"Personal Data" means data, whether true or not, regarding an individual who can be identified from that data, or from that data and other information to which an organization has or is likely to have access to. Common examples of personal data include name, identification number and contact information.
We will/may collect *and process personal data about you:
when you register and/or use our Services or APP, or open an account with us;
when you submit any form(s) up to and including (but not limited to); application forms or other forms relating to any of our products and services, hard copy or digital;
when you enter into any agreement or provide documentation or information in respect of your interactions with us or when you utilize our products and services;
when you interact with our personnel via; telephone calls (which may be recorded), letters, fax, face-to-face meetings, social media platforms and emails;
when you utilize our electronic services, interact with us via our application or use services on our website. This includes – without limitation– cookies which we may deploy when you interact with our application or website;
when you carry out transactions through our Services *or APP;
when you provide us with feedback or complaints;
when you register for a contest; or
when you submit your personal data to us for any reason.
The above does not purport to be exhaustive and simply provides common instances of when personal data about you may be collected *and processed.
When you visit, use or interact with our mobile application or the APP, certain information may be collected by automated or passive means using a variety of technologies, which may be downloaded and will potentially set or modify settings on your device. The information we collect may include, with no limitation; your Internet Protocol (IP) address, computer/mobile device operating system and browser type, type and characteristics of the mobile device, the unique device identifier (UDID) or mobile equipment identifier (MEID) of the device in question, the address of a referring website (if any), and the pages you visit on our website and mobile applications and the times of visit. We may collect, use disclose and/or process this information only for the Purposes defined below.
Our mobile applications may collect precise information about the location of your mobile device using technologies such as GPS, Wi-Fi, etc. We collect, use, disclose and/or process this information for one or more of the following Purposes including, without limitation; location-based services that you request or to deliver relevant content to you based on your location or allow you to share your location to other Users as part of the services under our mobile applications. For most mobile devices, you can withdraw your permission for us to acquire this information on your location through your device settings. If you have questions about how to disable your mobile device's location services, please contact your mobile service provider or the device manufacturer.
The personal data that AFAB APP may collect includes but is not limited to:
date of birth;
bank account and payment information;
photos and videos;
any other information about the User when the User signs up to use our Services or APP, when the User uses the Services or APP as well as information related to how the User uses our Services or APP; and
aggregate data on content the User engages with.
If you do not want us to collect the abovementioned information/personal data, you may opt out at any time by notifying our Data Protection Officer via email. Further information on this matter can be found in the section below entitled "How can you opt-out, remove, request access to or modify information you have provided to us?". Please note that opting out of the collection of your personal data and/or withdrawing your consent for us to collect, use or process your personal data may affect utilization of the Services. For example; opting out of the collection of location information will cause its location-based features to be disabled.
To use certain functionalities of the Services, the creation of a user account is necessary; which requires you to submit personal data. During this process, we require you to provide us with your name and email address. We also require for certain information to be provided about yourself such as; your telephone number, email address, shipping address, photo identification, bank account details, age, date of birth, gender and interests. Upon activation of an account, you will need to create a unique username and password. Your username and password will be used so you can securely access and maintain your account.
We provide customer support services through email, SMS and feedback forms. To provide customer support, we will ask for your email address and mobile phone number to confirm your identity. We only use information received from customer support requests including, without limitation email addresses solely for customer support services. No information is shared and transferred to any third parties in this regard.
You can also post questions and answer other User queries in our community forums (*Should we specifically mention Social Media in this regard?). Our forum and messaging services allow you to participate in our community; to do so, we maintain information, such as your user ID, contact list and status messages. In addition, these and similar services in the future may require us to maintain your user ID and password.
From time-to-time, we may request information from Users via surveys. Participation in these surveys is completely voluntary and disclosure of any information requested is optional. Information requested may include, without limitation; contact information (such as your email address), and demographic information (such as interests or age level). Survey information will be used for the purposes of monitoring or improving the use and satisfaction of the Services and will not be transferred to third parties, other than our contractors who help us to administer or act upon the survey.
