Privacy Notice
At Principal, we value your privacy and strive to protect your personal data in compliance with the laws of Malaysia.
Principal will only process your personal data in accordance with the relevant laws (including the Personal Data Protection Act 2010 (“PDPA”)), this Privacy Notice and the privacy terms in your agreement between you and Principal.
This Privacy Notice serves to inform you that your personal data is being processed by us or on our behalf. This Privacy Notice also explains and elaborates upon some of our policies and principles pertaining to the processing of your personal data, all of which we have adopted as a sign of our commitment to respect, maintain, protect and safeguard your personal data.
For the purposes of this Privacy Notice, please note that:
- “Principal” refers to Principal Asset Management Berhad, its shareholders, and all its related companies, as defined in Part I Section 7 of the Companies Act 2016 and jointly controlled companies, providing financial and other regulated services.
- “Personal data”, “sensitive personal data” and “processing” shall have the same meaning as prescribed in the PDPA.
What kind of personal data we collect and how we collect it
We may collect a variety of personal data (including sensitive personal data) from you from time to time including but not limited to:
- personal details such as your name, date of birth, age, Malaysian Identification Card number, passport number or such other personal identification number, copies of identification card, nationality, gender, race, marital status, and family information;
- contact details such as your e-mail address, address, contact number;
- employment details such as your occupation, designation, company name;
- financial details such as your bank account/credit card details; and
- other details such as results of background/credit checks (if any), photographs, video records, Closed Circuit Television (CCTV) images and footages, and other personal data which is submitted or made available by you to us from time to time and all other personal data we collect again from you on any subsequent occasion.
We may obtain your personal data from you and from a variety of sources, including but not limited to:
- through your relationship with us, for example from the information provided by you in application forms, when using our products or services,
- when you inquire about, register for and/or participate in any events, webinars, contests, campaigns, customer surveys, competitions, promotions and other activities organised or sponsored by us or on our behalf (“Events”),
- during financial reviews;
- through your verbal and written communications with us and/or our authorised agents;
- when you visit any relevant premises/facilities, including without limitation the premises/facilities owned, operated or managed by us or on our behalf (
“Our Premises”); - from an analysis of the way you use and manage your account(s)/investment(s) with us, from the transactions you make and from the payments which are made to/from your account(s)/investment(s);
- from third parties related to you, such as employers, joint account holders, security providers, guarantors and indemnitors; and/or
- from such other sources in respect of which you have given your consent to disclose information relating to you and/or where not otherwise restricted;
- from CCTV installed at Our Premises;
- from the Malaysia Department of Insolvency, other relevant governmental authorities and/or law enforcement agencies;
- from any information that is supplied and/or collected when you visit our websites which include your computer’s IP address for from any information that is collected via cookies in some of our websites. We use cookies for a number of purposes, including to store your preference for certain types of information or products, further analysis for the purpose of providing products and services to you, to improve our products and/or to personalize our services to you. You may adjust settings on your browser so that you will be notified when you receive a cookie or other similar tracking tools. Please refer to your browser documentation to check if the tracking tools have been enabled on your computer or to request not to receive cookies or to disable cookies if you do not wish to have information collected via the use of cookies;
- through any third parties (including without limitation your friends and family members, background check agencies, other third-party sources); and/or
- from all other communications between you and us and all other information that you may provide to us from time to time.
How we use your personal data
We may use your personal data for one or more of the following purposes:
- to verify your identity and background;
- to assess your application(s) /request(s) for and provide you with our products and services;
- to receive products and/or services from you;
- to verify your past and current financial standing through credit reference/reporting checks;
- to manage and maintain your account(s) and investment(s) with us, whether by Principal’s officers or by Unit Trust Consultants (“UTC”) or agents designated by Principal to manage and maintain your account(s) and investment(s) with us to better manage our business and your relationship with us;
- to better understand your current and future investment needs and your financial situation;
- to advertise and provide you with information on our and/or third party products, services, and offers and/or contests which may be of interest to you including sending you e-newsletters and marketing materials and in this respect, to contact you via SMS, phone, email, fax, mail, websites, social media and/or any other appropriate communication channels;
- to organise, manage and allow you to participate in our Events;
- to verify and carry out financial transactions in relation to payments made by or to you and to administer and process any payments related to products and/or services requested or purchased by or provided to you;
- to grant you access to, and monitoring your use of our website (“Website”);
- to facilitate the operation, management and/or maintenance of our Website;
- to grant you access to our Premises;
- to improve our products and services and to develop new products and services;
- to notify you about benefits and changes to the features of products and services;
- to administer offers, competitions and promotions;
- to communicate with you, respond to your enquiries and complaints and to generally resolve disputes;
- to update, consolidate and improve the accuracy of our records;
- to produce data, reports and statistics which have been anonymised or aggregated in a manner that does not identify you as an individual;
- to conduct research for analytical purposes including but not limited to data mining and analysis of your transactions with us
- to meet the disclosure requirements of any law binding on Principal;
- for audit, compliance and risk management purposes;
- to assess financial and insurance risks;
- to transfer or assign our rights, interests and obligations under any of your agreements with us;
- to protect or enforce our rights to recover any debt owing to us;
- to conduct anti-money laundering checks; for crime detection, investigation, prevention and prosecution; to comply with any sanction requirements;
- to enforce and/or defend any of our rights;
- for any other purpose that is required or permitted by any law, regulations, guidelines and/or relevant regulatory authorities; and/or
- for such other purposes authorised by you or directly related or ancillary to the foregoing.
