This Notice on Personal Data is issued to all Hong Leong Investment Bank Berhad (“HLIB”)’s customers pursuant to the requirements of the Personal Data Protection Act 2010 (“PDPA”), from whom personal data have been and/or may in future be collected. The term “personal data” refers to information relating directly or indirectly to customers from which they can be identified or are identifiable and includes any sensitive personal data and expression of opinion about them.
1.
Personal Data Confidentiality
-
1.1
Hong Leong Investment Bank Berhad, HLIB Nominees (Tempatan) Sdn Bhd and HLIB Nominees (Asing) Sdn Bhd (hereinafter collectively referred to as 'the Bank') strive to protect the confidentiality of the personal information ('data') of customers, business counterparts and any personal data of other individuals that may be provided to the Bank (hereinafter collectively referred to as 'data subjects'), that has been provided to the Bank. This Policy is accordingly addressed to these data subjects in the jurisdiction of Malaysia.
-
1.2
This Policy is developed to assist you, as a data subject, in understanding how we collect, disclose, transfer and store your personal information and how we intend to deliver the rights and protection that you are entitled to.
-
1.3
Ensuring the security of your personal information is our priority. We strive to protect the confidentiality of this information by maintaining appropriate physical, electronic, and procedural safeguards. We invest in systems and infrastructure to minimize any risks of compromising data security. Each of our employees is also bound by our Code of Conduct and Ethics which requires them to maintain customer confidentiality.
-
1.4
When we use other companies to provide services to our customers on our behalf ('service providers'), we also require them to protect the confidentiality of your personal information that they may receive.
-
1.5
In relation to Clause 1.4 above and Clause 4.2 below, please understand that we will only share your information with our service providers and business partners in accordance with this Policy.
2.
Choice to Supply Personal Data
-
2.1
As a data subject of the Bank, you are provided opportunities to make choices. We encourage you to make choices that enable us to provide you with quality products and services that help you to meet your financial needs and objectives.
-
2.2
The collection of data by the Bank may be mandatory or voluntary/optional in nature in order to establish or continue to enjoy the Bank's financial services and/or establish any other business relationships with the Bank.
-
2.3
It is necessary for you to provide data which are mandatory. If you choose not to supply such data, this may result in the Bank being unable to provide products and/or services or otherwise deal with you.
-
2.4
We endeavour to keep you informed of the latest marketing and promotional offers that we feel would be useful and beneficial to you. These may include programs you may find valuable in helping you manage your account; such as product or service upgrades, credit line increases and other benefits.
-
2.5
However, you can choose not to receive these marketing and promotional offers. You can do so by informing the Bank. Your request will be processed and no fees will be charged.
3.
Types of Personal Data Collected
-
3.1
Personal data is described by the Personal Data Protection Act 2010 as information relating directly or indirectly to an individual who is identified or can be identified from that information.
-
3.2
The types of personal data collected may vary according to the business relationship that is established. Data collected may include the following:-
- data collected on applications or other forms or as provided by you, such as name, IC number or passport number (for foreigners), address, e-mail address, telephone number, race, occupation, financial position such as assets and income, investment objectives, employer's details, family members and personal information about them and such other information as may be relevant for your application;
- data about your transactions with the Bank, its service providers, business partners or third parties, such as account balances, payment history, and account activity;
- data from credit bureau reports;
- data from credit reporting agencies;
- data from governmental agencies, regulatory and statutory authorities;
- data from your joint account holder(s) and/or parties providing security for your facilities;
- data obtained from your access to the Bank's web server, for example, by the use of cookies, i.e. small text files, sent by the Bank's server to your system when you access the Bank's server; and
- data from publicly available sources.
4.
Use of Personal Data
-
4.1
The Bank collects your data for the provision of financial services or products requested by you in order to meet your financial needs and objectives.
-
4.2
In addition to the above, the Bank may also make arrangements with business partners to jointly develop products and services or launch marketing campaigns that may involve the sharing of your personal information.
