[as at 8 January 2024]

This personal data notice (“Notice”) is issued by Bursa Malaysia Berhad for itself and on behalf of its related corporations (collectively referred to as “Bursa”, “our”, “us” or “we ”). This Notice applies to those whose personal data is processed by us. For the purpose of this Notice, the terms “personal data”, “sensitive personal data” and “processing” shall have the meaning prescribed in the Personal Data Protection Act 2010 (the “Act ”).

01

This Notice serves to inform you how your personal data is being processed by or on our behalf.

02

We may collect a variety of personal data from you from time to time including your name, contact details, e-mail address, bank account details, username, password, photographs, video footages, information of any past breaches of or convictions under any law, personal data required for the purposes in paragraph 4 below and the personal data submitted or made available by you to us from time to time.

03

Your personal data may be collected from various sources, including information you have provided us from time to time via any communications or interactions with us in any form or when you register for or participate in any events, contests, competitions, educational programmes and other activities organised or sponsored by us or on our behalf (“Events”) or when you register to participate on any platform operated by us. We may also collect your personal data from:

1. credit reporting agencies and publicly available sources such as searches at government authorities or agencies;
2. other sources which have your consent to disclose your information; or
3. any other sources that are permitted by law or not otherwise restricted.

04

Subject to the relevant laws, including the Securities Industry (Central Depositories) Act 1991 (“SICDA”)¹ , we may process your personal data for the following purposes (“Purposes”):

1. to discharge our duties and obligations under the Capital Markets and Services Act 2007, the Securities Commission Act 1993, SICDA and any other written laws, the Bursa rules or any co-operation arrangement with any relevant authority or any other stock or derivatives exchange, clearing house, securities depository authorised by the relevant local or foreign laws;
2. to meet our obligations under any law, regulation, directive or guideline by any regulatory authority or regulatory body;
3. to conduct due diligence pursuant to our internal governance, risk and compliance policies;
4. to discharge our pre-contractual and contractual obligations with you
5. to provide our products and services to you;
6. to conduct any Events;
7. to grant you access to any applications and/or platforms or sites owned, operated or managed by us or on our behalf;
8. to respond to an enquiry or to facilitate the resolution of a concern or complaint;
9. to create directories or databases whether for publication or not;
10. to publish photographs or video footages of you, which are captured during your participation in any of the Events, on our website or social media, or at our premises;
11. to provide ongoing information about our products, services and Events and information relating to our business partners’ products and services;
12. to consider applications for employment;
13. for internal management and administrative purposes, including for purposes related to data storage and management;
14. to research, develop and improve our products, services and Events; and
15. for any other purpose authorized by you or incidental or ancillary or in furtherance to the above purposes.

05

Unless otherwise specified by us at the time the personal data is collected, it is obligatory that you supply us with the personal data requested for by us.

06

If you fail to supply to us the above personal data, we may not be able to carry out the Purpose for which you have provided us the personal data and in addition, you may be in breach of the requirements of the relevant rules of Bursa.

07

You are responsible for ensuring that the information you provide to us is accurate, complete, not misleading and kept up to date.

08

You may access and request for correction of your personal data. However, in accordance with the Act:

1. we may charge a fee for processing your request for access; and
2. we may refuse to comply with your request for access or correction in accordance with the Act.

09

Please contact us using any of the following modes for any request for access and correction of personal data, or for enquiries or complaints in respect of the processing of your personal data:

10

You may provide us written notice to limit our processing of your personal data or to withdraw your consent to our processing your personal data. However, you acknowledge and understand that this is subject to any applicable legal restrictions and a reasonable duration of time for the withdrawal of consent to take effect.

11

Subject to relevant laws including SICDA, your personal data may be disclosed to:

1. any company within the Bursa Malaysia group of companies;
2. our listed issuers and its directors and advisers, participants and registered persons approved or registered under the relevant rules of Bursa and any other person that is required to comply with the rules of Bursa;
3. our licensees, co-organisers of events, business partners, agents, representatives and service providers including licensors of any form of technology;
4. the Securities Commission, Bank Negara Malaysia, Royal Malaysian Police, the Malaysian Anti-Corruption Commission, Companies Commission of Malaysia, Registrar of Societies, any other supervisory, governmental or relevant authority or any governmental instrumentality;
5. any relevant industry body such as the Malaysian Institution of Chartered Secretaries and Administrators (MAICSA), Minority Shareholders Watch Group (MSWG) or the Institute of Corporate Directors Malaysia (ICDM);
6. any other stock or derivatives exchange, clearing house, and securities depository authorised by the relevant laws;
7. credit reporting agencies or debt collection agencies;
8. the public at large by publishing the same in accordance with the relevant rules of Bursa;
9. any external professional firms or entities providing services to us or on your behalf such as accountants, auditors, tax consultants, advocates and solicitors, trustees and valuers;
10. any person as required by any applicable law, rule, regulation, guideline or court order;
11. to persons identified in contracts with us; and
12. to any other persons that are relevant to carry out any of the Purposes or our business or functions.

12

Your personal data may be transferred to a place outside Malaysia and you hereby give your consent to the transfer.

13

In the event of any inconsistencies between the English version and the Bahasa Malaysia version of this Notice, the English version shall prevail over the Bahasa Malaysia version.

14

We reserve the right to amend and update this Notice at any time and the updated notice will be posted on this website or via any other mode we view suitable.

15

By providing to us your personal data, you hereby consent to the processing of your personal data in accordance with all of the foregoing.

¹For the avoidance of doubt, depositor’s information maintained by Bursa Malaysia Depository Sdn. Bhd. (“CDS Information”) is protected under SICDA. Section 43 of SICDA governs the confidentiality of CDS Information. Disclosure of CDS Information is only allowed under the circumstances described in section 45 of SICDA, for example, CDS Information of a depositor suspected of an offence may be disclosed to persons duly authorized to investigate into the offence.