Dear Customers,

This privacy notice (“Privacy Notice”) is issued to all customers of CyberSecurity Malaysia (“Company”, “we”, “us” or “our”), pursuant to the statutory requirements of the Personal Data Protection Act 2010 (“PDPA”).

Personal data means any information in our possession that relates directly or indirectly to an individual to the extent that the individual can be identified from that and from other information in our possession such as your name, address, telephone numbers, NRIC No., date of birth, email address, photograph, etc. Personal data would for purposes of this notice include sensitive personal data which means any personal data consisting of information as to the physical or mental health or condition of a data subject, his political opinions, religious beliefs or other beliefs of a similar nature, the commission or alleged commission by him of any offence or any other personal data as the Minister may determine.

The personal data (including sensitive personal data) collected from you will be used to access, process, facilitate, administer, deal with, maintain and/or provide specialised cyber security services to you (including cyber security emergency services, security quality management services, etc), provide and maintain on-demand access to a wide variety of resources to maintain in-house security expertise, to access advanced tools and education to assist in forensic investigations, to carry out, manage and/or maintain your relationship with us, to respond to your enquiries or complaints, to improve and facilitate our customer services (via market research and opinion surveys), business development initiatives, and other purposes that are necessary or related to your relationship with us (collectively referred to as “Purposes”).

We may obtain your personal data from yourself and from a variety of sources, including from the Ministry of Communications and Multimedia (MCMM) or any other ministry having regulatory oversight over the Company, third parties connected with you (e.g. other customers who are related to you), and from other permissible or authorized sources (e.g. information collected when you visit our website).

We will process your personal data in accordance with the PDPA, its applicable regulations, guidelines and/or orders, taking into account the latest amendments to the foregoing, this Privacy Notice and also privacy terms contained in our agreement(s) with you. We may ‘process’ your personal data by collecting, recording, holding, storing, using and/or disclosing it.

We will not disclose any of your personal data to any third party without your consent except to the Ministry of Communications and Multimedia (MCMM), our professional advisers, vendors, suppliers, agents, contractors, service providers, business partners, insurance companies, banks, financial institutions, successor in title to us, any other governmental agencies, regulatory authorities and/or statutory bodies, parties involved in any corporate exercise (e.g. actual mergers and/or acquisitions, joint venture, funding exercise, asset sale or for any other matter of such nature which relates to the Company), within or outside Malaysia, and where necessary, to any party who undertakes to keep your personal data confidential in carrying out the Purposes mentioned above or to persons whom we are compelled or required under the law to make such disclosure to.

It is necessary for us to collect and process your personal data. If you do not provide us with your personal data, we will not be able to effectively provide products and/or services to you or process your personal data for any of the Purposes, if at all.

We are committed to ensuring that your personal data is stored securely and will store your personal data only for such duration as necessary and/or as permitted by the PDPA. You have the right to request for access to, request for a copy of and request to update or correct, your personal data held by us. You also have the right at any time to request us to limit the processing and use of your personal data, subject to our right to rely on any statutory exemptions and/or exceptions to collect, use and disclose your personal data.

Your written requests or queries should be addressed to:

Personal Data Protection Officer
Address : Level 7, Tower 1, Menara Cyber Axis, Jalan Impact, 63000 Cyberjaya, Selangor
Contact No. : 03-8800 7999
Fax No. : 03-8008 7000
Email Address : solahudin@cybersecurity.my

By providing your personal data to us, you consent to us processing your personal data in accordance with this Privacy Notice, and you confirm that all personal data provided by you is accurate and complete, and that none of it is misleading or out of date. You will promptly update us in the event of any change to your personal data.

To the extent that you have provided (or will provide) personal data about your family members, spouse, other dependents (if you are an individual), or to the extent that you have provided (or will provide) personal data about your directors, shareholders, employees, representatives, agents and/or other individuals (if you are a corporate entity/an organisation), you confirm that you have explained (or will explain) to them that their personal data will be provided to, and processed by, us and you represent and warrant that you have obtained their consent to the processing (including disclosure and transfer) of their personal data in accordance with this Privacy Notice.

In respect of minors (i.e. individuals under 18 years of age) or individuals not legally competent to give consent, you confirm that you are the parent or guardian or person who has parental responsibility over them or the person appointed by court to manage their affairs or that they have appointed you to act for them, to consent on their behalf to the processing (including disclosure and transfer) of their personal data in accordance with this Privacy Notice.

We reserve the right to update and amend this Privacy Notice from time to time. We will notify you of any amendments to this Privacy Notice via announcements on our website or other appropriate means. If we amend this Privacy Notice, the amendment will only apply to personal data collected after we have posted the revised Privacy Notice.

In accordance with Section 7(3) of the PDPA, this Privacy Notice is issued in both English and Bahasa Malaysia. In the event of any inconsistencies or discrepancies between the English version and the Bahasa Malaysia version, the English version shall prevail.

Date of issuance of this Privacy Notice: [ ]