My Mage Services Sdn Bhd and/or its subsidiary (ies) and/or affiliates (hereinafter collectively referred to as the “Company”; if the context requires or permits, “Company” may refer to any one of My Mage Services Sdn Bhd and/or its subsidiary (ies) and/or affiliate(s)) pledges to meet fully with the requirements of the Laws of Malaysia, Act 709, Personal Data Protection 2010. In doing so, the Company will ensure compliance by its staff to the strictest standards of security and confidentiality in respect of all personal information and data submitted by users via www.my-mage.com, its subdomains, any other websites, media platforms or applications including My Mage mobile applications and mobile webs operated/developed by the Company (hereinafter singly or collectively referred to as the "Channels" ) and the Company will not release such information to anyone without the prior consent of the relevant user(s) of the Channels (whether registered or not) (“User(s)”) except to the authorized persons listed under Section 3 below titled “Disclosure or Transfer of Data”.
1. Purpose of Collection of Personal Data
In the course of using the Channels, Users may disclose or be asked to provide personal information and/or data. In order to have the benefit of and enjoy various services offered by the Channels, it may be necessary for Users to provide the Company with their personal information and/or data. Although Users are not obliged to provide the information and/or data as requested on the Channels, the Company will not be able to render certain services on the Channels in the event that Users fail to do so.
The Company’s purposes for collection of information and data on the Channels include but are not limited to the following:
The Company will never knowingly collect Personal Information from individuals under the age of thirteen (13) without first obtaining verifiable parental consent. If the User is under the age of 13, he/she should not provide information to the Company. If the Company becomes aware that a person under 13 has provided personal information to the Company without verifiable parental consent, the Company will delete that information as quickly as possible. If any User believes that the Company might have any information from or about a child under 13, please contact the Company at [email protected]
The Company strives to only collect personal data which is necessary and adequate but not excessive in relation to the purposes set out hereinabove.
If the Company requires the use of Users’ personal data for a purpose other than those set out hereinabove, the Company may request the Users’ prescribed consent to the same. If User is a minor, the prescribed consent should be given by his/her parent or guardian.
2. Collection of Personal Data
The Company may collect personal information and/or data about a User such as his/her name, password, email, address, phone number, gender, date of birth that is/are not otherwise publicly available. Occasionally, the Company may also collect additional personal information and/or data from a User in connection with contests, surveys, special offers.
The Company automatically collects some information from Users’ computers or devices when Users visit the Channels. For instance, the Company will collect Users’ IP address, web browser software and referring websites. The Company may also collect information about Users’ activities conducted via the Channels, such as content viewed, pages visited, and searches and/or services used.
When Users use the Channels on a device, the Company will additionally collect information about the Users’ location if Users have set their devices to send such information to the Channels via the privacy settings on their devices. The Company may use the information regarding the location collected from the Users’ devices or photos to enhance their use of the Channels by providing them with relevant content.
Only duly authorized staff of the Company will be permitted to access the Users’ personal information and data, and the Company shall not release such personal information and data to any third parties save and except for the circumstances listed out under the Section 3 entitled “Disclosure or Transfer of Data” below.
3. Disclosure or Transfer of Data
The Company agrees to take all practicable steps to keep all personal information and data of Users confidential and/or undisclosed, subject to the following.
The Company will only disclose and/or transfer Users’ personal information and/or data to the Company’s personnel and staff for the purposes as set out in Section titled “Purpose of Collection of Personal Data” above. However, the Company may disclose and/or transfer such information and/or data to third parties under the following circumstances:
4. Subscription of Newsletter/Promotional Materials/Marketing Materials
The Company may from time to time send to members and Users of the Channels, by way of emails and/or short message service (SMS) notifications, newsletters, marketing and promotional materials and information regarding the Company or its third-party advertisers’ products, services and the like based on the personal information and data that the Users have provided to the Company. The Company may use Users’ data in direct marketing and the Company requires the Users’ consent (which includes an indication of no objection) for that purpose. In this connection, please note that:
Suitable measures are implemented to make available to such members the options to “opt-out” of receiving such materials. In this regard, Users may choose to sign up or unsubscribe for such materials by logging into the membership registration or user account maintenance webpage, or clicking on the automatic link appearing in each newsletter/message, or contact the Customer Relationship Executive of the Company, whose contact details are set out under Section 14 entitled “Enquiries” below.
Such “opt-out” as mentioned above will not affect your ability to receive from the Company fundamental notifications and correspondence (viz. not of marketing or promotional nature) in relation to your use of the services provided by the Company, including without limitation those sent pursuant to the terms of the Terms of Booking.
