Privacy Policy
PDPA Notice
AutoWealth Malaysia Berhad
AutoWealth Malaysia Berhad (“the Company,” “we,” “us,” or “our”) is committed to upholding the highest standards of privacy and data protection in compliance with the Personal Data Protection Act 2010 (“PDPA”). As a holder of a Capital Markets Services License under the Capital Markets and Services Act 2007, the Company is authorized to conduct regulated fund management activities. In the course of providing these services, we may collect, process, store, and disclose your Personal Data in accordance with the provisions of this Privacy Policy.
This Privacy Policy outlines the types of Personal Data that may be collected from you, the manner in which such data will be collected, used, processed, and disclosed, and the procedures we implement to safeguard the privacy and security of your Personal Data. Additionally, this Privacy Policy informs you of your rights with respect to your Personal Data, including your right to access, correct, and limit the processing of your Personal Data, subject to applicable laws and regulations.
Please be advised that the provision of certain Personal Data is mandatory to enable us to offer our services and products. Any limitations you place on the provision or processing of such data may result in our inability to deliver the full range of services you have requested.
By engaging with us and using our services, you consent to the terms set forth in this Privacy Policy regarding the collection, use, processing, and disclosure of your Personal Data. Autowealth remains committed to complying with all legal requirements and maintaining the confidentiality and security of your Personal Data in accordance with applicable laws and regulations.
2. Personal Data We Collect
2.1 We collect, use, disclose, transfer, and otherwise process Personal Data relating to you or individuals affiliated with you, including but not limited to your legal representatives and other connected persons (“Associated Persons”), in accordance with the provisions of this Privacy Policy.
2.2 The categories of Personal Data we may collect or have collected include, without limitation, the following:
- Contact information including your full name, telephone number, email address, residential address, and mailing address.
- Specimen signature(s) captured for the purpose of authentication and verification.
- Your details regarding your occupation, educational qualifications, and income level.
- Identification data including your identification card number, passport number, date of birth, place of birth, and other pertinent information required for identity verification purposes.
- Financial data relating to your assets, income, expenses, credit history, bank account details, banking transactions, and securities trading accounts.
- Recordings of telephonic conversations and other interactions for documentation, quality control, and security purposes.
- Taxation and insurance information including your tax filings and insurance policies.
- Information related to your risk tolerance, investment objectives, financial literacy, experience, business interests, and assets.
- Personal responses to surveys, feedback, and any opinions you may provide to us.
- Browsing activity and behavioural data related to your browsing history, patterns, and other unique identifiers associated with your online activity.
- Details associated with your IP address and related internet usage.
- Any other personal data deemed reasonably necessary for the provision of services requested by you.
- Any other personal data required or permitted under any applicable local or foreign laws, statutes, regulations, rules, orders, guidelines, directives, circulars, notifications, licence conditions, and other legal instruments or requirements issued by governmental, regulatory, or self-regulatory authorities, law enforcement bodies, courts, central banks, tax authorities, or any other competent authority in Malaysia or elsewhere, including those arising under intergovernmental agreements, to ensure compliance with applicable laws and adherence to internal control procedures.
3. Sources of Personal Data
3.1 The Personal Data has been or will be obtained from the following sources, as applicable, or from other sources that we may deem appropriate from time to time:
- Information submitted by you through your interactions and agreements with us, including, but not limited to, details provided during the user registration process, information related to any accounts established with us, responses to security questions, and completion of confirmations, declarations, or forms, as well as information collected through your use of our services and interactions with our platform.
- Information that is available in the public domain or accessible through legitimate public channels.
- Any written, electronic, or verbal communications and documents provided to us prior to or during the course of our contractual or pre-contractual dealings with you.
3.2 The accuracy and completeness of your Personal Data are contingent upon the information you furnish to us. Accordingly, you are obligated to promptly notify us of any inaccuracies in your Personal Data or any necessary amendments or modifications. We are committed to maintaining the accuracy and up-to-date status of your Personal Data and will retain such information only for as long as is necessary to fulfil the purposes set forth in this policy or as required or permitted by applicable laws and regulations.
4. Application of Personal Data
4.1 Your Personal Data may be utilized by us for a range of legitimate business purposes, which include, but are not limited to, the provision and continuous operation of the Platform and the Services provided to you. The purposes for which your Personal Data may be employed (“Purposes”) are set forth as follows:
- To deliver the Services you have expressly requested.
