PRIVACY POLICY

Please read these terms (“Policy“) carefully. All definition in the Point’s Terms and Conditions shall be adopted unless otherwise specified, if applicable.

We take our responsibilities under the Personal Data Protection Act 2010 and regulations (“PDPA“) seriously. This Policy is issued to you in compliance with the PDPA and meant for you to understand, among others, how we collect, https://kostopremio.com/privacy-policy-2use, disclose and process your personal data and your rights over the same.

This Policy may be amended from time to time. Any amendment to this Policy will be published on our site or by other means as we deem fit. Your continued usage of the site and/or Services shall indicate and deemed as your agreement to the said amendment.

1. DESCRIPTION OF PERSONAL DATA

a) The personal data we may collect includes but not limited to:

b) identity data: name, nationality, age, race, gender, date of birth, identity card number, passport number;

c) contact data: correspondence address, email address, and contact number;

d) transaction and account data: credit card details, bank account number, payment manners, the amount and details of the payments to / from you;

e) communication data: any form of communication and/or interaction between you, us, the Merchant and/or other related third party in relation to Sale/Service Contract and/ or Services,

f) Location of data.

g) device specific information: IP address; and

h) any other data which is required to assist us to complete the Sale/Service Contract and/ or Service.

i) Your personal data enables us to achieve the purpose set out in Clause 2 below.

2. PURPOSE OF PERSONAL DATA COLLECTION

Your personal data may be used for the following purpose:

a) to process your application to be a Member and for ongoing verification of your membership;

b) to coma) to process your application to be a Member and for ongoing verification of your membership;

b) to communicate with you including not limited to respond to your enquiry (if any);

c) subject to Clause 8(c), to inform and update you of events, promotion and/or marketing materials;

d) to process the Sale/Service Contract;

e) to provide you the Services;

f) to process the refund, cancellation, dispute and/or chargeback of the Sale/Service Contract (if any);

g) to update, consolidate and improve our records;

h) general administration;

i) to carry out research, statistical analysis, produce reports and/or statistics on users’ demographic, interests and behaviour in the manner we deem fit and which does not identify you as an individual, by us applying a range of process and means to anonymise and/or to convert your personal data into such form in which you are no longer reasonably identifiable from that anonymised data. For avoidance of doubt, such “anonymised data” shall no longer considered and not form part of “personal data;

j) to meet any disclosure requirement imposed on us;

k) for audit, compliance and risk management purpose including not limited to carry out due diligence, credit check or other screening in accordance with legal or regulatory obligations and/or our risk management procedures;

l) to prevent or investigate any suspicious transaction, fraud, unlawful activity, omission or misconduct, whether relating to the Sale/Service Contract, use of Services or any other matter arising from your relationship with us, the Merchant and whether or not there is any suspicion of the aforementioned; and

m) our compliance of the Regulatory Requirements.

3. SOURCE OF PERSONAL DATA

we may receive and/or collect personal data of you from and/or in the following sources/situations:

a. the information we collect from or provided to us by you or the Merchant;

b. the information from you in whatsoever manner including not limited during your usage of our Services;

c. when you communicate or interact with us either offline or online through any media/channel including not limited to phone, email and/or enquiry;

d. through other publicly available sources and directories;

e. information collected automatically upon using our site through “cookies” and other technologies;

f. information in relation to the Sale/Service Contract that is made available onto or recorded on/via our system;

4. DISCLOSURE

You agree and authorize that your personal data may be disclosed to the following entity(ies):

a. our group of companies, including parent, associated, subsidiary and/or related companies;

b. the Merchant;

c. our contractors, sub-contractors, service providers and/or business partners;

d. our auditors, consultants, accountants, lawyers and/or other professional advisers as we deem necessary and appropriate;

e. the financial institute, credit reporting agencies and other entities of similar function;

f. any legal, regulatory, governmental, tax, law enforcement or other authorities of any relevant jurisdiction if we have reasonable grounds to believe that disclosure of your personal data is necessary for the purpose of meeting any obligations, Regulatory Requirements or arrangements, whether voluntary, mandatory, or as a result of cooperating with an order, an investigation and/or a request of any nature by such parties;

g. any successor in title (including potential or actual buyer/investor) upon the occurrence of: (i) merger, restructuring, re-organization, sale or transfer of the ownership, business or asset of our company (or any member of our group of companies); or (i) bankruptcy, liquidation or similar proceeding of our company; and/ or

h. other entity(ies) which is incidental to our Service and/or operation.

