English | Bahasa Malaysia

Updated 8 January 2024

Boost Bank Berhad (formerly known as Boost Berhad) (Registration No.: 202301007223 (1501144-T)) and members of its group of companies in Malaysia (referred to as “Boost”, “us” or “we” or “our”) are committed to protecting personal data of our customers, business customers, business partners and suppliers, visitors, applicants, candidates and beneficiaries and personal data of individuals who work for, or act on behalf of, our customers, business customers, business partners, suppliers, and/or such applicants, candidates and beneficiaries (collectively, “data subject”) that have been provided to us. In Boost, we take privacy seriously and all our activities are underpinned by our T.R.U.S.T. principles of being Transparent, respecting your Rights, in our Use of your personal data, through our cyber security practices and we take due care when Transfer of data is required.

This privacy notice (“Privacy Notice”) explains what and how personal data is collected and further processed (as defined in the Personal Data Protection Act 2010 and/or other applicable laws), for what purposes it is collected and further processed by us, sources (if any) of personal data, to whom personal data is disclosed and how to access and update your personal data, and where to go for further information in respect of the personal data.

If you provide us with personal data of other individuals, you hereby represent that you have obtained consent from that individual prior to providing their personal data to us. References to ‘your personal data’ in this Privacy Notice would include such individual’s personal data that you provide to us.

In the event of any conflict between the English and Bahasa Malaysia versions of this Privacy Notice, the English version shall prevail.

Information about children

If you are under the age of 18, you are required to obtain the consent of your parent, guardian or person who has parental responsibility over you before providing us with your personal data.

What personal data do we collect?

Where we refer to “personal data” it means any information that relates directly or indirectly to you, and allows someone to identify you, including, for example, your name, National Registration Identity Card (“NRIC”’), passport number, date of birth, tax identification number, photograph, banking information, demographic information, address, telephone number, email address, information about your transactions in relation to the Products and/or Services such as your financial information, account activities as well as any other non-public information about you that is associated with or linked to any of the foregoing data or any other information relevant to your application for the Products and/or Services arising from your transaction(s) with us.

“Anonymous Information”, means, data that is not associated with or linked to your personal data including, aggregated information. Anonymous Information does not, by itself, permit the identification of individual persons.

In order to enable us to provide you with the Products and/or Services we may need to and/or may be required to collect, record, hold, use, disclose and store (“Process”) personal data.

The types of personal data we collect or obtain may vary according to our relationship with a data subject and may include (but not limited to) the following:

A. For Customers / Business Customers 
• personal particulars (such as name, salutation / title, age, NRIC, passport numbers, contact details, email address, residential address, date of birth, gender, nationality, marital status, citizenship, education)
• biometric data (such as facial image, fingerprint, voice)
• banking information (such as direct debit, related bill payments and banking transactions)

B. For Business Partners and Suppliers 
• contact information (such as name, address, email address and telephone number) 
• identification information (such as NRIC, passport identification number, tax registration number, social security number, driver’s license, date of birth) 
• business information (such as name of organisation, job title, department, business address organization structure, shareholding, directorship) 
• any recordings captured through our communication platform(s) (such as telephone recordings, Microsoft Teams, Zoom, etc.) 
• details contained in business registration documents, third-party due diligence documents, trade references and credit checks 
• financial details including banking account details and bank account statements 

C. For Visitors to Any of Our Premises or Events 
• contact information (such as name, address, email address and telephone number) 
• identification information (such as NRIC, passport identification number, etc.) 
• business information (such as name of organisation, etc.) 
• reason for visit 
• date and time of visit 
• biometric data (such as facial image, fingerprint, voice) 
• security notes (special instructions and access restrictions) 
• any photographic and/or video footage captured or recorded by our surveillance camera (“CCTV”) system or any other recording system

It is obligatory for you to supply such personal data and furnish a copy of your identification document for verification, if you enter any of our premises or attend any of our events.

