Scope of Notice

This Privacy Notice pertains to information, including personal data, collected about you by Muamalat Gold and its affiliates ("Company") ("MGSB"), referred to in this statement either individually or collectively as "the company", "we", "our" or "us". Personal data is information derived from commercial transactions that can reasonably identify you. This Privacy Notice outlines the personal data collected by the company online through our website or Application, as well as offline through our products and services offered over the counter, by the company's Customer Service Representatives, and/or the company's sales and marketing team.

Our Privacy Commitment

This Privacy Notice is issued to inform you of the Company's commitment to the policy of always protecting the confidentiality, integrity, and security of the information provided by you to us, as we recognize the importance of the personal information we hold about customers and the trust they place in us. Your data is classified as confidential and can only be disclosed by us when authorized by you, permitted by any laws (including regulations, standards, guidelines, and/or obligations) applicable to the Company.

Source for Collection of Your Personal Information

We will collect information from various sources, including those mentioned below, which may constitute personal data and/or sensitive personal data relevant to our business relationship with you:

Information we collect from you directly in person when you:

• Apply for products or services, open an account, make deposits into or withdrawals from your account or use your credit or debit card;
• Speak to us over the phone or in person, including during the process of selling or marketing a product or service to you or when you call in for inquiries and/or through our telemarketing calls;
• Visit our sites, use our services, view our online advertisements.

Information we collect about you from other sources without your direct involvement, as permitted by law:

• From Credit Reference Agencies for credit assessment when considering credit applications;
• From any court order or regulatory body having authority over the Company or any law enforcement agency to consider the opening/maintaining of your accounts with us.

Sensitive personal data includes information about your physical and mental health, political opinions, religious beliefs, or criminal records.

Collection of Personal Information

The type of personal information collected varies depending on the type of products and services you seek, and collection may begin before your take-up or upon signing up or depending on how you access and use our products and services. Information collected will include:

Information that identifies you:

• Your name, salutation/title, address, and other contact information such as telephone number, mobile number, etc.;
• Your age, gender, date of birth, race, citizenship, marital status, particulars of identity documents such as identity card or passport, where applicable;
• Your education and employment details;
• Relationship with other data subjects/third parties;
• Credit reports from credit reporting agencies;
• Information about your intended use of our products or services.

Personal Information about Third Parties

If at any time you provide us with personal information about another person, you should ensure that you are authorized to do so and agree to inform that person who we are, that we may use and disclose that personal information, and that they may gain access to it should we hold that information.

Use of Personal Information

Although the primary purpose of collecting your information is for its use in the normal course of general business between the Company and you, the said information may also be applied for purposes incidental to and connected with the said primary purpose, including but not limited to the following:

• Provision of financial services and other related services and credit facilities to you.
• Offering, cross-selling, and marketing products and services of the Muamalat group and companies and its affiliates, including Muamalat Gold Sdn Bhd;
• Maintaining credit history of customers;
• Assisting other financial institutions to conduct credit checks;
• Research and statistical analysis (including behavioral analysis);
• Due diligence checks for employees, suppliers, vendors, IT hardware and software providers before contracting their services or purchasing their products;
• Designing and organizing campaigns/promotions/events for customer participation;
• Retrieving, recording, and storing for internal/external audit purposes;
• Satisfying the terms and conditions of employment contracts with the Company;
• The administration and management of salary, medical, and other employment benefits.

Consent

We only collect personal information about you that is necessary to perform our functions and activities. If you do not provide this information or consent to certain uses of your personal information, we may not be able to provide you with the products or services that you want or process your application for employment or facilities or establish any business dealings with you. In most cases, before or at the time of taking out a new product or applying for a facility(ies) or applying for employment with the Company, (or if that is not practicable, as soon as practicable thereafter) we will obtain your consent for the purposes for which it is intended to be used and to disclose your personal information. Your consent can be expressed verbally or in writing or implied by your actions.

Data Confidentiality and Sharing of Personal Information

We may share your personal information with the Affiliates to offer you products and services of the Company and the Affiliates that may interest you. To enable us to do the same, we will obtain your consent and only share your personal information for the purposes to which you have agreed. Data (except data already in the public domain) held by the Company relating to you will be kept confidential, but we may need to share your personal information in the normal course of general business and connected with the primary purpose for which your information was collected with the following parties, subject at all times to any laws applicable to us:

• The Company and its affiliates;
• Any agent, contractor, developer, third-party service provider, financial guarantee provider, adviser, liquidators/Receivers & Managers, auditors, auctioneer, vehicle dealers/distributors/traders/manufacturers, or consultant who provides administrative, telecommunications, electronic payment, data processing and analysis, payment, securities clearing, debt collection, valuation, insurance, research, legal, financial, accounting, taxation, audit, or refers business to us or other services to the Company;
• Credit reporting agencies, and, in the event of default, to debt collection agencies;
• Any person required by law, rule, regulation, court order, and under any guidelines issued by regulatory or other authorities;
• Legal and other professional advisers.

International Transfers

As we may operate regionally, personal information may be processed and disclosed as described above in any country in which we conduct business or have a service provider under this Privacy Policy. Our Privacy Notice and our practices are designed to provide a consistent level of protection for personal information. This means that even in countries whose laws provide for less protection for your information, the Company will still handle your information in the manner described here.

Personal Information Security

The Company is committed to protecting the security of your personal information by implementing adequate and stringent security controls, measures, and protocols in line with existing industry practices and legal requirements to safeguard and secure your personal information against any loss, misuse, modification, unauthorized or accidental access or disclosure, alteration, or destruction.

We employ security measures regardless of the media on which information is stored (paper, computer disks, etc.), the systems which process it (microcomputers, mainframes, voice mail systems, etc.), or the methods by which it is moved (electronic mail, face-to-face conversation, etc.). Such protection includes restricting access to information on a need-to-know basis.

We also require you to help us by complying with the security measures designed to protect your identification numbers and passwords by keeping them secret and confidential.

Personal Information Accuracy

The Company will take all practicable and reasonable steps to ensure that your personal information is accurate, complete, and up-to-date. You can help the Company keep accurate and up-to-date records by informing us in writing of any changes so that records on you can be updated promptly.

Access to Personal Information

As a customer, you can exercise the following rights:

• To check whether the Company holds personal information about you and have access to such data;
• To require us to correct any data relating to you that is inaccurate;
• To ascertain our policies and practices regarding your data and to be informed of the kind of personal data held by us.

Website Links

Please note that our Company's website may contain hyperlinks to other sites that are not affiliated with the Company. The hyperlinked websites may or may not meet the same privacy standards that we set for ourselves, and you are to take care to understand and evaluate their particular privacy standards and procedures.

Changes to this Privacy Notice

The Company will occasionally update this Privacy Notice to reflect changes to our policies, processes, and systems to handle your personal information. When we post changes to this notice, we will revise the "Last updated on" date on the front page of this notice. We encourage you to periodically review this notice.