This Personal Data Protection Notice (“Notice”) describes how and why OG Eduworld Sdn. Bhd. [201901043812 (1353142-T)], its parent companies, affiliates, all present, and future subsidiaries, its employees, directors, officers, licensees, licensors, shareholders, attorneys, and agents (collectively as “OG”) collect, use, process, disclose, and/or transfers personal information and comply with the requirements of any applicable privacy law, including but not limited the Personal Data Protection Act 2010 (“the Act”). For the purpose of this document, the term “Personal Data” shall have the same meaning as prescribed in the Act and shall also include opinions, analysis, and/or records containing Personal Data.

This Notice shall apply to your Personal Data in our possession or under our control, as well as in the possession of organisations which we have engaged to collect, use, access, store, process, disclose, and/or transfer Personal Data for our purposes.

1. (a)OG is referred to as “we”, “us”, “our”, or “ours”;

2. (b)Any person using and/or accessing OG’s platform, website, content and/or services is referred to as “the User”, “you”, or “yours”;

3. (c)“Platform” means the online site, platform, and application (which is accessible through online mobile application stores and pages) owned, provided, and operated by OG.

By either providing us with your Personal Data or by continuing to access and use our Platform or by interacting with us, you acknowledge that you have read, understood, agreed, and consented to the collection, access, use, processing, disclosure, storage, and/or transfer of your Personal Data by us and all persons involved in the provision of our services as described in this Notice.

We shall have the right to modify, update, or amend the terms of this Notice at any time by placing the updated Notice on our Platform. Any revision or changes to the Notice will continue to apply to all Personal Data that has previously been shared and collected by us. By continuing to communicate with us or by continuing to use our services following the modification, updates, or amendments to this Notice, it shall signify your acceptance of such modifications, updates, or amendments.

Users have to be at least 18 years of age to use our services as that is the age of majority in Malaysia. Parents and legal guardians are expected to exercise due care on minors under their care, and shall not allow them to use our service. We will not be liable for any privacy breach resulting in damage arising in contract‚ tort, or otherwise in such situation.

Personal Data which may be collected by us from time to time during your usage of our services includes but is not limited to: -

1. (a)Name;

2. (b)Contact Information, including email address;

3. (c)MyKad / ID No.;

4. (d)Passport No.;

5. (e)Phone No.;

6. (f)Bank Account No.;

7. (g)Vehicle Registration Plate;

8. (h)Address;

9. (i)Company / Entity;

10. (j)Website / Email Address; and

11. (k)any information which may be used to identify you, including sensitive personal data such as data relating to credit data.

We will collect your Personal Data when you provide them to us during your usage of our services from time to time.

If we require any of your Personal Data for the provision of our services to you, we will clearly indicate to you whether such Personal Data requested is mandatory. IF you choose not to provide us with any required mandatory Personal Data or withdraw your consent for us to process the same, we shall be entitled to cease provision of the services without us incurring any liability to you (notwithstanding any agreement between you and us).

In addition to the Personal Data you provide to us directly, we may also collect your Personal Data from a variety of sources including without limitation, such as: -

1. (a)When you visit OG’s Platform as a User;

2. (b)From publicly accessible directories;

3. (c)From social media platform pages, if you follow, like or are a fan of such pages;

4. (d)When you interact and communicate with us at events, activities or through social media platforms;

5. (e)From our server logs when you log onto our Platform, such as details of your internet protocol address;

6. (f)From third-party service credit providers, for example private employment or debt collection agencies or entities providing credit background verification services;

7. (g)From sources in the financial service industry, for example, any bureaus or agencies under Bank Negara Malaysia, Securities Commission or other regulatory authorities, the Association of Islamic Banks Malaysia, or any registered credit reporting agencies or other financial institutions.

