PERSONAL DATA PROTECTION POLICY

PERSONAL DATA PROTECTION POLICY

Introduction

BR Property Holdings Sdn. Bhd. (Company No. 127102-D) and its group of companies (“BRDB Group”) are committed to protecting the personal data supplied by you to BRDB Group to ensure compliance with the legal and regulatory requirements in accordance with the Personal Data Protection Act 2010 (“Act”).
For the purpose of this Personal Data Protection Policy, "personal data" shall have the meaning as ascribed to it in the Act which means any information in respect of commercial transactions, which:-
1. is being processed wholly or partly by means of equipment operating automatically in response to instructions given for that purpose;
2. is recorded with the intention that it should wholly or partly be processed by means of such equipment; or
3. (is recorded as part of a relevant filing system or with the intention that it should form part of a relevant filing system,
that relates directly or indirectly to a data subject, who is identified or identifiable from that information or from that and other information in the possession of a data user, including any sensitive personal data and expression of opinion about the data subject; but does not include any information that is processed for the purpose of a credit reporting business carried on by a credit reporting agency under the Credit Reporting Agencies Act 2010.
This Personal Data Protection Policy is issued in both English Language and Bahasa Malaysia. In the event of any inconsistencies between the English version and the Bahasa Malaysia version, the English version shall prevail.

Types of Personal Data Collected

During the course of your transaction and dealings with BRDB Group, you may be requested to furnish from time to time to BRDB Group, directly or through online forms available through the websites of BRDB Group and/or other electronic methods, your personal data, which may include your name, gender, age, marital status, date of birth, race, nationality, identity card number, passport number, visa information, correspondence address, email address, telephone contact number, occupation, income range, credit card or bank account information, financing details for the purchase of the property of BRDB Group’s housing development project and/or other information relevant to the purposes listed in Item C(1) below.
The types of personal data collected will be depending on the nature of your dealings or transaction with BRDB Group.

Purpose of Collection

BRDB Group may collect, retain, use and otherwise process your personal data for the following purposes:-

providing you with services under any business of BRDB Group; or
processing your application or registration under any program and/or activities organized or conducted by BRDB Group or in connection with your employment application; or
notifying you of services or launches of properties or products whether present or future, updates and promotions including delivery of notices and sending any advertising and/or marketing material, to you (including notices through social media platforms); or
sale of the products and/or properties offered by BRDB Group to you which shall include all matters relevant for the completion of the sale and purchase transactions, delivery of vacant possession, defect rectification works and other post vacant possession services; or
tenancies entered into between BRDB Group and you, which shall include all matters relevant for the completion of the tenancies, delivery of vacant possession of the tenanted premises, and other matters with regard thereto; or
entering into any transactions, agreements or instruments in the ordinary course of business of BRDB Group; or
discharging BRDB Group’s contractual obligations in the ordinary course of business of BRDB Group; or
property and/or estate management; or
collection of any payments due and payable to BRDB Group including late interest charges; or
credit assessments and other background verification that may be necessary or appropriate for BRDB Group’s business or employment purposes; or
human resource management; or
sending you services, products or promotional information related to other third parties which BRDB Group thinks you may be interested; or
discharging BRDB Group’s duties and obligations under the Companies Act 2016, the Capital Markets and Services Act 2007 and any other applicable law, regulation, direction and guideline applicable to BRDB Group; or
internal record keeping; or
in anticipation of, and in the course of an actual or potential sale, reorganization, consolidation, merger, or amalgamation of all or part of BRDB Group’s business or operations; or
for any other purpose that is incidental or ancillary or in furtherance to the above purposes.

To facilitate any of the purposes of Item C(1) above, it is obligatory for you to supply BRDB Group with sufficient personal data as required by BRDB Group. If you fail to supply the personal data as required:-

BRDB Group will not be able to provide you with the necessary notices, services and/or products requested;
BRDB Group will not be able to process your application or registration for any of the necessary services, products, programs and/or activities; and/or
BRDB Group will not be able to enter into the necessary transaction, agreement or dealing with you or in your favour.

If you do not want BRDB Group to disclose, transfer, use or process otherwise your personal data for any of the purposes listed in Item C(1) above or if you wish to withdraw your consent in full or in part or limit the processing of your personal data, you may contact BRDB Group in writing at the particulars set out in Item G(3) below.

Disclosure

BRDB Group may disclose your personal data to the following categories of third party as may be required for any of the above purposes as stipulated in Item C(1) or for other legitimate purposes:-

Companies Commission of Malaysia, Bank Negara Malaysia, Securities Commission of Malaysia, Official Assignee’s Office of the Insolvency Department of Malaysia, any other person, body or government agency under the requirements of any applicable law or order, direction or regulation of any regulatory or appropriate authorities;
any related companies and subsidiaries within BRDB Group;
BRDB Group’s business partners and affiliates;
BRDB Group’s auditors, consultants, accountants, lawyers or other financial or professional advisers including any relevant financial institutions;
BRDB Group’s agents, contractors, sub-contractors, network operations, third party service or product providers;
third party property management companies;
any referee whose details are provided by you;
any financial institutions, lawyers and professional advisers appointed by you;
any other persons under a duty of confidentiality to BRDB Group; and/or
any other entities that BRDB Group may think fit.

Security Policy

BRDB Group shall take practical steps to safeguard your personal data against any loss, misuse, modification, unauthorized or accidental access or disclosure, alteration or destruction by having regard:-

to the nature of the personal data and the harm that would arise;
to the place or location where the personal data is stored;
to any security measures incorporated into any equipment in which the personal data is stored;
to the measures taken for ensuring the reliability, integrity and competence of personnel having access to the personal data; and
to the measures taken for ensuring the secure transfer of the personal data.

BRDB Group shall ensure that any security policy developed or implemented by BRDB Group complies with the security standard required under the Act and any applicable law that may from time to time be in force.

Retention Standard

Any personal data supplied by you will be retained by BRDB Group as long as necessary for the fulfilment of any of the purposes stated in Item C(1) above or otherwise permitted by any applicable law that may from time to time be in force.
If any personal data is no longer required for the purpose for which it was processed, BRDB Group shall take all reasonable steps to ensure that it is destroyed or permanently deleted.

Right of Access and Correction

1. Under the Act, you have the right of access to your personal data held by BRDB Group on payment of fee as follows:-


Item	Description	Maximum Fee (RM)
1	Data access request for a data subject’s personal data with a copy	10
2	Data access request for a data subject’s personal data without a copy	2
3	Data access request for a data subject’s sensitive personal data with a copy	30
4	Data access request for a data subject’s sensitive personal data without a copy	5

2. Personal data supplied by you to BRDB Group must be accurate, complete and not misleading. If you know that your personal data held by BRDB Group is inaccurate, incomplete, misleading or not up-to-date, you may make a data correction request in writing to BRDB Group.

3. You may send your data access request, data correction request or any inquiries to BRDB Group in writing at the following address:


Attention	:	Company Secretary
Correspondence Address	:	Level 11 Menara BRDB 285 Jalan Maarof Bukit Bandaraya 59000 Kuala Lumpur
Telephone No.	:	03-2688 2888
Facsimile No.	:	03-2284 3988