Whistleblower policy

If you believe ONSET — the company or anyone working for us — is engaged in misconduct (fraud, data misuse, customer harm, regulatory violation, harassment), you can report it confidentially. Channels: · Email integrity@onset.my (read by an independent board member, not the founder). · Postal mail to the SSM-registered address. · Anonymous form at /trust/report (no logging of IP, no tracking). What happens: · Acknowledged within 5 working days. · Investigated by someone not in the report's chain of command. · Outcome shared with the reporter (where the reporter has identified themselves). · No retaliation. Period. Any retaliation against a good-faith reporter results in termination. We commit to investigating every report — including those that turn out to be groundless — because the cost of getting whistleblowing wrong is much higher than the cost of investigating noise.