We may collect, use, disclose and/or process your personal data for one or more of the following purposes:
to consider and/or process your application/transaction with us or your transactions and/or communications with third parties via the Services;
to manage, operate, provide and/or administer your use of and/or access to our Services and APP as well as your relationship and user account with us;
to manage, operate, administer and facilitate the provision of our Services, including, without limitation, remembering preferences from past usage;
to tailor your experience through the Services by displaying content according to your interests and preferences, providing a faster method for you to access your account and submit information to us and allowing us to contact you, if necessary;
to respond to, process, deal with or complete a transaction and/or to fulfil your requests for certain products and services and notify you of service issues and unusual account actions;
to enforce our Terms of Service or any applicable end user license agreements;
to protect the personal safety, rights and property of others;
for identification and/or verification;
to maintain and administer any software updates and support that may be required from time to time to ensure the smooth running of our provided Services;
to facilitate customer service, carry out your instructions or respond to any enquiries given by (or purported to be given by) you or on your behalf;
to contact you or communicate with you via voice call, text message and/or fax message, email and/or postal mail or otherwise for the purposes ensuring ease of utilization of the Services, such as but not limited to communicating administrative information to you relating to our Services. You acknowledge and agree that such communication by us could be by way of the mailing of correspondence, documents or notices to you, which could involve disclosure of certain personal data about you to bring about delivery of the same as well as on the external cover of envelopes/mail packages;
to inform you when another User has sent you a private message or posted a comment for you on the APP;
to conduct research, analysis and development activities (including, but not limited to, data analytics, surveys, product and service development and/or profiling), to analyse how you use our Services in order to improve our Services or products and/or to enhance your customer experience;
to allow for audits and surveys to, among other things, validate the size and composition of our target audience and understand their experience with AFAB APP Services;
where you give us your prior consent; for marketing and in this regard, to deliver to you by various modes of communication such as postal mail, email, location-based services or otherwise, marketing and promotional information and materials relating to products and/or services (including, without limitation, products and/or services of third parties whom AFAB APP may collaborate or tie up with) that AFAB APP (and/or its affiliates or related corporations) may be selling, marketing or promoting, whether such products or services exist now or are created in the future. If you are in Malaysia, In the case of the sending of marketing or promotional information to you by voice call, SMS/MMS or fax to your Malaysia facsimile number, we will not do so unless we have complied with the requirements of Malaysia’s Privacy Laws in relation to use of such latter modes of communication in sending you marketing information or you have expressly consented to the same;
to respond to legal processes or to comply with or as required by any applicable law, governmental or regulatory requirements of any relevant jurisdiction, including, without limitation, meeting the requirements to make disclosure under the requirements of any law binding on AFAB APP or on its related corporations or affiliates;
to produce statistics and research for internal and statutory reporting and/or record-keeping requirements;
to carry out due diligence or other screening activities (including, without limitation, background checks) in accordance with obligations of legal or regulatory nature or our risk management procedures that may be required by law or that have been put in place by us;
to audit our Services or AFAB APP business;
to prevent or investigate any fraud, unlawful activity, omission or misconduct, whether relating to your use of our Services or any other matter arising from your relationship with us, and whether or not there is any suspicion of the aforementioned;
to store, host, backup (whether for disaster recovery or otherwise) of your personal data, whether within or outside of your jurisdiction;
to deal with and/or facilitate any business asset transaction(s) or potential business asset transaction(s), where such transaction involves AFAB APP as a participant, involves a related corporation or affiliate of AFAB APP as a participant or involves AFAB APP and/or any one or more of AFAB APP related corporations or affiliates as participant(s), and other third-party organisations/participants in such transaction. A “business asset transaction” refers to the purchase, sale, lease, merger, amalgamation or any other acquisition, disposal or financing of an organisation or a portion of an organisation or of any of the business or assets of an organisation; and/or
any other purposes which we notify you of at the time of obtaining your consent.
(collectively, the “Purposes”).
As the purposes for which we will/may collect, use, disclose or process your personal data depend on the circumstances at hand, such purpose may not appear above. However, we will notify you of such other purpose at the time of obtaining your consent, unless there I no requirement to do so under the Privacy Laws.
