Updated Apr 9, 2018
If you are a corporate entity/an organization, references to the term “you” and “your” shall also include your directors, officers, employees, representatives and agents.
The PDPA requires us to inform you of your rights in respect of your personal data that is being processed or that is to be collected and further processed by us and the purposes for the data processing. The PDPA also requires us to obtain your consent to the processing of your personal data. In light of the PDPA, we are committed to protecting and safeguarding your personal data.
The term “personal data” means any information in our possession or control that relates directly or indirectly to an individual to the extent that the individual can be identified or are identifiable from that and other information in our possession such as name, postal address, telephone number, identity verification number, date of birth, email address, bank account details, credit card number etc. The types of personal data collected depend on the purpose of collection. We may “process” your personal data by way of collecting, recording, holding, storing, using and/or disclosing it.
Your personal data may be collected from you during your course of dealings with us in any way or manner including pursuant to your registration of account or subscription of services we provide at our Website, any transactions and/or communications made from/with us or shared with us through our dealings with our clients, business partners and affiliates. We may also collect your personal data from a variety of sources, including without limitation, at any meetings, events, seminars, conferences, talks and/or from publicly available sources.
In addition, we may also receive, store and process your personal data which are provided or made available by any third parties, credit reference bodies, regulatory and law enforcement authorities, for reasons including delivery of our products and/or services, performance of conditions of agreements and/or to comply with our legal and regulatory obligations.
The personal data as provided/furnished by you to us or collected by us from you or through such other sources as may be necessary for the fulfilment of the purposes at the time it was sought or collected, may be processed for the following purposes (collectively referred to as the “Purposes”):
We may also use and process your personal data for the following marketing and promotional purposes (“Marketing and Promotional Purposes”):
We will seek your separate consent for any other purposes which do not fall within the categories stated above.
We may also be collecting from sources other than yourself, personal data about you, for one or more of the above Purposes, and thereafter using, disclosing and/or processing such personal data for one or more of the above Purposes.
We will not sell, rent, transfer or disclose any of your personal data to any third party without your consent. However, we may disclose your personal data to the following third parties, for one or more of the above Purposes:
We take it that all personal data provided by you is accurate and complete, and that none of it is misleading or out of date. You will promptly update us in the event of any change to your personal data.
To the extent that the applicable law allows, you have the right to request for access to, request for a copy of, request to update or correct, your personal data held by us. You may update your personal information via our Platform if applicable. Notwithstanding the foregoing, we reserve our rights to rely on any statutory exemptions and/or exceptions to collect, use and disclose your personal data.
You have the right at any time to request us to limit the processing and use of your personal data (for example, requesting us to stop sending you any marketing and promotional materials or contacting you for marketing purposes).
In addition, you also have the right, by notice in writing, to inform us on your withdrawal (in full or in part) of your consent given previously to us subject to any applicable legal restrictions, contractual conditions and a reasonable duration of time for the withdrawal of consent to be effected. However, your withdrawal of consent could result in certain legal consequences arising from such withdrawal. In this regard, depending on the extent of your withdrawal of consent for us to process your personal data, it may mean that we will not be able to continue with your existing relationship with us or the contract that you have with us will have to be terminated.
Any of your personal data provided to us is retained for as long as the purposes for which the personal data was collected continues; your personal data is then destroyed or anonymized from our records and system in accordance with our retention policy in the event your personal data is no longer required for the said purposes unless its further retention is required to satisfy a longer retention period to meet our operational, legal, regulatory, tax or accounting requirements.
We are committed to ensuring that your personal data is stored securely. In order to prevent unauthorized access, disclosure or other similar risks, we endeavor, where practicable, to implement appropriate technical, physical, electronic and procedural security measures in accordance with the applicable laws and regulations and industry standard to safeguard against and prevent the unauthorized or unlawful processing of your personal data, and the destruction of, or accidental loss, damage to, alteration of, unauthorized disclosure of or access to your personal data.
The Internet is not a secure medium. However, we will put in place various security procedures with regard to the Website and your electronic communications with us. All our employees and data processors, who have access to, and are associated with the processing of your personal data, are obliged to respect the confidentiality of your personal data.
Please be aware that communications over the Internet, such as emails are not secure unless they have been encrypted. Your communications may be routed through a number of countries before being delivered – this is the nature of the World Wide Web/Internet.
We cannot and do not accept responsibility for any unauthorized access or interception or loss of personal data that is beyond our reasonable control.
Our information technology storage facilities and servers may be located in other jurisdictions outside of Malaysia. This may include, but not limited to, instances where your personal data may be stored on servers located outside of Malaysia. In addition, your personal data may be disclosed or transferred to entities located outside of Malaysia (including that of our clients, business partners and affiliates) or where you access the Website from countries outside Malaysia. Please note that these foreign entities may be established in countries that might not offer a level of data protection that is equivalent to that offered in Malaysia. You hereby expressly consent to us transferring your personal data outside of Malaysia for such purposes. We shall endeavor to ensure that reasonable steps are taken to procure that all such third parties outside of Malaysia shall not use your personal data other than for that part of the Purposes and to adequately protect the confidentiality and privacy of your personal data.