5. RETENTION

We will only retain your personal data for the period that we are either required to by law or as is relevant for the purposes for which it was collected. Thereafter, we will cease to retain your personal data, or remove the means by which the data can be associated with you as soon as reasonable.

6. CONSEQUENCE OF NOT PROVIDING PERSONAL DATA / WITHDRAWAL OF CONSENT

Unfortunatel, if vou choose not to provide vour personal data, not to permit us to collect and process your personal data or subsequently withdraw your consent to us:

(a) we are unable to process your Sale/Service Contract;

(b)we are unable to provide the Services; and/or

(c) we are unable to carry out/accomplish all or part of the other purposes abovementioned.

7. YOUR OBLIGATION AND REPRESENTATION

a. You must only submit personal data which is accurate and not misleading. You must keep it up to date and inform us of changes.

b. You possess the legal capacity, right and ability to fully understand and bound by this Policy. In the event you are below the age of eighteen (18) (“Legal Age”), You hereby represent that you have obtained the permission of your parent or legal guardian.

c. If you are representing and acting on behalf of corporate body, you possess the full authority, capacity, right and ability to accept and enter into this Policy on behalf of the corporate body or organization.

8. YOUR RIGHTS

You are entitled to:

a. request access to your personal data with reasonable notice. We reserve the right to charge you a reasonable fee for such request;

b. update or request the correction of your personal data (which is inaccurate, incomplete or out-of-date) that is held by us with reasonable notice; and/or

c. limit our usage or process of personal data by withdrawing your consent, including to opt out from the direct marketing in the manner described in Clause 12 below.

9. SECURITY OF YOUR PERSONAL DATA

To safeguard your personal data from unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks, we have introduced appropriate administrative, physical and technical measures such as :

a. storing the personal data behind a secured network which is only accessible by a limited number of personnel who have special access rights to such systems;

b. maintaining technology systems, tools, products to prevent unauthorised access;

c. deleting or anonymising personal data in accordance with the terms in this Policy; and

d. using firewall, authentication and/or encryption technology, including not limited to secured SSL encryption network and any other system we deem fit.

You acknowledge that transmission of information via internet is not completely secured. While we endeavour, where commercially practicable, to implement and maintain all reasonable measures to protect your information, we cannot guarantee and shall not be held responsible for any unauthorized access, unlawful interceptions or loss of personal data transmitted to or from us and are not responsible for the actions of any third party that may receive any such personal data.

10. COOKIES

We or our authorised service providers may from time to time implement “cookies” or other features to allow us or third parties to collect or share information that will help us improve our

site and or the service.

You may be able to manage and delete cookies through your browser or device settings.

However, please note that if you do this you may not be able to use the full functionality of our site or the Services, if applicable.

11. TRANSFER

We may transfer the personal data outside of Malaysia (for any of the purposes set out in this Policy. In disclosing or transferring, or permitting the transfer of, your personal data to third parties located overseas, we take steps to ensure that the receiving party has in place a standard of protection accorded to personal data that is comparable to the protection under or up to the standard of the data protection laws as are applicable to us

12. MARKETING

You may be receiving the newsletter, marketing updates and/or promotional emails from us. If you do not wish to receive any such news and/or emails, please: (a) click the “unsubscribe” link at the bottom of the email you received; or (b) contact us at our contact details set out in Clause 14 below.

This Policy may be translated into any language(s) other than English (“Translated version“). In the event of any inconsistency between the English version and the Translated version of this Policy, the English version shall prevail.

13. CONTACT US

Should you require further information about the personal data or the way in which your information is collected/used, please contact us at:

Designation of Officer: Data Protection Officer

Contact No.: 011-3301 1913

Email address: [email protected]

Address: 33M, Jalan Pandan Indah 1/23 , Pandan Indah, 52200 Kuala Lumpur