MBf Leasing Sdn Bhd

PRIVACY POLICY STATEMENT
1. Introduction MBf Factors Sdn Bhd, MBf Leasing Sdn Bhd and MIFC Credit & Leasing Sdn Bhd (hereafter “MBfco”) are individually and collectively committed to protecting the personal data of our customers. We are bound by the Personal Data Protection Act 2010 (“PDPA”) and the Data Protection Principles (“DPP”). We will only collect, use or disclose personal data in accordance with the PDPA, the DPP and this Privacy Policy. We may amend this Privacy Policy at any time and for any reason. The updated version will be made available on our website homepage at www.mbfco.com.my. You should check the Privacy Policy periodically for changes. In this Privacy Policy, “personal data” means any data: a. relating directly or indirectly to a living individual; b. from which it is practical for the identity of the individual to be directly or indirectly ascertained; and c. in a form in which access to or processing of the data is practicable. 2. When do we collect personal data? We collect personal data in a number of ways. The most common circumstances in which we collect personal data are when your personal data is used for processing and assessing of applications for any financial products and daily operation of the related services; any alterations, variations, cancellation or renewal of any financial and related services. 3. What personal data do we collect? The types of personal data we collect from you will depend on the type of products and services you seek. The information collected will, inter alia, include: • your name, address, telephone number, email address, etc.; • your age, gender, date of birth, citizenship, marital status, and particulars of identity documents such as identity card or passport, where applicable; • your education history, qualifications and employment details; • names and particulars of the authorised officers, directors, shareholders, business registration, country of incorporation and financial or commercial dealings of the company, where applicable; • information about your financial position including sources of income, expenses, savings, assets, liabilities, investment portfolio and borrowing history; • latest audited accounts/management financial statements and reports; • credit reports from credit reporting agencies; • information about your intended use of our products and services. • Information about your organisation, products, services and staff. 4. What do we use personal data for? The purposes for which your personal data will be used will depend on the circumstances in which that information is collected. We will inform you of the purposes for which we intend to use your personal data at or before the time we collect your personal data. Generally, we may use your personal data for: a. the purpose for which you provided it to us, such as an application for the provision of financial facilities and related services; b. purposes which are directly related to the purpose for which you provided it to us; and c. any other purposes to which you have consented. 5. Do we use personal data for direct marketing? We do use some of the personal data we collect to send marketing material and specific offers to our customers, but only in accordance with the rules about direct marketing contained in the PDPA. If we intend to use your personal data for direct marketing purposes or provide your personal data to third parties for direct marketing purposes, we will inform you of that at or before the time we collect your personal data. We will provide you with an opportunity to opt-out of that direct marketing at that time if you so request. If you do not opt-out of direct marketing at that time, but you later decide that you no longer wish to receive direct marketing, you may ask us to cease any further direct marketing by writing to us at MBfco, Lot 6.03, 6th Floor, Plaza Prima, 4 ½ Miles, Jalan Kelang Lama, Kuala Lumpur 58200 (Tel: +603-7981 3338). 6. To whom do we disclose personal data? The third parties to whom your personal data will be disclosed will depend the purposes for which that personal data is used. Generally, we may disclose your personal data as necessary for: a. the purpose for which you provided it to us; b. purposes which are directly related to the purpose for which you provided it to us; and c. any other purposes to which you have consented. In exceptional circumstances, we may disclose your personal data where such disclosure is required or permitted by law, court orders, for compliance with legal obligation, to protect your interests, for the administration of justice or pursuant to guidelines issued by regulatory or other relevant authorities. 7. How is personal data secured? We will take all reasonable practicable steps to ensure that your personal data is protected against unauthorised access, processing, erasure, loss or use. Our security measures include: Before sending documents containing personal data to a customer, it is important that the address of the customer is accurate and up-to-date, otherwise the data is put to the risk of accidental disclosure to unrelated third parties. We formulate policies and practices to specify the period of retention of customers’ personal data. Documents containing personal data such as loan application forms should be securely kept against access by unauthorised parties. Personal data stored electronically in computers should be protected with adequate IT security measures and access control. 8. Accessing and correcting your personal data. You may contact us to seek access to or seek to correct personal data which we hold about you. There are certain exemptions under the PDPA which may apply to personal data access and correction requests. We may require that you, the person requesting access or correction, provide suitable identification and we may charge a reasonable administration fee for complying with a data access request. 9. Erasure of personal data. We will take all reasonable practicable steps to erase personal data which we hold about you where the personal data is no longer required for the purpose for which it was collected and used. There are certain exemptions under the PDPA which may apply to erasure of personal data, such that if any erasure is prohibited under any law or it is in the public interest for the data not to be erased. 10. Data transfers. We may transfer personal data which we hold about you to a place outside Malaysia in specified circumstances as set out in the PDPA. 11. Your consent and rights. By using our service or making an application for our products or services, you consent to the collection and use of your information and other activities as outlined in this Policy Statement. 12. Queries and comments. We welcome your queries or comments about our Privacy Policy and personal data collection and handling practices. Please contact us at MBfco, Lot 6.03, 6th Floor, Plaza Prima, 4 ½ Miles, Jalan Kelang Lama, Kuala Lumpur 58200 (Tel: +603-7981 3338). PERSONAL INFORMATION COLLECTION STATEMENT The information you provide us through our website or other means is collected to enable us to carry on leasing, factoring and other financial services business and may be used for the purpose of any financial related product or service or any alterations, variations, cancellation or renewal of such product or service; and may be transferred to: 1) any related company or any other company carrying on financial services business or related business or to an intermediary providing financial services related business relevant to financial services business for any of the above or related purposes; 2) any association, similar organisation of financial services companies (“Association”) that exists or is formed from time to time for any of the above or related purposes or to enable the Association to carry out its regulatory functions or such other functions that may be assigned to the Association from time to time and are reasonably required in the interests of the financial services industry or any members of the Association, and; 3) any members of the Association by the Association for any of the above or related purposes. Moreover, we are hereby authorised to obtain access to and/or verify any of your data with the information collected by the Association from the financial services industry. You have the right to obtain access to and to request correction of any personal information concerning yourself held by us. Requests for such access can be made in writing to us at MBfco, Lot 6.03, 6th Floor, Plaza Prima, 4 ½ Miles, Jalan Kelang Lama, Kuala Lumpur 58200 (Tel: +603-7981 3338).

