This Privacy Notice is issued to comply with the requirements under the Personal Data Protection Act 2010 (“PDPA”). This notice explains how Yayasan Peneraju Pendidikan Bumiputera (“Yayasan Peneraju”) collects and processes your personal data in accordance with the PDPA. Please note that Yayasan Peneraju may amend this notice at any time without prior notice.

1. PERSONAL DATA

   To enable Yayasan Peneraju to process your application, we may be required to collect, record, hold, use, disclose and store your personal and financial information, including but not limited to:

   1. (a) name;
   2. (b) telephone number;
   3. (c) address;
   4. (d) email address;
   5. (e) identification card;
   6. (f) bank account information;
   7. (g) academic results;
   8. (h) all other personal data requested in the application forms;
   9. (i) any other personal data that may be collected from you by Yayasan Peneraju in the future.

   (collectively referred to as “Personal Data”).

2. OBLIGATION TO PROVIDE PERSONAL DATA

   You are responsible for providing accurate Personal Data to Yayasan Peneraju to ensure the effectiveness of the services provided. Failure to do so may result in the processing of your application being discontinued or the termination of any engagement with you.

3. SOURCES OF PERSONAL DATA

   Your Personal Data may be collected from various sources, including but not limited to:

   1. (a) information provided in the application forms;
   2. (b) your verbal and written communications with Yayasan Peneraju;
   3. (c) third parties including our Approved Learning and Training Institutions, employers and/or guarantors; or
   4. (d) other sources to which you have given consent for the disclosure of your information.
4. PURPOSE OF PROCESSING PERSONAL DATA

   Your Personal Data may be processed and/or used for purposes including but not limited to:

   1. (a) communicating with you;
   2. (b) administering and evaluating your application for our financing schemes;
   3. (c) providing services to you;
   4. (d) processing payments to you;
   5. (e) administrative purposes;
   6. (f) security and fraud prevention;
   7. (g) internal record keeping;
   8. (h) statistical analysis;
   9. (i) governance of Yayasan Peneraju;
   10. (j) protecting or enforcing Yayasan Peneraju’s rights to recover any sums due;
   11. (k) compliance with applicable laws, regulations and regulatory authorities;
   12. (l) programme-related functions and operations; and
   13. (m) promotional use in various formats including media (traditional and digital), presentation decks, publications, collaterals and others.
5. SECURITY OF PERSONAL DATA
   1. 5.1. Yayasan Peneraju takes reasonable precautions to safeguard the confidentiality and security of all Personal Data, including measures to protect against loss, alteration, misuse or inadvertent or unlawful disclosure
   2. 5.2 While Yayasan Peneraju endeavours to protect your Personal Data, no system is fully secure against all threats. Access to Personal Data is restricted to authorised personnel only, who are required to maintain its confidentiality.
6. RIGHT TO REQUEST ACCESS & INQUIRIES
   1. 6.1 You may at any time request access to, or request correction or amendment of your Personal Data, or request to limit the processing of such data, subject to applicable legal exemptions and restrictions.
   2. 6.2 You may also contact Yayasan Peneraju for any inquiries or complaints regarding your Personal Data. Such requests may be submitted to:
      1.    Yayasan Peneraju Pendidikan Bumiputera
            Level 15-1, Mercu UEM
            Jalan Stesen Sentral 5
            KL Sentral
            50450 Kuala Lumpur
   3. 6.3 You may request data portability to another data controller, subject to technical feasibility and data format compatibility, by providing written electronic notice to Yayasan Peneraju.
   4. 6.4 Notwithstanding Clauses 6.1 and 6.2, Yayasan Peneraju may refuse your request to access or correct your Personal Data to the extent permitted by law.
7. DISCLOSURE OF PERSONAL DATA
   1. 7.1. Your Personal Data will be treated as confidential. However, Yayasan Peneraju may engage third-party organisations, service providers or individuals to perform certain services on its behalf. You hereby consent to Yayasan Peneraju disclosing or transferring your Personal Data to such third parties, within or outside Malaysia, including but not limited to:
      1. (a) programme partners;
      2. (b) strategic partners;
      3. (c) fund contributors (pledgers);
      4. (d) banks and financial institutions;
      5. (e) Approved Learning and Training Institutions (ALTIs);
      6. (f) storage facility providers;
      7. (g) legal and/or auditing firms representing Yayasan Peneraju; or
      8. (h) any other parties deemed necessary by Yayasan Peneraju.
   2. 7.2 Yayasan Peneraju may also disclose Personal Data to the reporting ministry, statutory bodies, regulatory authorities or other government agencies whenever required to do so under applicable laws.
8. ACKNOWLEDGEMENT AND CONSENT
   1. 8.1. By providing your Personal Data to Yayasan Peneraju, you acknowledge and accept the statements in this notice and consent to the processing of your Personal Data as described herein.
   2. 8.2 If you provide Personal Data belonging to your family members, spouse, dependents and/or other individuals, you confirm that you have explained to them that their Personal Data will be provided to and processed by Yayasan Peneraju, and where required by law, you represent and warrant that you have obtained their consent to such processing (including any disclosure and transfer).
   3. 8.3 For minors or individuals who are not legally competent to give consent, you confirm that you are the parent or legal guardian and that you consent on their behalf to the processing (including disclosure and transfer) of their Personal Data in accordance with this Privacy Notice.