Takaful Malaysia
Takaful Malaysia's Privacy Notice
Takaful Malaysia's Privacy Notice

 

This Privacy Notice was last updated on 19 January 2026

 

Our Commitment to Your Privacy

 

We, Syarikat Takaful Malaysia Keluarga Berhad, Syarikat Takaful Malaysia Am Berhad and our respective subsidiary(ies), related and/or associated company(ies)  (separately and respectively referred to as “Takaful Malaysia”, “our”, “us” or “we”, as applicable, depending on the entity to which you provide your personal information) are committed to protecting the privacy and security of your personal information that is entrusted to us and under our care, in accordance with applicable privacy laws including but not limited to the Personal Data Protection Act 2010 (including any amendments) and the Code of Practice on Personal Data Protection for the Insurance and Takaful Industry in Malaysia (collectively referred to as “PDPA”).

 

Part A: Purpose of this Privacy Notice 

This Privacy Notice is issued in compliance with the PDPA. Through this Privacy Notice, we hope it can help you understand how your personal information is collected, used, maintained, disclosed, and/or protected (“process”), as well as your rights as the owner of the personal information.

 

In this Privacy Notice, the terms “you,” “your” and “yours” refer to any person whose personal information is processed by us. You may provide your personal information to us through a commercial transaction such as subscribing to or participate in our takaful product or services (“Commercial Transaction”), or when you interact with us via our authorised channels (“Interaction”), including our websites, mobile applications, or other official digital platforms (“Digital Platforms”). This includes, but is not limited to, our customers, visitors to our Digital Platforms, business partners, employees, agents, and service providers.

 

Part B: Your Consent Matters

When you provide us with your personal information during your Commercial Transaction or Interaction with us, you are giving your consent for us to process your personal information.

 

Your personal information may also be provided to us by a third party. For example, this may be done by a proposer for a group takaful certificate or for a certificate taken on the life of another person. Your information may also be shared with us if a certificate owner has named you as a beneficiary, nominee, trustee, or assignee. In these situations, you are considered to have given your authorisation and consent to the proposer or certificate owner for us to process your personal information.

 

If you are under the age of 18, your personal information may be provided to us by your parent, legal guardian, or any individual with parental responsibility over you. In such circumstances, consent for us to process your personal information shall be deemed to have been given by such parent, legal guardian, or individual with parental responsibility on your behalf.

 

We will process your personal information in accordance with the PDPA and this Privacy Notice.

 

The collection of your personal information by us may be voluntary or mandatory depending on the purposes for which it is collected. Where it is mandatory for you to provide us with your personal information, and you fail to provide us with such data, or do not consent to this Privacy Notice, we will not be able to provide our products and/or services or continue to deal with you.

 

We may collect your sensitive data as defined under the applicable laws and as described in Part C below, if you participate in our certain products and services such as medical takaful, which requires you to disclose such sensitive data to us. We will only use your sensitive data to provide the service(s) related to the product you signed up for. If we process your sensitive data, we will ask for your explicit consent.

 

Part C: Types of Personal Information We Collect from You

We may collect certain personal information from you, including but not limited to the following:

 

Personal Information

For your better understanding, “personal information” refers to any information that can identify you as an individual. This includes details such as your contact information, financial or lifestyle information, or feedback you provide through surveys. It also includes information that, when combined with other data, could identify you.

 

Additionally, it includes sensitive personal information, such as data relating to your physical or mental health and biometric data. It does not include aggregate or anonymous data because that information does not identify an individual.

 

See below for a more detailed description of the types of personal information we may collect from you:-

 

    • Contact details: For example, full name, mailing and email address, and telephone number;
    • Demographic details: For example, age, occupation, marital status, nationality, and information relating to beneficiaries;
    • Health-related details: For example, lifestyle habits, medical conditions, health history, smoking status, and diagnostic information;
    • Financial details: For example, contributions amount, investment accounts, retirement planning goals, income sources, and risk profile;
    • Identifiers: For example, bank account details and government-issued identification numbers;
    • Supporting documentation: For example, tax forms, bank statements, identification records, wills, proof of relationship, or powers of attorney;
    • Interaction records: For example, responses to surveys, call centre communications, and customer feedback or complaints; and
    • Biometric information: For example, fingerprint data
    • Electronic Data: For example, Internet Protocol (IP) addresses, cookies, activity logs, online identifiers and location data

 

Part D: Use of Personal Information Collected

We will only process your personal information solely to conduct our business in the course of carrying out our role as a licensed takaful operator. These purposes include but not limited to the following: –

 

