TWKMY Holidays Sdn. Bhd. (No. SSM 202301030190 (1524113-P), Lot 1723, Jalan Aman, Kanchong Darat, 42700 Banting, Selangor) ("TWKMY") ialah pengguna data bagi data peribadi yang anda berikan semasa membuat tempahan. Polisi ini menerangkan data yang kami kumpul, tujuannya, dengan siapa ia dikongsi dan hak anda.
Data yang kami kumpul
- Butiran pengenalan: nama penuh mengikut pasport, nombor kad pengenalan, nombor pasport, tarikh lahir, tarikh tamat pasport, gambar pasport, kewarganegaraan.
- Butiran hubungan: nombor telefon, WhatsApp, e-mel, alamat.
- Butiran tempahan dan bayaran: pakej, tarikh, peserta, pilihan bilik, tambahan, invois, resit, slip bayaran yang anda muat naik, rekod bayaran dalam talian (kami tidak menyimpan nombor kad penuh).
- Komunikasi: mesej WhatsApp dan e-mel dengan pegawai CS kami, serta rekod penerimaan terma (nama, nombor kad pengenalan, masa).
- Maklumat lain yang anda berikan: keperluan perubatan atau diet, hubungan kecemasan.
Tujuan
- Memproses dan menguruskan tempahan anda, termasuk membeli tiket penerbangan, hotel, tiket masuk dan insurans bagi pihak anda.
- Mengeluarkan invois dan resit, menghantar peringatan bayaran dan maklumat trip melalui WhatsApp, SMS atau e-mel.
- Memenuhi kewajipan undang-undang, termasuk Akta Industri Pelancongan 1992, keperluan imigresen dan percukaian.
- Mengendalikan aduan, bayaran balik dan pertikaian.
- Dengan persetujuan anda, memaklumkan tawaran trip akan datang. Anda boleh menarik balik persetujuan ini pada bila-bila masa.
Dengan siapa data dikongsi
- Syarikat penerbangan, hotel, pengendali darat, pembekal aktiviti, penginsurans dan agensi visa, setakat yang diperlukan untuk trip anda, termasuk di negara destinasi yang undang-undang perlindungan datanya mungkin berbeza daripada Malaysia.
- CHIP (pembayaran dalam talian) dan bank, bagi memproses bayaran dan bayaran balik.
- Prigo X, pembekal sistem tempahan TWKMY, yang memproses data bagi pihak TWKMY di bawah kontrak kerahsiaan dan tidak menggunakannya untuk tujuan lain. Data disimpan pada pelayan di Singapura (Google Cloud, rantau asia-southeast1).
- Pihak berkuasa, apabila dikehendaki oleh undang-undang.
TWKMY tidak menjual data peribadi anda.
Tempoh simpanan
- Gambar pasport dipadam secara automatik 30 hari selepas trip berakhir.
- Rekod tempahan, invois, resit dan penerimaan terma disimpan 7 tahun bagi tujuan perakaunan dan percukaian.
- Data lain disimpan selagi diperlukan untuk tujuan di atas.
Keselamatan
Data disimpan dalam sistem yang dilindungi kata laluan dan penyulitan, dengan akses terhad kepada kakitangan TWKMY yang memerlukannya. Nombor pengenalan dan pasport disulitkan semasa disimpan. Setiap akses dan perubahan direkodkan.
Hak anda
Anda berhak mengakses dan membetulkan data peribadi anda, mengehadkan pemprosesannya, dan menarik balik persetujuan bagi pemasaran. Hantar permintaan ke twkmyholidays@gmail.com dengan nombor tempahan anda; kami membalas dalam 21 hari. Untuk berhenti menerima peringatan WhatsApp, balas "STOP". Jika anda tidak memberikan data yang diperlukan, kami mungkin tidak dapat memproses tempahan anda.
Perubahan
Kami boleh mengemas kini polisi ini. Versi terkini sentiasa dipaparkan di halaman ini dengan tarikhnya.
Hubungi: TWKMY Holidays Sdn. Bhd., Lot 1723, Jalan Aman, Kanchong Darat, 42700 Banting, Selangor · twkmyholidays@gmail.com · 03-8322 8391.
Privacy Policy (English)
TWKMY Holidays Sdn. Bhd. (SSM No. 202301030190 (1524113-P), Lot 1723, Jalan Aman, Kanchong Darat, 42700 Banting, Selangor) ("TWKMY") is the data user for the personal data you provide when you book. This policy explains what we collect, why, who we share it with and your rights. It is a notice under Section 7 of the Personal Data Protection Act 2010 (PDPA).
Data we collect
- Identity details: full name as in the passport, identity card number, passport number, date of birth, passport expiry, passport photo, nationality.
- Contact details: phone, WhatsApp, email, address.
- Booking and payment details: package, dates, travellers, room preferences, add-ons, invoices, receipts, payment slips you upload, online payment records (we do not store full card numbers).
- Communications: WhatsApp messages and email with our CS staff, and the record of your acceptance of the terms (name, identity card number, time).
- Other information you give us: medical or dietary needs, emergency contact.
Purposes
- Processing and managing your booking, including buying flights, hotels, entrance tickets and insurance on your behalf.
- Issuing invoices and receipts, and sending payment reminders and trip information by WhatsApp, SMS or email.
- Meeting legal obligations, including the Tourism Industry Act 1992, immigration and tax requirements.
- Handling complaints, refunds and disputes.
- With your consent, telling you about upcoming trips. You may withdraw this consent at any time.
Who we share it with
- Airlines, hotels, ground operators, activity providers, insurers and visa agencies, to the extent needed for your trip, including in destination countries whose data protection laws may differ from Malaysia's.
- CHIP (online payments) and banks, to process payments and refunds.
- Prigo X, the provider of TWKMY's booking system, which processes data on TWKMY's behalf under a confidentiality agreement and does not use it for any other purpose. Data is stored on servers in Singapore (Google Cloud, asia-southeast1 region).
- Authorities, where required by law.
TWKMY does not sell your personal data.
Retention
- Passport photos are deleted automatically 30 days after the trip ends.
- Booking records, invoices, receipts and acceptances of the terms are kept for 7 years for accounting and tax purposes.
- Other data is kept as long as needed for the purposes above.
Security
Data is held in a system protected by passwords and encryption, with access limited to TWKMY staff who need it. Identity and passport numbers are encrypted at rest. Every access and change is logged.
Your rights
You may access and correct your personal data, limit its processing, and withdraw consent for marketing. Send requests to twkmyholidays@gmail.com with your booking number; we reply within 21 days. To stop WhatsApp reminders, reply "STOP". If you do not provide the data we need, we may be unable to process your booking.
Changes
We may update this policy. The current version is always shown on this page with its date.
Contact: TWKMY Holidays Sdn. Bhd., Lot 1723, Jalan Aman, Kanchong Darat, 42700 Banting, Selangor · twkmyholidays@gmail.com · 03-8322 8391.