Privacy Policy

Personal Data Protection Act (PDPA)

Privacy Notice (For Customers)

At CIMB Group, we value your privacy and strive to protect your personal information in compliance with the laws of Malaysia.

Pursuant thereto, this Privacy Notice is designed to explain and elaborate upon some of our policies and principles pertaining to the privacy of your personal information, all of which we have adopted as a sign of our commitment to respecting, maintaining, protecting and safeguarding the privacy of your personal information. 

CIMB Group will only collect, record, hold, use, disclose and store (i.e. "process") use your personal information in accordance with such laws (including the Personal Data Protection Act 2010), this Privacy Notice and the privacy terms in your agreement(s) with any CIMB Group entity that you may have contracted with.

This Privacy Notice explains:

• The type of personal information we collect and how we collect it

• How we use your personal information

• The parties that we disclose the personal information  to

• The choices we offer, including how to access and update your personal information
   

Your privacy matters to us, so please take the time to get to know our practices and if you need further information, please contact our Call Centre representatives at +603 6204 7788.

For the purposes of this Privacy Notice, please note that:

• “CIMB Group” refers to CIMB Group Holdings Berhad and all its related companies, as defined in section 7 of the Companies Act 2016 and jointly controlled companies, providing financial and other regulated services, excluding companies, branches, offices and other forms of presence operating outside of Malaysia unless and to the extent otherwise stated.

• “Personal information” refers to any information which relates directly or indirectly to you and/or your transactions with us. This information includes your name, address, occupation, contact details, the details of your account(s), the type of products and/or services subscribed to and such other necessary information regarding yourself and your transaction(s) with us. For the avoidance of doubt, please note that this Privacy Notice is applicable only if you are an individual.

What Kind Of Personal Information We Collect And How We Collect It

In order to enable us to deal with your inquiries, open and operate an account/facility for you and/or to generally provide you with our products and services, we may need to and/or may be required to process personal information and financial information about you, including but not limited to:

• personal information including your images to establish your identity and background;

• personal information to establish your financial standing, creditworthiness and/or suitability for any of our products/services applied for (if required); and/or

• personal information that you provide when you apply for any of our products and services

We may obtain this information from yourself and from a variety of sources, including but not limited to:

• through your relationship with us, for example information provided by you in application forms, when using our products or services, when taking part in customer surveys, competitions and promotions, and during financial reviews;

• through your verbal and written communications with us and/or our authorised agents;

• from  an analysis of the way you use and manage your account(s)/facility(ies) with us, from the transactions you make and from the payments which are made to/from your account(s)/facility(ies);

• from third parties connected with you, such as employers, joint account holders, security providers, guarantors and indemnitors, subject to your prior consent; and/or

• from such other sources in respect of which you have given your consent to disclose information relating to you and/or where not otherwise restricted.

• from recordings of Closed Circuit Television (CCTV) installed at our premises;

• from the Malaysia Department of Insolvency, other relevant governmental authorities and/or law enforcement agencies to ascertain inter alia your current and past financial standing;

• from any information that is supplied and/or collected when you visit our websites which include your mobile device or computer's IP address or from any information that is collected via cookies in some of our websites. We use cookies for a number of purposes, including to store your preference for certain types of information or products, further analysis for the purpose of providing products and services to you, to improve our products and/or to personalize our services to you. You may adjust settings on your browser and/or mobile device so that you will be notified when you receive a cookie or other similar tracking tools. Please refer to your browser documentation to check if the tracking tools have been enabled on your computer and/or mobile device or to request not to receive cookies or to disable cookies if you do not wish to have information collected via the use of cookies.

