Personal Data Notice

[As at 24 December 2021]

This personal data notice (“Notice”) is issued by Bursa Malaysia Berhad for itself and on behalf of its related corporations (collectively referred to as “Bursa”, “our”, “us” or “we”). This Notice applies to those whose personal data is processed by us. For the purpose of this Notice, the terms “personal data”, “sensitive personal data” and “processing” shall have the meaning prescribed in the Personal Data Protection Act 2010 (the “Act”).

1. This Notice serves to inform you how your personal data is being processed by or on our behalf.

2. We may collect a variety of personal data from you from time to time including your name, contact details, e-mail address, username, password, photographs, video footages, information of any past breaches of or convictions under any law, personal data required for the purposes in paragraph 3 below and the personal data submitted or made available by you to us from time to time.

3. Subject to the relevant laws, including the Securities Industry (Central Depositories) Act 1991 (“SICDA”), ⁱ we may process your personal data for the following purposes (“Purposes”):

   (a) To discharge our duties and obligations under the Capital Markets and Services Act 2007, the Securities Commission Act 1993, SICDA and any other written laws, the Bursa rules or any co-operation arrangement with any relevant authority or any other stock or derivatives exchange, clearing house, securities depository authorised by the relevant local or foreign laws;

   (b) To discharge our pre-contractual and contractual obligations with you;

   (c) To provide our products and services to you;

   (d) To provide investor and other capital market related events and activities including events, contests, competitions, educational programmes and other activities organised or sponsored by us or on our behalf (“Events”);

   (e) To grant you access to any applications and/or online platforms or sites owned, operated or managed by us or on our behalf;

   (f) To facilitate the resolution of a concern or complaint;

   (g) To create directories or databases whether for publication or not;

   (h) To publish photographs or video footages of you, which are captured during your participation in any of the Events, on our website or social media, or at our premises;

   (i) To provide ongoing information about our products, services and Events and information relating to our business partners’ products and services;

   (j) To consider applications for employment;

   (k) For internal management and administrative purposes, including for purposes related to data storage and management;

   (l) To research, develop and improve our products, services and Events; and

   (m) For any other purpose authorized by you or incidental or ancillary or in furtherance to the above purposes.

4. Your personal data is collected from various sources, including information you have provided us from time to time via any communications or interactions with us including e-mails or when you register for or participate in any Events, information from third parties, and information in the public domain.

5. You may access and request for correction of your personal data. However, in accordance with the Act:

   (a) we may charge a fee for processing your request for access; and

   (b) we may refuse to comply with your request for access or correction in accordance with the Act.

6. Please contact us using any of the following modes for any request for access and correction of personal data, or for enquiries or complaints in respect of the processing of your personal data:
   
   

   Designated Contact Person	Manager, Bursa 2U
   Mailing address:	Bursa 2U Exchange Square Bukit Kewangan, 50200 Kuala Lumpur.
   Telephone No.:	(603) 2732 0067
   Fax No.:	(603) 2026 4122
   E-mail address:	[email protected]

7. You may provide us written notice to limit our processing of your personal data or to withdraw your consent to our processing your personal data. However, you acknowledge and understand that this is subject to any applicable legal restrictions and a reasonable duration of time for the withdrawal of consent to take effect.

8. Subject to relevant laws including SICDA, ⁱⁱ your personal data may be disclosed to:
   

   (a) our parent company, subsidiaries, related and associated companies;

   (b) our listed issuers and its directors and advisers, participants and registered persons approved or registered under the relevant rules of Bursa and any other person that is required to comply with the rules of Bursa;

   (c) our licensees, co-organisers of events, business partners and service providers;

   (d) the Securities Commission, Bank Negara Malaysia, the Police, the Malaysian Anti-Corruption Commission, Companies Commission of Malaysia, Registrar of Societies, any other supervisory, governmental or relevant authority or any governmental instrumentality;

   (e) any relevant authority or body such as the Malaysian Institution of Chartered Secretaries and Administrators (MAICSA) or the Malaysian Institute of Directors (MID);

   (f) any other stock or derivatives exchange, clearing house, and securities depository authorised by the relevant laws;

   (g) the public at large by publishing the same in accordance with the relevant rules of Bursa;

(h) auditors, professional firms or entities; and

(i) any other persons that may be relevant to our business and functions or to carry out any of the Purposes,

notwithstanding that you may be outside Malaysia, or disclosed for any of the above Purposes or any other purpose for which your personal data was to be disclosed at the time of its collection or any other purpose directly related to any of the above Purposes or where such disclosure is required or authorised by law or an order of a court.

9. Unless otherwise specified by us at the time the personal data is collected, it is obligatory that you supply us with the personal data requested for by us.

10. If you fail to supply to us the above personal data, we may not be able to carry out the Purpose for which you have provided us the personal data and in addition, you may be in breach of the requirements of the relevant rules of Bursa.

11. Your personal data may be transferred to a place outside Malaysia and you hereby give your consent to the transfer.

12. You are responsible for ensuring that the information you provide to us is accurate, complete, not misleading and kept up to date.

13. In the event of any inconsistencies between the English version and the Bahasa Malaysia version of this Notice, the English version shall prevail over the Bahasa Malaysia version.

14. We reserve the right to amend and update this Notice at any time and the updated notice will be posted on this website or via any other mode we view suitable.

By providing to us your personal data, you hereby consent to the processing of your personal data in accordance with all of the foregoing.

---

ⁱ For the avoidance of doubt, depositor’s information maintained by Bursa Malaysia Depository Sdn. Bhd. (“CDS Information”) is protected under SICDA. Section 43 of SICDA governs the confidentiality of CDS Information. Disclosure of CDS Information is only allowed under the circumstances described in section 45 of SICDA, for example, CDS Information of a depositor suspected of an offence may be disclosed to persons duly authorized to investigate into the offence.


ⁱⁱ For the avoidance of doubt, depositors’ information maintained by Bursa Malaysia Depository Sdn. Bhd. (“CDS Information”) is protected under SICDA. Section 43 of SICDA governs the confidentiality of CDS Information. Disclosure of CDS Information is only allowed under the circumstances described in section 45 of SICDA, for example, CDS Information of a depositor suspected of an offence may be disclosed to persons duly authorized to investigate into the offence.