Privacy Statement

ITSES Group Sdn. Bhd.
No.6973 Bukit Kuang Business Centre,
24000 Kemaman, Terengganu, Malaysia

1. Introduction

ITSES Group Sdn. Bhd. (“ITSES Group”, “we”, “our”, or “us”) is a Malaysia-based integrated solutions provider offering a wide range of services across engineering, consultancy, accommodation & transportation, and retailing sectors. Since its early beginnings as a services provider and its subsequent growth into a corporate group, ITSES has continuously evolved to deliver comprehensive and value-driven solutions to clients across industries, supported by a team of experienced professionals and a strong commitment to operational excellence.

We are committed to protecting and respecting your personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (“GDPR”) and the Personal Data Protection Act 2010 of Malaysia (“PDPA”). This Privacy Statement explains how we collect, use, process, store, and safeguard your personal data when you interact with our website, services, or business operations, ensuring transparency, accountability, and alignment with our core values of integrity, transparency, sustainability, excellence, and systemization.

2. Scope

This Privacy Statement applies to all personal data processed by ITSES Group Sdn. Bhd. in connection with its business activities, whether collected through online platforms, physical interactions, or through third-party channels. This includes personal data obtained via our website, digital applications, customer engagements, events, communications, and other service-related activities.

This Policy applies to, but is not limited to, the following categories of individuals:

• Website visitors and online users
• Customers and prospective clients
• Business partners, contractors, and vendors
• Employees, job applicants, and representatives
• Any third parties interacting with ITSES Group in the course of business operations

This Privacy Statement governs both automated and manual processing of personal data and applies regardless of the format in which the data is stored, including electronic, physical, or other forms. It also extends to personal data shared with or processed by third-party service providers acting on our behalf, subject to appropriate contractual and legal safeguards.

3. Definitions

For the purpose of this Privacy Statement, the following terms shall have the meanings set out below:

• “Personal Data” means any information relating to an identified or identifiable individual (“Data Subject”), whether directly or indirectly, including but not limited to names, identification numbers, location data, online identifiers, or any factors specific to the physical, economic, cultural, or social identity of that individual.
• “Processing” refers to any operation or set of operations performed on Personal Data, whether by automated or non-automated means, including collection, recording, organisation, structuring, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, restriction, or erasure.
• “Data Subject” means an individual whose Personal Data is collected, processed, or held by ITSES Group.
• “Data Controller” means ITSES Group Sdn. Bhd., which determines the purposes and means of processing Personal Data.
• “Data Processor” means any third party who processes Personal Data on behalf of the Data Controller.
• “Consent” means any freely given, specific, informed, and unambiguous indication of the Data Subject’s wishes by which they signify agreement to the processing of their Personal Data.
• “Third Party” means any natural or legal person, public authority, agency, or body other than the Data Subject, Data Controller, or Data Processor.
• “Applicable Laws” refers to all relevant data protection laws and regulations, including but not limited to the Personal Data Protection Act 2010 (Malaysia) and the General Data Protection Regulation (EU).

These definitions are intended to ensure clarity and consistency in the interpretation of this Privacy Statement and shall apply throughout this document unless the context otherwise requires.

4. Data Controller

For the purpose of applicable data protection laws, including the General Data Protection Regulation (“GDPR”) and the Personal Data Protection Act 2010 of Malaysia (“PDPA”), ITSES Group Sdn. Bhd. (“ITSES Group”, “we”, “our”, or “us”) acts as the Data Controller for all Personal Data collected and processed in connection with our business operations.

ITSES Group Sdn. Bhd. is a Malaysia-based integrated solutions provider operating across multiple business sectors including engineering, consultancy, accommodation and transportation, and retailing. As the Data Controller, we are responsible for determining the purposes, legal basis, and methods by which Personal Data is collected, used, stored, disclosed, and protected throughout its lifecycle.

