A. Overview

This Privacy Notice sets out how Serba Wangi Sdn. Bhd. (“the Company”) and its wholly owned subsidiaries will handle personal information in accordance with the Personal Data Protection Act 2010 (“PDPA”) and the laws of Malaysia.

Our Company and our subsidiaries, value the trust of our users and the public. We are committed to protecting your personal information and ensuring that your personal information is used only for the purposes stated herein and/or as otherwise provided for in law.

B. Definition of Personal Information

Personal information refers to any information which relates directly or indirectly to you. This includes any information that can be used to distinguish, identify or contact you. For the purposes of this Privacy Notice, personal information encompasses sensitive personal information which relates to information relating to your health, political opinions, religious beliefs, etc.

C. Collection and Use of Personal Information

We collect personal information to personally identify you when you visit our website and use our application. This is to ensure a smoother and more efficient user experience. We may also collection information that personally identifies you if you choose to submit your personal information for the various purposes made available on our website and application. This information may include data not limited to contact information about you such as your name, address(es), telephone number(s), email address(es) and other contact information, profession, date of birth, country of residence and gender. We will then serve you with a personal data protection notice (“Notice”) to confirm your consent and notify you on our processing of your personal information. The processing of your personal information will be done in accordance with all applicable laws. Our Company and/or its subsidiaries may collect personal information from you in one or more of the following methods:

• Use of any of our services, products, website or mobile application
• The filling in of forms, surveys, competitions etc.
• By responding to any marketing materials we send out
• By application and/or registration with any of our subsidiaries
• By providing feedback to us (for example via our websites or in hard copy)

Other than personal information obtained from you directly (as laid out above), we may also obtain your personal information from third parties we deal with and from such other sources in respect of which you have given your consent to disclose information relating to you and/or where otherwise lawfully permitted.

The Company and/or its subsidiaries may collect personal information from you or from the category of third parties identified above which is to be utilised for one or more of the following purposes:

• To properly identify you
• To assess your application(s) /request(s) for our services and/or products
• To keep in contact with you and provide you with any information you have requested
• To establish and better manage any relationship we may have with you
• To process any communications you send us (for example, answering any queries and dealing with any complaints and feedbacks)
• To improve our services and products and to develop new services and products
• To produce data, reports and statistics which may be used by the Company for commercial purposes
• To investigate, respond to a defend claims made against, or involving the Company and/or its subsidiaries
• To conduct marketing activities
• To comply with legal and regulatory requirements
• For any other purposes that is required or permitted by any law, regulations, guidelines and/or relevant regulatory authorities

D. Usage of Participants Database by Event Affiliates

This privacy notice provides information about the handling of participants’ data collected during the Miles with ecoBrown’s (“Event”). The Event organizers are committed to protecting your privacy and ensuring the security of your personal information. This notice outlines how event affiliates, who play a significant role in supporting the Event, will use the participants’ database.

1. Data Collection and Usage:
As part of your registration and participation in the Event, certain personal information will be collected. This information may include your name, contact details, affiliation, and other relevant data that you provide voluntarily. Event affiliates, who are closely involved in the success of the Event, will have access to this participants’ database for specific purposes.

2. Purpose of Data Usage:
The participants’ database will be used by event affiliates for the following purposes:
Event Communication: Event affiliates may use your data to communicate important Event updates, session details, and any necessary announcements.
Post-Event Engagement: After the Event, event affiliates might follow up with you to gather feedback, share additional resources, and provide information about future events or related opportunities.
Research and Enhancement: The data collected may be aggregated and anonymized for research and analytical purposes, helping to improve the quality of future events and align content with participants’ interests.
Exploration of Collaborations: Event affiliates may assess the database for potential collaborative initiatives or partnerships that align with the themes of the Event.

3. Data Sharing and Security:
Event affiliates are committed to maintaining the security and confidentiality of your personal data. Your information will not be shared with external parties for commercial purposes without your explicit consent. Appropriate technical and organizational measures will be employed to safeguard your data against unauthorized access, loss, or disclosure.

4. Your Rights:
You have certain rights concerning your personal data:
Access: You can request access to the personal data we hold about you.
Correction: You can request the correction of inaccurate or incomplete data.
Deletion: You can request the deletion of your data, subject to legal and contractual obligations.
Objection: You can object to the processing of your data for certain purposes.
Withdrawal of Consent: If you provided consent for specific processing, you can withdraw it at any time.

5. Contact Information:
For any inquiries, concerns, or requests related to your personal data, please reach out to the privacy representative of the Event organizers at marketing@malaysiarice.com. You can also refer to our comprehensive privacy policy for additional details about data processing and your rights.

By participating in the Event, you acknowledge that you have read and understood this privacy notice and consent to the utilization of your data by the event affiliates for the purposes outlined above.