D. For Applicants, Candidates and Beneficiaries 
• contact information (such as name, address, email address and telephone number) 
• identification information (such as NRIC, passport identification number, tax registration number, date of birth and any other identification information) 
• demographic information (such as age range, marital status, gender, etc.) 
• financial information (such as parents’ incomes, beneficiaries’ incomes, bank account name and number, etc.) 
• education information (such as field of studies, university, country of study, academic scores and achievements, professional certifications, etc.) 
• employment information (such as employer name, address, email address, telephone number, position employed, employment tenure, etc.) 
• any photograph(s) or video footage(s) submitted to Boost (such as profile pictures, contest submissions, etc.)

Additional personal data / sensitive that we collect

We may during times of crisis such as war, terrorism, riots, natural disaster or health crisis/disease outbreak collect: 
• health and physical condition 
• health condition of individuals in your household 
• result of your health test(s), if any 
• whether you are or were in self-isolation when you are or were unwell 
• body temperature

Additional sensitive personal data that we may collect: 
• religion
• ethnic

It is obligatory for you to supply such additional personal data or sensitive data when you apply for our products and/or services, if you enter any of our premises or attend any of our events (including at times of such crisis).

When do we collect your personal data?

We may collect or obtain your personal data: 

A. For Customers / Business Customers 
• when you apply for access to our products and/or services as well as use our products and/or services (including through our call centres, dealers, and sales channels) 
• when you contact us or register for information relating to our products and/or services or for any other purpose(s) 
• when you communicate with us (such as via short message services (“SMS”), text messages or other digital channels, emails, questionnaires or surveys) 
• when you use or interact via any of our digital applications, visit any of our platform/websites or social media pages  
• when you participate in any of our promotional events, incentives or loyalty programs 
• when you provide us with your identification documents from any of your interaction with us
• from external agencies (such as credit reference agencies, screening or investigation agencies) 
• from our internal database pursuant to your relationship with any subsidiary, affiliate or associated company of Boost and Axiata Group Berhad (“Boost group”) and RHB Bank Berhad.

B. For Business Partners and Suppliers 
• when apply to be onboarded as a partner and a supplier as well as when you use our digital applications, systems, products and/or services 
• when you communicate with us (such as via SMS, text messages or other digital channels, emails, questionnaires or surveys) 
• when you use or interact with any of our digital applications, visit any of our platform/websites or social media pages 
• from external agencies (such as credit reference agencies, screening or investigation agencies) 
• from our internal database pursuant to your relationship with any member of Boost group.

C. For Visitors to Any of Our Premises or Events 
• when you register in our visitor logbook or submit the visitor entry form 
• when you provide us with your identification document(s) 
• when you provide your host with information 
• from our CCTV system or any other recording system

D. For Applicants, Candidates and Beneficiaries 
• when you submit your online application to apply for any products and/or services, participate in any of our programs or events 
• when you contact us or register for information relating to our events, products and/or services or for any other purpose(s) 
• when you communicate with us (such as via SMS, text messages or other digital channels, emails, questionnaires or surveys) 
• when you use or interact via any of our digital applications, visit any of our platform/websites or social media pages  
• from external agencies (such as event organizers, business partners, transporters, accommodation and any other event related suppliers) 
• from our internal database pursuant to your relationship with any member of Boost group.
• from the CCTV system when you are physically present at any of our premises or events 
• from any event photos and/or video shoots