How We Use Your Personal Information 

Other than as stated above, we may use your personal information for one or more of the following purposes:

• to assess your application(s) /request(s) for our products and services;

• to verify your financial standing through credit reference/reporting checks;

• to manage and maintain your account(s) and facility(ies) with us;

• to better manage our business and your relationship with us;

• to better understand your current and future investment needs and your financial situation;

• to provide you with information on our and/or third party products, services, offers and/or contests which may be of interest to you and in this respect, to contact you via SMS, phone or mobile device, email, fax, mail, websites or browsers, social media and/or any other appropriate communication channels;

• to improve our products and services and to develop new products and services;

• to notify you about benefits and changes to the features of products and services;

• to administer offers, competitions and promotions;

• to respond to your enquiries and complaints and to generally resolve disputes;

• to update, consolidate and improve the accuracy of our records;

• to produce data, reports and statistics which have been anonymised or aggregated in a manner that does not identify you as an individual;

• to conduct research for analytical purposes including but not limited to data mining and analysis of your  transactions with us

• to meet the disclosure requirements of any law binding on CIMB Group;

• for audit, compliance and risk management purposes;

• to assess financial and insurance risks;

• to transfer or assign our rights, interests and obligations under any of your agreements with us;

• to protect or enforce our rights to recover any debt owing to us;

• to conduct anti-money laundering checks; for crime detection, investigation, prevention and prosecution; to comply with any sanction requirements; 

• to enforce and/or defend any of our rights; and/or

• for any other purpose that is required or permitted by any law, regulations, guidelines and/or relevant regulatory authorities.

Please be assured that we will ask for your consent before using your personal information for a purpose other than those that are set out in this Privacy Notice and in the privacy terms in your agreement(s) with any CIMB Group entities.

Disclosure Of Your Personal Information

As a part of providing you with our products and services and the management and/or operation of the same, we may be required or need to disclose information about you and/or your accounts and/or facilities with us(as well as with other entities within the CIMB Group whether in or outside Malaysia) to the following third parties:

• companies and/or organisations that act as our agents, affiliates, service providers, business partners, professional advisers, other banks and/or financial institution, within or outside Malaysia, where necessary;

• companies and/or organisations that assist us in processing and/or otherwise fulfilling transactions that you have requested;

• companies and/or organisations that assist us in providing value added services that you have requested;

• companies and/or organisations that provide services to us in communicating our products and services to you;

• your advisers (including but not limited to accountants, auditors, lawyers, financial advisers or other professional advisers) where authorised by you;

• any other person notified by you as authorised to give instructions or to use the account(s)/facility(ies) or products or services on your behalf;

• any third party as a result of any restructuring of facilities granted to you or the sale of debts, or the acquisition or sale of any company by CIMB Group, provided that any recipient uses your information for the same purposes as it was originally supplied to us and/or used by us;

• any guarantors or security providers for the facility(ies) granted by us to you;

• any person intending to settle any moneys outstanding under the facility(ies) granted by us to you;

• any rating agency, insurer or insurance broker or direct or indirect provider of credit protection;

• any financial institutions, merchants, VISA International Services Association, MasterCard International Incorporated and other card associations in relation to any credit card and/or debit card issued to you by us; and/or

• any person connected to the enforcement or preservation of any of our rights under your agreement(s) with us,

subject at all times to any laws (including regulations, guidelines  and/or obligations) applicable to the CIMB Group (whether in or outside Malaysia).The afore-mentioned third parties may in some instances be located outside of Malaysia.

Additionally, the individual entities within the CIMB Group, our merchants and strategic partners may contact you about products, services and offers, which we believe may be of interest to you or benefit you financially. However, please note that we will only disclose your personal information (which will not include information relating to your affairs or accounts) to our merchants and strategic partners where your express prior consent has been obtained and subject at all times to any laws (including regulations, guidelines  and/or obligations) applicable to the CIMB Group (whether in or outside Malaysia).

You may tell us at any time if you do not wish to receive marketing communications from us, from individual entities within the CIMB Group and/or from our merchants and strategic partners by notifying us at the address/telephone number/e-mail address given at the end of this Privacy Notice. Your latest written instructions to us will prevail. In certain instances where marketing communications from us are sent via browser push to your mobile device, you will have to follow certain prescribed steps to discontinue the receipt of marketing communications from us. Please take note that certain communications such as statements of account and our websites contain standard information regarding our other products and services that cannot be removed without affecting the delivery/provision of our services and/or products, the operation of your account(s) and/or facility(ies) with us, and/or additional costs to you.