- To facilitate and execute transactions on your behalf as contemplated by the Platform and related Services.
- To assess and process any applications, instructions, or requests submitted by you.
- To maintain communication with you, including notifications regarding updates or changes to our Services.
- To verify your identity to ensure the provision of Services to you.
- To conduct due diligence checks, screenings, or credit assessments as mandated by applicable laws or our internal policies.
- To achieve the specific purposes for which your Personal Data was voluntarily provided.
- identify and protect against negligence, fraud, theft, and other unlawful activities impacting us or third parties.
- To analyse and comprehend your needs and preferences for enhanced service delivery.
- To refine and enhance the content, appearance, and functionality of the Platform.
- To manage and develop our business infrastructure and operations.
- To administer any accounts, you may establish with us.
- To facilitate the processing of payments.
- To ensure adherence to our internal policies and procedures.
- To respond to queries, feedback, or suggestions you may provide.
- To address or investigate any complaints, claims, or disputes that may arise.
- To ensure compliance with applicable laws as permitted.
- To comply with requests or requirements from relevant governmental or regulatory authorities.
- For purposes of financial reporting, regulatory compliance, management reporting, risk management, auditing, and record-keeping.
- To enforce any obligations owed to us.
- To seek legal or other professional advice as necessary.
- For any other reasonable purposes related to the provision of our Services.
- With your express consent, to provide you with marketing materials related to our services.
- To fulfil any purposes directly connected to the aforementioned Purposes.
- For any other purposes that are appropriate or authorized under applicable laws.
In circumstances where the processing of your Personal Data requires the inclusion of Personal Data of other individuals, we may seek your cooperation. You hereby undertake to provide any necessary assistance to facilitate such processing as required.
5. Distribution and Disclosure of Personal Data
5.1 We may, from time to time, distribute and disclose your Personal Data to our directors, officers, employees, representatives, agents, or delegates, as well as to any third parties, whether located within Malaysia or abroad, to fulfil the purposes set forth in this Privacy Policy. This may include, but is not limited to, the distribution and disclosure of your Personal Data to the following parties:
- Any of our directors, officers, employees, representatives, agents, or delegates.
- Any of our shareholders or related corporations, including their successors or assigns, along with their respective directors, officers, employees, representatives, agents, or delegates.
- Our legal advisors, consultants, auditors, and other relevant professional advisors.
- Any service providers, agents, contractors, delegates, suppliers, or third parties that we may engage from time to time to deliver services related to the Platform or the Services we provide, including their respective directors, officers, employees, representatives, agents, or delegates.
- Any subcontractors that may be appointed by our service providers, agents, suppliers, delegates, or contractors to assist in providing services associated with the Platform or the Services we offer, including their respective directors, officers, employees, representatives, agents, or delegates.
- Any individual or entity that may acquire or assume all or a portion of our rights or obligations under any agreements with you, as well as any individual or entity to whom such rights or obligations may be transferred.
- Any individuals whom we reasonably believe to be your legal representatives or other relevant professionals.
- Any relevant governmental or regulatory authority as may be required for compliance with applicable laws, or which we believe, in good faith, should be disclosed.
- Any party that makes a request in accordance with the directives of any relevant governmental or regulatory authority, irrespective of the basis for such request, including those executed under a court order or other legal mandate.
- Any parties engaged to assist us in fulfilling the purposes specified in this Privacy Policy.
- Any individual or entity to whom we believe, in good faith, we are obligated to disclose information in accordance with applicable laws, provided that, in instances of disclosures under the aforementioned circumstances, we shall ensure that the recipient is bound by a similar duty of confidentiality.
6. Communication for Marketing Purposes
6.1 Your Personal Data may be employed by AutoWealth Malaysia for the express purpose of direct marketing. This includes promoting categories such as:
- Financial, investment, and asset management services and products, inclusive of any associated promotional offers;
- Reward, loyalty, or privileges programs and related services and products;
- Services and products provided by AutoWealth Malaysia’s co-branding partners; and
- Solicitation for donations and contributions for charitable and/or non-profit purposes.