-
4.3
Your personal data may be used or processed by the Bank or the Bank's service providers for the following purposes:-
- to establish a relationship between you and the Bank and/or companies related to or affiliated to the Bank, the Bank's service providers and business partners;
- to process applications for products and services;
- to evaluate and monitor credit worthiness;
- for evaluation and due diligence purposes;
- for carrying out your instructions and the provision of products and services to you, whether provided personally or through telephone or electronic means, including processing of receipts and payments;
- for data processing purposes;
- to evaluate and monitor provision of services;
- to respond to inquiries from you;
- to understand your needs and offering products and services to meet those needs;
- for the research and development of products and services for customers' use;
- to allow the Bank, the Bank's related and/or affiliated companies, service providers and business partners to promote their products and services;
- for debt collection purposes;
- for enforcement of our rights and obligations of other parties to us and/or our affiliates;
- operating internal controls including determining amounts owed to or by you, payment to or collection of such amounts from you and from any persons providing security for your obligations and enforcing any charge or other security granted by or for you in respect of the Bank's product and services;
- to enable a party to evaluate any actual or proposed assignment, participation, sub-participation and/or novation of our rights and/or obligations;
- to meet legal and regulatory requirements, which may include disclosure, notification and record retention requirements;
- To maintain and protect our offices;
- for audit and risk management;
- for any transfer or proposed transfer of any part of the Bank's interests, obligations, business and/or operations;
- for such other purposes as permitted by applicable law or with your consent; and
- for all other purposes incidental and associated with any of the above.
5.
Disclosure of Personal Data
-
5.1
For the purposes above, your personal data may be provided by the Bank to:-
- any person under a duty of confidentiality to the Bank or to companies related to or affiliated to the Bank;
- companies related to or affiliated to the Bank (whether such company operates in Malaysia or elsewhere);
- Bank Negara Malaysia, Securities Commission Malaysia and any financial institution granting or intending to grant any credit facilities to you, any central credit bureau established or approved by Bank Negara Malaysia, any other relevant authority as may be authorized by law to obtain information about you, authorities/agencies established by Bank Negara Malaysia and/or any other person as may be authorised by law or any governmental authority and/or regulatory authority and/or any industry related association;
- any relevant agent, contractor or third party service provider who provides administrative, telecommunications, computer, payment, securities clearing, management, audit or other services to the Bank;
- any banking, financial or other institution with which you have or propose to have dealings with;
- any credit reference/reporting agency or debt collection agencies;
- lawyers, auditors, tax advisors, investment banks and other professional advisors which is restricted to the nature of the business relationship in which you are involved in with the Bank;
- Bursa Malaysia related entities and the Personal Data Notices of the relevant Bursa Malaysia related entity(ies) shall also apply to your personal data. Please refer to the Bursa Malaysia website for copies of the applicable Personal Data Notices;
- any of your security providers or any party intending to provide security in respect of the facilities/services applied for;
- any person or corporation to whom the Bank transfers or proposes to transfer any part of its interests, obligations, business and/or operations;
- any nominee, trustee, co-trustee, centralised securities depository or registrar, custodian, estate agent, solicitor or other person who is involved with the provision of services or products by the Bank to you;
- any person by whom the Bank is required by applicable legal, governmental or regulatory requirements to make disclosure; or
- any other person reasonably requiring the same in order for the Bank to carry out the activities set out in the above purposes.
The Bank may disclose data to any or all of the parties stated above and may if necessary, do so notwithstanding the recipient's place of business is outside Malaysia, or that such information following disclosure will be collected, held, processed or used by such recipient in whole or in part outside Malaysia.
6.
Data Subject's Obligations
-
6.1
Clients must supply complete and correct details to the institution for themselves and any associated individuals. Any necessary updates to outdated or incorrect details should be submitted by reaching out to the designated Personal Data Protection Officer using the provided contact details.
-
6.2
When sharing third-party personal details (such as information regarding family members, company directors, or authorized representatives) to access requested financial products or services, you confirm that: (i) valid authorization or consent has been secured to allow the processing of their information, and (ii) those individuals have been made aware of the privacy policy and directed to the policy details available at [http://www.hlib.com.my](http://www.hlib.com.my) or [https://www.hlebroking.com/v3/](https://www.hlebroking.com/v3/).
7.
Right to Access, Transmit and Correct Personal Data
-
7.1
You are entitled to ask whether the Bank holds data on you and to request (i) access; (ii) transmission; and/or (iii) correction of any such data held. You will be required to fill up a form and a reasonable administrative fee may be charged for processing each request.
