PERSONAL DATA PROTECTION ACT (PDPA)
At CIMB Group, we value your privacy and strive to protect your personal information in compliance with the laws of Malaysia.
CIMB Group will only collect and use your personal information in accordance with such laws (including the Personal Data Protection Act 2010), this Privacy Notice and the privacy terms in your agreement(s) with any CIMB Group entity that you may have contracted with.
This Privacy Notice explains:
Your privacy matters to us, so please take the time to get to know our practices and if you need further information, please contact our Call Centre representatives at +60362047788.
For the purposes of this Privacy Notice, please note that:
“CIMB Group” refers to CIMB Group Holdings Berhad and all its related companies, as defined in section 6 of the Companies Act 1965 and jointly controlled companies, providing financial and other regulated services, excluding companies, branches, offices and other forms of presence operating outside of Malaysia unless and to the extent otherwise stated.
“Personal information” refers to any information which relates directly or indirectly to you and/or your transactions with us. This information includes your name, address, occupation, contact details, the details of your account(s), the type of products and/or services subscribed to and such other necessary information regarding yourself and your transaction(s) with us. For the avoidance of doubt, please note that this Privacy Notice is applicable only if you are an individual
In order to enable us to deal with your inquiries, open and operate an account/facility for you and/or to generally provide you with our products and services, we may need to and/or may be required to collect, record, hold, use, disclose and store (i.e. “process”) personal information and financial information about you, including but not limited to:
We may obtain this information from yourself and from a variety of sources, including but not limited to:
Other than as stated above, we may use your personal information for one or more of the following purposes:
Please be assured that we will ask for your consent before using your personal information for a purpose other than those that are set out in this Privacy Notice and in the privacy terms in your agreement(s) with any CIMB Group entities.
As a part of providing you with our products and services and the management and/or operation of the same, we may be required or need to disclose information about you and/or your accounts and/or facilities with us(as well as with other entities within the CIMB Group)to the following third parties:
subject at all times to any laws (including regulations, guidelines and/or obligations) applicable to the CIMB Group (whether in or outside Malaysia).The afore-mentioned third parties may in some instances be located outside of Malaysia.
Additionally, the individual entities within the CIMB Group, our merchants and strategic partners may contact you about products, services and offers, which we believe may be of interest to you or benefit you financially. However, please note that we will only disclose your personal information (which will not include information relating to your affairs or accounts) to our merchants and strategic partners where your express prior consent has been obtained and subject at all times to any laws (including regulations, guidelines and/or obligations) applicable to the CIMB Group (whether in or outside Malaysia).
You may tell us at any time if you do not wish to receive marketing communications from us, from individual entities within the CIMB Group and/or from our merchants and strategic partners by notifying us at the address/telephone number/e-mail address given at the end of this Privacy Notice. Your latest written instructions to us will prevail. Please take note that certain communications such as statements of account and our websites contain standard information regarding our other products and services that cannot be removed without affecting the delivery/provision of our services and/or products, the operation of your account(s) and/or facility(ies) with us, and/or additional costs to you.
We will otherwise treat your personal information as private and confidential and will not disclose your information to anyone outside the CIMB Group except:
Information is our asset and therefore CIMB Group places great importance on ensuring the security of your personal information. We regularly review and implement up-to-date technical and organisational security measures when processing your personal information.
Employees of CIMB Group are trained to handle the personal information securely and with utmost respect, failing which they may be subject to disciplinary action.
CIMB Group will retain your personal information in compliance with this Privacy Notice and/or the terms and conditions of your agreement(s) with CIMB Group entities for the duration of your relationship with us, for such period as may be necessary to protect the interests of CIMB Group and/or its customers as may be deemed necessary, where otherwise required by the law and/or where required by CIMB Group’s relevant policies.
Where indicated (for example in application forms or account opening forms), it is obligatory to provide your personal information to us to enable us to process your application for our products or services. Should you decline to provide such obligatory personal information, we may not be able to process your application/request or provide you with our products or services.
We can assist you to access and correct your personal information held by us.
Where you wish to have access to your personal information in CIMB Group’s possession, or where you are of the opinion that such personal information held by us is inaccurate, incomplete, misleading or not up-to-date, you may make a request to us via our Data Access Request Form or Data Correction Request Form respectively. These forms are available at our branches.
We will use reasonable efforts to comply with your request to access or correct your personal information within 21 days of receiving your duly completed Data Access Request Form/Data Correction Request Form and the relevant processing fee (if any).
Please note that CIMB Group may have to withhold access to your personal information in certain situations, for example when we are unable to confirm your identity or where information requested for is of a confidential commercial nature or in the event we receive repeated requests for the same information. Nevertheless, we will notify you of the reasons for not being able to accede to your request.
Please also note that CIMB Group may use its discretion in allowing the corrections requested and/or may require further documentary evidence of the new information to avoid fraud and inaccuracy.
You can also assist us to keep your personal information (such as your current mailing address) up to date, as it will enable us to serve you better.
Subject always to our contractual rights and obligations under relevant laws and regulations, you may exercise your choice in respect of the disclosure, retention and use of your personal information. Should you wish to do so, kindly contact us at the address/telephone number/e-mail address given at the end of this Privacy Notice.
This Privacy Notice may be revised from time to time. Notice of any such revision will be given on CIMB’s website and/or by such other means of communication deemed suitable by CIMB Group.
Should you have any query in relation to this Privacy Notice or how we handle your personal information, kindly contact Head of Customer Resolution Unit at the following contact points:
Customer Resolution Unit
CIMB Bank Berhad
Level 19, Menara Bumiputera-Commerce
No. 11 Jalan Raja Laut
50350 Kuala Lumpur.