We will otherwise treat your personal information as private and confidential and will not disclose your information to anyone outside the CIMB Group except:

• where you have given permission;

• where we are required or permitted to do so by law;

• where required or authorised by any order of court, tribunal or authority, whether governmental or quasi-governmental with jurisdiction over CIMB Group;

• where we may transfer rights and obligations pursuant to our agreement(s) with you; and/or

• where we are required to meet our obligations to any relevant regulatory authority (whether in or outside Malaysia).

Security Of Your Personal Information

Information is our asset and therefore CIMB Group places great importance on ensuring the security of your personal information. We regularly review and implement up-to-date technical and organisational security measures when processing your personal information.

Employees of CIMB Group are trained to handle the personal information securely and with utmost respect, failing which they may be subject to disciplinary action.

Retention Of Your Personal Information

CIMB Group will retain your personal information in compliance with this Privacy Notice and/or the terms and conditions of your agreement(s) with CIMB Group entities for the duration of your relationship with us, for such period as may be necessary to protect the interests of CIMB Group and/or its customers as may be deemed necessary, where otherwise required by the law and/or where required by CIMB Group’s relevant policies.

What If Personal Information Provided By You Is Incomplete?

Where indicated (for example in application forms or account opening forms), it is obligatory to provide your personal information to us to enable us to process your application for our products or services. Should you decline to provide such obligatory personal information, we may not be able to process your application/request or provide you with our products or services.

Your Rights To Access And Correct Your Personal Information

We can assist you to access and correct your personal information held by us.

Where you wish to have access to your personal information in CIMB Group’s possession, or where you are of the opinion that such personal information held by us is inaccurate, incomplete, misleading or not up-to-date, you may make a request to us via our Data Access Request Form or Data Correction Request Form respectively. These forms are available at our branches.

We will use reasonable efforts to comply with your request to access or correct your personal information within 21 days of receiving your duly completed Data Access Request Form/Data Correction Request Form and the relevant processing fee (if any).

Please note that CIMB Group may have to withhold access to your personal information in certain situations, for example when we are unable to confirm your identity or where information requested for is of a confidential commercial nature or in the event we receive repeated requests for the same information. Nevertheless, we will notify you of the reasons for not being able to accede to your request.

Please also note that CIMB Group may use its discretion in allowing the corrections requested and/or may require further documentary evidence of the new information to avoid fraud and inaccuracy.

You can also assist us to keep your personal information (such as your current mailing address) up to date, as it will enable us to serve you better.

Exercising Choices Over The Disclosure, Retention And Use Of Your Personal Information

Subject always to our contractual rights and obligations under relevant laws and regulations, you may exercise your choice in respect of the disclosure, retention and use of your personal information. Should you wish to do so, kindly contact us at the address/telephone number/e-mail address given at the end of this Privacy Notice.

Revisions To Privacy Notice

This Privacy Notice may be revised from time to time. Notice of any such revision will be given on CIMB’s website and/or by such other means of communication deemed suitable by CIMB Group.

Contacting CIMB  Group About Your Privacy And How We Handle Your Personal Information

Should you have any query in relation to this Privacy Notice or how we handle your personal information, kindly contact Head of Customer Resolution Unit at the following contact points:

Notis Privasi (Untuk Pelanggan)

Di Kumpulan CIMB, kami menghargai privasi anda dan berusaha untuk melindungi maklumat peribadi anda selaras dengan undang-undang Malaysia.

Oleh itu, Notis Privasi ini dirumus untuk menerangkan dan menjelaskan sebahagian daripada dasar dan prinsip kami tentang privasi maklumat peribadi anda, yang semuanya diguna pakai oleh kami sebagai tanda komitmen kami untuk menghormati, mengekalkan, dan melindungi privasi maklumat peribadi anda.

