Privacy Policy

Data Protection Officer

We have appointed a Data Protection Officer (DPO) in accordance with the Personal Data Protection Act 2010 (PDPA) and its Guideline on the Appointment of a Data Protection Officer. Our DPO oversees our compliance with the PDPA and serves as your point of contact for data protection matters, and may be contacted at [email protected].

Scope

This Policy applies to all users of www.keyplus.my and all services available on the platform, including motor insurance and takaful renewals, road tax renewal, new vehicle registration, and transfer of ownership.

Personal Data We Collect

We collect the following categories of personal data:

• Identity Data
  Full name, NRIC or passport number, date of birth, and gender.
• Contact Data
  Email address, phone number, and mailing address.
• Vehicle Data
  Vehicle registration number, make, model, year of manufacture, and existing insurance or takaful details.
• Payment Data
  Payment transaction data processed via third-party payment gateways. KEY PLUS does not store your card or bank account details.
• Technical Data
  IP address, browser type, device information, and usage data collected via cookies and platform tools when you use the platform.
• Communication Data
  Feedback, enquiries, support requests, and chat or messaging records.

Some data — such as your NRIC and vehicle information — is required to provide our core services. Without it, we cannot process your renewal or facilitate your transaction. Other data — such as marketing consent — is optional.

How We Collect Data

We collect personal data in the following ways:

• Directly from you
  When you submit a renewal request, complete a form, make an enquiry, or contact our customer service team.
• Automatically
  Through cookies and platform tools when you browse or use KEY PLUS.
• From third parties
  From licensed insurers, takaful operators, and payment gateway providers in connection with your transactions.

How We Use Your Data

We process your personal data lawfully and only for the following purposes:

• To provide services
  Processing your motor insurance or takaful renewal, road tax renewal, new vehicle registration, or transfer of ownership request.
• To communicate
  Sending you policy documents, renewal reminders, transaction confirmations, and customer support responses.
• To improve the platform
  Conducting analytics, user experience research, and service development to make KEY PLUS better for you.
• For marketing
  With your explicit consent only. We may send you relevant offers, updates, or promotions via email or messaging. You may withdraw your consent at any time by contacting us at [email protected].
• For campaigns and promotions
  If you participate in a promotion or campaign, additional data may be required for eligibility verification or prize fulfilment.
• For legal and regulatory compliance
  To comply with applicable Malaysian laws, meet regulatory requirements, and protect our legal rights.

Disclosure of Data

We may share your personal data only where necessary with:

• Licensed insurers, takaful operators, and payment gateway providers in connection with your transaction.
• Technology and analytics service providers operating under confidentiality obligations.
• Regulatory authorities, courts, or law enforcement where required by law.
• Parties involved in any merger, acquisition, or restructuring of our business, with notice to you where permitted by law.

We do not sell your personal data to any third party.

Cookies & Platform Tools

We use technology tools to help us operate the platform, understand how it is used, and improve your experience. These include:

• Tools for essential platform functions such as form submissions and session management, which are necessary for the platform to operate correctly.
• Tools that help us understand how users navigate the platform so we can make it better for you.
• Tools that help us understand the reach and effectiveness of our digital communications.
• Tools that analyse how users interact with the platform to improve usability and the overall experience.

Some of these tools may process technical data such as IP addresses and device information on our behalf, and may transfer data outside Malaysia in accordance with the International Transfers section of this Policy.

You may manage your preferences for non-essential tools in your browser settings. Please note that disabling certain tools may affect some platform features.

Data Security

We implement appropriate technical and organisational measures — including encryption, access controls, and regular security reviews — to protect your personal data against unauthorised access, loss, or disclosure.

No system is entirely secure. In the event of a personal data breach likely to cause significant harm, we will notify the Personal Data Protection Commissioner within 72 hours of becoming aware of the breach, and will notify affected users within 7 days of that notification, in each case as required under the Personal Data Protection Act 2010 (PDPA) and its Guideline on Data Breach Notification.

International Transfers

Some of our third-party service providers operate outside Malaysia. Where personal data is transferred outside Malaysia, we ensure such transfers comply with Section 129 of the Personal Data Protection Act 2010 (PDPA) and the Guidelines on Cross-Border Personal Data Transfer, including by verifying that the recipient jurisdiction has a substantially similar law or an adequate level of protection, or by applying appropriate contractual or other safeguards.

Retention

We retain your personal data for the following periods:

• Active / Renewable Customer Data
  Retained for as long as you hold an active or recently-expired policy or takaful certificate facilitated through us, to enable renewal reminders and related services.
• Lapsed Customer Data
  If no renewal or new transaction occurs within 2 years after your policy’s expiry, your data will be anonymised or deleted, unless required to be retained longer by law.
• Transaction Records
  Up to 7 years for legal, tax, and regulatory compliance.

Your Rights

Under the PDPA, you have the right to:

• Access a copy of your personal data held by us.
• Request correction of any inaccurate or incomplete data.
• Withdraw consent for marketing communications at any time.
• Request deletion of data that is no longer required, subject to our legal retention obligations.
• Request that your personal data be transmitted directly to another data controller, where technically feasible.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within a reasonable timeframe in accordance with the PDPA.

Children's Data

KEY PLUS is intended for users aged 18 and above. We do not knowingly collect personal data from persons under the age of 18. If you believe we have inadvertently collected data from a minor, please contact us at [email protected] and we will take steps to delete it promptly.

Complaints

If you are not satisfied with how we handle your personal data, you may escalate your complaint to the Personal Data Protection Commissioner (PDPC) at www.pdp.gov.my. We encourage you to contact us first at [email protected] so we may address your concern directly.

Governing Language

In the event of any conflict or inconsistency between the English, Bahasa Malaysia, and Chinese versions of this Policy, the English version shall prevail.

Updates

We may update this Policy from time to time to reflect changes in our practices, services, or applicable law. Significant changes will be notified on the platform with at least 14 days’ notice prior to the effective date. Your continued use of KEY PLUS after the effective date constitutes your acceptance of the updated Policy.

Contact Us

For any questions, rights requests, or data-related enquiries:

📧 [email protected]

💬 011-6060 4666 (WhatsApp)

🌐 www.keyplus.my