Our registered business address is as follows:

ITSES Group Sdn. Bhd.
No. 6973, Bukit Kuang Business Centre
24000 Kemaman, Terengganu
Malaysia

In carrying out our responsibilities as Data Controller, we ensure that Personal Data is processed in a lawful, fair, and transparent manner. We implement appropriate administrative, technical, and organisational measures to safeguard Personal Data against unauthorised access, disclosure, alteration, or destruction, and to ensure compliance with applicable data protection laws and internal governance standards.

Where necessary, we may appoint third-party service providers (“Data Processors”) to process Personal Data on our behalf. In such cases, we ensure that these parties are contractually bound to process Personal Data only in accordance with our instructions and applicable legal requirements, and that adequate safeguards are implemented to protect such data.

If you have any questions regarding the processing of your Personal Data or wish to exercise your legal rights, you may contact us at:

Email: info@itsesgroup.com

5. Types of Personal Data We Collect

ITSES Group Sdn. Bhd. may collect, use, store, and process various categories of Personal Data depending on the nature of your interaction with us. The types of Personal Data we may collect include, but are not limited to, the following:

a) Identity Data

• Full name
• Identification number (e.g., NRIC, passport number) where applicable
• Date of birth
• Gender (where relevant)

b) Contact Data

• Email address
• Telephone / mobile number
• Residential or business address
• Correspondence details

c) Technical Data

• Internet Protocol (IP) address
• Browser type and version
• Device type and operating system
• Time zone setting and location data
• Log files and system activity

d) Usage Data

• Information on how you use our website or services
• Pages viewed, navigation paths, and interactions
• Date and time of access
• Session duration and clickstream data

e) Transaction Data

• Details of products or services purchased
• Payment and billing information (where applicable)
• Contractual or service engagement records

f) Communication Data

• Correspondence via email, phone, or contact forms
• Customer support interactions
• Feedback, enquiries, and complaints

g) Marketing and Preference Data

• Your preferences in receiving marketing communications
• Subscription status
• Survey responses and promotional participation

We only collect Personal Data that is necessary, relevant, and proportionate to the purposes described in this Privacy Statement, in accordance with applicable legal and regulatory requirements. Where additional or sensitive Personal Data is required, we will take appropriate steps to obtain your explicit consent.

6. Sources of Personal Data

ITSES Group Sdn. Bhd. may collect Personal Data from a variety of sources in the course of conducting our business operations. The sources of Personal Data include, but are not limited to, the following:

a) Direct Collection from Data Subjects

We may collect Personal Data directly from you when you:

• Submit forms through our website or digital platforms
• Contact us via email, telephone, or other communication channels
• Engage with us in person at events, meetings, or business interactions
• Apply for employment or submit enquiries regarding our services

b) Automatic Collection through Technology

We may automatically collect Personal Data when you interact with our website or systems through the use of cookies and similar tracking technologies, including:

• IP address and device identifiers
• Browser type and operating system
• Browsing behaviour and website usage patterns
• Date and time of access

c) Third-Party Sources

We may obtain Personal Data from third-party organisations and partners, including but not limited to:

• Business partners, contractors, and vendors
• Service providers (e.g., hosting, analytics, and IT support providers)
• Recruitment agencies and professional advisers
• Regulatory authorities and government agencies

d) Publicly Available Sources

We may collect Personal Data from publicly available sources such as official registers, websites, social media platforms, or publicly accessible databases, where permitted by law.

We ensure that any Personal Data obtained from third-party or public sources is processed in accordance with applicable data protection laws and handled with appropriate safeguards. Where required, we take reasonable steps to notify you of such data collection and to obtain your consent where necessary.

