Privacy Policy

Kedah Islamic Asset Management Berhad (KIAM, “we”, “us”, “our”) operates the platform at kiam.com.my (the “Site”) and related services (collectively, “Services”). We take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and protect your personal data, and your rights in relation to that data.

1. General

At Kedah Islamic Asset Management Berhad (“KIAM”, “we”, “our”, or “us”), we respect your privacy and are committed to protecting your personal data in accordance with the laws of Malaysia, including the Personal Data Protection Act 2010 (PDPA).

This Privacy Notice explains:

• The types of personal data we collect and how we collect them;

• How we use your personal data;

• The parties to whom your personal data may be disclosed;

• How your personal data is stored and protected; and

• Your rights in relation to your personal data, including how to access and update it.

By providing your personal data to us, you consent to the processing of your personal data in accordance with this Privacy Notice.

Where you act on behalf of a corporation and provide personal data relating to its directors, shareholders, officers, or authorised signatories, you confirm that you have obtained their consent and have brought this Privacy Notice to their attention. The corporation is deemed to warrant that such consent has been obtained.

2. Personal Data We Collect

We may collect and process personal data including, but not limited to:

• Name, identification card or passport number, and date of birth;

• Contact details such as residential or correspondence address, telephone number(s), and email address;

• Employment details, occupation, income, source of wealth, and source of funds; and

• Any other personal data required for the purposes stated in this Privacy Notice.

3. Sources of Personal Data

We may obtain your personal data from various sources, including:

• When you apply for, subscribe to, or use our products and services;

• When you register interest through us or our business partners;

• From third parties connected to you, such as employers, joint account holders, guarantors, representatives, or corporate clients;

• From interactions via our websites, mobile applications, or social media platforms;

• From transactions, enquiries, or communications with us; and

• From third-party sources such as credit reporting agencies, fraud prevention agencies, publicly available databases, industry associations, or regulatory bodies.

4. Purpose of Processing

Your personal data may be processed for one or more of the following purposes:

• To establish and manage a relationship between you and KIAM;

• To assess applications for products and services;

• To carry out instructions and provide products and services, including processing payments and receipts;

• To support research, development, and enhancement of products and services;

• To monitor and evaluate service quality;

• To comply with legal, regulatory, audit, risk management, and record-keeping requirements;

• To conduct anti-money laundering, counter-terrorism financing, and financial crime checks;

• To detect, prevent, and prosecute crime;

• To provide information, updates, or marketing communications relating to our products and services (where permitted);

• To engage third-party cryptocurrency or digital asset service providers for transaction screening and processing;

• To respond to enquiries, feedback, or complaints;

• To generate anonymised or aggregated data, statistics, or reports; and

• For any other purpose required or permitted by law, regulation, or regulatory authority.

Where your consent is required for a specific purpose not stated above, we will obtain such consent prior to processing.

5. Disclosure of Personal Data

We may disclose your personal data (to the extent necessary) to:

• KIAM’s directors, officers, employees, and authorised representatives;

• Agents, service providers, professional advisers, consultants, auditors, and legal counsel;

• Custodians, administrators, merchants, strategic partners, and technology providers;

• Third parties authorised by you to act on your behalf;

• Credit bureaus, rating agencies, or financial institutions;

• Regulatory authorities including Bank Negara Malaysia, Securities Commission Malaysia, Bursa Malaysia, and other relevant authorities;

• Any party required by law, court order, or regulatory obligation.

All disclosures are made on a need-to-know basis and subject to applicable data protection requirements.

6. Security of Personal Data

We implement appropriate technical, administrative, and organisational safeguards to protect your personal data against unauthorised access, loss, misuse, alteration, or disclosure.

Our employees, agents, and service providers are bound by confidentiality obligations and are trained to handle personal data securely. Breaches may result in disciplinary or contractual action.

7. Retention of Personal Data

We retain personal data only for as long as necessary:

• For the duration of our relationship with you;

• To protect our legitimate interests after termination;

• To comply with legal, regulatory, or record-keeping requirements; and

• In accordance with our internal data retention policies.

8. Access, Correction, and Updating

You may request access to, correction of, or limitation on the processing of your personal data, subject to applicable laws.

All enquiries or complaints regarding personal data may be directed to:

Kedah Islamic Asset Management Berhad

📧 Email: support@kiam.com.my

9. Revisions to This Privacy Notice

This Privacy Notice may be updated from time to time. Any revisions will be published on our website www.kiam.com.my or communicated through other appropriate channels.

Your continued use of our products or services after such updates constitutes acceptance of the revised Privacy Notice.