-
7.2
If you wish to make any such request(s) stated above, please contact our Data Protection Officer (refer to Section 9 below) and we will facilitate the fulfillment of your request as soon as possible.
8.
Amendments to this Privacy Policy
-
8.1
This Policy may be reviewed and amended from time to time. We will communicate such changes along with the updated Policy on the Bank's website (http://www.hlib.com.my or https://www.hlebroking.com/v3/), and/or other appropriate communication means as may be determined by the Bank.
9.
Contact Details of Data Protection Officers
| Name | Sharan Kaur Jaswant Singh | Leong Li Fen |
| Position | Head of Legal & Acting Head of Compliance | Head of Settlements |
| Phone number | 03 2083 1800 | |
| [email protected] | ||
7.
Right to Access, Transmit and Correct Personal Data
-
7.1
You are entitled to ask whether the Bank holds data on you and to request (i) access; (ii) transmission; and/or (iii) correction of any such data held. You will be required to fill up a form and a reasonable administrative fee may be charged for processing each request.
-
7.2
If you wish to make any such request(s) stated above, please contact our Data Protection Officer (refer to Section 9 below) and we will facilitate the fulfillment of your request as soon as possible.
8.
Amendments to this Privacy Policy
-
8.1
This Policy may be reviewed and amended from time to time. We will communicate such changes along with the updated Policy on the Bank's website (http://www.hlib.com.my or https://www.hlebroking.com/v3/), and/or other appropriate communication means as may be determined by the Bank.
9.
Contact Details of Data Protection Officers
| Name | Sharan Kaur Jaswant Singh | Leong Li Fen |
| Position | Head of Legal & Acting Head of Compliance | Head of Settlements |
| Phone number | 03 2083 1800 | |
| [email protected] | ||
This Notice on Personal Data is issued to all Hong Leong Investment Bank Berhad (“HLIB”)’s customers pursuant to the requirements of the Personal Data Protection Act 2010 (“PDPA”), from whom personal data have been and/or may in future be collected. The term “personal data” refers to information relating directly or indirectly to customers from which they can be identified or are identifiable and includes any sensitive personal data and expression of opinion about them.
1.
Kerahsiaan Data Peribadi
-
1.1
Hong Leong Investment Bank Berhad, HLIB Nominees (Tempatan) Sdn Bhd dan HLIB Nominees (Asing) Sdn Bhd (dengan ini dirujuk secara kolektif sebagai 'Pihak Bank') berusaha untuk melindungi kerahsiaan data peribadi ('data') pelanggan, rakan perniagaan dan mana-mana data peribadi individu lain yang diberikan kepada Bank (dengan ini dirujuk secara kolektif sebagai 'subjek data'), yang telah diberikan kepada Pihak Bank. Dasar ini ditujukan kepada subjek data dalam bidang kuasa Malaysia.
-
1.2
Dasar ini adalah bertujuan untuk membantu anda, sebagai subjek data, untuk memahami bagaimana kami mengumpul, mendedah, memindah dan menyimpan maklumat peribadi anda dan bagaimana kami akan memberikan hak dan perlindungan yang wajar diterima oleh anda.
-
1.3
Memastikan keselamatan data peribadi anda adalah keutamaan kami. Kami akan berusaha untuk melindungi kerahsiaan maklumat ini dengan memastikan adanya perlindungan yang sesuai dari segi fizikal, elektronik dan prosedur. Kami membuat pelaburan dalam sistem dan infrastruktur bagi mengurangkan risiko keselamatan data daripada dikompromi. Setiap pekerja kami juga terikat dengan Kod Kelakuan dan Etika yang mewajibkan mereka untuk memelihara kerahsiaan maklumat pelanggan.
-
1.4
Apabila kami menggunakan syarikat lain ('pembekal perkhidmatan') untuk memberikan perkhidmatan kepada pelanggan-pelanggan kami, kami juga akan mewajibkan mereka untuk melindungi kerahsiaan data peribadi anda yang mungkin diperolehi oleh mereka.
