Booking 360 Privacy Policy 

(“Privacy Policy”)

This Privacy Policy is incorporated by reference into the Booking 360 General User Agreement (“"Terms of Use"”). All capitalized terms and references therein defined shall have the same meaning in this Privacy Policy unless otherwise stated. For the avoidance of doubt, the terms 'personal information' and 'personal data' may be used interchangeable under this Privacy Policy. You are advised to read and understand the Terms of Use and acknowledge that it should be read in tandem with this Privacy Policy.

This Privacy Policy is applicable to all current and prospective individuals registering and/or possessing a User Account, and/or any individuals who visits our Platforms. This Privacy Policy is issued pursuant to the requirements of the Personal Data Protection Act 2010 (“PDPA”) in Malaysia. We wish to inform you that we collect, maintain, and use certain personal information about you pursuant to this Privacy Policy. We may also divulge certain personal information about you to our trusted third parties to facilitate the use and/or access of the Services pursuant to this Privacy Policy.

We appreciate your support for our services and value our relationship with you. We would like to continue communicating to you for further information on our products, service, promotions and matters relating to the primary purposes above, which we may consider to be interesting to you from time to time.

Booking 360 reserves the right to change or amend this Privacy Policy at any time and will place the updated Privacy Policy on our Platforms. All updates to this Privacy Policy will be effective immediately upon posting. You are encouraged to review this Privacy Policy periodically to stay informed of updates. You will be deemed to have been made aware of, will be subject to, and will be deemed to have accepted the changes in any revised Privacy Policy by your continued use of the Platforms after the date such revised Privacy Policy is posted.

            

 1.     Purpose of Information Collected

The use of your personal information is for the following primary purposes:

 a.     Communication of the Services, sale and purchase transactions for the Services;

 b.     Payment transaction processing including but not limited to any refund process, recurring payment services (if offered to you) and/or encryption or tokenization of your payment method (i.e., e-wallet payment method details);

 c.     General administration;

 d.     Managing and maintaining your User Account with us;

 e.     Responding to your enquiries and complaints and to generally resolve disputes;

 f.     Updating, consolidating and improving the accuracy of our records;

 g.     Producing data, reports and statistics which have been aggregated in a manner that does not identify you as an individual;

 h.     Conducting research and survey, which is solely for analytical purposes including but not limited to data mining and analysis of your transactions with us;

 i.     Meeting the disclosure requirements of any laws binding on us;

 j.     For audit, compliance and risk management purposes; and

 k.     Any other purpose that we deem necessary and/or as required or permitted by any law, regulations, guidelines and/or relevant regulatory authorities.

            

 2.     Type of Information Collected

Personal information that we may collect is including but not limited to:

 a.     Name, age, race, gender, nationality, identification card number, passport number, and date of birth; and

 b.     Contact details such as house address, mobile number, email address, and residential address, correspondence address, delivery address, and region or state of residence; and

 c.     Website cookies and related analytics to your activity on our Platforms; and

 d.     Any other information supplied by you that can indirectly or directly identify you, in order for us to carry out our contract with you.

            

 3.     Consequences of Not Providing Personal Information

The failure to supply us with the required personal information will potentially:

 a.     Result in us being unable to enter into an agreement with you for the use and/or access to the Services;

 b.     Result in us being unable to communicate notices, value added services, advertisements, promotions, offers, and updates to you; and

 c.     Affect our capacity to accomplish the above stated purposes.

            

 4.     Disclosure

You consent and authorise us to provide or share your Personal data to the following class of users:

 a.     Persons/organisations required under law or in response to government requests;

 b.     Related, subsidiaries, and/or holding companies of our appointed third-party payment gateway provider, including future entities under our appointed third-party payment gateway provider;

 c.     Government agencies, statutory authorities, and/or enforcement agencies under law;

 d.     Auditors, accountants, and/or lawyers engaged by us;

 e.     Contractors, sub-contractors, and/or affiliates engaged by us;

 f.     Third party service providers that is deem necessary or appropriate for the purposes stated above (including those located out of Malaysia, under conditions of confidentiality and similar levels of security);

 g.     Persons under a duty of confidentiality to us; and

 h.     Any other purpose that we deem necessary and/or as required or permitted by any law, regulations, guidelines and/or relevant regulatory authorities.

            

 5.     Data Security

We shall take necessary steps to store and process your personal data securely. We will undertake the following security steps:

 a.     Implementation of a necessary security controls such as firewall, password controls, physical security, logging and monitoring etc, which may be conducted by us and/or our appointed third-party service provider(s);

 b.     Process controls such as segregation of duties, defined roles and responsibilities and need to know basis for personnel engaged by us; and

 c.     Third party providers and contractors storing or processing personal data has implemented similar acceptable standards of security and confidentiality controls .

            

 6.     Retention of Personal Data

Your personal data will be stored for only the period as necessary to fulfil the purposes stated above after which we ensure that your personal data is destroyed, anonymized or permanently deleted if it is no longer necessary. Reasons to further store your information even after the fulfilment of the purposes includes:

 a.     to satisfy legal, regulatory or accounting requirements; and

 b.     to protect the interest of Booking 360.

            

 7.     Direct Marketing

We may use your personal data to provide you with information about our services and/or products, which may be related to your interests, unless requested otherwise by you.

We may, in some circumstances, disclose your personal data to preferred merchants and strategic partners that we currently engage or may engage in the future. Such disclosure will only occur where you have subscribed for particular Services which require such disclosure, and/or where your consent has been obtained, subject at all times to any laws (including regulations, guidelines and/or obligations) applicable to Booking 360.

If you do not wish your personal data to be utilised for the purposes of marketing and promotion, please contact us at the Booking 360 Customer Care details stated in the Terms of Use. You acknowledge and agree that your latest written instructions to us will prevail.

            

 8.     Rights of Access and Correction

You reserve the right to access your personal data and request for correction of the personal data that might be inaccurate, obsolete, incomplete or misleading. In respect of the above, you may:

 a.     Request to check and access your personal data in our records;

 b.     Request that we correct any inaccurate, obsolete, incomplete or misleading personal data belonging to you;

 c.     Request copies of your personal data from us.

Upon receipt of a request of the above by you, we will acknowledge the receipt of such request.

 a.     Charge an administration fee for processing your request for access or correction to the personal data, in compliance to the fees stated in the relevant PDPA sub-regulation; and

 b.     Refuse to comply with your request for access or correction to the Personal Information and give you a written reason for such an action.

            

 9.     Transfer of Your Personal Information Outside of Malaysia

It may be necessary for us to transfer your personal data outside Malaysia if any of our service providers or strategic partners who are involved in providing part of a Services are located in countries outside Malaysia. You consent to us transferring your personal information outside of Malaysia in the instances whereby it is necessary to fulfil the execution of the Services.

We shall take necessary steps to ensure that any such service providers or strategic partners are contractually bound not to use your personal information for any reason other than to provide the Services contracted by us to safeguard your personal information.