Privacy & Policy

Privacy Policy


Privacy

Our goal is to maintain your trust and confidence when handling personal information about you.


Security of personal information

The security of personal information about you is our priority. We protect this information by maintaining physical, electronic, and procedural safeguards that meet the applicable laws of Malaysia.


Please refer to our Notice which outlines how we intend to deliver all the rights and protections you are entitled to in respect of your personal data.


Notice pursuant to the Malaysian Personal Data Protection Act 2010

Keeping personal data of individuals ("data subjects") secure is a top priority for all of us at Bestinet Sdn Bhd ("Bestinet") in Malaysia. We hope this Notice helps you understand how we handle the personal data about data subjects that we collect.


Bestinet in Malaysia is subject to the Data Protection Principles under the Malaysian Personal Data Protection Act 2010 and this Notice seeks to outline how we intend to deliver all the rights and protections data subjects are entitled to.


Subject at all times to the laws of Malaysia that are applicable to us, we may process your personal data in connection with one or more purposes, as set out in this Notice.


By providing your personal data or other information about yourself to Bestinet or continuing to deal with Bestinet or entering into transaction(s)/relationship with Bestinet, you would be accepting and consenting to the processing of the personal data or other information in accordance with this Notice (including any subsequent changes or variations to this Notice which you can view at Bestinet's website, accessible via https://www.bestinet.com.my).


What is personal data or information?


Personal data or information refers to any information or data in connection with any actual or potential transaction(s)/relationship with us, which relates directly or indirectly to you, who is identified or identifiable from that information or from that and other information in our possession and includes information such as your name, identity card, passport or other identification document(s), telephone numbers(s), mailing address(es), place of birth, age, occupation, marital status, information captured on mobile device camera (including a recording of your image(s)), your current location by virtue of our use of GPS technology (or other similar technology) to determine your current location when you use bestID Attendance, information generated on mobile device when you use the QR code scanning function of bestID Attendance, information (such as your files, documents, photos, comments, messages, and so on) that you store in the cloud using bestID Attendance and any other information relating to you which you may have submitted to us. Personal data or information may include sensitive personal data which relates to information relating to your health, political opinions, religious beliefs or other beliefs of a similar nature, the commission or alleged commission of any offence or any other information as may be prescribed by the laws of Malaysia.


Security of personal data or information:


The security of personal data about you is our priority. We will, and will use reasonable endeavours to ensure that our affiliates will, implement reasonable and appropriate technical and organizational security measures to protect your personal data that is within our or their custody or control against unauthorized or unlawful processing and accidental destruction or loss.


Categories of personal data we collect and hold:


What kind and nature of personal data we collect and where it comes from may include:

  • personal data we collect on applications for use of bestID Attendance, such as name, identity card number, passport number, address, e-mail address, telephone number, place of birth, age, occupation and marital status
  • your image(s) recorded via mobile device camera when you log in to access and use the services provided under bestID Attendance
  • your current location by virtue of our use of GPS technology (or other similar technology) to determine your current location when you use bestID Attendance
  • information generated on mobile device when you use the QR code scanning function of bestID Attendance
  • information (such as your files, documents, photos, comments, messages, and so on) that you store in the cloud using bestID Attendance
  • any other information relating to you which you may have submitted to us
  • personal data when you lodge a complaint with us

The purposes for collecting your personal data:


Your personal data may be used for the following purposes:-

  • to verify your identity and background
  • to establish a relationship between you and us and/or our affiliates
  • to manage our business and your relationship with us including managing and maintaining your account(s) with us
  • for data processing purposes
  • to evaluate and monitor provision of services
  • to respond to inquiries, requests and complaints from customers and to resolve disputes
  • to understand customers' needs and offering products and services to meet those needs
  • for research and development of products and services for customers' use
  • for enforcement of our rights and obligations of other parties to us and/or our affiliates
  • for assessing, processing and investigating risks and claims
  • to enable a party to evaluate any actual or proposed assignment, participation, sub-participation, and/or novation of our rights and/or obligations
  • to meet legal and regulatory requirements
  • to maintain and protect our offices and server(s)
  • for risk management including prevention, detection and investigation of crime, including fraud
  • for such other purposes as permitted or required by applicable law or with your consent
  • for all other purposes incidental and associated with any of the above.