1. Introduction
MBf Factors Sdn Bhd, MBf Leasing Sdn Bhd and MIFC Credit & Leasing Sdn Bhd
(hereafter “MBfco”) are individually and collectively committed to protecting the personal
data of our customers. We are bound by the Personal Data Protection Act 2010 (“PDPA”)
and the Data Protection Principles (“DPP”).

We will only collect, use or disclose personal data in accordance with the PDPA, the DPP
and this Privacy Policy. We may amend this Privacy Policy at any time and for any reason.
The updated version will be made available on our website homepage at www.mbfco.com.my.
You should check the Privacy Policy periodically for changes. In this Privacy Policy,
“personal data” means any data:

a. relating directly or indirectly to a living individual;
b. from which it is practical for the identity of the individual to be directly or
indirectly ascertained; and
c. in a form in which access to or processing of the data is practicable.

2. When do we collect personal data?
We collect personal data in a number of ways. The most common circumstances in which
we collect personal data are when your personal data is used for processing and assessing
of applications for any financial products and daily operation of the related services;
any alterations, variations, cancellation or renewal of any financial and related services.

3. What personal data do we collect?
The types of personal data we collect from you will depend on the type of products and
services you seek. The information collected will, inter alia, include:

• your name, address, telephone number, email address, etc.;
• your age, gender, date of birth, citizenship, marital status, and particulars of
identity documents such as identity card or passport, where applicable;
• your education history, qualifications and employment details;
• names and particulars of the authorised officers, directors, shareholders,
business registration, country of incorporation
and financial or commercial dealings of the company, where applicable;
• information about your financial position including sources of income,
expenses, savings, assets, liabilities,
investment portfolio and borrowing history;
• latest audited accounts/management financial statements and reports;
• credit reports from credit reporting agencies;
• information about your intended use of our products and services.
• Information about your organisation, products, services and staff.

4. What do we use personal data for?
The purposes for which your personal data will be used will depend on the circumstances
in which that information is collected. We will inform you of the purposes for which we intend
to use your personal data at or before the time we collect your personal data.
Generally, we may use your personal data for:

a. the purpose for which you provided it to us, such as an application for the
provision of financial facilities and related services;
b. purposes which are directly related to the purpose for which you provided it to us; and
c. any other purposes to which you have consented.