E. From Interaction with Technology and Third Parties

(a) Information collected by technology. For example:
• Information from you, including but not limited to when you interact with our on-site facilities (e.g. Wi-Fi), your web browser type, Internet Protocol (IP) address (a number that is automatically assigned to your computer when you use the Internet, which may vary from session to session), domain name, user profiles, and/or a date/time stamp for your visit, and, with respect to your mobile phone, the unique device identifier.
• Information from third party service providers and partners, with your consent, which may include your profile content or other types of personal data.
• Cookies and Unique Resource Locator (URL) information to gather information regarding the date and time of your visit and the information you searched and viewed. Cookies are small pieces of information that the Platform sends to your processor’s hard drive while you are viewing the Platform. We may use both session Cookies (which expire once you close your web browser) and persistent Cookies (which stay on your computer until you delete them)
• to provide you with a more personal and interactive experience on the Platform.
Persistent Cookies can be removed by following the web browser’s directions.
• Information from corresponding technologies used in connection with mobile phones, including the unique device identifier, to record date, time, search and viewing information related to your mobile phone.
• Information about how you use and interact with the Platform and the Services via third party analytics services such as Android ID, Google Analytics or Google Adsense etc. Such third party services may use Cookies to gather information such as the pages you visited, your IP address, a date/time stamp for your visit and the sites that redirected you to the Platform.
• Information collected on our premise, such as footage from our CCTV systems.

(b) Information from third parties service providers or other permissible authorised sources, including but not limited to, our partners, our customers, our employers, your joint Account holders, your authorised representatives, industry/financial related associations, government agencies, statutory authorities, law enforcement agencies, retailers, social networks and/or other organisations etc.

(c) Information from Credit Reporting Agency/Credit Bureau including but not limited to, the Central Credit Reference Information System (“CCRIS”), CTOS Data System Sdn. Bhd. (“CTOS”), and/or Experian Information Services (Malaysia) Sdn Bhd (“Experian”), or other registered credit reporting agency under the Credit Reporting Agencies Act 2010 (“CRA”) conducting any credit/trade assessments.

(d) Information from such other sources which you have given your consent to disclose information relating to you and/or where not otherwise restricted.

How do we use or process your personal data?

Your personal data may be used or processed for the purposes of: 

A. For Customers, Business Customers & For Business Partners and Suppliers 
• providing you with products, services and/or offers which may be of interest to you.
• notifying you about benefits and changes to the features of products and services.
• providing you with the latest offers, campaigns and promotions. (when you subscribe to such updates)
• sending you service messages about your subscription or account registration.
• using your data for participation in customer surveys or meetings.
• compliance with laws and/or contractual and/or regulatory obligations and related/permitted purposes.
• protecting or exercising our legal, contractual and/or regulatory rights and remedies including to recover any monies due and payable to us.
• sending you information via telephone calls, text messages or other digital channels, emails, etc. or social media about products and services offered by selected third parties that may interest you.
• to assess and/or evaluate your request and to analyse transaction data.
• to facilitate the creation of and secure your account on our digital applications and/or systems.
• to identify you as a user in our system.
• to provide improved administration of our products and services.
• to notify you about updates to our products and services.
• to cross-promote our services; or products, services and special offers of third parties whose products and services we think may be of interest to you.
• to improve and customize the quality of your experience with our products and services.
• to update, consolidate, and improve the accuracy of our records and transaction data.
• to send you a welcome email and to verify ownership of the e-mail address provided when your account was created.
• to send you administrative email notifications, such as security or support and maintenance advisories.
• to respond to your inquiries or other requests.
• to send offers and promotional materials related to our products and services and for other marketing purposes.
• to track user-specific information on what pages users access or visit.
• to improve and customize the quality of experience when you interact with the platform/websites and the products and services.
• for our day-to-day operations and administrative purposes including account management, billing and collection, audits, reporting and investigations.
• to assist in the prevention, detection or investigation of crime or possible criminal activities or for the administration of justice.
• for security and internal audit purposes.
• for such other purposes as may be directed or consented to by you.
• legitimate business execution.
• organisation and management of the business.
• managing the health, safety and security of our staff, premises and services.
• protecting our assets and interests.
• to produce data, reports and statistics.
• to conduct, verify your identity or assess your financial standing and credit worthiness through credit reference/reporting/processing/review/evaluation checks or any other means approved under the laws and as required pursuant to our internal policies.
• to conduct and perform the necessary checks including license verification, business interest and directorship, litigation, background, compliance risk, civil and criminal history records and cases, and any sanction lists.
• conduct searches on any of the individual's data that you provide, whether on behalf or in representation, including yourself and/or an entity's credit information, including where the individual and/or entity is a joint applicant or to which the individual and/or entity is or has been linked and resides in the records of any registered Credit Reference Agency or any information in the record of the Central Bureau, Bank Negara Malaysia ("BNM") (including the CCRIS, the Dishonoured Cheques Information System ("DCHEQS") or any other database or system established by BNM.
• process, facilitate, offer, administer and/or provide you with our Services including relevant Services updates, service messages about subscription, completing the application and/or account sign-up/registration.
• to provide improved administration and use of our Products and/or Services.
• to notify visitors about updates to our Products and/or Services.
• to improve and customize the quality of your experience with our Products, Services and our Platform including carrying out, managing and/or maintaining your relationship with us, your commercial transactions and dealings with us.
• process your payments, including providing billings or reports to you, maintaining financial records, assessing or verifying credit/debit card or other e-wallet details and facilitating payment of any amount due to us or available in your account.
• for all other purposes in relation to or incidental to the above.