E. Incomplete provision of Personal Information

Where indicated (for example in application forms), it is obligatory to provide your personal information to us to enable us to process your application for our services and/or products. Should you decline to provide such obligatory personal information, we may not be able to process your application or provide you with our services or products.

F. Disclosure of Personal Information

As a part of providing you with our services and/or products and the management and/or operation of the same, the Company and/or its subsidiaries may be required or need to disclose information about you to the following third parties:

• Law enforcement and government agencies
• The Company and/or its subsidiaries, business partners, clients and relevant business parties
• Companies and/or organisations that act as our agents, contractors, service providers and/or professional advisers
• Companies and/or organisations that assist us in processing and/or otherwise fulfilling transactions that you have requested
• Our business associates and other parties for purposes that are related to the purpose of collecting your personal information
• Other parties in respect of whom you have given your express or implied consent subjected at all times to any laws (including regulations, guidelines and/or obligations) applicable to the Company and/or its subsidiaries.
• Any agent, contractor or third party service provider who provides administrative, marketing and research, training, distribution, data processing, telecommunications, computer, payment or other services to the Company And/or its subsidiaries
• Any person, who is under a duty of confidentiality who has undertaken the responsibility to keep such information confidential.

We do not disclose your personal information to unaffiliated third parties without your consent.

However, we may disclose your personal information if required by law or in good faith, if such action is necessary to comply with any law enforcement agency requirements, court orders or legal processes.

G. Right to Access and Correct Personal Information

We can assist you to access and correct your personal information held by us.

Where you wish to have access to your personal information in the Company and/or its subsidiaries possession, or where you are of the opinion that such personal information held by us is inaccurate, incomplete, misleading or where relevant, not up-to-date, you may make a request by sending us an e-mail at the address detailed at the end of this Privacy Notice.

We will use reasonable efforts to comply with your request to access or correct your personal information within 21 days of receiving your duly completed Data Access Request Form/Data Correction Request Form and the relevant processing fee (if any).

Please note that the Company and/or its subsidiaries may have to withhold access to your personal information in certain situations, for example when we are unable to confirm your identity or where information requested for is of a confidential commercial nature or in the event we receive repeated requests for the same information. Nevertheless, we will notify you of the reasons for not being able to accede to your request.

H. Online Dealings and Use of Cookies

The Company and its subsidiaries collect information about your use of our website and mobile application from Cookies or other methods. Cookies are packets of information stored in your computer which assist your website navigation by customising site information tailored to your needs. Cookies in themselves do not identify the individual user, just the computer used.

You are not obliged to accept cookies. If you are concerned, you can set your computer either to accept all cookies, to notify you when a cookie is issued, or not to receive cookies at any time. However, rejection of cookies may affect your use of the website as we will be unable to personalize aspects of your use of the website.

I. Third-Party Links and Direct and Indirect Marketing

In an attempt to provide increased value to our users, the Company and/or its subsidiaries may use your personal information to provide you with information about our and third party services and/or products, which may or may not be of interest to or benefit you.

In certain instances, we may disclose your personal information to our preferred merchants and strategic partners. However, please note that we will only disclose your personal information to our merchants and strategic partners where your prior consent has been obtained and subject at all times to any laws (including regulations, guidelines and/or obligations) applicable to the Company and its subsidiaries.
We take reasonable steps to ensure that our agreements with our merchants and/or strategic partners include appropriate privacy and confidentiality obligations.

If you do not wish your personal information to be utilised for the purposes of marketing or should you change your mind in relation to your previous decision, please contact us via e-mail at the address detailed at the end of this Privacy Notice. Your latest written instructions to us will prevail.

Please be informed that this Privacy Notice applies solely to our website/mobile application and/or the our subsidiary’s website/mobile application and does not apply to any third party websites you may access from our websites. To determine how they deal with your Personal Information, you should ensure that you read their respective privacy policies.

J. Notification of Changes

If we decide to change our privacy policy, we will post those changes on its website so the users are always aware of the information we collect, how we use it, and under what circumstances, if any, we disclose it. If, at any point, we decide to use personally identifiable information in a manner different from that stated at the time it was collected, we will notify users by way of an email. Users will have a choice as to whether or not we use their information in this different manner. We will use information in accordance with the privacy policy under which the information was collected.

Please check our website https://www.ecobrown.com/miles-with-ecobrowns/ on an ongoing basis for information on our most up-to-date practices

K. Contact Information

If you wish to access or correct your personal information, or limit our processing of your personal information, or if you have questions or concerns related to this Privacy Statement, you may contact us by email at info@malaysiarice.com or by writing to us at:

Attn: Privacy Officer

ecoBrown’s

Serba Wangi Sdn. Bhd.
No. 450, 1st Floor
Jalan Raja,
05000 Alor Setar,
Kedah Darul Aman, Malaysia

Tel No.: 04-7355620