    1. Carrying out our duties as a licensed takaful operator under the Islamic Financial Services Act 2013;
    2. Perform our contractual obligations pursuant to a written agreement(s) entered by us, including customer service, complaints handling, conservation, and any value-added services. Such written agreement(s) includes our takaful certificate(s), agency contract, broking agreements and employment contracts;
    3. using cloud-based digital solutions, advanced technologies, IT support, security, and advisory services to carry out our functions such as underwriting and claims handling;
    4. conducting investigations during underwriting for new business and throughout business relationship, including but not limited to certificate servicing, claims assessment and/or identifying of any possible misrepresentation of material information;
    5. exercising the right to recover payments from you or any relevant third party such as subrogation/recovery;
    6. carrying out any activity for the purpose of preventing, investigating and/or reporting any actual or suspected criminal activity (e.g. money laundering, terrorist financing, bribery, corruption, fraud and etc.);
    7. carrying out any activity in compliance with the requirements of any law, regulation or guidelines that are issued by or in cooperation with any regulatory or other authority within or outside Malaysia;
    8. carrying out any activity for marketing of our takaful product (including direct marketing, unless expressly instructed to cease by you);
    9. carrying out research, audit, risk assessment, survey, including statistical/actuarial research or data analytics/study provided you cannot be independently identified in such report/study;
    10. the performance of any obligations under any lawful scheme of transfer of business;
    11. cooperation in the assistance of investigations by any insurer or takaful operator;
    12. conducting investigations on any takaful agent(s) and its third-party service providers (including any related party) for any allegation of fraud, conspiracy, breach of law, rules and regulations, codes of practice and misconduct or any unethical behaviour or practices;
    13. performance of re-takaful; and
    14. information sharing with other insurers, takaful operators and any other information sharing systems, which may include credit-rating systems.

 

Part E: How Do We Collect Your Personal Information

We may obtain your personal information from various sources, such as:

 

    1. When you fill in and/or provide any documents or verbal information to participate in a takaful product or request our services;
    2. When you fill in and/or provide any documents or verbal information to make a claim under a takaful product;
    3. When you contact Takaful Malaysia through various methods such as application forms, emails, letters, Digital Platforms or telephone calls with our branch staff. Telephone calls may be monitored or recorded for quality assurance, training, and security purposes;
    4. When you use or receive our products and services through any of our Digital Platforms;
    5. From our analysis of your transactions (e.g. payment history or product purchases);
    6. When we obtain your personal information through your participation in our customer surveys or when you sign up for any of our competitions or promotions;
    7. When we obtain any data and information from third parties (e.g. credit reference agencies, regulatory and enforcement agencies, hospitals, adjustors, solicitors, employers, beneficiaries, legal representatives, spouses, parents, guardians, dependents and/or companies/partnership that you hold directorships, shareholdings or partnership in);
    8. When you engage in any commercial transactions with Takaful Malaysia, including providing goods, services, or professional services.;
    9. when you visit our websites or download our mobile device applications, we may collect your personal information such as your device’s IP address or data from cookies;
    10. From video and audio recordings captured by our closed-circuit surveillance cameras at our premises or at events we organise; and/or
    11. From publicly available sources.

 

Part F: Access Rights on Your Personal Information

Your personal information is important to Takaful Malaysia to enable us to provide our services. While we will use all reasonable efforts to ensure the validity of your data, we may have relied on sources mentioned above and therefore cannot guarantee the accuracy of your personal information. If there are any changes to your data or if you believe that the data, we have about you is inaccurate, incomplete, misleading or not up to date, please contact us so that we may take steps to update your data.

 

You, are entitled to exercise the following rights with respect to your personal information at any time:

 

    1. confirm whether Takaful Malaysia holds personal information about you and obtain access to such data, including information on how it has been used or disclosed;
    2. request corrections to any personal information that is inaccurate, incomplete, or outdated;
    3. request the deletion of your personal information in situations where retention is no longer necessary or lawful;
    4. withdraw or modify the consent you have previously given us including consent given for marketing and promotional purposes;
    5. request the closure or removal of your registered account with us;
    6. raise a concern or complaint regarding the way your personal information is being handled; and
    7. seek clarification regarding our policies, procedures, and practices in relation to the handling of personal information.

 

In this regard, depending on the extent of your request or withdrawal of consent for Takaful Malaysia to process your personal information, Takaful Malaysia may not be able to continue its existing relationship with you or your contract with Takaful Malaysia may need to be terminated.

 

Any requests relating to access, correction, deletion, consent withdrawal, or complaints may be directed to us by writing through the contact details provided on our corporate website Help & Support | Takaful Malaysia or in the case of marketing consent, in the manner set out in Part K below.