-
1.5
Berhubung dengan klausa 1.4 di atas dan klausa 4.2 di bawah, adalah diharapkan anda memahami bahawa kami akan hanya berkongsi maklumat anda dengan pembekal perkhidmatan dan rakan perniagaan kami mengikut kandungan Dasar ini.
2.
Pilihan untuk Memberi Data Peribadi
-
2.1
Sebagai subjek data, anda diberi peluang untuk membuat pilihan. Kami menggalakkan anda untuk membuat pilihan yang membolehkan kami memberikan produk dan perkhidmatan yang berkualiti yang akan membantu anda memenuhi keperluan dan objektif kewangan anda.
-
2.2
Data yang dikumpulkan oleh Pihak Bank terbahagi kepada data yang wajib diberi atau sukarela/opsional bagi membolehkan anda mendapat atau terus memperoleh khidmat kewangan dari Pihak Bank dan/atau berhubung dengan Pihak Bank untuk apa-apa urusan perniagaan.
-
2.3
Adalah perlu bagi anda untuk memberikan data yang wajib. Sekiranya anda memilih untuk tidak memberikan data tersebut, Pihak Bank mungkin tidak akan dapat menawarkan produk dan/atau perkhidmatan ataupun berurusan dengan anda.
-
2.4
Kami akan berusaha untuk memastikan anda sentiasa dimaklumkan mengenai tawaran pemasaran dan promosi terkini yang mungkin berguna dan bermanfaat untuk anda. Ini termasuk program-program yang mungkin berguna dalam membantu anda menguruskan akaun anda; sebagai contoh menaiktaraf perkhidmatan, penambahan had kredit/pembiayaan dan manfaat-manfaat lain.
-
2.5
Walaubagaimanapun, anda boleh memilih untuk tidak menerima tawaran-tawaran pemasaran dan promosi ini. Anda boleh berbuat demikian dengan memberitahu Pihak Bank. Permintaan anda akan diproses dan tiada sebarang bayaran akan dikenakan.
3.
Jenis-jenis Data Peribadi yang Dikumpul
-
3.1
Data peribadi ditakrif di bawah Akta Perlindungan Data Peribadi 2010 sebagai maklumat yang berkaitan, sama ada secara langsung atau tidak langsung, mengenai seseorang individu yang dikenal pasti atau yang boleh dikenal pasti melalui maklumat tersebut.
-
3.2
Jenis-jenis data peribadi yang dikumpul mungkin berbeza bergantung kepada urusan perniagaan yang dibuat. Data yang dikumpul adalah seperti berikut:
- Data yang diambil di dalam permohonan atau borang-borang lain atau sepertimana yang diberikan oleh anda, seperti nama, nombor kad pengenalan atau passport (untuk warga asing), alamat, alamat emel, nombor telefon, bangsa, pekerjaan, kedudukan kewangan seperti aset dan pendapatan, objektif pelaburan, maklumat majikan, ahli keluarga dan maklumat peribadi berkenaan mereka dan maklumat-maklumat lain yang mungkin berkaitan dengan permohonan anda;
- Data berkaitan dengan transaksi anda dengan Pihak Bank, pembekal perkhidmatan, rakan perniagaan atau pihak ketiga, seperti baki akaun, rekod bayaran dan aktiviti akaun;
- Data dari laporan-laporan biro kredit;
- Data dari agensi laporan kredit;
- Data dari agensi kerajaan, pihak berkuasa undang-undang dan berkanun;
- Data daripada pemegang akaun bersama anda dan/atau pihak yang memberi perlindungan kepada kemudahan-kemudahan anda;
- Data yang diperolehi melalui akses anda kepada komputer induk (server) Pihak Bank, contohnya, dengan menggunakan 'cookies', i.e. fail-fail teks kecil, yang dihantar oleh server Pihak Bank ke sistem anda apabila anda mengakses ke server Pihak Bank; dan
- Data yang didapati dari sumber-sumber awam.
4.
Penggunaan Data Peribadi
-
4.1
Pihak Bank mengumpul maklumat anda untuk tujuan memberikan perkhidmatan kewangan atau produk-produk yang dipohon oleh anda untuk memenuhi keperluan dan objektif kewangan anda.
-
4.2
Pihak Bank juga boleh berurusan dengan rakan-rakan perniagaan untuk membangunkan, secara usahasama, produk dan perkhidmatan atau melancarkan kempen-kempen pemasaran yang mungkin melibatkan perkongsian data peribadi anda.
