1. “Personal Data” refers to information about you that you have provided to the Group, such as your name, address, telephone number, identity card number, email address, personal preferences, and any information that may identify you that has been or may be collected, stored, used and processed by the Group from time to time.
2. Generally, we collect your Personal Data in the following ways:
3. The provision of your Personal Data is voluntary. However, if you do not provide your Personal Data, we may not be able to communicate with you or provide you with the services you require.
4. To meet your needs and provide you with the products and services that you require, you hereby agree that the Group may collect, retain, and process your Personal Data for the below-stated purposes, which include but are not limited to:
5. If you do not consent to the Group processing your Personal Data for the purposes listed above, please notify us using the contact details as stated below in Paragraph 14.
6. The Group may engage other companies, service providers, individuals, or any third party to perform functions on its behalf and consequently may provide access to or disclose your Personal Data to the third parties such as those listed below, which is not exhaustive:
7. Personal Data held by the Group will be kept confidential in accordance with our Group Personal Data Protection Policy and this Notice, pursuant to applicable law that may from time to time be in force.
8. We only collect personal information that we believe is relevant and necessary to understand your requirements.
9. We will only use your personal information to provide you with improved products and services.
10. We will not disclose your personal information to any external organisation unless we have your consent, are required by law, or have previously informed you.
11. All staff and any third parties with permitted access to your information are specifically required to observe our confidentiality obligations.
12. All reasonable efforts and practical steps are made to ensure that any Personal Data held is kept up-to-date and is protected against any loss, misuse, modification, unauthorized or accidental access or disclosure, alteration, or destruction.
13. We may retain your Personal Data for as long as it is necessary for the purposes for which it has been collected, up to seven (7) years, unless otherwise permitted by applicable law or in order to defend legal claims.
14. Subject to any exceptions under applicable laws, you may at any time hereafter request access to, or correction or rectification of your Personal Data that is inaccurate, incomplete, misleading or not up-to-date, or seek further information from the Group on Personal Data and this Notice by contacting the relevant Data Protection Officers:
Name: Nur Amirah Binti Mat Luwi
Address: C-G-15, Block C, Jalan Dataran SD1, Dataran SD, PJU 9, Bandar Sri Damansara, 52200 Kuala Lumpur, Malaysia
Email: pdpamy@ghl.com
Tel. No.: +603 - 6286 3388
Name: Nur Hazirah Binti Abdul Razak
Address: Suite 2B-20-1, 20th Floor, Block 2B, Plaza Sentral, Jalan Stesen Sentral 5, 50470 Kuala Lumpur, Malaysia.
Email: dpo@ipay88.com.my
Tel. No.: +603-2261 4668 (ext 1908)
For individuals residing in Thailand, please contact the Data Protection Officer below:
Name: Nannapat Tantinantawat
Address: 77/161, 37th Floor, Sinn Sathorn Tower, Krungthonburi Road, Klongtonsai, Klongsan, Bangkok 10600 Thailand
Email: pdpath@ghl.com
Tel. No.: +66(0)2 440 0111
For individuals residing in the Philippines, please contact the Data Protection Officers below:
Name: Colleen F. Dilla
Address: 6F One Corporate Plaza Building, 845 Arnaiz Avenue, Legaspi Village, 1224 Makati City, Philippines
Email: pdpaph@ghl.com
Tel. No.: +63-2 7744 9449
Name: Roney John ‘RJ’ Ogapong
Address: 26F Yuchengco Tower, RCBC Plaza, 6819 Ayala Avenue, Makati City, Philippines 1227
Email: dpo@ipay88.com.ph
Tel. No.: (+632) 8511-8688
Please note that we do not currently have a designated Data Protection Officer for India. For all data protection inquiries related to our India operations, please email us at ndps.info@nttdata.com.
15. Where we rely on your consent to use your Personal Data, you have the right to withdraw that consent at any time. This withdrawal will, however, not affect the lawfulness of processing based on your consent before your withdrawal. If you withdraw your consent to any or all purposes, and depending on the nature of your request, we may not be in a position to continue to provide you with our products or services.
16. The Group reserves the right to charge you a reasonable fee for processing any data access request.
17. In the event of any conflict between the English version and versions in other languages, the English version shall prevail. the Group has the right to modify, update, or amend the terms of this Notice at any time by placing the updated Notice on its Website. Continuing communication or use of the Group services shall signify your acceptance of the Notice, unless you inform us otherwise.
Effective Date: 20 June 2025