7. Purpose of Processing

ITSES Group Sdn. Bhd. processes Personal Data only for legitimate business purposes and in accordance with applicable data protection laws, including the General Data Protection Regulation (“GDPR”) and the Personal Data Protection Act 2010 of Malaysia (“PDPA”). The purposes for which Personal Data may be collected and processed include, but are not limited to, the following:

a) Provision of Services

• To provide, operate, and maintain our products and services
• To manage customer relationships and service engagements
• To fulfil contractual obligations and service delivery requirements

b) Customer Support and Communication

• To respond to enquiries, requests, or complaints
• To provide technical support and assistance
• To communicate updates, notices, or important information

c) Business Operations and Administration

• To manage internal operations, reporting, and governance processes
• To perform administrative functions including billing, invoicing, and record-keeping
• To monitor and improve organisational performance and efficiency

d) Website and System Improvement

• To analyse user behaviour and website usage patterns
• To enhance functionality, security, and user experience
• To develop and improve our digital platforms and services

e) Security and Risk Management

• To protect our systems, networks, and infrastructure
• To detect, prevent, and investigate fraud, cyber threats, and unauthorised activities
• To ensure the safety and security of individuals and assets

f) Legal and Regulatory Compliance

• To comply with applicable laws, regulations, and legal obligations
• To respond to lawful requests from government authorities or regulators
• To establish, exercise, or defend legal claims

g) Recruitment and Employment

• To process job applications and evaluate candidates
• To manage employment relationships and human resource activities
• To conduct background checks where permitted by law

h) Marketing and Business Development

• To send marketing communications, newsletters, and promotional materials (subject to consent)
• To conduct surveys, feedback collection, and market research
• To analyse customer preferences to improve products and services

We ensure that Personal Data is processed only to the extent necessary for the above purposes and in a manner that is lawful, fair, and transparent. Where required by law, we will obtain your consent before processing your Personal Data for specific purposes, particularly in relation to marketing activities.

We will not process Personal Data for purposes that are incompatible with those described above without first notifying you and, where required, obtaining your prior consent.

8. Legal Basis for Processing

ITSES Group Sdn. Bhd. processes Personal Data only where there is a valid legal basis to do so, in accordance with applicable data protection laws including the General Data Protection Regulation (“GDPR”) and the Personal Data Protection Act 2010 of Malaysia (“PDPA”). The legal bases we rely on for processing Personal Data include the following:

a) Consent

We may process your Personal Data where you have provided your explicit, informed, and freely given consent for specific purposes. This may include, but is not limited to:

• Receiving marketing communications and promotional materials
• Submitting enquiries, feedback, or service requests
• Participation in surveys, campaigns, or events

You have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.

b) Contractual Necessity

We may process your Personal Data where such processing is necessary for the performance of a contract to which you are a party, or in order to take steps at your request prior to entering into such a contract. This includes:

• Providing products or services requested by you
• Managing service agreements, transactions, and engagements
• Facilitating payments and fulfilment of contractual obligations

c) Legal Obligations

We may process Personal Data where necessary to comply with applicable laws and regulatory requirements, including but not limited to:

• Taxation, accounting, and reporting obligations
• Compliance with government or regulatory authorities
• Responding to lawful requests, court orders, or legal processes

d) Legitimate Interests

We may process Personal Data where it is necessary for our legitimate business interests, provided that such interests are not overridden by your rights and freedoms. These interests may include:

• Improving our products, services, and business operations
• Ensuring the security and integrity of our systems and networks
• Preventing fraud, abuse, or unauthorised activities
• Conducting business analysis, research, and strategic planning

Where we rely on legitimate interests, we ensure that appropriate balancing tests are conducted to safeguard your rights and that processing is proportionate, reasonable, and necessary.

We will only process Personal Data in accordance with the specific legal basis applicable to the relevant purpose, and we will take all reasonable steps to ensure that such processing is carried out in a lawful, fair, and transparent manner.

9. Consent

ITSES Group Sdn. Bhd. will process your Personal Data based on your consent where required under applicable data protection laws, including the General Data Protection Regulation (“GDPR”) and the Personal Data Protection Act 2010 of Malaysia (“PDPA”).

