Privacy Policy

For purposes of this document, the expression “Personal Data” shall bear the meaning as defined by the Personal Data Protection Act 2010 and as amended by Personal Data Protection (Amendment) Act 2024 (collectively, “PDPA”), including all amendments thereto, rules and regulations applicable from time to time and includes “sensitive personal data” (as also defined by the PDPA).
Where applicable, and in relation to any personal data that may have been or may from time to time hereafter be provided by you or on behalf of such provider of personal data (“data provider”) and/or obtained independently by the data controller (“Data Controller”), from other lawful sources (if any) in connection with a commercial transaction:-
1. the data provider covenants that the provider of the Personal Data has acknowledged, confirmed and consented to the Data Controller; and
2. the data provider hereby acknowledges, confirms and consents to the Data Controller collecting, recording, holding, storing, using, dealing with and otherwise processing the Personal Data, for any of the following purposes:-
  1. for the Data Controller’s record-keeping in the ordinary course of its business;
  2. to administer and give effect to the commercial transaction and the management and/or enforcement thereof, and to contact and communicate with the data provider and/or the organization and/or such other persons or companies as represented by the data provider;
  3. to enable the Data Controller to collect, compile, process, disclose and/or deal with the Personal Data in any manner as the Data Controller deems fit for purposes of health and safety and/or the purposes set out in sub-clause (v) below;
  4. to enable the Data Controller to inform and/or communicate with the data provider (including emails, SMS or other means) for the purposes stated herein;
  5. to enable the Data Controller’s compliance with its obligations under any law, rule, regulation, by-law, order, guideline, directive, policy and such other requirements in force and as amended from time to time.
The data provider, the organization and/or such other persons or companies represented by the data provider respectively referred to above further acknowledge that information given or the request made by the data provider and/or the organisation and/or such other persons or companies represented by the data provider leading to the provision of any personal data is sufficient, accurate, complete and not misleading, and that such personal data is provided voluntarily and is necessary for the purposes set out above.
Where Personal Data is requested, the data provider, the organization or such other persons or companies represented by the data provider has the option not to provide additional information requested other than the information which the Data Controller has indicated as necessary to facilitate the commercial transaction. If data provider does not complete the required fields for itself or on behalf of the organization or such other persons or companies represented by the data provider as the case may be, the Data Controller will not be able to offer the services and/or fulfill the request of data provider and/or the organization and/or such other persons or companies represented by the data provider.
In connection with the purposes above, the Data Controller is hereby permitted to disclose such personal data to the relevant authorities, the Data Controller’s successor in interest, sponsors, advertisers, solicitors, insurers, adjusters, other advisers, suppliers, contractors and/or service providers, and the Data Controller’s parent company, related and associated companies, affiliates and partners, some of whom may be outside Malaysia, who may undertake administrative, management and operational functions for or on behalf of the Data Controller or otherwise, in respect of or arising from the commercial transaction or to support sales, marketing, promotion and/or advertising efforts.
In the event of a sale of business, disposal, acquisition, merger or reorganisation involving the Data Controller or the assets of the Data Controller to another party, Personal Data may be required to be disclosed and/or transferred to the other party as part of the process of sale, disposal, acquisition, merger or reorganisation. The data provider acknowledges and covenants that the provider of the Personal Data has acknowledged, confirmed and consented to the Data Controller that such disclosure and transfer may occur and hereby permit the Data Controller to release the Personal Data to the other party and its advisers and representatives and that the other party has the provider’s consent to process the Personal Data.
You or the provider of the Personal Data may :-
(i)request in writing for access to and/or request for correction or update of the Personal Data in accordance with the PDPA to :-
The Communications Department
Tel No.: 03-2297 0208
Address: Level 31, The Gardens South Tower,
Mid Valley City, Lingkaran Syed Putra,
59200 Kuala Lumpur.
OR
(ii)if you have any enquiry, feedback or complaint on our personal data protection policy or procedures contact our data protection officer via email : dpo@igbbhd.com OR directly to :-
1. Tony Wong (Head of Group Information Technology)
  c/o Level 32, The Gardens South Tower, Mid valley City,
  Lingkaran Syed Putra, 59200 Kuala Lumpur.
  Tel No. : 03-2289 8918
2. Terence Yeoh (Head of Group Legal)
  c/o Level 32, The Gardens South Tower, Mid valley City,
  Lingkaran Syed Putra, 59200 Kuala Lumpur.
  Tel No. : 03-2289 8918
In the event of any inconsistency between the English version and the Bahasa Malaysia version of this Privacy Policy, the English version shall prevail over the Bahasa Malaysia version.

PRIVACY POLICY