Insurance Exchange Brunei (operated via ixbngo.com) · Last updated: 11 August 2026
This Privacy Policy explains how Insurance Exchange ("we", "us", "the Platform") collects, uses, discloses, and protects your personal information when you use our website and mobile applications to obtain insurance quotes and policies in Brunei Darussalam. By using the Platform you consent to the practices described here.
Insurance Exchange is a digital marketplace that connects customers with licensed insurance agencies in Brunei. We are not an insurer; insurance policies are issued by the agencies and insurers you choose. We facilitate quotes, communication, and document handling between you and those agencies.
The Platform is operated by IXBNGO Company (Business Registration No. P30016364), registered in Brunei Darussalam, with its principal place of business at Unit 4, Level 2, Spg 269, Jalan Dato Ratna, Kampong Kiarong, Gadong B, Brunei Muara, BE1318, Brunei Darussalam.
We process your personal information on the basis of your consent (which you give by creating an account and submitting a request), to perform the service you request, and to comply with applicable Brunei law and regulatory requirements relating to insurance and identity verification. You may withdraw consent by closing your account, subject to records we must retain by law. We aim to handle your personal data consistent with the obligations under Brunei Darussalam's Personal Data Protection Order (PDPO) and any related guidance issued by the Authority for Info-communications Technology Industry (AITI).
We do not sell your personal information.
The Platform's databases and document storage are hosted on cloud infrastructure located in the Asia-Pacific region (including Singapore). Your information may therefore be processed outside Brunei. Where we transfer your information outside Brunei, we take steps intended to ensure it continues to receive a standard of protection comparable to that required under Brunei law and this Policy wherever it is processed.
The ixbngo.com website does not use advertising or analytics cookies and does not track your browsing across other websites. Our mobile apps use only the on-device storage needed to keep you signed in and run core features (for example, your session token) — not for advertising or cross-app tracking.
We do measure how this website is used, so we can tell which pages are useful and where people get stuck. This is done with Vercel Web Analytics, which is cookie-free: it sets no cookies, stores nothing on your device, does not follow you to other websites, and does not build a profile of you. It records the page visited, the referring page, and coarse technical details such as country, browser and device type. Vercel derives a temporary, anonymised visitor identifier from that request data; it is not stored on your device, and we cannot trace it back to you or link it to your account. Because no cookie or device storage is involved there is no consent banner and nothing for you to switch off — though any standard tracker-blocking extension will block it if you prefer.
Alongside page views we record a small number of interaction events, so we can see which parts of the site people actually use — for example that the agency registration form was opened, submitted, or closed without being sent, and roughly how far through it got. These record that something happened, never what you typed: no field values, no names, no email addresses, no file contents. They carry no identifier of you and are not linked to any account.
We use measures designed to protect your information, including encrypted connections (HTTPS), hashed passwords, access controls, and access-restricted (signed) URLs for your documents. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a data breach affecting your personal information occurs and is likely to result in significant harm, we will take reasonable steps to address it and will notify affected individuals and AITI where required by law.
We keep personal data only for as long as it is needed for the purpose it was collected, or for another legitimate business or legal purpose, consistent with the Personal Data Protection Order and AITI guidance. Our standard retention periods are:
| Data | Retention period |
|---|---|
| Active user account and profile | While the account remains active |
| Deleted account and profile data | Removed from live systems within 30 days of deletion |
| Backup copies containing deleted data | Where backup copies exist, they expire within 90 days |
| Password-reset tokens | 1 hour, or immediately once used |
| Login, security and access logs | 12 months |
| Quote requests and enquiries that do not result in a policy | 12 months |
| Customer-support and contact messages | 2 years after the conversation is closed |
| Policies, applications, transactions, KYC and claims records | 7 years after the policy or relationship ends, or the claim closes |
| Accounting and corporate records | 7 years after the relevant financial year |
| Marketing consent, withdrawal and suppression records | 7 years after the last interaction; suppression lists keep only the minimum identifier needed until you opt back in |
| Records relating to an active complaint, investigation or dispute | Until resolved, plus the applicable legal limitation period |
Some periods may be longer where Brunei law requires it — including company-records and AML/CFT obligations that mandate seven-year retention for certain categories. When a retention period ends, we delete or irreversibly anonymise the data using secure-destruction practices.
Subject to applicable law, you may request to access, correct, or delete your personal information, and you may delete your account from within the app or by contacting us. You may also withdraw your consent to our continued collection, use, or disclosure of your personal data — though this may mean we can no longer provide some or all of the service. We will respond within a reasonable time, subject to information we are required to retain.
If you have a concern about how we handle your personal data, please contact our Data Protection Officer (see “Contact us” below). If we are unable to resolve it, you may raise the matter with AITI, which administers the Personal Data Protection Order in Brunei Darussalam.
The Platform is intended for adults (18+) able to enter into an insurance contract. We do not knowingly collect information from children.
We may update this Policy from time to time. We will post the updated version here with a new "Last updated" date, and where appropriate notify you in the app.
Questions or requests about this Policy or your data, including data-protection requests (access, correction, or withdrawal of consent), can be directed to our Data Protection Officer at support@ixbngo.com, or by post to IXBNGO Company, Unit 4, Level 2, Spg 269, Jalan Dato Ratna, Kampong Kiarong, Gadong B, Brunei Muara, BE1318, Brunei Darussalam.