By interacting with our website, submitting your Personal Data, or engaging with our services, you acknowledge that you have read and understood this Privacy Statement and agree to the collection, use, and processing of your Personal Data in accordance with the terms set out herein.

a) Obtaining Consent

Where consent is required, we will obtain your consent through clear and explicit means, including but not limited to:

• Ticking consent checkboxes on forms or digital platforms
• Submitting enquiries, applications, or service requests
• Accepting cookies or tracking technologies via our website
• Opting in to receive marketing communications

b) Voluntary Provision of Data

The provision of Personal Data is generally voluntary. However, where Personal Data is required for us to provide services or perform contractual obligations, failure to provide such data may result in our inability to fulfil your request or deliver the requested services.

c) Withdrawal of Consent

You have the right to withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out prior to such withdrawal. Upon withdrawal, we will cease processing your Personal Data for the relevant purposes unless we are required or permitted to continue processing under applicable laws.

d) Marketing Consent

Where Personal Data is used for marketing purposes, we will obtain your prior consent and provide you with the option to opt-out or unsubscribe at any time. You may opt-out of receiving such communications by following the unsubscribe instructions in our communications or by contacting us directly.

e) Consent for Cookies

We obtain your consent for the use of non-essential cookies and tracking technologies through our website’s cookie banner. You may accept or reject such cookies and manage your preferences accordingly.

We ensure that consent is obtained in a manner that is freely given, specific, informed, and unambiguous, and we maintain appropriate records of such consent where required for compliance and audit purposes.

``

10. Data Sharing

ITSES Group Sdn. Bhd. may share your Personal Data with third parties in the course of conducting our business operations, provided that such sharing is carried out in accordance with applicable data protection laws, including the General Data Protection Regulation (“GDPR”) and the Personal Data Protection Act 2010 of Malaysia (“PDPA”).

We ensure that any sharing of Personal Data is limited to what is necessary for legitimate business purposes and is subject to appropriate safeguards to protect your privacy and rights.

a) Service Providers and Data Processors

We may share Personal Data with third-party service providers who act on our behalf to support our business operations, including but not limited to:

• IT service providers, system administrators, and cloud hosting providers
• Website analytics and digital service providers
• Payment processors, financial institutions, and auditors
• Logistics, accommodation, and transportation service providers

These third parties are contractually bound to process Personal Data only in accordance with our instructions and are required to implement appropriate security measures to protect such data.

b) Business Partners and Affiliates

We may share Personal Data with our business partners, affiliates, or related entities where necessary for the performance of contracts, delivery of services, joint business activities, or strategic collaborations.

c) Legal and Regulatory Authorities

We may disclose Personal Data to government bodies, regulatory authorities, law enforcement agencies, or other third parties where required by law or where such disclosure is necessary to:

• Comply with legal obligations or regulatory requirements
• Respond to lawful requests, court orders, or legal processes
• Establish, exercise, or defend legal rights
• Prevent or investigate fraud, security incidents, or unlawful activities

d) Professional Advisers

We may share Personal Data with our professional advisers, including lawyers, auditors, consultants, and insurers, where necessary for obtaining professional advice, managing risk, or ensuring compliance.

e) Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets, Personal Data may be transferred to the relevant third parties as part of the transaction, subject to appropriate confidentiality and data protection safeguards.

f) With Your Consent

We may share your Personal Data with third parties where you have provided your explicit consent for such disclosure.

We do not sell, rent, or trade your Personal Data to third parties for commercial purposes. All data sharing activities are conducted in a manner that ensures confidentiality, integrity, and security of your Personal Data, in line with applicable legal and regulatory requirements.

11. International Data Transfers

ITSES Group Sdn. Bhd. may transfer, store, and process your Personal Data in countries outside of Malaysia in the course of conducting our business operations. Such transfers may occur where our service providers, business partners, affiliates, or systems are located in other jurisdictions.