B. For Visitors to Any of Our Premises or Events 
• health, safety and security 
• compliance with laws and/or contractual and/or regulatory obligations 
• protecting or exercising our legal, contractual and/or regulatory rights and remedies 
• other legitimate purposes  

   
C. For Applicants, Candidates and Beneficiaries 
• for online application of new products, services and onboarding 
• for online application selection and recruitment processes 
• understand participants’ demographics 
• for program logistics planning and implementation 
• as part of advertisements and/or general updates on any platform(s)/websites 
• for security clearance at third-party premises 
• compliance with laws and/or contractual and/or regulatory obligations 
• protecting or exercising our legal, contractual and/or regulatory rights and remedies 
• for internship placement 
• registration for extended programs (internal and external) 
• other legitimate purposes

Who do we disclose your personal data to?

We may disclose your personal data:

A. For Customers / Business Customers 
• to any member of Boost group
• to third parties when disclosure is necessary or reasonable to protect rights of Boost and/or any member of Boost group, protect your security, investigate fraud or respond to a law enforcement request 
• to service providers, field engineers, contractors, subcontractors, Sub-Processors (defined below) or any other third-party performing work on behalf or at the instruction of Boost and/or any member of Boost group 
• to business partners for marketing activities 
• to third parties for credit checks and fraud management 
• to third parties for carrying out analytics to understand how you use our services 
• to third parties for research and development purposes 
• to dealers or agents of BOOST and/or any member of Boost group 
• to third parties for the purposes set out under “How do we use your personal data?”

B. For Business Partners and Suppliers 
• to any member of Boost group 
• to third-party agents, service providers, consultants, advisors, contractors and/or subcontractors of Boost and/or any member of Boost group 
• to any party appointed by you or on your behalf, to process personal data (“Sub-Processor”) 
• to any public authority, governmental, regulatory or fiscal agency where it is necessary to comply with a legal or regulatory obligation to which Boost and/or any member of Boost group is subjected to or as permitted by applicable local law 
• to third parties for the purposes set out under “How do we use your personal data?”

C. For Visitors to Any of Our Premises or Events 
We do not routinely share/transfer your personal data with any external organizations or third parties. However, where and whenever we share/transfer your personal data, it may be: 
• to any person(s) by whom we are required by law, contractual, governmental or regulatory requirements to make disclosure 
• to authorised personnel, third party agents or service providers as necessary to process your personal data 
• to any provider of security and emergency services 
• to third parties for the purposes set out under “How do we use your personal data?” 

D. For Applicants, Candidates and Beneficiaries 
• to logistic partners for program planning and implementation 
• to business partners for business simulations and challenges 
• to transportation agencies for travelling purposes 
• to insurance agencies for travel personal accident coverage 
• to platform/websites service providers for online learning and self-development 
• to creative and social media vendors for production of program montages, promotional materials, television series, podcasts, social media postings, etc. 
• to any member of Boost group 
• to third parties when disclosure is necessary or reasonable to protect our rights, protect your security, investigate fraud or respond to a law enforcement request 
• to third parties for measuring the effectiveness of our programs 
• to third parties for the purposes set out under “How do we use your personal data?”

