i-Stone Group Berhad. and its subsidiaries ("I-Stone Group") respect your right to privacy and we respect all personal data you provide to us. We are committed to protecting the personal data supplied by you to us. I-Stone Group is bound by the Personal Data Protection Act 2010 ("PDA Act") and all other applicable law in Malaysia in respect of privacy protection which sets out a number of principles concerning personal data and consumer protection in Malaysia.
For the purpose of this Privacy and Personal Data Protection Policy, "personal data" shall have the meaning as ascribed to it in the PDA Act which means any information in respect of commercial transactions, which:-
(a) is being processed wholly or partly by means of equipment operating automatically in response to instructions given for that purpose;
(b) is recorded with the intention that it should wholly or partly be processed by means of such equipment; or
(c) is recorded as part of a relevant filing system or with the intention that it should form part of a relevant filing system,
that relates directly or indirectly to a data subject, who is identified or identifiable from that information or from that and other information in the possession of a data user, including any sensitive personal data and expression of opinion about the data subject; but does not include any information that is processed for the purpose of a credit reporting business carried on by a credit reporting agency under the Credit Reporting Agencies Act 2010.
This Privacy and Personal Data Protection Policy is issued in both English Language and Bahasa Malaysia. In the event of any inconsistencies between the English version and the Bahasa Malaysia version, the English version shall prevail.
During the course of your transaction and dealings with I-Stone Group, you may be requested to furnish from time to time to I-Stone Group, directly or through online forms and/or other electronic methods, your personal data, which may include your name, gender, age, marital status, date of birth, race, nationality, identity card number, passport number, visa information, correspondence address, email address, telephone contact number, occupation, income range, credit card or bank account information and/or other information relevant to the purposes listed in Paragraph 3 (a) below.
The types of personal data collected will be depending on the nature of your dealings or transaction with I-Stone Group.
(a) I-Stone Group may collect, retain, use and otherwise process your personal data for the following purposes:-
(i) providing you with services under any business of I-Stone Group; or
(ii) processing your application or registration under any program and/or activities organized or conducted by I-Stone Group or in connection with your employment application; or
(iii) notifying you of services or products whether present or future, updates and promotions including delivery of notices and sending any advertising and/or marketing material, to you (including notices through social medias); or
(iv) sale of the products offered by I-Stone Group; or
(v) entering into any transactions, agreements or instruments in the ordinary course of business of I-Stone Group; or
(vi) discharging I-Stone Group's contractual obligations in the ordinary course of business of CCP Group; or
(vii) collection of any payments due and payable to I-Stone Group; or
(viii) credit assessments and other background verification that may be necessary or appropriate for I-Stone Group 's business or employment purposes; or
(ix) human resource management; or
(x) discharging I-Stone Group 's duties and obligations under the Companies Act 2016 (as amended from time to time) and any other applicable law, regulation, direction and guideline applicable to I-Stone Group;
(xi) for other legitimate business activities of I-Stone Group; or
(xii) for any other purpose that is incidental or ancillary or in furtherance to the above purposes.
(b) To facilitate any of the purposes of Paragraph 3(a) above, it is obligatory for you to supply I-Stone Group with sufficient personal data as required by I-Stone Group. If you fail to supply the personal data as required:-
(i) I-Stone Group will not be able to provide you with the necessary notices, services and/or products requested;
(ii) I-Stone Group will not be able to process your application or registration for any of the necessary services, products, programs and/or activities; and/or
(iii) I-Stone Group will not be able to enter into the necessary transaction, agreement or dealing with you or in your favour.
(c) If you do not want I-Stone Group to disclose, transfer, use or process otherwise your personal data for any of the purposes listed in Paragraph 3(a) above or if you wish to withdraw your consent in full or in part or limit the processing of your personal data, you may contact I-Stone Group in writing at the particulars set out in Paragraph 7(c) below.
I-Stone Group may disclose your personal data to the following categories of third party as may be required for any of the above purposes as stipulated in Paragraph 3(a) or for other legitimate purposes:-
(a) Companies Commission of Malaysia, Bank Negara Malaysia, Official Assignee's Office of the Insolvency Department of Malaysia, any other person, body or government agency under the requirements of any applicable law or order, direction or regulation of any regulatory or appropriate authorities;
(b) any related companies and subsidiaries within I-Stone Group;
(c) I-Stone Group's business partners and affiliates;
(d) I-Stone Group's auditors, consultants, accountants, lawyers or other financial or professional advisers including any relevant financial institutions;
(e) I-Stone Group's agents, distributors, network operations, third party service or product providers;
(g) any financial institutions, lawyers and professional advisers appointed by you;
(h) any other persons under a duty of confidentiality to I-Stone Group; and/or
(i) any other entities that I-Stone Group may think fit.
I-Stone Group shall take practical steps to safeguard your personal data against any loss, misuse, modification, unauthorized or accidental access or disclosure, alteration or destruction by having regard:
(a) to the nature of the personal data and the harm that would arise;
(b) to the place or location where the personal data is stored;
(c) to any security measures incorporated into any equipment in which the personal data is stored;
(d) to the measures taken for ensuring the reliability, integrity and competence of personnel having access to the personal data; and
(e) to the measures taken for ensuring the secure transfer of the personal data.
I-Stone Group shall ensure that any security policy developed or implemented by I-Stone Group complies with the security standard required under the PDA Act and any applicable law that may from time to time be in force.
It may be necessary to transfer your personal data to other entities or service providers located in countries outside Malaysia. This may happen where I-Stone Group’s servers or suppliers and service providers are based outside Malaysia or where you use the services from countries outside Malaysia. In these instances I-Stone Group will take steps to ensure that your privacy rights are respected in accordance with this Privacy and Personal Data Protection Policy.
I-Stone Group will retain any personal data supplied by you as long as the purpose it was collected for remains valid or otherwise permitted by any applicable law that may from time to time be in force
If any personal data is no longer required for the purpose for which it was processed, I-Stone Group shall take all reasonable steps to ensure that it is destroyed or permanently deleted.
Under the PDA Act, you have the right of access to your personal data held by I-Stone Group upon payment of a prescribed fee as per the Personal Data Protection (Fees) Regulation 2013.
If you know that your personal data held by I-Stone Group is inaccurate, incomplete, misleading or not up-to-date, you may make a data correction request in writing to I-Stone Group. You may submit your written request or any inquiries in writing to I-Stone Group at the following address:
Attention : Compliance Manager
Address : 12-2, Jalan Persiaran Teknologi,
Taman Teknologi Johor, 81400 Senai, Johor
Email : firstname.lastname@example.org
Telephone No. : +6075955545
Facsimile No. : +6075955543
BY PROVIDING YOUR PERSONAL DATA TO I-STONE GROUP, YOU HEREBY AGREE THAT I-STONE GROUP SHALL PROCESS YOUR PERSONAL DATA IN ACCORDANCE WITH ALL OF THE FOREGOING