Where Personal Data is transferred outside of Malaysia or the country in which it was originally collected, we ensure that such transfers are carried out in compliance with applicable data protection laws, including the General Data Protection Regulation (“GDPR”) and the Personal Data Protection Act 2010 of Malaysia (“PDPA”).

a) Safeguards for International Transfers

We implement appropriate safeguards to ensure that Personal Data remains protected when transferred internationally, including:

• Entering into legally binding agreements (e.g., Data Processing Agreements)
• Applying standard contractual clauses or equivalent legal mechanisms
• Ensuring that recipients are subject to adequate data protection laws or frameworks
• Implementing technical safeguards such as encryption and secure access controls

b) Third-Party Service Providers

Where Personal Data is processed by third-party service providers located outside Malaysia, we ensure that such parties are contractually obligated to process Personal Data in accordance with our instructions and to maintain appropriate levels of security and confidentiality.

c) Business Operations and Global Services

International transfers may occur in connection with:

• Cloud storage and hosting services
• IT system support and maintenance
• Business operations, partnerships, and project execution
• Centralised administration or group-level coordination

d) Your Rights and Protections

Regardless of where your Personal Data is processed, we take all reasonable steps to ensure that it is handled securely and in accordance with this Privacy Statement. Where required, you may request further information regarding the safeguards implemented for international transfers.

We do not transfer Personal Data to any organisation or country unless there are adequate controls in place to ensure the security and protection of your Personal Data, including the use of recognised legal and technical safeguards.

12. Data Retention

ITSES Group Sdn. Bhd. retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements, in accordance with applicable data protection laws, including the General Data Protection Regulation (“GDPR”) and the Personal Data Protection Act 2010 of Malaysia (“PDPA”).

The retention period for Personal Data depends on the nature of the data, the purpose for which it is collected, and the legal obligations applicable to such data. In determining the appropriate retention period, we consider factors such as:

• The amount, nature, and sensitivity of the Personal Data
• The potential risk of harm from unauthorised use or disclosure
• The purposes for which we process the Personal Data and whether those purposes can be fulfilled through other means
• Applicable legal, regulatory, or contractual requirements

a) Retention for Business and Operational Purposes

We retain Personal Data for as long as necessary to provide our services, manage customer relationships, perform contractual obligations, and maintain accurate business and financial records.

b) Retention for Legal and Regulatory Compliance

We may retain certain Personal Data for longer periods where required to comply with applicable laws, regulations, tax requirements, or legal processes, or where necessary to establish, exercise, or defend legal claims.

c) Data Deletion and Anonymisation

When Personal Data is no longer required for the purposes for which it was collected, we will take reasonable steps to securely delete, destroy, or anonymise such data in a manner that prevents it from being reconstructed or identified.

d) Archived Data

In certain circumstances, Personal Data may be retained in secure archives for historical, administrative, or audit purposes, subject to appropriate safeguards and restricted access controls.

We periodically review our data retention practices to ensure that Personal Data is not retained longer than necessary and that it is managed in compliance with applicable data protection laws and internal data governance policies.

13. Data Security

ITSES Group Sdn. Bhd. is committed to ensuring the security, integrity, and confidentiality of your Personal Data. We implement appropriate technical, organisational, and administrative measures to protect Personal Data from unauthorised access, use, disclosure, alteration, or destruction, in accordance with applicable data protection laws, including the General Data Protection Regulation (“GDPR”) and the Personal Data Protection Act 2010 of Malaysia (“PDPA”).

a) Technical Security Measures

We implement a range of technical safeguards designed to protect Personal Data, including but not limited to:

• Data encryption during transmission and, where appropriate, at rest
• Firewalls, intrusion detection systems, and network security controls
• Secure authentication mechanisms and access controls
• Regular system monitoring and vulnerability assessments

b) Organisational and Administrative Controls

We adopt internal policies, procedures, and governance frameworks to ensure that Personal Data is handled responsibly and securely, including:

• Role-based access controls to restrict data access to authorised personnel only
• Employee training and awareness programs on data protection and cybersecurity
• Confidentiality obligations for employees, contractors, and third-party service providers
• Implementation of internal data protection policies and compliance standards

c) Third-Party Security

Where Personal Data is processed by third-party service providers (“Data Processors”), we ensure that such parties are subject to contractual obligations requiring them to implement appropriate technical and organisational measures to safeguard Personal Data and to process such data only in accordance with our instructions.