5. Do we use personal data for direct marketing?
We do use some of the personal data we collect to send marketing material and specific offers
to our customers, but only in accordance with the rules about direct marketing contained in the
PDPA.

If we intend to use your personal data for direct marketing purposes or provide your
personal data to third parties for direct marketing purposes, we will inform you of that
at or before the time we collect your personal data. We will provide you with an opportunity
to opt-out of that direct marketing at that time if you so request. If you do not opt-out of
direct marketing at that time, but you later decide that you no longer wish to receive
direct marketing, you may ask us to cease any further direct marketing by writing to us at
MBfco,
Lot 6.03, 6th Floor, Plaza Prima, 4 ½ Miles, Jalan Kelang Lama, Kuala Lumpur 58200
(Tel: +603-7981 3338).

6. To whom do we disclose personal data?
The third parties to whom your personal data will be disclosed will depend the purposes for
which that personal data is used. Generally, we may disclose your personal data as necessary
for:

a. the purpose for which you provided it to us;
b. purposes which are directly related to the purpose for which you provided it to us; and
c. any other purposes to which you have consented.

In exceptional circumstances, we may disclose your personal data where such disclosure is
required or permitted by law, court orders, for compliance with legal obligation, to protect
your interests, for the administration of justice or pursuant to guidelines issued by
regulatory or other relevant authorities.

7. How is personal data secured?
We will take all reasonable practicable steps to ensure that your personal data is protected
against unauthorised access, processing, erasure, loss or use. Our security measures include:

Before sending documents containing personal data to a customer, it is important that the
address of the customer is accurate and up-to-date, otherwise the data is put to the risk of
accidental disclosure to unrelated third parties. We formulate policies and practices to
specify the period of retention of customers’ personal data. Documents containing personal
data such as loan application forms should be securely kept against access by unauthorised
parties. Personal data stored electronically in computers should be protected with adequate
IT security measures and access control.

8. Accessing and correcting your personal data.
You may contact us to seek access to or seek to correct personal data which we hold about you.
There are certain exemptions under the PDPA which may apply to personal data access and
correction requests. We may require that you, the person requesting access or correction,
provide suitable identification and we may charge a reasonable administration fee for complying
with a data access request.

9. Erasure of personal data.
We will take all reasonable practicable steps to erase personal data which we hold about you
where the personal data is no longer required for the purpose for which it was collected and
used. There are certain exemptions under the PDPA which may apply to erasure of
personal data, such that if any erasure is prohibited under any law or it is in the
public interest for the data not to be erased.

10. Data transfers.
We may transfer personal data which we hold about you to a place outside Malaysia in
specified circumstances as set out in the PDPA.

11. Your consent and rights.
By using our service or making an application for our products or services, you consent to
the collection and use of your information and other activities as outlined in this
Policy Statement.

12. Queries and comments.
We welcome your queries or comments about our Privacy Policy and personal data collection
and handling practices.
Please contact us at
MBfco, Lot 6.03, 6th Floor, Plaza Prima, 4 ½ Miles, Jalan Kelang Lama, Kuala Lumpur 58200
(Tel: +603-7981 3338).

PERSONAL INFORMATION COLLECTION STATEMENT

The information you provide us through our website or other means is collected to enable us
to carry on leasing, factoring and other financial services business and may be used for the
purpose of any financial related product or service or any alterations, variations,
cancellation or renewal of such product or service; and may be transferred to:

1) any related company or any other company carrying on financial services business
or related business or to an intermediary providing financial services related business
relevant to financial services business for any of the above or related purposes;

2) any association, similar organisation of financial services companies (“Association”)
that exists or is formed from time to time for any of the above or related purposes or to
enable the Association to carry out its regulatory functions or such other functions that
may be assigned to the Association from time to time and are reasonably required in the
interests of the financial services industry or any members of the Association, and;

3) any members of the Association by the Association for any of the above or
related purposes.

Moreover, we are hereby authorised to obtain access to and/or verify any of your data with
the information collected by the Association from the financial services industry. You have
the right to obtain access to and to request correction of any personal information concerning
yourself held by us. Requests for such access can be made in writing to us at
MBfco, Lot 6.03, 6th Floor, Plaza Prima, 4 ½ Miles, Jalan Kelang Lama, Kuala Lumpur 58200
(Tel: +603-7981 3338).