Insurance Exchange Brunei (operated via ixbngo.com) · Last updated: 20 July 2026
This Privacy Policy explains how Insurance Exchange ("we", "us", "the Platform") collects, uses, discloses, and protects your personal information when you use our website and mobile applications to obtain insurance quotes and policies in Brunei Darussalam. By using the Platform you consent to the practices described here.
Insurance Exchange is a digital marketplace that connects customers with licensed insurance agencies in Brunei. We are not an insurer; insurance policies are issued by the agencies and insurers you choose. We facilitate quotes, communication, and document handling between you and those agencies.
The Platform is operated by IXBNGO Company (Business Registration No. P30016364), registered in Brunei Darussalam, with its principal place of business at Unit 4, Level 2, Spg 269, Jalan Dato Ratna, Kampong Kiarong, Gadong B, Brunei Muara, BE1318, Brunei Darussalam.
We process your personal information on the basis of your consent (which you give by creating an account and submitting a request), to perform the service you request, and to comply with applicable Brunei law and regulatory requirements relating to insurance and identity verification. You may withdraw consent by closing your account, subject to records we must retain by law. We aim to handle your personal data consistent with the obligations under Brunei Darussalam's Personal Data Protection Order (PDPO) and any related guidance issued by the Authority for Info-communications Technology Industry (AITI).
We do not sell your personal information.
The Platform's databases and document storage are hosted on cloud infrastructure located in the Asia-Pacific region (including Singapore). Your information may therefore be processed outside Brunei. Where we transfer your information outside Brunei, we take steps intended to ensure it continues to receive a standard of protection comparable to that required under Brunei law and this Policy wherever it is processed.
The ixbngo.com website does not use advertising or analytics cookies and does not track your browsing across other websites. Our mobile apps use only the on-device storage needed to keep you signed in and run core features (for example, your session token) — not for advertising or cross-app tracking.
We use measures designed to protect your information, including encrypted connections (HTTPS), hashed passwords, access controls, and access-restricted (signed) URLs for your documents. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a data breach affecting your personal information occurs and is likely to result in significant harm, we will take reasonable steps to address it and will notify affected individuals and AITI where required by law.
We keep personal data only for as long as it is needed for the purpose it was collected, or for another legitimate business or legal purpose, consistent with the Personal Data Protection Order and AITI guidance. Our standard retention periods are:
| Data | Retention period |
|---|---|
| Active user account and profile | While the account remains active |
| Deleted account and profile data | Removed from live systems within 30 days of deletion |
| Backup copies containing deleted data | Where backup copies exist, they expire within 90 days |
| Password-reset tokens | 1 hour, or immediately once used |
| Login, security and access logs | 12 months |
| Quote requests and enquiries that do not result in a policy | 12 months |
| Customer-support and contact messages | 2 years after the conversation is closed |
| Policies, applications, transactions, KYC and claims records | 7 years after the policy or relationship ends, or the claim closes |
| Accounting and corporate records | 7 years after the relevant financial year |
| Marketing consent, withdrawal and suppression records | 7 years after the last interaction; suppression lists keep only the minimum identifier needed until you opt back in |
| Records relating to an active complaint, investigation or dispute | Until resolved, plus the applicable legal limitation period |
Some periods may be longer where Brunei law requires it — including company-records and AML/CFT obligations that mandate seven-year retention for certain categories. When a retention period ends, we delete or irreversibly anonymise the data using secure-destruction practices.
Subject to applicable law, you may request to access, correct, or delete your personal information, and you may delete your account from within the app or by contacting us. You may also withdraw your consent to our continued collection, use, or disclosure of your personal data — though this may mean we can no longer provide some or all of the service. We will respond within a reasonable time, subject to information we are required to retain.
If you have a concern about how we handle your personal data, please contact our Data Protection Officer (see “Contact us” below). If we are unable to resolve it, you may raise the matter with AITI, which administers the Personal Data Protection Order in Brunei Darussalam.
The Platform is intended for adults (18+) able to enter into an insurance contract. We do not knowingly collect information from children.
We may update this Policy from time to time. We will post the updated version here with a new "Last updated" date, and where appropriate notify you in the app.
Questions or requests about this Policy or your data, including data-protection requests (access, correction, or withdrawal of consent), can be directed to our Data Protection Officer at support@ixbngo.com, or by post to IXBNGO Company, Unit 4, Level 2, Spg 269, Jalan Dato Ratna, Kampong Kiarong, Gadong B, Brunei Muara, BE1318, Brunei Darussalam.