Kumpulan CIMB hanya akan mengumpul, merekodkan, memegang, menggunakan, mendedahkan dan menyimpan (iaitu "memproses") maklumat peribadi anda mengikut undang-undang berkenaan (termasuk Akta Perlindungan Data Peribadi 2010), Notis Privasi ini dan terma privasi dalam mana-mana perjanjian yang anda mungkin telah memasuki dengan mana-mana entiti Kumpulan CIMB.

Notis Privasi ini menerangkan:

• Jenis maklumat peribadi yang kami kumpulkan serta cara kami mengumpul maklumat peribadi tersebut

• Bagaimana kami menggunakan maklumat peribadi anda

• Pihak-pihak yang kami mendedahkan maklumat peribadi anda

• Pilihan yang kami tawarkan, termasuk cara mengakses dan mengemaskinikan maklumat peribadi anda

Privasi anda adalah penting kepada kami, jadi sila meluangkan masa untuk mengetahui amalan kami dan jika anda memerlukan maklumat lanjut, sila hubungi Pegawai Khidmat Pelanggan kami di +603 6204 7788

Bagi tujuan Notis Privasi ini, sila ambil perhatian bahawa:

• "Kumpulan CIMB" merujuk kepada CIMB Group Holdings Berhad dan syarikat-syarikat berkaitan, sebagaimana yang ditakrifkan dalam seksyen 7 Akta Syarikat 2016 dan syarikat-syarikat dikawal bersama, yang menyediakan perkhidmatan kewangan serta perkhidmatan lain yang dikawal selia dan tidak termasuk syarikat, cawangan, pejabat dan lain-lain bentuk kehadiran yang beroperasi di luar Malaysia melainkan jika dan setakat yang dinyatakan sebaliknya .

• "Maklumat Peribadi" merujuk kepada apa-apa maklumat yang berkaitan secara langsung atau tidak langsung dengan anda dan/atau transaksi anda dengan kami. Maklumat ini merangkumi nama anda, alamat, pekerjaan, maklumat untuk menghubungi anda, butiran akaun, jenis produk dan/atau perkhidmatan yang dilanggan dan apa-apa maklumat lain yang perlu mengenai diri anda dan transaksi anda dengan kami. Untuk mengelakkan keraguan, sila ambil perhatian bahawa Notis Privasi ini hanya berkenaan jika anda seorang individu.

Jenis Maklumat Peribadi Yang Kami Kumpulkan Serta Cara Kami Mengumpul Maklumat Peribadi Tersebut:

Untuk membolehkan kami mengendali pertanyaan anda, membuka dan mengoperasi akaun/fasilitiuntuk anda dan/atau untuk secara amnya memberikan anda produk dan perkhidmatan kami, kami mungkin perlu dan/atau mungkin diperlukan untuk mengumpul, merekod, memegang, menggunakan, mendedahkan dan menyimpan (iaitu "memproses") maklumat peribadi dan maklumat kewangan anda, termasuk tetapi tidak terhad kepada:

Kami mungkin mendapatkan maklumat ini daripada anda dan daripada pelbagai sumber, termasuk tetapi tidak terhad kepada:

Bagaimana Kami Menggunakan Maklumat Peribadi Anda

Selain daripada yang dinyatakan di atas, kami mungkin menggunakan maklumat peribadi anda untuk satu atau lebih tujuan berikut:

Sila yakin bahawa kami akan meminta kebenaran anda sebelum menggunakan maklumat peribadi anda untuk tujuan selain daripada yang dinyatakan di dalam Notis Privasi ini dan dalam terma privasi mana-mana perjanjian anda dengan mana-mana entiti Kumpulan CIMB.