Our Services enable Users to share personal information with each other in almost all occasions without AFAB APP involvement to complete transactions. In a typical transaction Users may have access to each other’s name, user ID, email address and other contact and postage information. Our Terms of Service require that Users in possession of another User’s personal data (the “Receiving Party”) must (i) comply with all applicable Privacy Laws; (ii) allow the other User (the “Disclosing Party”) to remove him/herself from the Receiving Party’s database; and (iii) allow the Disclosing Party to review what information have been collected about them by the Receiving Party.
In conducting our business, we will/may disclose your personal data to our third party service providers, agents and/or our affiliates or related corporations, and/or other third parties, whether sited in Malaysia or outside of Malaysia, for one or more of the above-stated Purposes. Any such third-party service providers, agents and/or affiliates or related corporations and/or other third parties will be processing your personal data either on our behalf or otherwise, for one or more of the above-stated Purposes. Such third parties include, without limitation:
our subsidiaries, affiliates and related corporations;
contractors, agents, service providers and other third parties we use to support our business. These include but are not limited to those which provide administrative or other services to us such as mailing houses, telecommunication companies, information technology companies and data centres;
a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution or other sale or transfer of some or all of AFAB APP assets, whether as a going concern or as part of bankruptcy, liquidation or similar proceeding, in which personal data held by AFAB APP about our Service Users is among the assets transferred; or to a counterparty in a business asset transaction that AFAB APP or any of its affiliates or related corporations is involved in; and
third parties to whom disclosure by us is for one or more of the Purposes and such third parties would in turn be collecting and processing your personal data for one or more of the Purposes.
This may require among other things; the sharing statistical and demographic information about our Users and their use of the Services with suppliers of advertisements and programming. This would not include anything that could be used to identify you specifically or to discover individual information about you.
For the avoidance of doubt, in the event that Privacy Laws or other applicable laws permit an organisation such as us to collect, use or disclose your personal data without your consent, such permission granted by the laws shall continue to apply.
Please note that Third parties may unlawfully intercept or access personal data transmitted to or contained on the site, technologies may malfunction or not work as anticipated, or someone might access, abuse or misuse information through no fault of ours. We will nevertheless deploy reasonable security arrangements to protect your personal data as required by the Privacy Laws; however, there can inevitably be no guarantee of absolute security such as but not limited to when unauthorised disclosure arises from malicious and sophisticated hacking by malcontents through no fault of ours.
The Services are not intended for children under the age of 10. We do not knowingly collect or maintain any personal data or non-personally-identifiable information from anyone under the age of 10 nor is any part of our Site or other Services directed to children under the age of 10. We will close any accounts used exclusively by USERS that are as such and will remove and/or delete any personal data we believe and confirm to be submitted by any child under the age of 10.
WE DO NOT GUARANTEE THE SECURITY OF PERSONAL DATA AND/OR OTHER INFORMATION THAT YOU PROVIDE ON THIRD PARTY SITES. We implement a variety of security measures to maintain the safety of your personal data that is in our possession or under our control. Your personal data is contained behind secured networks and is only accessible by a limited number of persons who have special access rights to such systems and are required to keep the personal data confidential. When you place orders or access your personal data, we offer the use of a secure server. All personal data or sensitive information you supply is encrypted into our databases to be only accessed as stated above.
In an attempt to provide you with increased value, we may choose various third-party APPs to link to and frame within the APP. We may also participate in co-branding and other relationships to offer e-commerce and other services and features to our visitors. These linked APPs have separate and independent privacy policies as well as security arrangements. Please note that while the third party is affiliated with us, we have no control over these linked sites and that each of which has separate privacy and data collection practices independent of us. Data collected by our co-brand partners or third-party websites (even if offered on or through our APP) may not be received by us.
We therefore have no responsibility or liability for the content, security arrangements (or lack thereof) and activities of these linked sites. These linked sites are only for your convenience and therefore are accessed at your own risk. Nonetheless, we seek to protect the integrity of our Site and the links placed upon each of them and therefore welcome any feedback about these linked sites (including, without limitation, if a specific link does not work).