6.2 The services, products, and subjects referenced above may be offered or (in the case of donations and contributions) solicited by AutoWealth Malaysia and/or:
- Any of AutoWealth Malaysia’s affiliates or associated entities;
- Third-party financial institutions, insurance, and investment service providers;
- Third-party providers of reward, loyalty, co-branding, or privileges programs;
- Co-branding partners of AutoWealth Malaysia; and
- Charitable or non-profit organisations.
6.3 We may, on occasion, obtain information regarding promotions, products, and services from third parties that may be pertinent to your interests. Unless you have explicitly opted to receive marketing materials pertaining to third-party promotions, products, and/or services by providing your written consent, you shall not receive any marketing communications related to such materials.
6.4 By consenting to receive marketing materials, you hereby acknowledge and agree to the disclosure of your Personal Data to such third parties for marketing purposes as outlined in this Privacy Policy.
7. International Data Transfers
7.1 AutoWealth Malaysia may, at its discretion, conduct the transfer, storage, and/or processing of your Personal Data in countries outside Malaysia. In such instances, we shall ensure adherence to the regulations set forth in the Personal Data Protection Act 2010 (PDPA) and any other pertinent data protection and privacy legislation applicable to your Personal Data.
7.2 In effecting such transfers, AutoWealth Malaysia will take appropriate measures to ensure that the recipient is obligated to provide a level of protection for your Personal Data that is commensurate with the standards established by the applicable laws in Malaysia.
7.3 Such measures may include, but are not limited to, the establishment of binding contractual agreements with recipients that require compliance with necessary safeguards to protect your Personal Data, as well as adherence to directives from relevant regulatory authorities.
7.4 Should you have any inquiries or concerns regarding the international transfer of your Personal Data or our data protection practices, please feel free to reach out to us using the contact information provided in this Privacy Policy.
8. Access and Correction Rights
8.1 In accordance with the Personal Data Protection Act 2010 (PDPA), you have the right to access, amend, and update your Personal Data. This includes the ability to inquire if AutoWealth Malaysia holds your Personal Data, request access for a prescribed fee, seek corrections for accuracy, and receive reasons if a request for access or correction is denied.
8.2 If there are changes to your Personal Data or if you believe that the information we hold is inaccurate, incomplete, misleading, or outdated, please submit a written request to our Compliance Officer, including your name, NRIC/Passport number, and details of your request. Alternatively, you may use our Data Access/Update/Correction Request Form. A fee may apply for this service, and we will strive to update the information promptly.
8.3 We may require additional information to verify the identity of the requester. To exercise these rights, please contact us using the information provided in this Privacy Policy. AutoWealth Malaysia will respond in accordance with the timeframes set forth by the PDPA.
9. Governing Law and Jurisdiction
9.1 This Privacy Policy and any disputes or claims arising from or related to it, including but not limited to non-contractual disputes or claims, shall be governed by and construed in accordance with the laws of Malaysia. The courts of Malaysia shall have exclusive jurisdiction over any claims arising from or in connection with transactions between AutoWealth and you.
10. Data Retention and Security Measures
10.1 AutoWealth shall retain your Personal Data only as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal, regulatory, or contractual obligations. The retention period for various types of Personal Data will be determined based on the nature of the data, its intended purpose, and any relevant legal requirements. Upon expiration of the retention period, we will securely delete or anonymize your data in accordance with applicable laws.
10.2 AutoWealth is committed to safeguarding your Personal Data through a range of administrative, physical, and technical measures. These include minimizing the collection of data, enforcing strong authentication and access controls, utilizing encryption and anonymization techniques, maintaining up-to-date antivirus software, performing regular software updates, securely erasing storage media before disposal, and implementing multi-factor authentication. It is important to acknowledge that while we endeavor to enhance our security practices continually, no method of transmission over the Internet or electronic storage can be guaranteed as completely secure.
11.Changes to this Privacy Policy
We reserve the right to update or amend this Privacy Policy at any time. Any material changes will be communicated via our website or directly to you, where required by law. Your continued use of our services following such changes constitutes your acceptance of the revised terms.
12. Reach for Us
If you prefer not to have your Personal Data used for direct marketing purposes, or if you wish to request access to or correction of your Personal Data, please forward your request via email to the Compliance Department at ____@autowealth.com.