We may use and process your Personal Data for purposes relating to the services you have requested and for our business activities, which shall include without limitation: -

1. (a)to improve our products and services, including sending feedback request emails, testing and troubleshooting new features;

2. (b)to send you periodic promotional emails (using the email address you have provided) about new products, special offers, or other information about us, which you may find interesting;

3. (c)to contact you for marketing research purposes occasionally through email. We may use the information to customise the Platform according to your interests;

4. (d)to respond to you when you contact us;

5. (e)to obtain products and services from our suppliers;

6. (f)to respond to enquiries from existing or prospective customers seeking information about our services;

7. (g)to carry out processes associated with the services we provide including risk check, identity verification, electronic fund transfers, and account monitoring;

8. (h)to select and personalise the ads, offers, and other sponsored content that is displayed on the platform;

9. (i)to measure the effectiveness and distribution of ads and understand the way people interact with the ads and the Platform;

10. (j)to verify accounts and activities, combat harmful behaviour, detect and prevent adverse experiences, maintain the integrity of the Product. For example, to investigate suspicious activity or violations of our terms or policies;

11. (k)to conduct and support research and innovation on general social welfare, technological advances, public interest, and well-being;

12. (l)to process any transaction, enquiry, or any other communication from you to us;

13. (m)to verify your creditworthiness and background;

14. (n)to conduct a survey to improve our products/services and to develop new products/services;

15. (o)to investigate or report any suspected crime or fraud;

16. (p)to comply with any requirement of law, order of any court, or tribunal or any direction from the Government or any statutory authority;

17. (q)to enforce our legal or contractual rights including to recover any debt owing by you to us;

18. (r)to provide you with information on marketing campaigns that we or our business partners believe would be of interest to you;

19. and you agree and consent for us to use and process your Personal Data in the manner as identified in this Notice.

Other purposes

We may also use and process your data for other purposes such as: -

1. (a)to notify and invite you to events or activities organised by us, our partners, sponsors, or advertisers;

2. (b)to process your registration to participate in or attend an event or activity and to communicate with you regarding your attendance at the event or activity;

3. (c)to share your name and contact number with our partners, advertisers, event companies, or sponsors who may communicate with you for the purpose of marketing.

If you do not consent to us processing your Personal Data for the purposes listed in Section 5.2 above, please notify us using the contact details stated in Section 11.1 below.

We may aggregate the information that we have collected and use it for the purpose outside the scope of this Notice. However, we will ensure that any aggregated data used for those purposes will have all personally identifiable information removed so that such aggregated information cannot be used to identify you.

We may disclose your Personal Data to our related corporations, business partners, service providers, our financial and professional advisors, financial institutions, governmental departments, and/or agencies, statutory bodies, and to any relevant third parties.

We may disclose your Personal Data to any member of our group, i.e., our subsidiaries, our ultimate holding company, and its subsidiaries, in order to provide our products and services to you.

As our information technology storage facilities and servers could be located in other jurisdictions, your Personal Data may be transferred to, stored, used, and processed in a jurisdiction other than Malaysia.

We may engage other companies, service providers, or individuals to perform functions on our behalf and may consequently provide access or disclose your Personal Data to third parties, such as those listed below:

1. (a)information technology (IT) service providers;

2. (b)data entry service providers;

3. (c)storage facility providers;

4. (d)banks and financial institutions, insurance providers, credit card companies, securities and investment services providers, trustees, custodians, industry/ financial related associations;

5. (e)Professional advisors and external auditors including legal advisors, financial advisors and consultants;

6. (f)electronic fund transfer facilitators;

7. (g)third parties whom we are obligated to make disclosure under requirements of any law by order of court or any tribunal or as required by the Government or any statutory authority for example Bank Negara Malaysia Securities Commission and Bursa Malaysia. This may also include third-party entities appointed by such statutory authorities;

8. (h)third parties carefully selected to provide you with information about products and services that may be of interest to you.

Our Platform may contain links to other websites which are not maintained by us. When visiting these third-party websites, you should read their privacy policies which will apply to your use of their websites.

We will take necessary and reasonable measures to protect your Personal Data from any unauthorized access by ensuring your Personal Data is kept as required by the Act and its subsidiary rules and regulations.

We will retain your Personal Data for the period as long as you remain our customer or for the fulfilment of the purposes listed under Clause 5, unless a longer period is required or allowed by law.

You are free to access and view your provided Personal Data on the Platform at any time. In the event if you should discover that your Personal Data is inaccurate, incomplete, misleading, or not up-to-date, you may correct your Personal Data at any time vide your account’s settings on the Platform.

In the event if you are unable to access to or correct any of your provided Personal Data, you may at any time submit to us a request vide the following contact details to gain access, correct, or update your Personal Data or to limit the processing of your Personal Data or seek further information in respect to your Personal Data.

You may proceed to delete your OG EduWorld account’s data by sending an email request to this admin@oegroup.com.my . After the deletion process, all the information you submitted when registering the account, and activities data in the OG EduWorld app will be permanently removed.