(“Purposes”)
Disclosure of your personal data
We may be required or need to disclose your personal data to the following third parties (who may be located within or outside Malaysia) in connection with or for the fulfilment of any of the Purposes:
- companies and/or organisations that act as our agents, affiliates, service providers, business partners, subsidiary(ies), shareholders and its related companies, professional advisers, other banks and/or financial institutions, where necessary;
- companies and/or organisations (including that but not limited to custodians, trustees, distributors, brokers) that assist us in processing and/or otherwise fulfilling transactions that you have requested;
- companies and/or organisations that assist us in providing value added services that you have requested;
- companies and/or organisations that provide services to us in communicating our products and services to you;
- your advisers and/or agents (including but not limited to brokers, accountants, auditors, lawyers, financial advisers or other professional advisers) where authorised by you;
- any other person notified by you as authorised to give instructions or to use the account(s)/investment(s) or products or services on your behalf;
- any third party as a result of any restructuring of facilities granted to you or the sale of debts, or the acquisition or sale of any company by Principal, provided that any recipient uses your information for the same purposes as it was originally supplied to us and/or used by us;
- any other agents and/or counterparties that we are required to provide such information to by any laws (including any regulations, guidelines and/or obligations) and/or court orders;
- any guarantors or facility or security providers for any investment(s)/facility(ies) granted by us to you;
- any person intending to settle any monies outstanding under the investment(s)/facility(ies) with us;
- any rating agency, insurer or insurance broker or direct or indirect provider of credit protection;
- any person connected to the enforcement or preservation of any of our rights under your agreement(s) with us; and/or
- such third party as requested for or authorised by you or other parties for any of the Purposes,
subject at all times to any laws (including regulations, guidelines and/or obligations) applicable to the Principal (whether in or outside Malaysia).
Additionally, Principal, our affiliates and business partners may contact you about products, services and offers, which we believe may be of interest to you or benefit you financially.
You may tell us at any time if you do not wish to receive marketing communications from us and/or from our affiliates and business partners by notifying us at the address/telephone number/e-mail address given at the end of this Privacy Notice. Your latest written instructions to us will prevail. Please take note that certain communications such as statements of account and our websites contain standard information regarding our other products and services that cannot be removed without affecting the delivery/provision of our services and/or products, the operation of your account(s) and/or investment(s) with us, and/or additional costs to you.
What if personal data provided by you is incomplete?
Where indicated (for example in application forms or account opening forms), it is obligatory to provide your personal data to us. Should you decline to provide such obligatory personal data, we may not be able to process your personal data for any of the Purposes.
Your rights to request access to and correction of your personal data
Where you wish to have access to your personal data in Principal's possession, or where you are of the opinion that such personal data held by us is inaccurate, incomplete, misleading or not up-to-date, you may make a request to us, upon payment of a prescribed fee (if any), via our Data Access Request Form or Data Correction Request Form respectively. These forms are available at our branches.
Please note that Principal may refuse to comply with your data access request or your data correction request, for example when we are unable to confirm your identity or where information requested for is of a confidential commercial nature or in the event we receive repeated requests for the same information. Nevertheless, we will notify you of the reasons for not being able to accede to your request.
Your right to limit the processing of your personal data
You may limit the processing of your personal data. You have the right to withdraw your consent previously given to us (in full or in part) by providing us with a notice in writing subject to any applicable legal restrictions and a reasonable duration of time for the withdrawal of consent to be effected.
If you limit the processing or withdraw your consent to any or all use of your personal data, it may result in: (i) us being unable to continue to administer any arrangement or contractual relationship in place between you and us; (ii) us being unable to (continue to) perform any of our contractual obligations to you (if any); (iii) us being unable to process your personal data for any of the Purposes; and/or (iv) the termination of any arrangements or agreements/contracts between you and us, without any liability on our part.
Third party personal data
We may require your assistance if the personal data relating to other persons is required to process your personal data for the Purposes and you hereby agree to use your best endeavors to assist us when required. In the event that personal data of any third party is supplied by you to us, you shall ensure that such third party has read this Privacy Notice and consented to us collecting his/her personal data for any of the Purposes prior to the supply of his/her personal data to us.
Where another person is providing/submitting any of your personal data to us, you agree that you have authorised the disclosure of your personal data to us and consented to the processing of your personal data by us in accordance with this Privacy Notice.
Transfer of personal data to places outside Malaysia
We may, where necessary, transfer your personal data to a place outside of Malaysia and you hereby give your consent to the transfer.
Accuracy of your personal data
You are responsible for ensuring that the personal data you provide to us is accurate, complete and not misleading and that such personal data is kept up to date.
Language
In the event of any conflict between the English version and the Bahasa Malaysia version of this Privacy Notice, the English version shall prevail.
Conflict
In the event of any conflict between the content of this Privacy Notice and the privacy terms in your agreement between you and Principal (if any), the content of this Privacy Notice shall prevail.
Revisions to this Privacy Notice
This Privacy Notice may be revised from time to time. Notice of any such revision will be given on Principal's website and/or by such other means of communication deemed suitable by Principal. Any such amendments will be effective upon such notification. By continuing to engage with us after the issuance of such amendment notice, you will be considered as having agreed to this Privacy Notice (as amended and updated).
Contacting Principal regarding your personal data
You may contact our Data Protection Officer with any enquiries or complaints in respect of your personal data via the methods below:
Name: | Ng Jit Seng |
Designation: | Data Protection Officer |
Telephone No: | 03-8680 8223 |
E-mail: | dlprincipalasiadataprotect@exchange.principal.com |