Privacy Notice PDPA

PRIVACY NOTICE

Malaysia Rapid Transit Corporation Sdn Bhd (formerly known as Mass Rapid Transit Corporation Sdn Bhd) (“MRT Corp”) and its subsidiaries (collectively, the “MRT Group”) are committed to protecting and respecting your privacy in accordance with the Personal Data Protection Act 2010 (“PDPA“).

This Privacy Notice explains:

  • How and why we collect,  use and disclose your personal data;
  • How long we retain your data and how we protect it;
  • How you may contact us to exercise your rights.

 

1. Data Protection Officer

For the purposes of this Privacy Notice, any request or inquiries should be directed in writing to:

Data Protection Officer
Email: [email protected]

 

2. How and Why We Use Personal Data

The MRT Group collects, processes, and stores personal data (such as name, contact information, identification details, employment, and other relevant information) as necessary for purposes including but not limited to:

  • Responding to general enquiries;
  • Communicating with stakeholders and members of the public;
  • Managing corporate engagements, public consultations, competitions, surveys, customer careline and events;
  • Processing any procurement and tender process, job and internship applications, vendor registrations;
  • Managing property and infrastructure development;
  • Ensuring compliance with legal or regulatory obligations.

 

MRT Group may also collect personal data through our website (e.g. via contact forms), customer careline, CCTV footage, biometric data and our social media platform.

 

3. Sharing and Disclosure of Personal Data

We do not sell or rent your personal data. However, we may share or disclose your personal data under the following circumstances and/or to the following parties:

  • Within the MRT Group;
  • With service providers engaged by MRT Group to perform services on our behalf;
  • The Government of Malaysia, governmental agencies and any state government;
  • To comply with legal and regulatory obligations or law enforcement requests;
  • To protect our legitimate business interests or enforce our legal rights;
  • Any party to whom we are legally required to disclose

 

In all cases, we take reasonable steps to ensure that third parties receiving your data implement adequate safeguards.

 

4. Data Retention and Security

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or to comply with legal, accounting, or reporting obligations.

We take reasonable steps to protect the personal data we collect from misuse, loss, unauthorised disclosure, unauthorised access, modification and/or inaccurate data.

 

5. Cross-Border Data Transfers

Where it is necessary for operational or processing reasons, your personal data may be transferred outside of Malaysia. In such cases, we will ensure that the receiving party provides a level of protection comparable to the PDPA.

 

6. Your Rights

Under the PDPA, you have the following rights:

  • Access – to request a copy of your personal data held by us;
  • Correction – to request correction of any inaccurate or incomplete data;
  • Withdrawal of Consent – to withdraw your consent for any purpose for which it was given;
  • Objection – to object to processing for direct marketing purposes;
  • Deletion – in certain cases, to request deletion of your personal data;

Requests can be made by contacting us at [email protected]

Please note that we may require proof of identity before processing your request and a prescribed fee as permitted under the PDPA.

 

7. Complaints

If you are not satisfied with the way we handle your personal data, you may file a complaint with us at the contact details above.

You may also lodge a complaint with the Department of Personal Data Protection (JPDP) via:

Jabatan Perlindungan Data Peribadi
Aras 6, Kompleks KKMM
Lot 4G9, Persiaran Perdana, Presint 4
Pusat Pentadbiran Kerajaan Persekutuan
62100 Putrajaya, Malaysia
Website: https://www.pdp.gov.my

 

8. Changes to This Privacy Notice

MRT Group reserves the right to update this Privacy Notice from time to time. The latest version will be published on our website.