We may disclose your personal data to the following third parties too for those purposes set out below:

(a) Professional Advisors. We may share your personal data with our professional advisors including but not limited to legal advisors, tax advisors, financial institutions and/or advisors, auditors, insurance brokers etc.

(b) Debt Collectors/Debt Collecting Agencies, Regulatory Agencies, or Consultant. We may use or disclose your personal data to any debt collectors/debt collecting agencies, regulatory agencies, or our consultant, as we have absolute discretion deems necessary for the purpose of enforcement of any right of our bank under our terms and conditions, for the performance of the contract entered by you with us, protect your security, investigate fraud or respond to a law enforcement request.

(c) Credit Reporting Agency/Credit Bureau, Bank and/or Financial Institution(s). We may disclose your personal data provided when using our Platform and/or Services including those you have consented to under any credit consent forms/letters, to any credit reporting agency/credit bureau or other registered credit reporting agency under the CRA conducting any credit/trade assessment, bank and/or financial institution(s) for credit/trade checks, fraud management and other purposes deem relevant by us.

(d) Government agencies, statutory authorities, and law enforcement agencies under the law. We may disclose your personal data to any government agencies, statutory authorities, and/or law enforcement agencies.

(e) Bureaus/Agencies established under Bank Negara Malaysia. We may disclose your personal data provided when using our Platform and /or Services including those you have consented to under any credit consent forms/letters, to any bureaus or agencies established or to be established by BNM including but not limited to CCRIS, CTOS, Experian or other registered credit reporting agency under the CRA conducting any credit/trade assessments.

(f) Other Disclosures. Regardless of any choices you make regarding your personal data, we may disclose personal data if we believe in good faith that such disclosure is necessary (i) in connection with any legal investigation; (ii) to comply with relevant laws or to respond to subpoenas or warrants served on us; (iii) to protect or defend our rights or property or users of the Services; and/or (iv) to investigate or assist us in preventing any violation or potential violation of the laws, this Privacy Notice, or our contracts with you; (v) for research and development purposes; or (vi) for the performance of the contract you entered with us.

We use reasonable efforts in accordance with industry best practices to ensure that the above-mentioned maintain the confidentiality of your personal data and are restricted from using your personal data for any unauthorised purpose.

Transfers of Personal Data

We may transfer your personal data across geographical borders to other entities. Our information technology storage facilities and servers may be located in other jurisdictions outside of Malaysia. This may include, but not limited to, instances where your Personal Information may be stored on servers located outside Malaysia. In addition, your personal data may be disclosed or transferred to entities located outside Malaysia or where you access our platform from countries outside Malaysia. Please note that these foreign entities may be established in countries that might not offer a level of data protection that is equivalent to that offered in Malaysia under the laws of Malaysia. You hereby expressly consent to us transferring your personal data outside of Malaysia for such purposes. We shall endeavour to ensure that reasonable steps are taken to procure that all such third parties outside of Malaysia shall not use your personal data other than for that part of the purposes and to adequately protect the confidentiality and privacy of your personal data. Where your personal data has been transferred to our Affiliates and/or to third parties located outside of the local jurisdiction, the transfer of your personal data is carried out under organizational, contractual and legal measures and with adequate levels of protection implemented as well as any additional local legal requirements for the parties receiving this information in order to safeguard your personal data. We are permitted to transfer your personal data where it is necessary to protect the vital interests of you and the public.