d) Incident and Breach Management

We maintain procedures to detect, respond to, and manage potential data breaches or security incidents. In the event of a data breach that may compromise your Personal Data, we will take appropriate remedial actions and, where required by law, notify the relevant authorities and affected individuals in a timely manner.

e) Data Minimisation and Access Control

We ensure that access to Personal Data is limited to individuals who require such access for legitimate business purposes. Personal Data is processed only to the extent necessary and is subject to strict access control and data minimisation principles.

While we take all reasonable steps to protect Personal Data, it is important to note that no transmission of data over the internet or electronic storage system can be guaranteed to be completely secure. As such, we encourage users to take appropriate precautions when sharing Personal Data online.

14. Your Rights

Under applicable data protection laws, including the General Data Protection Regulation (“GDPR”) and the Personal Data Protection Act 2010 of Malaysia (“PDPA”), you have certain rights in relation to your Personal Data. ITSES Group Sdn. Bhd. respects these rights and is committed to facilitating their exercise in a transparent and efficient manner.

Subject to applicable legal conditions and limitations, your rights include the following:

a) Right to Access

You have the right to request access to the Personal Data we hold about you, including information on how such data is used, processed, and disclosed.

b) Right to Rectification

You have the right to request correction or updating of any inaccurate or incomplete Personal Data to ensure that it is accurate and up to date.

c) Right to Erasure

You may request the deletion or removal of your Personal Data where there is no valid reason for us to continue processing it, subject to legal and contractual obligations.

d) Right to Restrict Processing

You have the right to request that we restrict or suspend the processing of your Personal Data under certain circumstances, such as where you contest the accuracy of the data or object to its processing.

e) Right to Data Portability

Where applicable, you have the right to request that your Personal Data be transferred to you or to another organisation in a structured, commonly used, and machine-readable format.

f) Right to Object

You have the right to object to the processing of your Personal Data where such processing is based on legitimate interests or for direct marketing purposes.

g) Right to Withdraw Consent

Where Personal Data processing is based on your consent, you have the right to withdraw such consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.

h) Right to Lodge a Complaint

You have the right to lodge a complaint with the relevant supervisory or regulatory authority if you believe that your Personal Data has been processed in a manner that does not comply with applicable data protection laws.

i) Exercise of Rights

To exercise any of your rights, you may contact us using the details provided in this Privacy Statement. We may require verification of your identity before processing your request to ensure the security and confidentiality of your Personal Data.

We will respond to your request within a reasonable timeframe and in accordance with applicable legal requirements. In certain circumstances, we may decline a request where we are legally permitted to do so, or where the request is manifestly unfounded or excessive.

15. Cookies

ITSES Group Sdn. Bhd. uses cookies and similar tracking technologies to enhance your browsing experience, analyse website performance, and improve the functionality of our digital platforms. Cookies are small data files that are stored on your device when you visit a website.

We use cookies in compliance with applicable data protection laws, including the General Data Protection Regulation (“GDPR”) and the Personal Data Protection Act 2010 of Malaysia (“PDPA”).

a) Types of Cookies We Use

i) Essential Cookies

These cookies are necessary for the operation of our website and enable core functionalities such as security, network management, and accessibility. These cookies do not require user consent.

ii) Performance and Analytics Cookies

These cookies collect information about how users interact with our website, such as pages visited, time spent on pages, and error messages. This information is used to improve website performance and user experience.

iii) Functional Cookies

These cookies enable the website to remember your preferences and settings, such as language preferences or login details, to provide a more personalised experience.

iv) Marketing and Advertising Cookies

These cookies may be used to deliver relevant advertisements and marketing communications based on your interests and browsing behaviour, including tracking usage across different websites.

