Personal Data Protection Notice For Takaful Advisor (Agent) and Representatives

Great Eastern Takaful Berhad (“Great Eastern Takaful”) is a part of the Great Eastern Group, including its and the Great Eastern Group’s related corporations. The Great Eastern Group consists of Great Eastern Holdings Limited and its subsidiaries.

“Agent” means any natural person who solicits or obtains a proposal on behalf of the Company, negotiates a contract of takaful on behalf of the Company or does any other act on behalf of the Company in relation to the issuance renewal or continuance of a takaful certificate.

“Representative” means any natural person who solicits or obtain a proposal for takaful, or who markets or distributes the Company’s takaful products in their capacity as an employee, officer or authorised representatives of a corporation which is authorised to represent the Company, or to distribute the Company’s products, and who does not act as an agent or employee of the Company in his or her personal capacity.

By interacting with Great Eastern Takaful Berhad (“the Company”), and submitting information to the Company, you consent (and where required, explicitly consent) to the Company’s use of your personal data including sensitive personal data, in the manner set out in this notice , in accordance with the Personal Data Protection Act 2010 and other applicable regulations and guidelines. Such consent and authorisation herein shall extend to any information obtained from your historical financial or credit records, data or information whether or not provided personally.
 

1. Personal Data

“Personal Data” means any information which relates to you and which has been or will be provided by you to the Company in connection with your role as the Company’s Agent or Representative whether or not provided personally by you or your employer or principal including but not limited to your name, bio-data or personal profile, National Registration Identity Card number, passport number, address, telephone number, email address, images, your personal preferences, financial and banking account information and any information which may identify you, that has been or may be collected, stored, used and processed by the Company from time to time. The term “Personal Data” also includes sensitive personal data which means any personal data consisting of information as to physical or mental health or condition, political opinions, religious beliefs or other beliefs of a similar nature and the commission or alleged commission of any offence, biometric data, or any other personal data as may be amended by law from time to time.

The information that you have provided to the Company is necessary. If you do not provide the Company with the information, the Company may not be able to process, administer or manage your application and role as the Company’s Agent or Representative, including but not limited to agency business development and commission payments.

If you provide us with any Personal Data relating to a third party, including where you have named them as family member, by submitting such information to us, you represent and warrant that you have obtained the consent of the third party to provide us with their Personal Data for the purposes set out herein. References to “your Personal Data” shall include the Personal Data of third parties provided by you.

This Notice applies to living individuals. Rights and protections under this Notice and the Personal Data Protection Act 2010 shall not extend to deceased individuals, though we may handle such data in accordance with applicable legal or fiduciary obligations.

2. Collection of Personal Data

The Company may collect your Personal Data in the following manner, which includes but is not limited to:

• when you submit any form (together with its supporting documents), including but not limited to Agent or Representative registration, application, or declaration forms;
• when you enter into any agreement or provide other documentation or information in respect of your interactions and transactions with us, or when you use our services;
• when you interact with our staff, including customer service officers and other representatives, e.g. via telephone calls (which may be recorded), letters, fax, face-to-face meetings, digital platforms (including social media) and email;
• when you use any of our services provided through online and other technology platforms, such as websites and mobile applications including when you establish or access any online accounts with us;
• when you request that we contact you, be included in an email or other mailing list; or when you respond to our request for additional Personal Data, our promotions and other initiatives;
• when we seek or receive information about you in connection with your Agent or Representative appointment applications, including from your previous employer and/or the relevant authorities;
• when your images are captured by the Company via CCTV cameras while you are within the Company’s premises, or via photographs or videos taken by the Company or its authorised representatives during events hosted by the Company; and/or
• when you provide or submit your Personal Data to us for any other purpose.

The Company may also collect and/or verify your Personal Data from third parties, such as credit reference agencies, from Great Eastern Group, insurance associations and takaful associations.

