Privacy Notice

This privacy notice (“Notice”) describes how your Personal Data (defined below) is collected, used and disclosed by MyKasih Foundation (“MyKasih” or “us” or “we”) as well as MyKasih’s commitment to ensure that your Personal Data is securely processed and kept. Please read this Notice carefully.

For further information on how your Personal Data is processed, depending on your relationship with us, please refer to Section 3 (Use of Your Personal Data) below.

1. Types of Personal Data Collected

“Personal Data” means information about you, from which you are identifiable. Depending on your relationship with us, this may include the following:

Where you are a recipient of MyKasih’s charitable initiatives or programmes, we may collect your name, identification card number, nationality, address, telephone number, email address, race, gender, date of birth, marital status, education background, employment details, your photos , birth certificate, death certificate as well as ‘sensitive personal data’ (such as information relating to your health or medical condition, religious beliefs), and any information about you which you have provided to us through your access and/or use of our website, mobile application and/or in application forms (or any other similar forms).

Where you are a merchant, we may collect your name, identification card number, nationality, address, telephone number, fax number, bank details, race, gender, email address, your photos (for newsletter and/or annual report), any information about you which you have provided to us during the course of our engagements and interactions.

Where you are a donor, we may collect your name, identification card number, contact details (such as address, telephone number, email address), payment and financial information (such as credit or debit card details, bank account information), tax identification number (TIN), photos (for newsletter and/or annual report) and any information about you which you have provided to us through your access and/or use of our website and/or in application forms (or any other similar forms).

In some circumstances, your Personal Data may be collected indirectly from monitoring devices or by other means for example, building access control and monitoring systems, closed circuit television (CCTV).

MyKasih collects certain Sensitive Personal Data in its application form for charitable purposes and/or regulatory compliance. The explicit consent is obtained from applicants at the point of submission.

2. Source of Personal Data

In addition to the information you provide to us directly, we may collect your Personal Data from various third-party information sources such as reference checks, background checks, school management committees (for recipients under the Love My School programmes), non-governmental organisations (NGOs), various governmental authorities and/or third party sources or providers, or information otherwise generated from your interactions or engagements with us.

3. Use of Your Personal Data

We collect, process and retain your Personal Data for the implementation of MyKasih’s activities or programmes, administration and/or distribution of donated funds, issuance of official tax exemption receipts, and/or for the purposes of any contract or agreement you will enter or have entered into with us, which may include, without limitation, the following purpose:-

Where you are a merchant:

  • To facilitate and manage your onboarding and registration in relation to MyKasih’s programmes;
  • To enable and administer transaction processing;
  • To facilitate settlement and payment to you;

Where you are a recipient of MyKasih’s charitable initiatives or programmes:

  • To facilitate and manage your participation in the programme;
  • To assess and verify your eligibility for the programme;
  • To distribute or channel donations and aid under the programmes;

Where you are a donor:

  • To facilitate and manage your onboarding and registration;
  • To prepare and issue tax-related documentation (such as tax exemption receipts and e-invoices) in compliance with applicable legal and regulatory requirements;
  • To submit relevant information to the Inland Revenue Board of Malaysia or for the purposes of complying with statutory reporting obligations;

General:

  • To communicate with you such as responding to your enquiries;
  • To facilitate delivery of relevant services to or from you;
  • To facilitate the promotion and/or advertisement of MyKasih’s activities, programmes, services, presently or in the future;
  • To conduct profiling activities, evaluation and/or due diligence process;
  • Programme monitoring and evaluation;
  • Application to the relevant authorities or bodies for relevant permits or licenses;
  • Submission of proposals to MyKasih’s donors (including MyKasih’s prospective donors);
  • Submission of reports in respect of implementation or completion of MyKasih’s activities and/or programmes;
  • Monitor access to our premises, relevant facilities and systems;
  • To facilitate logistics, planning and the management of events;
  • To conduct research, market surveys and trend analysis;
  • Internal record keeping, maintenance and updating of any information database(s) and other administrative purposes, including audits, fraud monitoring and prevention;
  • Regulatory approvals and compliance;
  • Detection and prevention of fraud and other unlawful or illegal activity, and to support investigations related to such activities;
  • Any other purposes carried out by MyKasih for the management and operations of its activities such as execution of legal agreement, commercial negotiation and discussions;
  • Other reasons as may be required or permitted under the PDPA or under any applicable laws.

