3. COLLECTION AND USE OF PERSONAL DATA

3.1. We generally do not collect your Personal Data unless:

(a) it is provided to us voluntarily by you directly or via a third party who has been duly authorised by you to disclose your personal data to us (your "authorised representative”) after (i) you (or your authorised representative) have been notified of the purposes for which the data is collected; and (ii) you (or your authorised representative) have provided written consent to the collection and usage of your personal data for those purposes; or

(b) collection and use of personal data without consent is permitted or required by the PDPA or other laws.

(c) collection and use of Personal Data without consent is permitted or required by the PDPA or other laws.

3.2. We will seek your consent before collecting any additional Personal Data and before using your Personal Data for a purpose which has not been notified to you (except where permitted or authorised by the PDPA or other laws).

3.3. We may collect and use your Personal Data for any or all of the following purposes:

(a) performing obligations in the course of or in connection with our provision of the Services requested by you; to measure the performance of the Services; to monitor the Services provided by or made available through us; to personalise and improve the provision of the Services; to develop new products and services;

(b) to verify your identity, conduct due diligence checks and identify you as a user in our system;

(c) to facilitate the creation of, administration, access, use and security of your account in connection with our provision of the Services requested by you;

(d) to verify and determine your geographic location, provide localised versions of the Services, provide you with customised or personalised recommendations or content, determine your Internet service provider; to optimise our selection and recommendation algorithm and delivery;

(e) to process payment or credit transactions;

(f) to prevent, detect and investigate fraud or other potentially prohibited, unauthorised or illegal activities; to detect, prevent and remediate any violations of our policies or terms and conditions;

(g) to respond to, handle, and process queries, requests, applications, complaints, and feedback from you; to address or investigate any complaints, claims or disputes;

(h) to send administrative communications relating to our Services;

(i) to communicate with you to assist you with operational requests (such as, password reset requests);

(j) to handle requests for data access or correction;

(k) to analyse and understand our users; to improve our Services (including, but not limited to, our user interface experiences); to participate in industry exercises and studies; to conduct research and measurement activities;

(l) to train our employees and third party service providers; to monitor for quality assurances;

(m) to manage your relationship with us;

(n) to enforce any obligation owed to us; to protect our rights and the rights of other users, vendors, customers, partners and/or third parties;

(o) to seek professional advice (such as, legal advice);

(p) to prepare and maintain financial reporting, regulatory reporting, management reporting, risk management, audit and record keeping purposes;

(q) to negotiate a business transaction (including, but not limited to, any financing, merger, acquisition or liquidation involving Mednefits); to enable any actual or proposed assignee, transferee, participant or sub-participant of our rights, business or obligations to evaluate any proposed transaction;

(r) to negotiate and/or enter into any transaction relating to our acquisition by, or merger with, another entity or the sale or transfer of all or part of our business or assets; 

(s) to manage our infrastructure and business operations (including, but not limited to, our technology infrastructure) and to comply with our internal policies and procedures;

(t) to conduct due diligence enquiries and comply with the enforcement of tax, sanctions or prevention or detection of money laundering, terrorism financing or other unlawful activities;

(u) to comply with all applicable laws, regulations, rules, code of practice, guidelines, directions, orders, instructions and requests from any authorities (whether local or foreign), including any regulatory, governmental, tax and law enforcement authorities or other authorities; to assist in law enforcement and investigations conducted by any governmental and/or regulatory authority;

(v) any other incidental business purposes related to or in connection with the above;

(w) any other purpose specifically (i) provided for in the Services; (ii) provided for in any particular product or service offered or provided by us; (iii) described in notices we provide to you from time to time; or (iv) permitted or required by law or the relevant authorities; and

(x) transmitting to any unaffiliated third parties (including our third party service providers and agents), and relevant governmental and/or regulatory authorities, whether in Malaysia or abroad, for the aforementioned purposes.

3.4. We may also use your Personal Data to send you newsletters, surveys, offers and promotional materials relating to our Services, via various modes of communication such as email, short message service and push notifications. If you do not wish to receive marketing communications from us, please let us know in writing.