-
4.3
Data peribadi anda boleh diguna atau diproses oleh Pihak Bank atau pembekal perkhidmatan Pihak Bank untuk tujuan-tujuan berikut:
- Untuk urusan perniagaan di antara anda dan Pihak Bank dan/atau syarikat-syarikat berkaitan dengan atau yang bergabung dengan Pihak Bank, pembekal perkhidmatan dan rakan-rakan niaga Pihak Bank;
- Untuk memproses permohonan-permohonan untuk produk dan perkhidmatan;
- Untuk menilai dan memantau keupayaan kredit/pembiayaan;
- Untuk tujuan penilaian dan usaha wajar;
- Untuk melaksanakan arahan anda dan untuk tujuan penyediaan produk dan perkhidmatan kepada anda, sama ada diberikan secara bersemuka atau melalui medium telefon atau elektronik, termasuk untuk pemprosesan resit dan bayaran;
- Untuk tujuan pemprosesan data;
- Untuk menilai dan memantau pemberian perkhidmatan;
- Untuk memberi respon kepada pertanyaan-pertanyaan dari pihak anda;
- Untuk memahami keperluan anda dan menawarkan produk dan perkhidmatan yang memenuhi keperluan tersebut;
- Untuk tujuan kajian dan pembangunan bagi produk dan perkhidmatan untuk kegunaan pelanggan;
- Untuk membolehkan Pihak Bank, syarikat-syarikat berkaitan dan/atau berhubungan dengan Pihak Bank, pembekal perkhidmatan dan rakan-rakan perniagaan untuk mempromosi produk dan perkhidmatan mereka;
- Untuk tujuan pengutipan hutang;
- Untuk tujuan menguatkuasakan hak-hak dan kewajipan kami daripada pihak lain ke atas kami dan/atau sekutu-sekutu kami;
- Untuk menjalankan operasi kawalan termasuk menentukan jumlah yang terhutang kepada atau oleh anda, pembayaran kepada atau koleksi apa amaun daripada anda dan dari mana-mana orang yang menyediakan jaminan bagi kewajipan anda dan menguatkuasakan apa-apa caj atau sekuriti lain yang diberikan oleh atau untuk anda berhubung dengan produk dan perkhidmatan Bank;
- Untuk membolehkan sesebuah pihak untuk menilai sebarang tugasan sebenar atau dicadangkan, penyertaan, sub-penyertaan dan/atau novasi hak-hak dan/atau kewajipan kami;
- Untuk mematuhi keperluan undang-undang dan peraturan, yang mungkin melibatkan pendedahan, notifikasi dan penyimpanan rekod;
- Untuk mengekal dan meindungi pejabat-pejabat kami;
- Untuk tujuan audit dan pengurusan risiko;
- Untuk tujuan pemindahan atau cadangan pemindahan mana-mana bahagian kepentingan, kewajipan, bisnes dan/atau operasi Pihak Bank.
- Untuk apa-apa tujuan lain yang dibenarkan oleh undang-undang yang berkenaan atau dengan kebenaran anda; dan
- Untuk semua tujuan-tujuan lain yang bersampingan dan berkaitan dengan mana-mana di atas.
5.
