IMPORTANT NOTICE

PERSONAL DATA PROTECTION ACT 2010 (“PDPA”) - PRIVACY POLICY

Dear Sir/Madam

With the enforcement of the PDPA, AmanahRaya Trustees Berhad (the “Company”) respects the privacy of your personal data. For the purpose of this policy (“Privacy Policy”) terms such as “personal data”, “use”, “process” and “collect” shall have the same meaning prescribed in the PDPA unless mentioned
otherwise.

This Privacy Policy shall serve to inform you the manner in which your personal data that has been and/or
will be collected and/or obtained and/or will be processed by the Company whether in the past, present
or in future.

Nature of personal data collected and processed

The personal data collected and processed by the Company may include the following but not limited to:

• name;
• designation;
• department;
• telephone number; and
• email address

Source of personal data collected and processed

The Company may, from time to time, retrieve, collect or obtain the personal data from various sources including but not limited to:

• agreements which you may have executed;
• your participation in any of our survey;
• registration forms or application forms which you may have submitted to the Company; and
• voluntarily distributing your business name cards, business proposals and any other materials
  relating to your identity and business directory or listing that you have subscribed in sharing your information.

Purpose of collecting and processing of personal data

The personal data collected and/or obtained has been/will be processed by the Company for the
following purposes (the list below is not exhaustive and subject to any changes to be made from time to time):

• for daily operation of services provided by the Company;
• updating the Company’s internal records;
• meeting any legal or regulatory requirements relating to services provided by the Company and to make disclosure under the requirements of any applicable law, regulation, direction, court order, by-laws, guidelines, circular or any code applicable to the Company;
• prevention of crime including but not limited to fraud, money-laundering, terrorist financing and criminal activities;
• establishing business relationship;
• for research and statistical analysis as appropriate for service enhancement purpose;
• conducting marketing activities of services provided by the Company.

(collectively referred to as “Purposes”)

Safeguard, disclosure, transfer and sharing of personal data

The personal data collected and processed by the Company is kept private and confidential. We will take reasonable measures to prevent any unauthorized or unlawful processing of such personal data.

When using and processing your personal data for Purposes as stated above, your personal data may be disclosed to the following parties (whether within or outside Malaysia):

• our shareholders, directors, employees, authorised agents and/or other permitted person;
• auditors, lawyers and any professional advisers which we deem necessary and appropriate; and
• any other persons, bodies and/or authorities to whom we are required under the law including government agencies (federal or state), statutory authorities and industry regulators.

Consequences of failure to provide personal data or accurate personal data

Any failure to provide personal data or accurate personal data and your consent to the same may result in the inability of the Company to carry out the Purposes mentioned herein or to comply with any laws or guidelines issued by regulatory or other authorities.

Client’s rights

Subject to payment of prescribed fees, (where applicable) in accordance to the provisions of the PDPA, you at all times, may:

• request for access to your personal data;
• correct and/or limit the processing of the personal data by providing written notification to the Company; and
• request clarification on the Company’s policies and practices in relation to personal data and categories of personal data processed by the Company.

The Company reserves the right to amend this Privacy Policy from time to time to reflect any changes in law, business practice, procedures and structure. The Company may place notice on the amendment of the Privacy Policy on the Company’s website or via any other suitable mode as decided by the Company.

We trust that you are agreeable and consent to the collection and processing of your personal data for the abovementioned Purposes. If you are not agreeable to the collection and processing of your personal data, kindly notify us of the same within fourteen (14) days from the date of this Policy. Until we received such notification, your continued usage of our services shall be deemed consent for the Company to collect and process the personal data. If you wish to update or amend any information in relation to your personal data, you may contact:

If you wish to update or amend any information in relation to your personal data, you may contact:

Marketing and Business Development Department

If you wish to report in relation to misuse or suspected misuse of your personal data, you may contact:

Compliance Monitoring Department

Thank you.

AMANAHRAYA TRUSTEES BERHAD