Personal data is processed in accordance with the Data Protection and Privacy Act (PDPA) under the oversight of the Personal Data Protection Office (PDPO), as mandated by the National Information Technology Authority (NITA-U).