3. Purpose of Collection and Use of Personal Data

Any Personal Data that you have provided or will provide, may be collected, used, recorded, stored, archived, disclosed or otherwise processed by the Company and/or its successors in title for the following purposes:

• processing your Agent or Representative application form or registration form, as the case may be;
• for administration and internal management purposes, including conducting character/credit checks which may consist of a comprehensive review and investigation of your background, qualification, experience, education, employment history, references and other information (including criminal history records);
• for monitoring, administration of and managing your role as the Company’s Agent or Representative;
• for promotional purpose including displaying and publishing your photograph or video image;
• for research, risk assessment and audit purposes including but not limited to historical statistical or actuarial purposes or data analytics or study;
• to prevent, investigate or report any actual or suspected money laundering, terrorist financing, bribery, conspiracy, corruption, actual or suspected fraud including but not limited to takaful fraud, evasion of tax or economic or trade sanctions, and other criminal or unlawful activities;
• to match and update any Personal Data relating to you that is held by the Company and the Great Eastern Group from time to time;
• requesting feedback and/or inviting you to participate in surveys and market research initiatives. We utilise data analytics, artificial intelligence, and machine learning technologies for purposes including statistical analysis, profiling, and predictive modelling. These activities support product design and development, analysis of user behaviour and preferences, identification of market trends, internal performance evaluation, process improvement, and enhancement of service quality. We may additionally participate in industry studies undertaken for public interest and educational objectives;
• as required by relevant laws, rules, regulations, codes of practice or guidelines binding on the Company;
• for the performance of obligations under any lawful scheme of transfer of business;
• for information sharing with the relevant insurance or takaful associations and any information-sharing systems, including to cooperate or assist in investigations undertaken by another insurer or takaful provider, or the relevant insurance/takaful association;
• for direct marketing and general marketing of takaful products, services, special offers and rewards of the Company, the Great Eastern Group or its respective related corporations, or third party which are Shariah compliant including but not limited to the Company’s business and strategic partners, that may be of interest to you. Please be assured that marketing information in respect of the Great Eastern Group and its respective related corporations, and third party’s products and services, will only be sent to you if you have expressly consented to the same;
• for litigation or potential litigation; and/or
• if required by law or in good faith, if such action is necessary:
  • to comply with any law enforcement, court orders or legal process, and/or
  • to protect and defend the rights or property of the Company and Great Eastern Group (for information, log on to www.greateasterntakaful.com).
     

4. Retention of Personal Data

The Company may retain your Personal Data for such time as deemed to be necessary to fulfil the purposes stated in the section “Purpose of Collection and Use of Personal Data” and/or for the purpose of fulfilling any operational, audit, investigation, legal, regulatory, tax or accounting requirements, including but not limited to any potential litigation purpose.

5. Disclosure of Personal Data

The Company may disclose and/or provide your Personal Data to the following parties (within and outside Malaysia) for the purposes stated above:

• the Company’s representatives, immediate and/or superior officer, agency leaders and where applicable, the employers or principals of any such Representatives;
• third party service providers (who provide administrative, telecommunications, computer related facilities including but not limited to the purchase of hardware or software, system enhancements, migration or maintenance, if any, payment, data processing, storage, or other services to the Company in connection with or related to the conduct or manner of operation of our business) to fulfill the Company’s obligations to you, or to your employer or principal;
• takaful operators, fraud detection and prevention services, retakaful operators, takaful associations and takaful industry regulatory authorities;
• any credit reference agencies or, in the event of default, any debt collection agencies;
• any person, who is under a duty of confidentiality and has undertaken to keep such data confidential, which the Company has engaged to fulfil its obligations to you;
• any person to whom the Company is under an obligation to make disclosure under the requirements of any law, rules, regulations, code of practice or guidelines binding on the Company;
• any applicable regulators, governmental bodies, or industry-recognised bodies and where otherwise required by law;
• other companies in the Great Eastern Group, and its respective related corporations;
• any business partners of the Company; and/or
• any other parties in respect of whom you have consented to the disclosure of your Personal Data
   

6. Security Measures on Your Personal Data

The Company will take reasonable efforts to protect Personal Data in its possession or control by making reasonable security arrangements to prevent unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks. However, the Company cannot completely guarantee the security of any Personal Data the Company may have collected from or about you, or that e.g. no harmful code will enter the Company’s website (e.g. viruses, bugs, trojan horses, spyware or adware). You should be aware of the risks associated with using websites.

While the Company strives to protect your Personal Data, the Company cannot ensure the security of the information you transmit to the Company via the internet, and the Company urges you to take every precaution to protect your Personal Data when you are on the internet. The Company recommends that you change your passwords often, use a combination of letters and numbers, and ensure that you use a secure browser.

If applicable, you undertake to keep your username and password secure and confidential and shall not disclose or permit it to be disclosed to any unauthorised person, and to inform the Company as soon as reasonably practicable if you know or suspect that someone else knows your username and password or believe the confidentiality of your username and password has been lost, stolen or compromised in any way or that actual or possible unauthorised transactions have taken place. The Company is not liable for any damages resulting from any security breaches related to unauthorised and/or fraudulent use of your username and password.

