When you request information or sign up for our products and services, you will be required to provide Etiqa with your personal data. In doing so, you consent to its use by Etiqa in accordance with this Privacy Notice.

We collect your sensitive personal data (including data relating to your physical or mental health, the commission or alleged commission of offences etc.) when you apply for certain products such as health or life insurance / family Takaful products, which require you to disclose such sensitive personal data to us. We will only use your sensitive personal data to provide the service(s) you signed up for. If we collect, use, maintain or disclose your sensitive personal data, we will ask for your explicit consent.

You have the choice, at any time, not to provide your personal data/sensitive personal data or to revoke your consent to Etiqa processing of your personal data/sensitive personal data. However, this may result in Etiqa being unable to provide you with the offered services.

Personal data refers to any information that relates directly or indirectly to an individual, who is identified or identifiable from that information or from that and other information in the possession of Etiqa, including any sensitive personal data and expression of opinion, video recordings made through close circuit security surveillance cameras placed for security reasons and audio recordings about the individual.

The types of personal data / sensitive personal data we collect may include, but is not limited to your name, address, your identity card or passport number, other contact details (including family/employee information), age, occupation, place of birth, marital status, medical history, health status, and financial reference and information such as your income or income tax particulars.

The personal data we collect can be either obligatory or voluntary. Obligatory personal data are those that we require in order to provide you with our products and services. If you do not provide us with obligatory personal data, we would not be able to provide you with our products and services. Voluntary personal data are those that are not mandatory in order for us to provide you with our products and services. If you do not provide us with voluntary personal data, you can still sign up for our products and services. Obligatory and voluntary personal data differ for each products and services and will be indicated in the application forms.

If you are supplying personal data of other parties such as your family members, legal guardians, nominees, directors, shareholders or officers, please do ensure that you have obtained their consent and bring this Privacy Notice to their attention.

• When you sign up for or use one of the many products and services we provide or when you access or use any Etiqa websites.
• When we obtain your medical history and health status from your doctor.
• If you are a non-policyholder insured / non-certificate holder covered, we may obtain your information from the policyholder/certificate holder (e.g. your employer).
• When you contact Etiqa through various methods such as application forms, emails and letters, telephone calls and conversations you have with our staff in a branch or through our authorized agent. If you contact us or we contact you using telephone, we may monitor or record the phone call for quality assurance, training and security purposes.
• From your transactions (e.g. payment history, account balances, etc.).
• We may also obtain your personal data when you participate in customer surveys or when you sign up for any of our competitions or promotions.
• When we obtain any data and information from authorised third parties (e.g. regulatory and enforcement agencies, employers, joint policyholders / certificate holders, legal representatives, nominees, assignees).
• From video recordings from close circuit security surveillance cameras and audio recordings.
• From publicly available sources.

IP Address
An IP address is a number that is automatically assigned to your computer when you signed up with an Internet Service Provider. When you visit our website, your IP address is automatically logged in our server. We use your IP address to help diagnose problems with our server, and to administer our website. From your IP address, we may identify the general geographic area from which you are accessing our website. Generally we do not link your IP address to anything that can enable us to identify you unless it is required by law and regulation.

Information on Cookies
A cookie is an element of data that a website can send to your browser, which may then store it on your system. We use cookies in some of our pages to store visitors’ preferences and record session information. The information that we collect is then used to ensure a more personalised service level for our users. You can adjust settings on your browser so that you will be notified when you receive a cookie. Please refer to your browser documentation to check if cookies have been enabled on your computer or to request not to receive cookies.

• To assess your application for any of our products and services or continue provisioning of the products and/or services (whichever is applicable).
• To administer your insurance policy / Takaful certificate and any claims made against your policy / Takaful certificate.
• To manage and maintain your account with Etiqa.
• To continue performing the contractual obligations entered into between Etiqa and you.
• To respond to your enquiries and complaints and to resolve disputes.
• For internal functions and to support the Maybank group such as evaluating the effectiveness of marketing, market research, statistical analysis and modelling, reporting, audit and risk management and to prevent fraud from time to time.
• To provide you with information on products and/or services of Etiqa and Maybank Group.
• To prevent fraud or detect crime for the purpose of investigation.
• For security reasons in particular personal data collected from close circuit security surveillance cameras.
• For any purpose required by law or regulations.

• Etiqa General Insurance Berhad, Etiqa General Takaful Berhad, Etiqa Life Insurance Berhad, Etiqa Family Takaful Berhad, Etiqa Life International (L) Ltd or Etiqa Offshore Insurance (L) Ltd, as the context may require.
• Other entities within Maybank Group.
• Our authorised agents and service providers with whom we have contractual agreements for some of our functions, services and activities.
• Other insurance / Takaful and distribution parties (e.g. banks, Islamic banks, insurance brokers, Takaful brokers, reinsurance companies, Retakaful companies, as the context may require).
• Industry trade associations such as Life Insurance Association of Malaysia (LIAM), Persatuan Insurans Am Malaysia (PIAM) and Malaysian Takaful Association (MTA).
• Our merchants and strategic partners.
• Any parties authorised by you (from time to time).
• Enforcement regulatory and governmental agencies as permitted or required by law, authorised by any order of court or to meet obligations to regulatory authorities.

The security of your personal data is our priority. Etiqa takes all physical, technical and organisational measures needed to ensure the security and confidentiality of personal data. For the personal data that we disclose to authorized agents or service providers, we will require them to appropriately safeguard the personal data provided to them.

We will only retain your personal data for as long as necessary to fulfill the purpose(s) for which it was collected or to comply with legal, regulatory and internal requirements.

We are committed to ensure that the personal data we hold about you is accurate, complete, not misleading and up-to-date. If there are any changes to your personal data or if you believe that the personal data we have about you is inaccurate, incomplete, misleading or not up-to-date, please contact us so that we may take steps to update your personal data.

You have the right to access your personal data. If you would like to request access to your personal data, please fill in the Access Request Form which is available at all our branches/ Customer Service Centers and send to us via email to PDPA@etiqa.com.my. Please note that depending on the information requested we may have the right to charge a small fee for the processing of any data requested. We may also take steps to verify your identity before fulfilling your request for access to your personal data.