1. Definitions

In these Terms & Conditions:

1.1 “We / Us / Our / Company” means [Name of your dealership / authorised dealer entity].
1.2 “You / Your / Client / Customer” means the person who submits the form and whose information is collected.
1.3 “Personal Data” means any data relating to a natural person who is identified or identifiable (directly or indirectly) and includes, but is not limited to, name, phone number, email, IC/passport number, address, utility bill, etc.
1.4 “Processing” means any operation or set of operations performed on Personal Data (e.g. collection, use, storage, disclosure, destruction) as defined in the PDPA.
1.5 “Sensitive Data” means personal data of a more sensitive nature (e.g., health data, biometric data, etc.), as defined under the PDPA, if applicable.

2. Purpose of Collection & Use

You agree that we may collect, store, process, use, and disclose your Personal Data for the following purposes (the “Purposes”):

(a) to verify your identity and eligibility for services or plans;
(b) to process your application and provide you with telecom / network / connectivity / device / subscription services;
(c) to contact you for matters relating to your application, service setup, billing, support, or follow-up;
(d) to perform credit checks, due diligence, and related internal checks (if applicable);
(e) to comply with legal, regulatory, auditing, or contractual obligations;
(f) for reporting, monitoring, record keeping, internal business purposes;
(g) any other ancillary or related purpose which you have been informed of and to which you have consented.

3. Consent & Acknowledgement

3.1 By submitting your information in this form, you expressly consent and agree that we may process your Personal Data for the Purposes as listed above.
3.2 You acknowledge that you have been informed of (or will be informed of) the categories of Personal Data collected, the purposes of processing, any third parties to whom your data may be disclosed, how long your data will be retained, and your rights under the PDPA.
3.3 You warrant that all Personal Data you provide is true, accurate, and complete. You agree to promptly update us of any changes to the information.
3.4 If you provide any Personal Data of another person (for example, a joint applicant), you confirm that you have the right to disclose that data and have obtained the necessary consent from that other person.

4. Disclosure to Third Parties

4.1 We may disclose your Personal Data to third parties, including but not limited to:
(a) our group companies, agents, contractors, service providers (e.g. IT providers, credit verification agencies, mailing or courier services);
(b) telecom / network operators, regulatory bodies, governmental agencies, law enforcement, auditors, or insurers;
(c) any other party where required by law, court order, or regulatory requirement.
4.2 We will ensure that any third party to whom your data is disclosed is subject to appropriate confidentiality and data protection obligations.

5. Data Security & Retention

5.1 We will take commercially reasonable steps (technical and organizational) to protect your Personal Data from unauthorized or unlawful access, alteration, loss, destruction, or disclosure.
5.2 We will retain your Personal Data only for as long as necessary to fulfill the Purposes or as required or permitted by applicable laws, whichever is longer. After that period, we will securely delete or anonymize your data, unless otherwise required by law or regulation.

6. Rights of the Data Subject

6.1 Under the PDPA, you have certain rights as a data subject, including:
(a) the right to request access to your Personal Data held by us;
(b) the right to request correction of inaccurate, incomplete, or outdated data;
(c) the right to withdraw your consent to processing (subject to legal or contractual restrictions);
(d) the right to prevent processing that may cause you damage or distress;
(e) the right to object to processing for direct marketing purposes.
6.2 To exercise any of the rights above, you must submit a request in writing to our designated contact (see Contact section). We may require proof of identity, and we will respond within a reasonable period under the PDPA.

7. Data Breach & Notification

7.1 In the event of a data breach that affects your Personal Data (i.e. unauthorized access, disclosure, or loss), we will notify you as soon as practicable if the breach is likely to cause significant harm or impact to you, and we may also notify the Personal Data Protection Commissioner or other relevant authority, as required by law or regulation.
7.2 We will take remedial and mitigation measures to contain and manage the breach (e.g. assessment, forensic, prevent recurrence, remedial steps).

8. Liability & Indemnity

8.1 You agree to indemnify and hold us harmless from and against any losses, damages, liabilities, claims or costs arising from any misrepresentation, inaccurate information, or another person’s data you have provided without proper consent.
8.2 We are not liable for any indirect, special, incidental, or consequential damages resulting from your use of the services, or from any breach or failure in respect of the processing of your data unless by statute or expressly agreed.

9. Amendments

9.1 We reserve the right to amend or update these Terms & Conditions from time to time. When we do, we will give you notice (via email, SMS, notice on our website, or other appropriate means).
9.2 Your continued submission or use after such notice constitutes your acceptance of the updated Terms & Conditions.

10. Severability & Waiver

10.1 If any provision of these Terms & Conditions is held invalid or unenforceable, the remainder shall continue in full force and effect.
10.2 No failure or delay by us to enforce any right or provision under these Terms & Conditions shall operate as a waiver thereof.

11. Governing Law & Jurisdiction

11.1 These Terms & Conditions shall be governed by and construed in accordance with the laws of Malaysia, including the Malaysian PDPA and any amendments or subsidiary legislation.
11.2 Any dispute arising out of or in relation to these Terms & Conditions shall be subject to the non-exclusive jurisdiction of the courts of Malaysia, unless otherwise agreed.

12. Contact / Data Protection Officer (DPO)

12.1 For inquiries, requests, complaints or exercising your data subject rights, you may contact us at:
 [Name / Department]
 [Address]
 [Phone / Email]

12.2 If you have appointed a Data Protection Officer (DPO), you may contact the DPO at:
 [DPO Name / Contact / Email]