Disclosure of your personal data:


Your personal data will be kept confidential, but subject at all times to the laws of Malaysia applicable to us, such personal data may be provided to the following categories of parties for the purposes set out above:-

  • to any of our affiliates in and outside Malaysia;
  • to any agent, contractor, vendor, service provider, professional advisers (such as lawyers and financial advisers), auditors, and other parties which we or our affiliates may use in connection with our or our affiliates businesses;
  • any actual or proposed assignee, participant, sub-participant or transferee of any of our rights or obligations;
  • our strategic alliance partners for marketing and promotional purposes but this will be subject to your express consent;
  • any liquidator, receiver, official assignee or any person appointed under applicable law or court order relating to bankruptcy, liquidation, winding up in respect of any individual or company;
  • to such parties as we or our affiliates may be required by legal process or pursuant to any other foreign or domestic legal, regulatory, stock exchange, clearing house or self-regulatory body obligation or request, or agreement entered into by any of them and any governmental authority, domestic or foreign, or between or amongst any two or more domestic or foreign governmental authorities or other authorities, including disclosure to courts, tribunals, legal, regulatory, tax and government authorities, stock exchanges, clearing houses and self regulatory bodies;
  • any parties authorized by you; and
  • to such parties as may be permitted or required under the laws of Malaysia.

Your personal data may be stored or transferred to locations and systems outside Malaysia subject to appropriate controls over information security.


In this Notice, "our affiliate" means each legal entity that is controlled by Bestinet Sdn Bhd, whether directly or indirectly.


Personal Data of Third Parties:


Where the personal data processed by us is personal data of third parties (who are natural persons or individuals) obtained by, or provided to us in connection with your transactions (actual or proposed)/relationship with us, you confirm that such persons have consented to the processing of their personal data in accordance with this Notice and any applicable laws and you will inform them to visit the Bestinet website to view this Notice.


Updates to this Notice:


We may update this Notice from time to time by putting it up at Bestinet's website or any other suitable methods. Do periodically review this Notice at Bestinet's website to stay informed.


This Notice is not intended to, nor does it, create any contractual rights, nor does it create any contractual obligations on Bestinet, in respect of any other party or on behalf of any party.


Records Retention:


We and our affiliates shall be entitled to retain and use your personal data, subject to the confidentiality and security obligations set out in this Notice, for legal, regulatory, audit and internal compliance purposes and in accordance with our or, as the case may be, their records management policies to the extent that this is permissible under applicable laws.


Complaints and Disputes:


If you have reason to believe that we have breached the principles set out in this Notice, we urge you to raise this with us.


We will investigate all complaints and you will usually receive a response within 30 days. If we find a complaint justified, we will resolve it.


Access:


You have rights under the Malaysian Personal Data Protection Act 2010 to make a data access request in respect of personal data an organisation holds about you.


To help us locate and provide the information you request, we would ask that you be reasonably specific about the information you require.


We will need to validate the identity of anyone making an access request, to ensure that we do not provide your information to anyone who does not have the right to that information.


Where a data subject establishes that the personal data we hold on them is not accurate, complete or up-to- date we will correct our records as necessary.


We may charge you an administration fee for providing access in accordance with your request. Your request will usually receive a response within 30 days.


Governing Law:


The governing law for this Privacy Policy and this Notice is the law of Malaysia irrespective of your current location or jurisdiction when registering as a bestID Attendance user or accessing/using the bestID Attendance services.


How to Contact Us:


If you wish to find out more information, or raise any specific or general concerns about Bestinet and this Notice, you may:-


Date : 13 October 2026