Your personal data and/or information may be transferred to, stored or processed outside of your country. In most cases, your personal data will be processed in Malaysia where our servers and central database are located and operated. AFAB APP will only transfer your information overseas in accordance with Privacy Laws.
Opting Out and Withdrawing Consent
To modify your email subscriptions, please let us know by sending an email to our Personal Data Protection Officer at the email address listed below in Section 15.2. Please note that due to email production schedules, you may still receive emails that are already in production.
You may withdraw your consent for the collection, use and/or disclosure of your personal data in our possession or under our control by sending an email to our Personal Data Protection Officer at the email address listed below in Section 15.2.
Once we have clear withdrawal instructions and verified your identity, we will process your request for withdrawal of consent and will thereafter not collect, use and/or disclose your personal data in the manner stated in your request. If we are unable to verify your identity or understand your instructions, we will liaise with you to clarify further.
However, please note your withdrawal of consent may result in legal consequences arising from such action. In this regard, depending on the extent of your withdrawal of consent for us to process your personal data, it may mean that we will not be able to continue providing the Services to you, possible termination your existing relationship and/or the contract(s) you have with us, etc., as the case may be, which we will inform you of.
Requesting Access and/or Correction of Personal Data
If you have an account with us, you may personally access and/or correct your personal data currently in our possession or control through the Account Settings page on the Site. If you do not have an account with us, you may request to access and/or correct your personal data currently in our possession or control by submitting a written request to us. We will require a specific amount of information from you in order to ascertain your identity as well as the nature of your request so as to be able to assist with your request. Please submit written requests by sending an email to our Personal Data Protection Officer at the email address listed below in Section 15.2.
For a request to access personal data, once we have sufficient information from you to act upon the request, we will seek to provide you with the relevant personal data within 30 days. Should we be unable to respond to you within the said 30 days, we will notify you of the soonest possible time within which we can provide you with the information requested. Note that Privacy Laws may exempt certain types of personal data from being subject to your access request.
For a request to correct personal data, once we have sufficient information from you to act upon the request, we will:
correct your personal data within 30 days. Where we are unable to do so within the said period, we will notify you of the soonest practicable time within which we can make the correction. Note that Privacy Laws may exempt certain types of personal data from being subject to your correction request as well as provisions for situation(s) when correction need not be made by us despite your request; and
we will send the corrected personal data to every other organisation to which the personal data was disclosed by us within a year before the date the correction was made, unless that other organisation does not need the corrected personal data for any legal or business purpose.
Notwithstanding sub-paragraph (b) immediately above, we may, if you so request, send the corrected personal data only to specific organisations to which the personal data was disclosed by us within a year before the date the correction was made.
Fees may be charged for the handling and processing of your requests to access your personal data. If we so choose to charge, we will provide you with a written estimate of the fee charged for the service. Please note in such an event that we are not required to respond to or deal with your access request unless you have agreed to pay the fee.
We reserve the right to refuse to correct your personal data in accordance with the provisions as set out in Privacy Laws, where they require and/or entitle an organisation to refuse to correct personal data in stated circumstances.
If you have any questions or concerns about our privacy practices or your interactions and dealings regarding the Services, +603-2732 3373 or +603-2732 3383.
If you have any complaint or grievance regarding the handling of your personal data or our compliance with Privacy Laws, you are welcome to contact us with the aforementioned complaint or grievance.
Please contact us through email below in regards to any of the above mentioned issues:
E-mail: email@example.com with Attention directed to the "Personal Data Protection Officer".
Please send all legal notices to firstname.lastname@example.org with Attention directed to the “General Counsel”.
Indication at the subject header that it is a Privacy Law complaint regardless of if it is an email or a physical letter would assist us in attending to your complaint speedily by passing it on to the relevant staff in our organisation to handle. For example, you could insert the subject header as “Privacy Complaint”.
We will certainly strive to deal with any issues, complaints or grievances that you may have as quickly and fairly as possible.
Please read the Terms and Conditions of Service establishing usage, disclaimers, and limitations of liability governing the use of the APP, the Services and all other related policies.