Policy Event Β· High impact

Based Notifies Singapore PDPC And Police After Card Data Breach

Based said its compliance and operations teams notified Singapore's PDPC and relevant authorities after a card data breach, while reporting that trading wallets and the app were unaffected. The incident highlights the need to separate card-data obligations, self-custody wallet boundaries, social-login vendors and user notification controls.

High impactπŸ‡ΈπŸ‡¬ SingaporeRegulationData ProtectionExchangeBasedPDPCPrivy

APAC FINSTAB analysis

For APAC operators, this creates a high-impact signal around regulation, data protection, exchange in Singapore. Named institutions or platforms: Based, PDPC, Privy. Teams should monitor the original source, map the change to licensing, custody, disclosure, and market-access obligations, and update their jurisdiction playbooks before the next compliance review.

Compliance read-through: map this event to entity licensing, market-access, custody, disclosure, token listing, and operational-risk obligations before expanding or marketing in the affected jurisdiction.

View related Regulation tracker page β†’

Related policy events

IMF Warns Tokenized Markets Remain Illiquid And Volatile

The IMF said tokenized markets still need stronger legal clarity, interoperability and settlement design, while current tokenized markets remain relatively illiquid and more volatile than traditional counterparts. The warning raises conduct, market-structure and stability questions for tokenized equity distributors and venues.

Medium impact🌐 GlobalRegulationTokenization