When you click on a link or, in the case of smartphone and mobile device, you may be required to do such other actions as requested to connect to any other platform or location where you will leave the Services and be redirected to another site and another entity may collect personal data or Anonymous Information from you. We have no control over, do not review, and cannot be responsible for, these external platforms or their content and we do not accept any responsibility or liability arising from those websites. This Privacy Notice does not apply to these external platforms or their content, or to any collection of data after you click on links or do such other actions to connect to these external platforms. Likewise, if you subscribe to an application, content or a product from our strategic partner and you subsequently provide your personal data directly to that third party, that personal data will be subject to that third party’s privacy/personal data protection policy (if they have such a policy) and not to this Privacy Notice. We recommend you to read and understand the privacy/personal data protection statement/policy posted on those other websites in order to understand their procedures for collecting, processing, using and disclosing personal data before submitting your personal data to those websites or platforms.

Where your personal data has been transferred to any member of Boost group and/or to third parties located outside of Malaysia, the transfer of your personal data is carried out under organizational/operational, contractual and legal measures and with adequate levels of protection implemented as well as in compliance with any additional local legal requirements for the parties receiving this information in order to safeguard your personal data.

Security Disclaimer: No method of transmission over the internet, or method of electronic storage,is 100% secure. Therefore, while we use reasonable efforts to protect your Personal Information, we cannot guarantee its absolute security. We cannot and do not accept responsibility for any unauthorised access or interception or loss of personal data that is beyond our reasonable control.

How do we store and protect your personal data?

We may collect and store your personal data in electronic and/or physical form, depending on the requirement. Information may be stored at our and third- party premises within IT Systems (e.g. external cloud storages, internal or third-party management systems, e-mails, databases, hard drives), document warehouses, etc.

We endeavour, where practicable, to process your personal data in a safe environment by preventing any unauthorized or unlawful processing of personal data or accidental loss or destruction of, or damage to, such information. We have implemented various physical, technical and administrative security measures to protect your personal data and our systems from unauthorized access. Some of these measures include: 
• encryption of data in transit or at rest 
• strict adherence to privacy and security practices 
• periodic security assessment and reviews to upgrade our practices 
• restriction of access to personnel who have a need to know such data

How long do we retain your personal data?

We will retain your personal data only for as long as such information is necessary for the purposes it was collected for. The retention period for personal data may also be affected by the requirements of applicable laws. In all cases information may be held for a longer period where there is a legal or regulatory reason to do so (in which case it will be deleted once no longer required for the legal or regulatory purpose) or subject to law, a shorter period where the individual objects to the processing of their personal data. 

What are your rights?

We respect your rights and privacy by taking steps to ensure that your personal data is accurate, complete, not misleading and up to date. In compliance with the Personal Data Protection Act 2010, we assure you that: 
• you have the right to know what personal data we have about you 
• you have the right to request a copy of your personal data 
• you have the right to correct your personal data to ensure it is accurate, complete, not misleading and up to date 
• you have the right to withdraw your consent from our processing of your personal data 
• you can also ask us to restrict how we use your personal data where it is likely to cause damage or distress 
• you have a right to prevent processing of your personal data for purposes of direct marketing 
• you may request that we request transfer of your information from Boost eWallet or Boost Biz Wallet or any accounts held with Axiata Digital Capital Sdn Bhd (“Boost Credit”) or any account held by our affiliates to be used with us as part of the user journey in providing you with our services. Similarly, you may request that we transfer your information to another company and/or our affiliates as part of providing you with a service subject to us verifying the request is genuinely from you

For exercising your rights, you can reach out to us through the details under ‘Who can I contact for more information?’ section given below.

You may request us to stop communicating with you by contacting us on the below mentioned contact details. These choices do not apply to the receipt of mandatory product or service communications that are considered as part of certain Boost’s and/or any member of Boost group’s products or services, which you may receive periodically, unless you cancel the subscription of our products or services.

We reserve the right to decline requests that jeopardize the security and privacy of the personal information of others as well as requests that are impractical or not made in good faith or not provided with sufficient information, may constitute a violation of a court order, would disclose confidential commercial information and causes non-compliance to other applicable laws. Additionally, it is important to note that system-recorded Personal Information may not be editable. When we delete any information, it will be deleted from the active database, but may remain in our archives. To the extent permitted by law, we may also retain your information for fraud prevention or similar purposes required by laws.

