Privacy Policy

01Scope of This Policy

This Policy applies to personal data collected through our website, booking platforms, customer service channels and business operations, including vehicle rentals, long-term leasing, airport transfers, chauffeur services and other transportation-related services.

It covers information relating to customers, drivers, additional drivers, corporate representatives and individuals who interact with MKAZ.

This Policy does not apply to information that has been anonymised so that an individual can no longer reasonably be identified.

02Personal Data We Collect

Depending on the services requested, we may collect the following categories of information:

Personal Identification

• Full name, date of birth, nationality and contact details.
• Identification card, passport and driving licence information.
• Residential address and other information required to verify identity and driving eligibility.

Reservation and Rental Information

• Booking references, pickup and return details, vehicle preferences and rental history.
• Authorised driver information, rental agreements and vehicle inspection records.
• Vehicle usage, incidents, accidents, damages, fines and related claims.

Payment and Transaction Information

• Payment details, transaction references, invoices, deposits, refunds and outstanding charges.
• Payment card information processed through authorised payment service providers.

Technical and Digital Information

• IP address, device and browser information.
• Website activity, cookies and related usage analytics.

Other Relevant Information

Where necessary and permitted by law, we may collect additional information to support identity verification, legal compliance, accident management, insurance claims, accessibility requests or the prevention of fraudulent activities.

We collect information directly from you and, where applicable, through authorised booking partners, corporate clients, service providers and other legitimate sources.

Where you provide personal information relating to another individual, such as an additional driver, you must ensure that you are authorised to provide that information and that the individual has received the relevant privacy information.

Certain personal information may be required to process a reservation or provide a requested service. Failure to provide the necessary information may prevent us from completing the booking or fulfilling contractual requirements.

03How We Use Your Personal Data

We collect and process personal data for legitimate business and operational purposes, including:

• Managing reservations, rental agreements and transportation services.
• Verifying customer identity, driving eligibility and booking requirements.
• Processing payments, security deposits, refunds and outstanding charges.
• Communicating booking confirmations, vehicle collection instructions, return reminders and service updates.
• Managing vehicle inspections, maintenance records, incidents, insurance matters and damage claims.
• Responding to customer enquiries, complaints and support requests.
• Preventing fraudulent transactions, misuse of vehicles and unauthorised activities.
• Meeting accounting, regulatory, contractual and legal obligations.
• Improving our services, website functionality and customer experience.

Personal data will be processed only where there is an appropriate basis under applicable law, including consent where required.

Where required, we will obtain your consent before using personal data for additional purposes, including certain promotional or marketing activities.

04Sharing and Disclosure of Information

MKAZ may disclose relevant personal data to authorised third parties when necessary to deliver our services, manage transactions or meet legal obligations.

These parties may include:

• Online travel agencies, booking platforms and reservation partners.
• Payment processors, banks and financial institutions.
• Insurance providers, claims administrators and roadside assistance providers.
• Vehicle service providers and authorised operational partners.
• Corporate clients or government agencies associated with relevant bookings or contractual arrangements.
• Professional advisers, auditors, regulators and law enforcement authorities where legally required.

We do not sell customers' personal data to unrelated third parties for their independent marketing purposes.

Where third parties process personal data on our behalf, we take reasonable steps to require appropriate confidentiality and data protection safeguards.

Information disclosed to independent third-party organisations may also be subject to their respective privacy policies and legal responsibilities.

05Cookies and Website Analytics

Our website may use cookies and similar technologies to support essential functionality, remember preferences, understand visitor behaviour and improve website performance.

Certain analytics or advertising technologies may be provided by third-party services.

You may manage or disable cookies through your browser settings or available website consent controls. Disabling certain cookies may affect some website features.

Where consent is legally required, optional cookies will be subject to the applicable consent requirements.

06Data Security and Protection

We implement reasonable administrative, technical and organisational safeguards to protect personal data against unauthorised access, disclosure, alteration, loss or misuse.

Access to personal data is restricted according to operational responsibilities and legitimate business needs.

Although we take reasonable precautions, no electronic transmission or storage method can be guaranteed to be completely secure.

Customers should avoid transmitting sensitive identification documents, payment credentials or passwords through unsecured channels.

Where a personal data breach occurs, MKAZ will assess and manage the incident, including making notifications to affected individuals or relevant authorities where required by applicable law.

07Data Retention and International Transfers

We retain personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected, including rental administration, financial records, contractual obligations, dispute resolution and legal compliance.

The applicable retention period may vary depending on the type of information, contractual requirements and relevant legal obligations.

When information is no longer required, we will take appropriate steps to securely delete, dispose of or anonymise it, subject to applicable retention obligations.

Where our services involve third-party technology providers or booking partners operating outside Malaysia, personal data may be processed or stored internationally, subject to applicable legal requirements and appropriate safeguards.

08Your Privacy Rights

Subject to applicable laws, you may request to:

• Access personal data held about you.
• Correct inaccurate, incomplete or outdated information.
• Withdraw consent where processing depends on consent.
• Opt out of direct marketing communications.
• Request information about how your personal data is processed.
• Request data portability where applicable and technically feasible.

Requests for deletion, restriction or other forms of control over personal data will be assessed in accordance with applicable legal requirements.

Certain information may need to be retained despite a request where necessary for legal obligations, contractual matters, active claims or dispute resolution.

To protect personal information, we may require identity verification before processing certain requests.

You may exercise your applicable privacy rights by contacting us using the details provided in Section 11.

09Marketing Communications

With your consent or where otherwise permitted by applicable law, MKAZ may contact you regarding promotions, special offers, service announcements and relevant updates.

Marketing communications may be delivered through channels such as email, telephone or messaging services, depending on your preferences and applicable consent requirements.

You may opt out of promotional communications by following the unsubscribe instructions, where provided, or contacting us directly at sales@mkazcarrental.com.

Opting out of marketing will not prevent essential communications relating to existing reservations, rental agreements, payment matters or customer service.

10Third-Party Websites and Services

Our website or booking services may contain links to external platforms, payment gateways or third-party websites.

These services may operate under their own privacy policies and data protection practices.

We encourage customers to review the applicable privacy policies before submitting personal information to third-party platforms.

MKAZ is not responsible for the independent privacy practices of external websites or organisations that operate outside our control, except to the extent responsibility is imposed by applicable law.

11Contact, Complaints and Policy Updates

If you have questions about this Privacy Policy, wish to exercise your privacy rights or have concerns about how your personal data is handled, please contact:

MKAZ Travel Network Sdn. Bhd.

Plaza Crystalville, Jalan Vita 1, Lingkaran Cyberpoint Timur, 63000 Cyberjaya, Selangor, Malaysia.

Email: sales@mkazcarrental.com

Website: https://mkazcarrental.com

We will review privacy-related requests and complaints in accordance with applicable legal requirements.

If you remain dissatisfied with our handling of a personal data matter, you may also seek assistance from the relevant Malaysian data protection authority, where applicable.

We reserve the right to update this Privacy Policy periodically to reflect changes in our business operations, technology, legal requirements or privacy practices.

The latest version will be published on our official website. Material changes will be communicated where required by applicable law.

Effective Date: 1 October 2026

© 2026 MKAZ Travel Network Sdn. Bhd. All rights reserved.