This privacy notice (“Privacy Notice”) is issued by Securities Industry Dispute Resolution Center (“SIDREC”, “we”, “us” or “our”) pursuant to the statutory requirements of the Personal Data Protection Act 2010 (“PDPA”), to:
What Kind Of Personal Data We Collect
Personal data means any information in our possession that relates directly or indirectly to an individual to the extent that the individual can be identified from that and from other information in our possession, which for the purpose of this Privacy Notice, includes:
Personal data for purposes of this notice may, where applicable, include sensitive personal data as defined under the PDPA which means any personal data consisting of information as to the physical or mental health or condition of a data subject, his political opinions, religious beliefs or other beliefs of a similar nature, the commission or alleged commission by him of any offence or any other personal data as the Minister may determine.
How We Use Your Personal Data
The personal data (including sensitive personal data) collected will be used to:
Where you are a Claimant/Person who has lodged a complaint with SIDREC:
Where you are a Member:
(collectively referred to as “Purposes”).
Please note that we may also anonymise or aggregate your personal data by excluding information (such as your name) that make the data personally identifiable to you (“Anonymous Information“), which may adopt a nature or format including a summary of statistics by sectors or nature of cases and any synopsis of individual cases without revealing the identity of the parties to the disputes. This Anonymous Information may be used for the purpose of research, evaluation and educational purposes.
We may obtain your personal data from yourself and from a variety of sources, including from third parties connected with you and from such other sources to which you have given your consent to disclose your personal data (e.g. information collected when you visit our website).
Disclosure of Your Personal Data
We will not disclose any of your personal data to any third party without your consent, whether within or outside Malaysia, except to:
and where necessary, to any party who undertakes to keep your personal data confidential in carrying out the Purposes mentioned above or to persons whom we are compelled or required under the law to make such disclosure to.
What If Personal Data Provided By You Is Incomplete?
It is necessary for us to collect and process your personal data. If you do not provide us with your personal data, we will not be able to effectively provide you with our services or process your personal data for any of the Purposes, if at all.
Your Rights to Access and Correct Your Personal Data
We are committed to ensuring that your personal data is stored securely and will store your personal data only for such duration as necessary and/or as per the PDPA permits and as per SIDREC’s policy. You have the right to request for access to, request for a copy of and request to update or correct, your personal data held by us. You also have the right at any time to request us to limit the processing and use of your personal data (for example, requesting us to stop sending you any promotional materials or contacting you for educational or promotional purposes), subject to our right to rely on any statutory exemptions and/or exceptions to collect, use and disclose your personal data.
Your written requests or queries should be addressed to:
Attn: Privacy Officer
Securities Industry Dispute Resolution Center
Unit A-9-1, Level 9, Tower A
Menara UOA Bangsar
No. 5, Jalan Bangsar Utama 1
59000 Kuala Lumpur
T : +60-3-2282 2280
F: +60-3-2282 3855
By providing your personal data to us, you consent to us processing your personal data in accordance with this Privacy Notice, and you confirm that all personal data provided by you is accurate and complete, and that none of it is misleading or out of date. You will promptly update us in the event of any change to your personal data.
To the extent that you have provided (or will provide) personal data about your family members, spouse, other dependents (if you are an individual), directors, shareholders, employees, representatives, agents (if you are a corporate entity/an organisation) and/or other individuals, you confirm that you have explained (or will explain) to them that their personal data will be provided to, and processed by, us and you represent and warrant that you have obtained their consent to the processing (including disclosure and transfer) of their personal data in accordance with this Privacy Notice.
In respect of minors (i.e. individuals under 18 years of age) or individuals not legally competent to give consent, you confirm that you are the parent or guardian or person who has parental responsibility over them or the person appointed by court to manage their affairs or that they have appointed you to act for them, to consent on their behalf to the processing (including disclosure and transfer) of their personal data in accordance with this Privacy Notice.
Amendments to This Privacy Notice
We reserve the right to update and amend this Privacy Notice from time to time. We will notify you of any amendments to this Privacy Notice via announcements on our website or other appropriate means. If we amend this Privacy Notice, the amendment will only apply to personal data collected after we have posted the revised Privacy Notice.