Legal

Privacy Policy and Notice

Effective Date: 25 May 2026

At BumiAuto Sdn. Bhd. ("BumiAuto", "we", "us", or "our"), we value and are committed to protecting your Personal Data.

This Privacy Policy and Notice explains how we collect, use, process, disclose, store, and safeguard your Personal Data when you access or use our website, mobile applications, digital platforms, products, services, or communicate with us through any channel.

By providing your Personal Data to us, you consent to the processing of your Personal Data in accordance with this Privacy Policy and Notice. Such consent shall remain valid unless withdrawn by you in writing.

Please read this Privacy Policy and Notice carefully to understand how your Personal Data will be handled.

1. Collection and Use of Personal Data

"Personal Data" refers to any information relating directly or indirectly to an identifiable individual, including sensitive personal data where applicable under Malaysian law.

During the course of your dealings with us, you may be requested to provide Personal Data necessary for us to provide our services, process transactions, improve customer experience, and comply with legal and regulatory obligations.

2. Sources of Personal Data

We may collect your Personal Data from various sources, including but not limited to:

• Registration forms or account applications submitted by you;
• Forms completed through our website, mobile applications, or digital platforms;
• Documents or information provided by you directly to us;
• Communications through email, WhatsApp, telephone calls, or other channels;
• Third parties connected with the services or products requested by you; and/or
• Publicly available sources where permitted by law.

3. Types of Personal Data Collected

The Personal Data collected may include, but is not limited to, the following:

• Full name;
• NRIC/passport number;
• Gender;
• Date of birth and age;
• Residential and mailing address;
• Telephone number and email address;
• Employment and income details;
• Banking and financial information;
• Vehicle ownership information;
• Insurance information;
• Credit-related information;
• Marital and household information;
• Preferences and interests;
• Location data;
• Social media usernames;
• Photographs, signatures, biometric data, or verification records;
• Health-related information where necessary;
• Any other information relevant to the services or products provided by us.

The list above is not exhaustive and may vary depending on the nature of our business relationship with you.

4. Purpose of Processing Personal Data

We may process your Personal Data for purposes including but not limited to:

4.1 General Purposes

• Verifying your identity;
• Processing applications, registrations, or transactions;
• Providing products and services requested by you;
• Managing customer relationships and support;
• Responding to enquiries, feedback, or complaints;
• Conducting internal audits, analytics, and business improvements;
• Compliance with legal and regulatory requirements;
• Protecting our legal rights and interests;
• Fraud prevention, risk management, and security purposes; and/or
• Any other purposes reasonably related to our business operations.

4.2 Marketing and Communication

Subject to applicable laws, we may also use your Personal Data to:

• Provide information on promotions, campaigns, and special offers;
• Recommend products or services which may interest you;
• Send updates, newsletters, notifications, and event invitations;
• Conduct surveys, market research, and customer profiling; and/or
• Communicate with you via email, telephone, SMS, WhatsApp, push notifications, or other communication channels.

You may opt out of marketing communications at any time by notifying us in writing.

5. Failure to Supply Personal Data

Where indicated as mandatory, failure to provide the required Personal Data may result in our inability to provide you with the requested services, products, or access to certain features.

6. Disclosure of Personal Data

Your Personal Data may be disclosed to or shared with the following parties where necessary:

• Government agencies, regulators, or law enforcement authorities;
• Financial institutions, insurers, or service providers;
• Business partners, affiliates, vendors, and contractors;
• Professional advisers including auditors, lawyers, consultants, and accountants;
• Technology providers and cloud service providers;
• Third-party service providers assisting our business operations; and/or
• Any other party where disclosure is required or permitted by law.

All disclosures shall be subject to appropriate confidentiality and security obligations.

7. Protection of Personal Data

We implement reasonable administrative, technical, and physical safeguards to protect your Personal Data against unauthorized access, misuse, alteration, disclosure, or destruction.

This includes the use of secure systems, encryption technologies, and restricted access controls where appropriate.

8. Retention of Personal Data

Your Personal Data will be retained only for as long as necessary to fulfil the purposes outlined in this Privacy Policy and Notice, or as required by applicable laws and regulations.

We will take reasonable steps to ensure that Personal Data retained is accurate, complete, and up to date.

9. Cookies and Website Data

Our website and digital platforms may use cookies and similar technologies to improve user experience, analyze traffic, and personalize content.

Information collected may include:

• IP address;
• Browser type;
• Device information;
• Website usage behaviour;
• Pages visited and time spent;
• Referral sources; and/or
• Other analytical data.

You may disable cookies through your browser settings, although certain website functions may be affected.

10. Cross-Border Data Transfer

Your Personal Data may be transferred to, stored, or processed outside Malaysia where necessary for business operations, data storage, cloud services, or service delivery purposes.

We will take reasonable steps to ensure that such transfers are protected by appropriate security and confidentiality measures.

11. Your Rights

Subject to applicable laws, you have the right to:

• Request access to your Personal Data;
• Request correction of inaccurate or incomplete Personal Data;
• Withdraw consent for processing of Personal Data;
• Object to processing for marketing purposes;
• Request restriction of processing; and/or
• Request data portability where technically feasible.

Any requests relating to your Personal Data may be submitted to us using the contact details below.

12. WhatsApp and Digital Communication Channels

Where communication is conducted via WhatsApp or other digital messaging platforms, you acknowledge that such usage is at your own discretion and risk.

While we take reasonable precautions, we shall not be liable for any security breaches, losses, or damages arising from third-party communication platforms.

13. Contact Information

If you have any enquiries, requests, or complaints relating to this Privacy Policy and Notice or your Personal Data, please contact:

Anson Lim
Tel: +60 10-286 2882
A3-3, Block D, Menara Uncang Emas,
Jalan Loke Yew, 53200 Cheras,
Kuala Lumpur