 

Part G: Disclosure of Your Personal Information

To provide our services effectively and for the purposes explained in Part D above, Takaful Malaysia may share your personal information with the following categories of parties, strictly on a need-to-know basis, within or outside Malaysia:

 

    1. Our authorised representatives or intermediaries involved in distributing our products and services;
    2. Our group companies, affiliates, appointed third-party service providers, or contractors that support our operations, including but not limited to those providing administration, data processing, telecommunications, IT, payment processing, debt recovery, securities clearing, technology outsourcing, call centre support, printing, and/or mailing services;
    3. Subject to your prior written consent, our group companies, affiliates and/or selected third parties for the purposes of cross marketing and direct marketing;
    4. Specialist service providers, such as retakaful operators, investment managers, claims assessors, industry bodies and professional associations, that support the delivery of our services;
    5. Research agencies, survey companies, or credit rating organisations that assist in improving or assessing our services;
    6. Government bodies, regulators, law enforcement agencies, or other authorised parties where disclosure is required to meet legal, regulatory, or contractual obligations; and
    7. Any other person you have authorised us to share your data with.

 

From time to time, your personal information may also be disclosed or transferred in connection with our mergers, acquisitions, sales, or other corporate transactions. In such cases, we will ensure your information continues to be handled in accordance with this Privacy Notice, in accordance with the applicable data privacy laws.

 

Part H: Retention of Personal Information

Your personal information will not be kept longer than is necessary for the fulfil the purpose for which it was collected, unless retention is necessary for operational, audit, legal, regulatory, tax or accounting purposes including but not limited to the following:-

 

    1. legal proceedings or a regulatory or similar investigation or obligation to produce the said information;
    2. a crime or misconduct is suspected or detected;
    3. information is relevant to a company in liquidation or receivership, where a debt is due to the insurers/takaful operators; or
    4. Information is considered to be of potential historical importance including but not limited to the purposes described above.

 

We apply reasonable security measures to prevent unauthorised or accidental access, processing, erasure, loss or use including limiting physical access to data within our systems and encryption of sensitive data when transferring such data. If we disclose any of your data to any of the parties under Part G, we will require them to appropriately safeguard the data provided to them.

 

We will take all reasonable steps to ensure that your personal information is securely destroyed or permanently deleted when it is no longer necessary for any of the purpose above.

 

Part I: Electronic Communications and Direct Marketing by Takaful Malaysia

Subject always to your prior written consent, Takaful Malaysia may use your personal information such as your name and contact details for promotional or marketing purposes, including sending promotional materials and conducting direct marketing in relation to our products and services, where permitted by law (“Marketing Activities”). For these purposes, and subject to legal requirements, we may share your personal information with appointed third parties such as service providers, call centres, marketing or research agencies, and organisations involved in the Marketing Activities. These parties may contact you via post, email, SMS, phone calls, or other electronic means.

 

Part J: Direct Marketing and Cross-Marketing within Financial Group and Selected Third Party

Subject always to your prior written consent, your information may be disclosed to individuals or organizations related to or associated with Takaful Malaysia and/or any selected third-party for cross marketing and direct marketing of products or services of such organizations or associate company and/or selected third party.

 

Part K: Withdrawal of Marketing Consent

You have the right to withdraw your marketing consent under Part I and Part J at any time by completing the Endorsement Form, which can be obtained from our website at www.takaful-malaysia.com.my or by writing to us by writing through the contact details provided on our corporate website Help & Support | Takaful Malaysia.

 

Part L: Use of Automated Processing and Assisted Decision Making

We may use automated processing, including artificial intelligence and machine learning, to analyse data and assist decision-making in our operations. This helps us improve communications, enhance client experience, make processes safer and more efficient, and identify potential risks.

 

Part M: Use of Cookies

Takaful Malaysia websites and digital platforms may place cookies on your device to improve functionality and enhance your browsing experience. Cookies are small data files that allow us to remember your preferences, analyse site usage, and support certain features. You can manage or disable cookies through your browser settings. However, doing so may limit some functions or reduce the quality of your experience on Takaful Malaysia site. By continuing to use our platforms without adjusting your settings, you are agreeing to our use of cookies as outlined in this notice.

 

Part N: External Links

Takaful Malaysia authorised website, mobile applications, or electronic platform (such as social media pages) may include links to third-party sites. Please note that these external sites are not governed by this Privacy Notice. We encourage you to review the privacy policies or notice of any linked websites to understand how they handle the collection, use, sharing, and protection of personal information.

 

Part O: Updates to This Privacy Notice

We may update this Privacy Notice from time to time to ensure compliance with applicable laws and regulations or to reflect changes in our internal practices. Updates will be made by revising the wording on this webpage and updating the publication date at the top of the page. Please note that you may not be directly notified of these changes, so we encourage you to check this Privacy Notice regularly to stay informed of any updates.

 

Part P: Contact Us

If you have any questions about this Privacy Notice, or would like additional information regarding our data protection practices, you can contact our Data Protection Officer (“DPO”) using the following details:

 

Attn:​ Data Protection Officer
Address: Takaful Malaysia

Menara Takaful Malaysia

No. 4, Jalan Sultan Sulaiman

50000 Kuala Lumpur

Malaysia

E-mail Address:​ dpo@takaful-malaysia.com.my