Pendedahan Maklumat Peribadi Anda

Sebagai sebahagian daripada menyediakan anda dengan produk dan perkhidmatan kami dan pengurusan dan/atau operasinya, kami mungkin dikehendaki atau perlu mendedahkan maklumat mengenai anda dan/atau akaun dan/atau fasiliti anda dengan kami (serta dengan entiti-entiti lain di dalam Kumpulan CIMB sama ada di dalam atau di luar Malaysia) kepada pihak-pihak ketiga berikut:

tertakluk pada setiap masa kepada undang-undang (termasuk peraturan, garis panduan dan/atau kewajipan) berkaitan dengan Kumpulan CIMB (sama ada di dalam atau di luar Malaysia). Pihak-pihak ketiga yang disebutkan di atas boleh dalam keadaan tertentu terletak di luar Malaysia.

Selain itu, setiap entiti di dalam Kumpulan CIMB, pedagang dan rakan kongsi strategik kami mungkin menghubungi anda mengenai produk, perkhidmatan dan tawaran, yang kami percaya mungkin menarik kepada anda atau memberi manfaat kewangan kepada anda. Walau bagaimanapun, sila ambil perhatian bahawa kami hanya akan mendedahkan maklumat peribadi anda (yang tidak termasuk maklumat yang berhubungan dengan hal ehwal atau akaun anda) kepada pedagang dan rakan kongsi strategik di mana persetujuan nyata anda telah diperolehi terlebih dahulu dan tertakluk pada setiap masa kepada mana-mana undang-undang (termasuk peraturan-peraturan, garis panduan dan/atau kewajipan) berkaitan dengan Kumpulan CIMB (sama ada di dalam atau di luar Malaysia).

Anda boleh memberitahu kami pada bila-bila masa jika anda tidak mahu menerima komunikasi pemasaran daripada kami, daripada mana-mana entiti dalam Kumpulan CIMB dan/atau dari pedagang dan rakan kongsi strategik kami dengan memberitahu kami di alamat/nombor telefon/alamat e-mel yang dinyatakan di hujung Notis Privasi ini. Arahan bertulis terbaru anda kepada kami akan diguna pakai. Dalam keadaan tertentu di mana komunikasi pemasaran dari kami dihantar melalui “push browser” ke peranti mudah alih anda, anda perlu mengikuti langkah tertentu yang ditetapkan untuk menghentikan penerimaan komunikasi pemasaran daripada kami. Sila ambil perhatian bahawa komunikasi tertentu seperti penyata akaun dan laman web kami mengandungi maklumat standard yang berkaitan dengan produk dan perkhidmatan yang tidak boleh dikeluarkan tanpa menjejaskan penghantaran/penyediaan perkhidmatan dan/atau produk kami, pengendalian akaun dan/atau fasiliti anda dengan kami, dan/atau bayaran tambahan kepada anda.

Kami sebaliknya akan menganggap maklumat peribadi anda sebagai sulit dan peribadi dan tidak akan mendedahkan maklumat anda kepada sesiapa sahaja di luar Kumpulan CIMB kecuali:

Keselamatan Maklumat Peribadi Anda

Maklumat anda adalah aset kami dan oleh itu, Kumpulan CIMB meletakkan kepentingan yang besar dalam memastikan keselamatan maklumat peribadi anda. Kami sentiasa mengkaji semula dan melaksanakan langkah-langkah keselamatan teknikal dan organisasi yang terkini apabila memproses maklumat peribadi anda.

Kakitangan Kumpulan CIMB telah dilatih untuk mengendalikan maklumat peribadi dengan selamat dan dengan penuh hormat dan sekiranya gagal berbuat demikian, mereka mungkin tertakluk kepada tindakan disiplin.

Penyimpanan Maklumat Peribadi Anda

Kumpulan CIMB akan menyimpan maklumat peribadi anda selaras dengan Notis Privasi ini dan/atau terma dan syarat perjanjian anda dengan mana-mana entiti Kumpulan CIMB bagi tempoh hubungan anda dengan kami, bagi tempoh yang diperlukan untuk melindungi kepentingan Kumpulan CIMB dan/atau pelanggannya sebagaimana yang dianggap perlu, jika sebaliknya diperlukan oleh undang-undang dan/atau jika dikehendaki oleh polisi Kumpulan CIMB yang berkenaan.

Bagaimana Jika Maklumat Peribadi Yang Anda Berikan Adalah Tidak Lengkap?

