privacy policy

Privacy Policy

Data Privacy

In relation to all personal information obtained pursuant to this Agreement, the Parties agree that user data that is of personally identifiable nature under the Personal Data Protection Act 2010 (“PDPA”) shall strictly not to be used for the purpose of ad targeting, in accordance with the widely accepted industry norms as set out in Personal Data Protection.

Personal Data Protection

In respect of Personal Data, each Party agrees and warrants that it shall:-

  1. observe and comply with the provisions of the PDPA as amended from time to time;
  2. comply with any requests made or directions given by the other Party in connection with the requirements of the PDPA;
  3. not do or permit anything to be done which might jeopardise or contravene the terms of any registration, notification or authorisation effected, issued or given under the PDPA which each Party or any of its subsidiaries are bound to comply with;
  4. not process any of the Personal Data in fulfilling its obligations under this Agreement unless it is acting on the express instructions of the other Party, and such Personal Data shall be treated as Confidential Information for the purpose of this Agreement;
  5. use the Personal Data which has been obtained by or made available through or made available to the other Party only for the purposes of fulfilling its obligations under this Agreement and comply with the instructions of the other Party from time to time in connection with use of such Personal Data, and not retain the Personal Data for any longer than is necessary for the purposes;
  6. not disclose the Personal Data which has been obtained by or made available through or made available to it without the written authority of the other Party and immediately notify the other Party as soon as it becomes aware that a disclosure of the Personal Data may be required by law, and where there is a transfer of the Personal Data, maintain a list of disclosure to third parties as required under the PDPA;
  7. not transfer the Personal Data which has been obtained by or made available through or made available to it within Malaysia or outside Malaysia, or allow persons outside Malaysia to have access to it, without the prior written approval of the other Party;
  8. take practical steps to ensure the security of the Personal Data which has been obtained by or made available through or made available to the other Party, and consider all suggestions by the other Party to ensure that the level of protection provided for such Personal Data is in accordance with this Agreement and make the changes suggested (at the first Party’s cost) unless the first Party can prove to the reasonable satisfaction of the other Party that they are not necessary or desirable to ensure ongoing compliance with this clause;
  9. ensure that it has in place a system or procedure wherein the Personal Data will be kept and stored in accordance with industry best practices which include appropriate administrative, physical and technical safeguards to secure data from unauthorised access, disclosure and use to ensure compliance with the rules and provisions contained in the PDPA (as amended from time to time); and
  10. immediately notify the other Party when it becomes aware of a breach in the provisions of the PDPA.

Except that the confidential information is:

  1. collected via independently developed platform/tools by the receiving party without use of or reference to the disclosing party's Confidential Information;
  2. is disclosed by the receiving party pursuant to the disclosing party's prior written approval;
  3. on a "need-to-know" basis to third parties that have signed a non-disclosure agreement containing provisions substantially as protective as the terms of this Section and such party has obtained the written consent through that disclosure from the party that provided the Confidential Information.
  4. “Need-To-Know” means the necessity to have access to Classified Information in the scope of given official duties and/or for the performance of a specific task and/or is required by law.

Personal Data Usage and Practices

Last Updated : 17 May 2022