7. Use of Cookies and Related Technologies

The Company’s websites and platforms use cookies and other technologies. Cookies are small text files stored in your computing or other electronic devices when you visit the Company’s website and platforms for record keeping purposes. Cookies are stored in your browser’s file directory, and the next time you visit the website or platform, your browser will read the cookie and relay the information back to the website, platform or element that originally set the cookie. Depending on the type of cookie it is, cookies may store user preferences and other information.

Web beacons (also known as pixel tags and clear GIFs) involve graphics that are not apparent to the user. Tracking links and/or similar technologies consist of a few lines of programming code and can be embedded in the Company’s websites or platforms. Web beacons are usually used in conjunction with cookies and primarily used for statistical analysis purposes. This technology can also be used for tracking traffic patterns on websites and platforms, as well as finding out if an e-mail has been received and opened and to see if there has been any response.

The Company may deploy cookies and other technologies as follows:

• tracking information such as the number of visitors and their frequency of use, profiles of visitors and their preferred sites;
• making the Company’s websites and platforms easier to use e.g. cookies may be used to help speed up your future interactions with the Company’s websites and platforms;
• to better tailor the Company’s products and services to your interests and needs e.g. cookies information may be identified and disclosed to the Company’s service providers and business partners to generate consumer insights;
• collating information on a user’s search and browsing history;
• collecting information for the purposes of analysis, statistical and site-related information including, without limitation, information relating to how a visitor arrived at the website or platform, the browser used by a visitor, the operating system a visitor is using, a visitor's IP address, and a visitor's click stream information and time stamp (which may include e.g. information about which pages they have viewed, the time the pages were accessed and the time spent per web page);
• using such information to understand how people use Company’s websites and platforms, and to help the Company improve the structure and contents of such websites and platforms;
• enabling the Company’s websites and platforms to operate e.g. cookies that enable you to log onto secure parts of the Company’s websites and platforms; and/or
• personalising the website and platform for you, including delivering advertisements which may be of particular interest to you and using cookie related information to allow the Company to understand the effectiveness of the Company’s advertisements.

Some cookies that The Company uses are from third party companies to provide the Company with web analytics and intelligence about the Company’s websites and platforms. These companies collect information about your interaction with the Company’s websites and platforms. The Company uses such information to compile statistics about visitors who interact with the websites, platforms and other online content related to the Company, to gauge the effectiveness of the Company’s communications, and to provide more pertinent information to its visitors.

If you do not agree to such use of cookies and other tracking technologies as described in this Notice, you should adjust your browser settings to delete or disable cookie. Unless you have actively configured your browser to block cookies, the Company’s system may automatically issue cookies when you access the Company’s websites or platforms, or when you click on links in targeted emails sent to you—even if you have previously deleted those cookies. Please be aware that disabling cookies may limit your access to certain parts of the Company’s websites or platforms and could negatively affect your browsing experience.

The way which cookies can be managed depends on your browser. For more information on how to configure or disable cookies, please refer to the 'Help' option of your internet browser.

Data analytics, artificial intelligence and machine learning may be used for some of the purposes stated above.
 

8. Your Rights on Your Personal Data

You may access certain Personal Data held by the Company based on the applicable data protection laws of Malaysia. You also may access certain type of your Personal Data through the i-Great Partner portal or through manual submission to the Company’s Agency Distribution Team.

If you have any inquiry such as limiting the processing of certain information, you may contact the Company through Internet Communication Module (ICM) in the i-Great Partner portal or contact the Company’s Agency Distribution Team.

The Company may charge a reasonable fee for access. If you can show that the Personal Data kept by the Company is not accurate, complete and up to date, the Company will take reasonable steps to ensure it is accurate, complete and up to date upon receiving your verification or feedback.

If you have any complaints or feedback in respect of your Personal Data, you may write to the Company’s Data Protection Officer as follows:

The Company may review and update this Personal Data Protection Notice from time to time to reflect changes in the law, changes in its business practices, procedures and structure, and changes in the community’s privacy expectations. It is not generally feasible to notify you of any changes to this Personal Data Protection Notice and as such, you can visit the company’s website at www.greateasterntakaful.com to obtain the latest version of the Personal Data Protection Notice at any time.

In the event of any inconsistencies between the English version and the Bahasa Malaysia version of this notice, the English version shall prevail.

Updated since: 15/07/2026