PRIVACY POLICY FOR MYECERDC MOBILE APPLICATION

Effective Date: 3rd February 2025
Last Updated: 3rd February 2025

East Coast Economic Region Development Council (ECERDC) (“ECERDC,” “we,” “our,” or “us”) respects your privacy and is committed to protecting your personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you use the MyECERDC mobile application (“App”).

By downloading, installing, or using the MyECERDC App, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree with this policy, please do not use the App.

1. Personal Data We Collect

We collect different types of personal data depending on whether you are an ECERDC staff member or a public user (including potential investors).

1.1 Information You Provide

  • For ECERDC Staff (ESS Employee Self-Service):
    • Name, employee ID, department, job title
    • Contact details (email, phone number)
    • Employment-related information (attendance, leave requests, other details)
  • For Public Users (Potential Investors, General Users):
    • Name, email address, phone number
    • Business or investment-related details (if provided)
    • Any inquiries or feedback submitted via the App

1.2 Automatically Collected Information

  • Device information (model, operating system, unique device identifiers)
  • Log information (IP address, browser type, access times)
  • Usage data (how the App is used, pages visited)
  • Location data (if location services are enabled)

2. Purpose of Processing Your Personal Data

We collect and process personal data in accordance with Section 6 of the PDPA 2010 for the following purposes:

For ECERDC Staff:

  • To manage employee self-service functions (leave applications and HR-related matters)
  • To ensure secure login and access to employee-specific features
  • To improve internal efficiency and administrative processes

For Public Users & Potential Investors:

  • To provide information about ECERDC and investment opportunities in Kelantan, Terengganu, Pahang, and part of Johor (e.g., Mersing, Segamat)
  • To facilitate communication and respond to inquiries
  • To enhance user experience and improve the App’s functionality
  • To maintain App security and prevent unauthorized access
  • To comply with legal obligations and regulatory requirements

3. Disclosure of Personal Data

We do not sell or rent your personal data. However, we may disclose your information to the following parties:

  • ECERDC Internal Departments: For business operations, HR functions, or responding to investment inquiries
  • Service Providers & Contractors: For App hosting, maintenance, analytics, and security services
  • Government Authorities or Regulatory Bodies: If required by law or for compliance with legal obligations
  • Potential Investors or Business Partners: Only with explicit consent when facilitating investment-related opportunities

All disclosures will be made in compliance with Section 8 of the PDPA 2010, ensuring that the information is shared securely and only for legitimate purposes.

4. Security Measures for Protecting Personal Data

We implement reasonable security measures as required by Section 9 of the PDPA 2010 to protect your personal data from unauthorized access, disclosure, or misuse, including:

  • Encryption of sensitive data
  • Secure authentication mechanisms
  • Regular security audits and system updates

However, while we strive to protect your data, no system is entirely secure. Users should take precautions, such as safeguarding login credentials.

5. Retention of Personal Data

In compliance with Section 10 of the PDPA 2010, we retain personal data only for as long as necessary to fulfill the purposes stated in this policy, comply with legal obligations, or resolve disputes.

Staff Data: Retained according to ECERDC’s HR policies

Public User Data: Retained until no longer needed for investment inquiries or communications

When personal data is no longer required, we will securely delete or anonymize the data.

6. Your Rights Under the PDPA 2010

Under Section 12 to Section 32 of the PDPA 2010, you have the following rights regarding your personal data:

6.1 Right to Access and Correct Personal Data

You may request access to your personal data and request corrections if necessary.

6.2 Right to Withdraw Consent

You may withdraw your consent for us to process your personal data at any time.

6.3 Right to Restrict Processing

You may request that we limit how we use your personal data in certain circumstances.

6.4 Right to Object to Direct Marketing

If you receive marketing communications, you may opt out at any time.

To exercise any of these rights, please contact us using the details provided in Section 10.

7. Cross-Border Transfer of Data

If we need to transfer personal data outside Malaysia, we will ensure that the receiving party has adequate data protection standards in accordance with Section 129 of the PDPA 2010.

8. Use of Cookies and Tracking Technologies

The App may use cookies or similar technologies to enhance user experience. By using the App, you consent to our use of these technologies.

9. Third-Party Links & External Websites

The MyECERDC App may contain links to third-party websites or services. ECERDC is not responsible for the privacy practices of these third parties. Users should review their privacy policies before providing any personal data.

10. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or your rights under the PDPA 2010, please contact us at:

EAST COAST ECONOMIC REGION DEVELOPMENT COUNCIL (ECERDC)
Address: Level 3, Menara PjH, No. 2, Jalan Tun Abdul Razak, Precinct 2, 62100, Putrajaya, Malaysia.
Contact: +603 8885 0000
Email: [email protected]
Website: www.ecerdc.com.my

SEROJATECH SDN. BHD. (VENDOR)
Address: 2-10, Third Avenue, Jalan Teknokrat 3, Cyber 4, 63000, Cyberjaya, Selangor, Malaysia.
Contact: +60 10 212 5345
Email: [email protected]
Website: www.serojatech.my

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to comply with legal and regulatory changes. Any changes will be posted within the App with the updated “Last Updated” date.

By continuing to use the MyECERDC App after such changes, you acknowledge and agree to the revised Privacy Policy.

This Privacy Policy is prepared in compliance with the Personal Data Protection Act 2010 (PDPA), Malaysia, and applicable data protection regulations.