Personal Data Protection Act 2010

Effective Date: 11 July 2025

2.1 This Policy applies to all personal data collected, stored, used, and processed by Prestigious in connection with our business operations, including
clients, expatriates, suppliers, partners, and employees.
2.2 It covers all methods of data collection — whether in physical, digital, or electronic form — and applies to both manual and automated processing
activities conducted within or outside Malaysia.

3.1 The personal data we collect may include, but is not limited to:
Full name, identification or passport number, nationality, and date of birth;
Residential or mailing address, email address, and contact number;
Employment details such as position, company name, and salary information;
Immigration-related information, including visa, work permit, and dependent data;
Educational, financial, or professional qualification details; and
Any other information required to provide our services or comply with Malaysian regulatory requirements.

4.1 Prestigious collects and processes personal data for legitimate business purposes, including:
Facilitating immigration, licensing, and expatriate management services;
Submitting applications and correspondence to government agencies (e.g., Immigration Department, MDEC, MIDA, MOTAC, JTKSM, SOCSO, LHDN);
Managing client relationships and providing customer support;
Issuing invoices, managing financial records, and processing payments;
Ensuring compliance with legal, regulatory, and statutory requirements;
Conducting internal administrative, operational, and audit activities; and
Improving the efficiency and quality of our services.

5.1 Prestigious may disclose personal data to third parties where necessary, including but not limited to:
Government bodies, regulatory agencies, and embassies;
Client companies and authorised representatives;
External service providers, auditors, and consultants engaged by Prestigious;
Financial institutions for payment processing; and
5.2 Prestigious ensures that all third parties handling personal data comply with strict confidentiality and data protection requirements consistent with this Policy.

6.1 Prestigious is committed to maintaining the confidentiality and security of personal data. We implement reasonable administrative, technical, and physical measures to protect personal data from loss, misuse, unauthorised access, disclosure, or alteration.
6.2 Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable laws and regulations. Once no longer required, it will be securely disposed of or anonymised.

7.1 Under the PDPA, individuals have the right to:
Access personal data held by Prestigious;
Request correction of inaccurate or incomplete data;
Withdraw consent for the processing of their personal data (subject to legal or contractual limitations);
Request information regarding the data processing purpose; and
Lodge a complaint regarding the processing of their data.
7.2 All requests or inquiries must be made in writing to the Data Protection Officer (DPO) using the contact information provided below.

Disclaimer
This policy document has been prepared by Prestigious for general guidance and compliance reference under the Personal Data Protection Act 2010 (Malaysia). It is intended to provide general information only and does not constitute professional, legal, or financial advice. While every effort has been made to ensure the accuracy and currency of the information contained herein, Prestigious, its directors, and employees make no representations or warranties, express or implied, regarding the completeness or reliability of any information provided. To the extent permitted by law, Prestigious accepts no liability or responsibility for any loss, damage, or consequences arising from reliance on the information contained in this publication. Recipients are advised to seek independent professional or legal advice before acting or relying on any information contained in this document.