Personal Data Protection Act (PDPA)

We at Malaysian Conservation Alliance for Tigers (MYCAT) take our responsibility under the Personal Data Protection Act 2010 (“the PDPA”) seriously. We also recognize the importance of the personal data you have entrusted to us and believe that it is our responsibility to properly manage, protect and process your personal data.

This Data Protection Policy is designed to assist you in understanding how we collect, use, disclose and/or process the personal data you have provided to us, as well as to assist you in making an informed decision before providing us with any of your personal data.

If you, at any time, have any queries on the Policy or any other queries or complaints in relation to how we may manage, protect and/or process your personal data, please do not hesitate to contact us at:

Address: T3-16-15, 3 Towers, Jalan Ampang, 50450 Kuala Lumpur, Malaysia

Tel : +603-2715 6701

Email: mycat@malayantiger.net

In the event of any unsatisfactory response to your queries or complaints, you may refer your concerns to the supervisory authority within the respective jurisdictions in accordance to the personal data laws.

Introduction to PDPA

“Personal Data” is defined under the PDPA to mean data relating to an individual who can be identified from that data and other information in the possession of an individual and includes any sensitive personal data and expression of an individual. Common examples of Personal Data include name, identification numbers, contact information, medical records, photographs and video images, financial information, religious beliefs and expression of opinion.

We will collect, use and process your Personal Data in accordance with the PDPA. We will notify you of the purposes for which your Personal Data may be collected, used, disclosed and/or processed, as well as obtain your consent for the collection, use, disclosure and/or processing of your Personal Data for the intended purposes, unless an exception under the law permits us to collect and process your Personal Data without your consent.

Collection of Personal Data

Your Personal Data is collected and stored when you entered your details to purchased our products, when you enter our website and when you provide Personal Data to us through any other channel.

We may also obtain your Personal Data from other sources such as bureaus or agencies established by regulatory authorities, operators of registers or databases available to the health care industry, our affiliated entities, business partners and independent third parties, regulatory authorities and any party who has, does or will provide products or services to you and to whom you have granted consent.

Purpose of Collecting Personal Data

Your Personal Data will be collected, used and otherwise processed by us or our authorised parties for the following purposes:

to better understand your health care needs, provide our marketing information and to set up better customer service.
to facilitate and allow a search of unclaimed proceeds in relation to your policy including the establishment and/or publication of a register of such unclaimed proceeds and any other matters related thereto.
for underwriting, risk assessment, reinsurance, handling and settling of claims and audit
to conduct credit and financial checks.
for disclosure to our authorised third parties.
for data transfer to, and sharing with, our affiliates including our Regional Office and/or third parties acting on our behalf including those located outside Malaysia.
for other purposes as notified to you at the time of collection.
for other purposes directly relating to any of the above.

By providing your Personal Data to us, you acknowledge and accept that we may retain your information for as long as necessary for us to fulfill the purposes for which your information was collected and for us to comply with the PDPA and any relevant law.

You may choose whether or not to provide your Personal Data to us. However, your failure to supply to us your Personal Data may result in us being unable to provide you with services and/or products. It is mandatory for you to provide us with your Personal Data when you choose to make an application for an insurance policy. As such, if you do not provide to us your Personal Data when you make an application to purchase an insurance policy, we will not be able to accept or process your application.

Disclosure of Personal Data

We respect the confidentiality of the Personal Data you have provided to us.

In that regard, we will not disclose your Personal Data to third parties without first obtaining your consent permitting us to do so. Your Personal Data may be disclosed to the following parties:

Our agents and sales representatives and affiliates
Other insurance companies, reinsurance companies, broking companies, credit organisations and group policy holders.
Those to whom we outsource certain business operations.
Commercial partners or companies related to or affiliated with us.
Our auditors, solicitors, loss adjusters, accountants, surveyors.
Our external claim data collectors, investigators and medical professionals.
Service providers, contractors and sub-contractors who are involved in the provision of facilities, products and/or services to us.
Government or regulatory bodies, bureaus, agencies or any person to whom we are required by law to disclose information.
Operators of registers or databases available to the insurance industry.
Any person to whom we may determine to be necessary or appropriate.

Where permitted, your Personal Data may be provided to any of the parties above who may be located in or outside of Malaysia. Your Personal Data may be transferred to, stored and processed in a jurisdiction where a service provider or contractor is located. By providing us with Your Personal Data, you consent to us disclosing your Personal Data to those third parties and/or the transfer of your information outside your jurisdiction or to those third parties described above.

We will take reasonable efforts to ensure that your Personal Data is accurate and complete. However, this means that you must also update us of any changes in your Personal Data that you had initially provided us with. We will not be responsible for relying on inaccurate or incomplete Personal Data arising from you not updating us of any changes in your Personal Data that you had initially provided us with.

We will also put in place reasonable security arrangements to ensure that your Personal Data is adequately protected and secured. Appropriate security arrangements will be taken to prevent any unauthorised access, collection, use, disclosure, copying, modification, leakage, loss, damage and/or alteration of your Personal Data. However, we cannot assume responsibility for any unauthorised use of your Personal Data by third parties which are wholly attributable to factors beyond our control.

This website may contain links to third party websites which we have no control over. You should review the privacy policies on those websites to understand their policies on how they deal with your Personal Data.

We will also put in place reasonable measures such that your Personal Data in our possession or under our control is destroyed and/or anonymised as soon as it is reasonable to assume that (i) the purpose for which that Personal Data was collected is no longer being served by the retention of such Personal Data; and (ii) retention is no longer necessary for any other legal or business purposes.

Where your Personal Data is to be transferred out of Malaysia, we will comply with the PDPA in doing so. In this regard, this includes us obtaining your consent unless an exception under the PDPA or law applies, and taking appropriate and reasonable steps to ascertain that the foreign recipient organisation of the Personal Data is bound by legally enforceable obligations to provide to the transferred Personal Data a standard of protection that is at least comparable to the protection under the PDPA. This may include us entering into an appropriate contract with the foreign recipient organisation dealing with the Personal Data transfer or permitting the Personal Data transfer without such a contract if the PDPA or law permits us to.

Administration and Management of Personal Data

We reserve the right, at any time and without notice, to amend or update this Data Protection Policy. Any amendment to this Policy will be posted on our website. Any such amendment or update will be effective immediately upon posting.

You are encouraged to visit our website from time to time to ensure that you are well informed of our latest policies in relation to personal data protection.