(the above shall be referred to collectively as “Purpose”).

Provision of your Personal Data for the Purpose is mandatory. Where you choose not to provide us with this information, it will affect your ability to fully interact or engage with us, participate in our programmes and/or to receive our services.

For example, if you are a recipient of MyKasih’s charitable programmes, the provision of your Personal Data is necessary for us to assess and verify eligibility based on the predefined criteria established by MyKasih. In addition, your Personal Data is also required to facilitate your authentication and enrolment as a beneficiary/recipient. Without such data, MyKasih would not be able to reliably verify your eligibility or provide you with access to assistance in a secure and controlled manner.

If you are a donor, the provision of your Personal Data is mandatory for us to fulfil governance, fiduciary, and statutory obligations, including maintaining proper records of donation sources and issuing tax exemption receipts to you. If you choose not to provide us with your Personal Data, we will not be able to process, issue, and deliver the relevant tax exemption receipts.

4. Disclosure of Personal Data to Third Parties, and/or Transfers out of Malaysia

Your Personal Data will be kept confidential. However, it may be necessary for us to disclose or transfer your Personal Data for the Purposes stated above. You acknowledge and agree that we may disclose and transfer your Personal Data to the following categories of recipients (whether within or outside Malaysia) for the Purposes stated above:

  • MyKasih’s related organisation and/or entities;
  • MyKasih’s programme partners including the NGOs;
  • anybody or person to whom MyKasih is compelled or required to do so under any applicable laws, or law enforcement authorities or agencies, or in response to any government, state, provincial, local government, statutory or municipal authority, industry regulators, agency and/or body;
  • third party service providers (including, for example, financial institutions, auditors, lawyers, company secretaries, insurance companies, events and training providers, cloud computing or data back-up providers, and other advisers); and/or
  • MyKasih’s donors and/or clients.

5. Security and Safeguards

We will continuously implement the appropriate administrative and security safeguards and procedures in accordance with the applicable laws and regulations to prevent the unauthorised or unlawful processing of your Personal Data and the accidental loss or destruction of, or damage to, your Personal Data.

6. Retention

We process your Personal Data only for as long as necessary to fulfil the Purpose stated above, and thereafter for as long as we are required to do so under the relevant statutory limitation periods, applicable laws and regulations, as well as our internal policies, whichever is longer. Where the Personal Data is no longer required for the Purpose stated above or relevant legal requirements, we will delete the Personal Data.

7. Rights of Access and Correction

You have the right to request access to and/or correct your Personal Data by providing written notice to us using the contact information provided below.

8. Personal Data from Minors

We may also collect Personal Data relating to minors (being individuals under the age of 18) where they are recipients of MyKasih’s charitable programmes (such as Love My School student bursary scheme).

Where you provide such Personal Data, you represent and warrant that you are the parent or legal guardian of such minor, or otherwise have the lawful authority to provide such data to us, and you hereby consent on behalf of the minor (where you are authorised to do so) to the processing of the minor’s Personal Data in accordance with this Notice.

9. Contact Information

In the event you wish to limit the processing of your Personal Data, to access or correct your Personal Data, or if you have any inquiries or complaints in respect of the processing of your Personal Data, please contact:

Data Protection Officer

MyKasih Foundation
Level 3, DIALOG TOWER,
No. 15, Jalan PJU 7/5,
Mutiara Damansara,
47810 Petaling Jaya,
Selangor Darul Ehsan
Email: data_protection_officer@mykasih.com.
Tel. no.: +603 7720 1925
(Monday to Friday, excluding public holidays, from 8.30am to 5.30pm)

10. Changes to Privacy Notice

We reserve the right to amend this Notice from time to time without prior notice and any changes to the Notice shall be effective upon posting of the updated or amended Notice on our website: www.mykasih.com.my. By continuing to communicate with us, by using our services (including using this website) following the modifications, updates or amendments to this Notice, such actions shall signify your acceptance of such modifications, updates or amendments.

This Notice is issued in both the English and Bahasa Malaysia languages. In the event of any inconsistencies or discrepancies between the English version and the Bahasa Malaysia version, the English version will prevail.