b) Purpose of Cookies

• To ensure proper functionality of the website and services
• To analyse and improve website performance
• To personalise user experience and preferences
• To support security and fraud prevention measures
• To deliver targeted marketing (where applicable and consented)

c) Consent for Cookies

We obtain your consent for the use of non-essential cookies through our website’s cookie banner. You may choose to accept or reject such cookies, and you may modify your preferences at any time. Essential cookies required for the operation of the website may still be used regardless of your preferences.

d) Managing Cookies

You may control or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality and performance of the website.

e) Third-Party Cookies

We may allow third-party service providers, such as analytics and advertising partners, to set cookies on our website. These third parties may collect and process your data in accordance with their own privacy policies.

We ensure that the use of cookies is transparent and in line with applicable legal requirements. For further information on how cookies are used, you may refer to this section or contact us directly.

16. Third-Party Links

Our website, applications, or services may contain links to third-party websites, platforms, or external resources that are not operated or controlled by ITSES Group Sdn. Bhd. These links are provided for your convenience and informational purposes only.

Please note that once you leave our website or are redirected to a third-party platform, this Privacy Statement will no longer apply. We do not have control over, and are not responsible for, the content, privacy practices, or data protection policies of such third-party websites or services.

We strongly recommend that you review the privacy policies and terms of use of any third-party websites or services that you access, in order to understand how your personal data may be collected, used, and disclosed by those entities.

a) No Responsibility for Third-Party Practices

ITSES Group Sdn. Bhd. shall not be liable for any loss, damage, or misuse of Personal Data resulting from your interaction with third-party websites or services, including but not limited to the collection, storage, or processing of your Personal Data by such third parties.

b) Third-Party Integration

Our website may integrate or utilise services provided by third parties, such as analytics tools, embedded content, or external plugins. These third parties may collect and process your Personal Data independently in accordance with their own privacy policies.

c) User Responsibility

It is your responsibility to exercise caution and ensure that you understand the privacy practices of third-party websites before providing any Personal Data. We encourage you to verify the authenticity and security of external websites prior to sharing sensitive information.

We do not endorse or make any representations regarding third-party websites or services, and your use of such external links is entirely at your own risk.

17. Children’s Data

ITSES Group Sdn. Bhd. does not knowingly collect, process, or store Personal Data from individuals under the age of 18 (“minors”) without appropriate parental or legal guardian consent, in accordance with applicable data protection laws, including the General Data Protection Regulation (“GDPR”) and the Personal Data Protection Act 2010 of Malaysia (“PDPA”).

Our website, products, and services are not intended for use by minors, and we do not intentionally target or solicit Personal Data from individuals under the age of 18. We encourage parents and legal guardians to monitor and guide the online activities of minors to ensure that their Personal Data is not shared without proper oversight.

a) Collection of Data from Minors

In the event that we become aware that Personal Data belonging to a minor has been collected without verified parental or guardian consent, we will take immediate steps to:

• Cease processing such Personal Data
• Delete or securely remove the data from our records
• Implement measures to prevent further unauthorised collection

b) Parental or Guardian Rights

Parents or legal guardians who believe that a minor under their care has provided Personal Data to ITSES Group Sdn. Bhd. without their consent may contact us to request access to, correction, or deletion of such data.

c) Safeguards and Compliance

We implement appropriate measures to prevent the collection and inappropriate use of Personal Data relating to minors, and we strive to ensure compliance with applicable legal obligations regarding children’s data protection.

If you believe that we may have inadvertently collected Personal Data from a minor, please contact us immediately at info@itsesgroup.com, and we will take prompt action to investigate and address the matter.

18. Policy Updates

ITSES Group Sdn. Bhd. reserves the right to update, amend, or revise this Privacy Statement from time to time to reflect changes in our business operations, legal obligations, or data protection practices.