Penzahiran Data Peribadi
-
5.1
Bagi tujuan-tujuan yang dinyatakan, pihak institusi boleh menzahirkan maklumat peribadi pelanggan kepada pihak-pihak berikut:
- Pihak yang terikat dengan kewajipan kerahsiaan bersama institusi atau syarikat sekutunya;
- Syarikat bersekutu atau berkaitan dengan institusi, sama ada beroperasi di dalam mahupun di luar negara;
- Badan pengawal selia dan institusi kewangan seperti Bank Negara Malaysia, Suruhanjaya Sekuriti Malaysia, biro kredit, serta pihak berkuasa lain yang diberi kuasa oleh undang-undang atau persatuan industri;
- Pembekal perkhidmatan pihak ketiga, kontraktor, atau ejen yang menyediakan khidmat pentadbiran, teknologi maklumat, pemprosesan pembayaran, audit, atau perkhidmatan sokongan lain;
- Institusi perbankan atau kewangan lain yang mempunyai urusan perniagaan dengan anda;
- Agensi pelaporan kredit dan agensi pengutipan hutang;
- Penasihat profesional seperti peguam, juruaudit, penasihat cukai, dan bank pelaburan mengikut skop hubungan perniagaan anda;
- Entiti berkaitan Bursa Malaysia mengikut Notis Data Peribadi berkenaan yang terpakai;
- Penyedia jaminan atau pihak yang berhasrat menyediakan sekuriti bagi kemudahan kewangan anda;
- Individu atau korporat yang menerima pemindahan atau cadangan pemindahan kepentingan, kewajipan, atau operasi perniagaan institusi;
- Pemegang amanah, pendaftar, pemegang deposit sekuriti pusat, ejen hartanah, peguam, atau pihak lain yang terlibat dalam penyediaan produk dan perkhidmatan;
- Mana-mana pihak yang dikehendaki oleh undang-undang, pihak berkuasa kerajaan, atau badan kawal selia; dan
- Mana-mana pihak lain yang wajar bagi membolehkan institusi menjalankan aktiviti dan tujuan yang telah ditetapkan.
Penzahiran data peribadi boleh dibuat kepada mana-mana pihak di atas, termasuk penerima yang berada di luar Malaysia di mana maklumat tersebut mungkin dikumpul, disimpan, diproses, atau digunakan secara keseluruhan atau sebahagiannya di luar negara.
6.
Kewajipan Subjek Data
-
6.1
Subjek data bertanggungjawab bagi memastikan semua maklumat peribadi diri sendiri serta individu lain yang diserahkan kepada pihak institusi adalah tepat dan lengkap. Sebarang perubah atau maklumat yang tidak lagi terkini hendaklah dikemas kini dengan menghubungi Pegawai Perlindungan Data Peribadi melalui maklumat perhubungan yang disediakan.
-
6.2
Apabila mengemukakan maklumat peribadi pihak ketiga (seperti pasangan, anak-anak, wakil yang diberi kuasa, atau pengarah syarikat) berkaitan dengan permohonan produk atau perkhidmatan kewangan, anda mengesahkan bahawa:
(i) Keizinan individu berkenaan telah diperoleh atau anda mempunyai hak di bawah undang-undang untuk menyerahkan maklumat mereka bagi tujuan pemprosesan dan penggunaan oleh pihak institusi; dan
(ii) Makluman mengenai polisi perlindungan data institusi telah disampaikan kepada individu berkenaan berserta rujukan kepada Dasar Privasi di [http://www.hlib.com.my](http://www.hlib.com.my) atau [https://www.hlebroking.com/v3/](https://www.hlebroking.com/v3/).
7.
Hak untuk Mengakses, Penghantar dan Memperbetul Data Peribadi
-
7.1
Anda mempunyai hak untuk bertanya sama ada Pihak Bank menyimpan data anda dan untuk meminta (i) akses; (ii) penghantaran; dan/atau (iii) pembetulan data yang disimpan. Anda dikehendaki untuk mengisi borang dan bayaran pentadbiran yang munasabah boleh dikenakan bagi memproses setiap permintaan data.
-
7.2
Jika anda ingin membuat sebarang permintaan tersebut di atas, sila hubungi Pegawai Perlindungan Data kita (merujuk kepada Seksyen 9 di bawah) dan kami akan memfasilitasi permintaan anda secepat mungkin.
8.
Pindaan kepada Dasar Privasi
-
8.1
Dasar ini boleh dikaji dan dipinda semula dari semasa ke semasa. Kami akan memberitahu sebarang perubahan bersama dengan Dasar yang dikemaskini melalui laman web Pihak Bank (http://www.hlib.com.my atau https://www.hlebroking.com/v3/), dan/atau melalui medium komunikasi yang sesuai seperti yang ditentukan oleh Pihak Bank.
9.
Butiran Hubungan Pegawai-pegawai Perlindungan Data
| Nama | Sharan Kaur Jaswant Singh | Leong Li Fen |
| Jawatan | Head of Legal & Acting Head of Compliance | Head of Settlements |
| Nombor Telefon | 03 2083 1800 | |
| Emel | [email protected] | |