5. Cookies and Log Files
The Company does not collect any personally identifiable information from any Users whilst they visit and browse the Channels, save and except where such information of the Users is expressly requested. When Users access the Channels, the Company records their visits only and do not collect their personal information or data. The Channels’ server software will also record the domain name server address and track the pages the Users visit and store such information in “cookies”, and gather and store information like internet protocol (IP) addresses, browser type, referring/exit pages, operating system, date/time stamp, and clickstream data in log files. All these are done without the Users being aware that they are occurring.
The Company, third-party vendors and service providers engaged by the Company use the Company’s cookies and third-party cookies, together to inform, optimize, and serve marketing materials based on the Users’ past visits to or uses of the Channels.
The Company does not link the information and data automatically collected in the above manner to any personally identifiable information. The Company generally uses such automatically collected information and data to estimate the audience size of the Channels, gauge the popularity of various parts of the Channels, track Users’ movements and number of entries in the Company’s promotional activities and special events, measure Users’ traffic patterns and administer the Channels. Such automatically collected information and data will not be disclosed save and except in accordance with the Section 3 entitled “Disclosure or Transfer of Data”.
6. Links to Other Websites / Media Platforms / Applications
The Channels may provide links to other websites / media platforms / applications which are not owned or controlled by My Mage. Personal information and data from Users may be collected on these other websites / media platforms / applications when Users visit such websites / media platforms / applications and make use of the services provided therein. Where and when Users decide to click on any advertisement or hyperlink on the Channels which grants Users access to another website / media platforms / applications, the protection of Users’ personal information and data which are deemed to be private and confidential may be exposed in these other websites / media platforms / applications.
If a User logins to any Channels with his/her Facebook account, the Company will collect and store the User’s personal profile and information, such as User’s name, gender, date of birth and email.
The security of Users’ personal information and data is important to the Company. The Company will always strive to ensure that Users’ personal information and data will be protected against unauthorized access. The Company has implemented appropriate electronic and managerial measures in order to safeguard, protect and secure Users’ personal information and data.
Registered Users should safeguard his/her unique Username and Password by keeping it secret and confidential and never share these details with anyone. The Company uses third party payment gateway service to facilitate electronic transactions on the Channels.
Regarding sensitive information provided by Users, such as credit card number for completing any electronic payment transactions, the web browser and third party payment gateway directly communicate such encrypted information using Transport Layer Security (TLS) technology. Secure Socket Layer (SSL) technology is used for compatibility with various web browser types and versions. When a User makes a payment via the Channel or via any service integrated with the system of the Company, the Company stores credit card transaction records and a unique token (“Token”) returned by Payment Card Industry (PCI) - certified and Payment Card Industry-Data Security Standard (PCI-DSS) - compliant third party payment gateway only consisting of the first 6 and last 4 digits of credit card number (“Limited Credit Card Info”) that fulfill PCI DSS compliance requirement in order to compliant with relevant rules and regulations for the purpose of transaction verification. The credit card with the Limited Credit Card Info will be automatically saved (“Stored Card”) in the system of the Company; henceforth the Token will be used by the Company for processing payment made by the same User for his/her future purchase via the Channel or the service integrated with the system of the Company.
Apart from the aforesaid credit card information, the Company, Merchants and any Participating Restaurant(s)/Outlet(s) which provide services via the Channels or using any services provided by the Company do not collect or store any other credit card information.
The Company follows generally accepted industry standards to protect the personal information and data submitted by Users to the Channels, both during transmission and once the Company receives it. However, no method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, while the Company strives to protect Users’ personal information and data against unauthorized access, the Company cannot guarantee its absolute security.
8. Access to or request for correction of data
The Company would like to help Users keep his/her personal information accurate and up-to-date. To view or edit personal information that has been stored at the Channels, please visit the “Login” section of My Mage.
Any User may make a data access request or a data correction request at any time by contacting the Customer Relationship Executive of the Company, whose contact details are set out under Section 12. entitled “Enquiries” below.
In the event that a User wishes to access or amend his/her personal information and data, the Company may request him/her to provide personal details in order to verify and confirm his/her identity.
9. Retention of Personal Data
Once the Company has obtained a User’s personal information and/or data, it will be maintained securely in the Company’s system. Subject to legal requirements, the personal information and/or data of Users will be retained by the Company or to inactive his/her membership of the Channels.
Should there be any inconsistency between the English version and any version in other language, the English version shall always prevail.
If there is any query, please contact our Customer Support at [email protected]