Any updates to this Privacy Statement will be posted on this page with a revised “Effective Date” to indicate when the changes take effect. Where required by applicable laws or where the changes are material, we may take additional steps to notify you, such as through email notifications, website announcements, or other appropriate communication channels.

a) Continuous Review and Improvement

We regularly review and update our Privacy Statement to ensure that it remains accurate, up to date, and aligned with current legal, regulatory, and industry standards, including the General Data Protection Regulation (“GDPR”) and the Personal Data Protection Act 2010 of Malaysia (“PDPA”).

b) User Responsibility

We encourage you to review this Privacy Statement periodically to stay informed about how we collect, use, and protect your Personal Data. Your continued use of our website or services after any updates constitutes your acknowledgment and acceptance of the revised Privacy Statement, unless otherwise required by law.

c) Material Changes

Where significant changes are made that affect your rights, the way your Personal Data is processed, or the purposes of processing, we will make reasonable efforts to provide clear and prominent notice prior to such changes taking effect, and obtain your consent where required by applicable laws.

If you do not agree with any updates to this Privacy Statement, you should cease using our services and may contact us to request the deletion or restriction of your Personal Data, subject to applicable legal requirements.

19. Complaints

ITSES Group Sdn. Bhd. is committed to ensuring that your Personal Data is processed in accordance with applicable data protection laws, including the General Data Protection Regulation (“GDPR”) and the Personal Data Protection Act 2010 of Malaysia (“PDPA”). We take any concerns or complaints regarding the handling of Personal Data seriously and strive to resolve them in a prompt, fair, and transparent manner.

a) Raising a Complaint

If you have any concerns or believe that your Personal Data has been processed in a manner that is inconsistent with this Privacy Statement or in violation of applicable data protection laws, you are encouraged to contact us directly in the first instance.

You may submit your complaint by contacting us at:

Email: info@itsesgroup.com

b) Investigation and Response

Upon receiving a complaint, we will:

• Acknowledge receipt of your complaint within a reasonable timeframe
• Conduct an internal investigation into the matter
• Take appropriate corrective actions where necessary
• Provide you with a response outlining the outcome of the investigation

We aim to resolve all complaints efficiently and in accordance with our internal policies and applicable legal obligations.

c) Escalation to Regulatory Authorities

If you are not satisfied with our response, or if you believe that your Personal Data has been processed unlawfully, you have the right to lodge a complaint with the relevant data protection authority, including:

• The Personal Data Protection Commissioner of Malaysia
• Relevant supervisory authorities within the European Union (for GDPR-related matters)

d) Cooperation with Authorities

ITSES Group Sdn. Bhd. will cooperate fully with any regulatory or supervisory authorities in the investigation and resolution of complaints relating to Personal Data protection.

We are committed to maintaining high standards of data protection and continuously improving our processes to address any concerns raised by data subjects.

20. Contact Information

If you have any questions, concerns, or requests relating to this Privacy Statement or the processing of your Personal Data, you may contact ITSES Group Sdn. Bhd. using the details provided below.

We are committed to ensuring transparency and accountability in the handling of Personal Data, and we will make reasonable efforts to respond to all enquiries and requests in a timely and efficient manner.

a) Contact Details

ITSES Group Sdn. Bhd.
No. 6973, Bukit Kuang Business Centre
24000 Kemaman, Terengganu
Malaysia

Email: info@itsesgroup.com
Telephone: +609-863 7567

b) Data Protection Enquiries

For matters specifically relating to data protection, privacy rights, or the exercise of your rights under applicable data protection laws, you may contact us via email. Please include sufficient details to enable us to verify your identity and process your request efficiently.

c) Response Time

We aim to respond to all legitimate enquiries and requests relating to Personal Data within a reasonable timeframe and in accordance with applicable legal requirements. In certain circumstances, we may request additional information to verify your identity before fulfilling your request.

d) Communication Channels

You may contact us through the above channels for:

• General privacy enquiries
• Requests to access, correct, or delete Personal Data
• Withdrawal of consent
• Submission of complaints or feedback

We are committed to maintaining open communication and ensuring that your privacy rights are respected and upheld at all times.

---