Iskandar Investment Berhad (Company No. 200601032342 (752101-D)), and our Group of Companies,
which includes our subsidiaries, related and/or associated companies (collectively “IIB”, “we”, “us”, or
“our”) values your privacy and is committed to protecting personal data in accordance with the
Personal Data Protection Act 2010 (“PDPA”) and the personal data protection principles which are set
out in the Act.
This Privacy Notice (“Notice”) explains the following:
The definitions used and the scope of this Notice
Types of your personal data we collect
Sources from which we collect personal data
Choice to supply your personal data
Purposes for collecting your personal data
Disclosure of your personal data
Transfer of your personal data outside Malaysia (if required)
Security of your personal data
Retention of your personal data
Use of your personal data in direct marketing
Your rights to the personal data collected by us
Updates to the Notice
How to contact us
1. DEFINITIONS AND SCOPE
The terms used in this Notice are as defined in the PDPA and shall have the meanings given to them
under the PDPA:
“Personal Data” means any information in respect of commercial transactions, which:
is being processed wholly or partly by means of equipment operating automatically in
response to instructions given for that purpose;
is recorded with the intention that it should wholly or partly be processed by means of such
equipment; or
is recorded as part of a relevant filing system or with the intention that it should form part
of a relevant filing system,
that relates directly or indirectly to a data subject, who is identified or identifiable from that
information or from that and other information in the possession of a data user, including
any sensitive personal data and expression of opinion about the data subject; but does not
include any information that is processed for the purpose of a credit reporting business
carried on by a credit reporting agency under the Credit Reporting Agencies Act 2010;
(i.e., information about you that helps us directly or indirectly identify you, whether on its
own or when combined with other data that we collect or have access to. This includes data
such as your name, IC number, email address as well as less obvious personal data like device
related data, call records, online identifiers, and location data.)
“Sensitive Personal Data” means any personal data consisting of information as to the
physical or mental health or condition of a data subject, his political opinions, his religious
beliefs or other beliefs of a similar nature, the commission or alleged commission by him of
any offence, biometric data or any other personal data as the Minister may determine by
order published in the Gazette;
(i.e., information such as your physical or mental medical records, religious affiliation,
criminal records, fingerprints, voice recordings, etc.)
“Processing” in relation to personal data, means collecting, recording, holding or storing the
personal data or carrying out any operation or set of operations on the personal data,
including:
the organization, adaptation or alteration of personal data;
the retrieval, consultation or use of personal data;
the disclosure of personal data by transmission, transfer, dissemination or otherwise
making available; or
the alignment, combination, correction, erasure or destruction of personal data;
(i.e., using your personal data in any way, including collecting, storing, combining, sharing,
erasing, or destroying your personal data.)
“Data subject” means an individual who is the subject of the personal data and shall not
include a deceased individual. (hereafter referred to as “you” or “your”).
Other terms used in this Notice shall have the meanings given to them in the PDPA (where
the context so permits).
This Notice applies to the collection and use of all personal data in our possession or under
our control. This also includes personal data in the possession of organisations which we
have engaged to collect, use, disclose or process personal data for our purposes as listed in
Section 5 below.
This Notice covers both our online and offline data collection activities, including personal
data that we collect through our various channels as listed in Section 3 below