If we are unable to accede to your request, we will inform you accordingly. We may also exercise our discretion in allowing the corrections requested and/or may require further documentary evidence of the new data or even of the requestor to avoid fraud and inaccuracy.

Please note that if you withdraw your consent or restrict the processing your personal data, we may not be able to continue to provide our products, services and/or carry out our obligations to you.

Voluntary and obligatory supply of personal data

Unless otherwise specified in this Privacy Notice, your supply of personal data is voluntary. If you fail to supply personal data, this may result in the consequences described in the following section.

Integrity Disclaimer: We aim to keep all personal data as accurate, complete, not misleading, up-to-date and reliable as possible. The accuracy and completeness of your Personal Information depend on the information you provide. We are authorized to assume that the Personal Information you provide is accurate, up to date and complete unless you inform us otherwise.

Consequences of not providing personal data

We may require collection of certain personal data/ sensitive data about you and failure to provide such information may: 
• result in us preventing your entry to our premises or participating in our events 
• result in us being unable to process your application and/or provide you with our products/ services 
• result in us being unable to respond to your requests on our products/services 
• limit or prevent access to certain features on our platform/websites/weblinks 
• result in us being unable to inform you on latest updates regarding any promotions, our services/products or launches 
• result in your inability to receive invitation to promotional activities organized by us 
• negatively affect our ability to communicate with you 
• result in our inability to enter into a contract with you or a counterparty or continuing to contract with you or a counterparty 
• negatively impact your chances of being selected for any potential employment, engagement or internship

By submitting personal data/ sensitive data to us, you acknowledge that:

1. You have read and understood this Privacy Notice and agree and consent to the use, processing and transfer of personal data including sensitive data for the purposes as set out herein.

2. You agree and consent to the use, processing and transfer of personal data including sensitive data for the marketing and promotional activities conducted by Boost, including but not limited to any form of advertising or publicity media and materials such as audio and/or visual recordings published through newspapers, television networks, radio stations or online and digital media and on the Internet. Marketing and promotion activities include without limitation the use and/or publication of any details provided in and/or in connection to the entries, interviews material as well responses and related photographs. In this regard, you agree to co-operate and participate in all advertising and publicity activities of Boost.

3. You agree and consent to the use, processing and transfer of personal data including sensitive data for the purpose set out herein including sharing your personal data. You agree and consent to share and transfer such personal data in machine readable format to Boost eWallet and/or Boost Biz Wallet and/or Boost Credit and/or any other accounts held by our affiliates, Axiata Digital eCode Sdn Bhd, Boost Credit and/or any other affiliates to be used with us as part of the user journey in providing you with our products/services. Similarly, you may request that we transfer your information to another company and/or our affiliates as part of providing you with a product/service subject to us verifying the request is genuinely from you.

4. You may also transfer your Personal data to any third-party service provider via any of the application or tile embedded on our applications, software, or solution as part the user-journey and user experience. We will accept those actions taken by you as your intention to share your Personal data with those third-party. Regardless, we shall not be responsible nor liable for any damages nor claim arising from such actions and we reserve our right not to forward not transfer any Personal data as requested.  

5. All information and representation provided are true and correct to the best of your knowledge, and you have not knowingly omitted any relevant information which may have an adverse effect.

Who can I contact for more information?

If you have any questions or enquiries about this notice, our privacy and information handling practices, or would like to exercise your rights as data subjects, kindly reach out to us via:

Designation:    Data Privacy Officer
Email:              dataprivacy@myboostbank.co

Updates to the Privacy Notice

We reserve the right to amend, modify, vary or update this Privacy Notice, at our sole discretion from time to time, as and when the need arises. The most recently published Privacy Notice shall prevail over any of its previous versions. You are encouraged to check this Privacy Notice from time to time to stay informed of any changes. You agree to adhere to the terms of the Privacy Notice including any variations.