Di mana ia dinyatakan (contohnya dalam borang permohonan atau borang pembukaan akaun), ia adalah wajib untuk memberikan maklumat peribadi anda kepada kami untuk membolehkan kami memproses permohonan anda untuk produk atau perkhidmatan kami. Sekiranya anda menolak untuk memberikan apa-apa maklumat peribadi yang wajib tersebut, kami mungkin tidak dapat memproses permohonan/permintaan anda atau menyediakan anda dengan produk atau perkhidmatan kami.

Hak Anda Untuk Mengakses Dan Membetulkan Maklumat Peribadi Anda

Kami boleh membantu anda untuk mengakses dan membetulkan maklumat peribadi anda yang dipegang oleh kami.

Jika anda ingin mengakses maklumat peribadi anda dalam milik Kumpulan CIMB, atau di mana anda berpendapat bahawa maklumat peribadi tersebut yang dipegang oleh kami adalah tidak tepat, tidak lengkap, mengelirukan atau bukan terkini, anda boleh membuat permohonon kepada kami melalui Borang Permohonan Akses Data (Data Access Request Form) atau Borang Permohonan Pembetulan Data (Data Correction Request Form) kami. Borang-borang ini boleh didapati di cawangan-cawangan kami.

Kami akan menggunakan usaha yang munasabah untuk mematuhi permintaan anda untuk mengakses atau membetulkan maklumat peribadi anda dalam tempoh 21 hari dari tarikh penerimaan Borang Permohonan Akses Data (Data Access Request Form)/Borang Permohonan Pembetulan Data (Data Correction Request Form) yang lengkap dan yuran pemprosesan yang berkaitan (jika ada).

Sila ambil perhatian bahawa Kumpulan CIMB mungkin perlu menahan akses kepada maklumat peribadi anda dalam keadaan tertentu, contohnya apabila kami tidak dapat mengesahkan identiti anda atau di mana maklumat yang diminta adalah bersifat komersial yang sulit atau sekiranya kami menerima permintaan berulang untuk maklumat yang sama. Walau bagaimanapun, kami akan memberitahu anda sebab-sebab kami tidak dapat memenuhi permintaan anda.

Sila ambil perhatian bahawa Kumpulan CIMB mungkin menggunakan budi bicaranya  untuk membenarkan pembetulan yang diminta dan/atau mungkin menghendaki keterangan dokumentari lanjut bagi maklumat yang baru tersebut untuk mengelakkan penipuan dan ketidaktepatan.

Anda juga boleh membantu kami untuk memastikan maklumat peribadi anda (seperti alamat semasa anda) adalah terkini, kerana ia akan membolehkan kami untuk melayani anda dengan lebih baik.

Membuat Pilihan Berkaitan Pendedahan, Penyimpanan Dan Penggunaan Maklumat Peribadi Anda

Tertakluk sentiasa kepada hak kontraktual dan kewajipan kami di bawah undang-undang dan peraturan yang berkenaan, anda boleh menggunakan pilihan anda yang berkaitan dengan pendedahan, penyimpanan dan penggunaan maklumat peribadi anda. Sekiranya anda ingin berbuat demikian, sila hubungi kami di alamat/nombor telefon/alamat e-mel yang dinyatakan di hujung Notis Privasi ini.

Semakan Semula Notis Privasi

Notis Privasi ini mungkin disemak semula dari semasa ke semasa. Notis sebarang semakan semula tersebut akan diberikan di laman web CIMB dan/atau dengan apa-apa cara komunikasi yang lain yang dianggap sesuai oleh Kumpulan CIMB.

Menghubungi Kumpulan CIMB Mengenai Privasi Anda dan Bagaimana Kami Mengendali Maklumat Peribadi Anda

Sekiranya anda mempunyai sebarang pertanyaan berkaitan dengan Notis Privasi ini atau cara kami mengendalikan maklumat peribadi anda, sila hubungi Ketua Jabatan Khidmat Pelanggan kami seperti berikut :