PERSONAL DATA PROTECTION ACT (PDPA)
What Kind Of Personal Information We Collect And How We Collect It
In order to enable us to deal with your inquiries, open and operate an account/facility for you and/or to generally provide you with our products and services, we may need to and/or may be required to process personal information and financial information about you, including but not limited to :
We may obtain this information from yourself and from a variety of sources, including but not limited to:
How We Use Your Personal Information
Other than as stated above, we may use your personal information for one or more of the following purposes:
How We Use Your Personal Information
Other than as stated above, we may use your personal information for one or more of the following purposes:
Disclosure Of Your Personal Information
As a part of providing you with our products and services and the management and/or operation of the same, we may be required or need to disclose information about you and/or your accounts and/or facilities with us(as well as with other entities within the CIMB Group whether in or outside Malaysia) to the following third parties:
subject at all times to any laws (including regulations, guidelines and/or obligations) applicable to the CIMB Group (whether in or outside Malaysia).The afore-mentioned third parties may in some instances be located outside of Malaysia.
Additionally, the individual entities within the CIMB Group, our merchants and strategic partners may contact you about products, services and offers, which we believe may be of interest to you or benefit you financially. However, please note that we will only disclose your personal information (which will not include information relating to your affairs or accounts) to our merchants and strategic partners where your express prior consent has been obtained and subject at all times to any laws (including regulations, guidelines and/or obligations) applicable to the CIMB Group (whether in or outside Malaysia).
You may tell us at any time if you do not wish to receive marketing communications from us, from individual entities within the CIMB Group and/or from our merchants and strategic partners by notifying us at the address/telephone number/e-mail address given at the end of this Privacy Notice. Your latest written instructions to us will prevail. Please take note that certain communications such as statements of account and our websites contain standard information regarding our other products and services that cannot be removed without affecting the delivery/provision of our services and/or products, the operation of your account(s) and/or facility(ies) with us, and/or additional costs to you.
We will otherwise treat your personal information as private and confidential and will not disclose your information to anyone outside the CIMB Group except:
Security Of Your Personal Information
Information is our asset and therefore CIMB Group places great importance on ensuring the security of your personal information. We regularly review and implement up-to-date technical and organisational security measures when processing your personal information.
Employees of CIMB Group are trained to handle the personal information securely and with utmost respect, failing which they may be subject to disciplinary action.
Retention Of Your Personal Information
CIMB Group will retain your personal information in compliance with this Privacy Notice and/or the terms and conditions of your agreement(s) with CIMB Group entities for the duration of your relationship with us, for such period as may be necessary to protect the interests of CIMB Group and/or its customers as may be deemed necessary, where otherwise required by the law and/or where required by CIMB Group’s relevant policies.
What If Personal Information Provided By You Is Incomplete?
Where indicated (for example in application forms or account opening forms), it is obligatory to provide your personal information to us to enable us to process your application for our products or services. Should you decline to provide such obligatory personal information, we may not be able to process your application/request or provide you with our products or services.
Your Rights To Access And Correct Your Personal Information
We can assist you to access and correct your personal information held by us.
Where you wish to have access to your personal information in CIMB Group’s possession, or where you are of the opinion that such personal information held by us is inaccurate, incomplete, misleading or not up-to-date, you may make a request to us via our Data Access Request Form or Data Correction Request Form respectively. These forms are available at our branches.
We will use reasonable efforts to comply with your request to access or correct your personal information within 21 days of receiving your duly completed Data Access Request Form/Data Correction Request Form and the relevant processing fee (if any).
Please note that CIMB Group may have to withhold access to your personal information in certain situations, for example when we are unable to confirm your identity or where information requested for is of a confidential commercial nature or in the event we receive repeated requests for the same information. Nevertheless, we will notify you of the reasons for not being able to accede to your request.
Please also note that CIMB Group may use its discretion in allowing the corrections requested and/or may require further documentary evidence of the new information to avoid fraud and inaccuracy.
You can also assist us to keep your personal information (such as your current mailing address) up to date, as it will enable us to serve you better.
Exercising Choices Over The Disclosure, Retention And Use Of Your Personal Information
Subject always to our contractual rights and obligations under relevant laws and regulations, you may exercise your choice in respect of the disclosure, retention and use of your personal information. Should you wish to do so, kindly contact us at the address/telephone number/e-mail address given at the end of this Privacy Notice.
Revisions To Privacy Notice
This Privacy Notice may be revised from time to time. Notice of any such revision will be given on CIMB’s website and/or by such other means of communication deemed suitable by CIMB Group.
Contacting CIMB Group About Your Privacy And How We Handle Your Personal Information
Should you have any query in relation to this Privacy Notice or how we handle your personal information, kindly contact Head of Customer Resolution Unit at the following contact points:
Telephone : +603 62047788
Fax : 03-2691 3248
E-Mail : cru@cimb.com
Address : Customer Resolution Unit , CIMB Bank Berhad, Level 19, Menara Bumiputers-Commerce, No. 11 Jalan Raja Laut, 50350 Kuala Lumpur.