Title: URGENT: Serious POPIA Breach & ID Theft Risk at PEP Nelspruit Plaza - 18 Nov 2025

I am writing to report a serious and alarming incident that occurred at the PEP store in Nelspruit Plaza on 18 November 2025.

During checkout, the cashier assisting me requested my South African ID number. When I asked why it was necessary, she explicitly stated it was for "extra savings." I provided the number, and she typed it directly into the till system.

The critical red flag is that she only collected my ID number. She did not ask for my full name, my contact number, or any other personal details. This is a severe violation of standard procedure and the Protection of Personal Information Act (POPIA). For any legitimate process (like opening an account, money transfer, or lotto), a name is the most basic requirement to link to an ID number. Collecting an ID number in isolation serves no legitimate purpose and is a major red flag for potential identity theft or internal *****.

My ID number is now in PEP's system, entered under a false pretence, and I have no idea who has access to it or for what purpose it was truly used. I consider this a serious data breach.

I demand that PEP Head Office:

1. Immediately investigate this specific incident at the Nelspruit Plaza store and the employee involved. 2. Provide me with a formal, written explanation of what company process my ID number was supposedly used for. 3. Confirm what actions will be taken to secure and/or delete my ********ly collected data. 4. Confirm what disciplinary and retraining measures will be implemented at this store to prevent this from happening to other customers.

I will be placing a ***** alert on my credit profile with the national credit bureaus due to this incident. I expect your urgent response