account communications.
provide customer support and manage complaints (including AFCA dispute resolution);
conduct identity verification, fraud monitoring and security audits.
perform analytics to improve the Platform.
send service or marketing communications you have consented to receive.
share referrer first names with referees and notify referrers of successful referrals (first name only) as part of our referral program operations.

We do not use your TFN or ABN for direct marketing.

We don’t keep personal information for longer than is necessary.

While we retain this information, we will protect it within commercially acceptable means to prevent loss and theft, as well as unauthorised access, disclosure, copying, use or modification. That said, we advise that no method of electronic transmission or storage is 100% secure and cannot guarantee absolute data security.

If necessary, we may retain your personal information for our compliance with a legal obligation or in order to protect your vital interests or the vital interests of another natural person.

3 Legal bases

We may collect, hold, use and disclose information for the following purposes and personal information will not be further processed in a manner that is incompatible with these purposes. . Under Australian privacy law, we process personal information where:

it is necessary for the performance of our services;
required to comply with our legal obligations;
necessary for our legitimate interests (fraud prevention, service improvement); or
you have provided consent (which you may withdraw at any time).

4 Disclosure of personal information

We share information only as required:

Recipient category	Purpose
Unit‑registry & custodial service providers	Maintain your holdings, calculate distributions.
Identity‑verification vendors	AML/CTF and KYC checks.
Cloud infrastructure & IT security providers	Hosting, backup, log monitoring.
Auditors, legal and tax advisers	Regulatory compliance and financial reporting.
Government agencies (ATO, AUSTRAC, ASIC)	Statutory reporting and law‑enforcement requests.
Payment networks & banks	Funding, withdrawal and distribution payments.
Referral program participants	Share referrer first names with referees and notify referrers of successful account openings (first name only).
Complaints bodies (AFCA)	External dispute resolution if you lodge a complaint.

We do not sell your personal information.

5 Overseas transfers

Some service providers are located outside Australia , primarily in Singapore, the United States, and New Zealand for cloud hosting and data processing services. We take reasonable steps, such as contractual clauses and encryption to ensure overseas recipients do not breach the APPs.

6 Data retention

Investor records are retained for seven years after your account is closed to meet Corporations Act and AML/CTF record-keeping obligations, after which they are securely destroyed or de-identified.

7 Security

We employ multi-layer encryption, network penetration testing and role-based access controls. Despite these measures, no method of storage or transmission is completely secure.

8 Your rights

Under the Privacy Act you may request to access or correct your personal information, or make a complaint.

If you are unsatisfied, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

9 Cookies & analytics

We use “cookies” and similar technologies to collect information about how you interact with our Platform. A cookie is a small piece of data that our website stores on your device, which helps us understand and improve your experience.

We use Google Analytics to understand usage patterns and improve our service. Google Analytics collects data such as pages visited, browser type, and referring URLs. This data is anonymised and aggregated and does not identify individual users. You can learn more about how Google uses this data here: www.google.com/policies/privacy/partners/

You can disable cookies in your browser settings, and you may opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on. Disabling cookies may impact some site functionality.

10 Contact & Privacy Officer

Privacy Officer – Moneybox Credit Fund

Address: P.O. Box 2245 Caulfiled Junction, VIC, 3161
Email: privacy@moneyboxinvest.com

11 Changes to this policy

If we make material changes we will post an updated version on moneybox.com.au and notify registered investors by email. Continued use of the Platform constitutes acceptance of the revised policy.

12 Notifiable Data Breaches Scheme

If an eligible data breach occurs, we will promptly notify affected individuals and notify the OAIC within 72 hours and affected individuals as soon as practicable (and in any case within 30 days).