This policy, together with our Terms and Conditions, sets out the basis on which any personally identifiable information ("Personal Data") we collect from you, or that you provide to us, will be processed by ARBA Travel & Tours Sdn Bhd ("ARBA").
This policy applies to websites, applications, tools, promotions, email communications, login accounts, and all other services operated by ARBA.
By using our services, you are deemed to have consented to the use of your Personal Data in accordance with this policy.
Any changes to this policy will be posted on this page. You are advised to review this policy periodically.
Your Privacy
At ARBA, we are committed to protecting your privacy and ensuring the security of your personal, business, and travel information. This protection is our top priority.
We employ strict security measures and adhere to robust privacy principles to ensure your Personal Data is always protected and managed appropriately.
Personal Data Protection Act (PDPA)
Malaysia's Personal Data Protection Act ("PDPA") is the law that protects individual Personal Data in commercial transactions.
Personal Data refers to any information that can directly or indirectly identify an individual, including:
- Name
- Address
- Identity Card Number
- Passport Number
- Email address
- Other contact details
Sensitive Personal Data includes:
- Physical or mental health information
- Political opinions
- Religious beliefs
- Any offence or alleged offence
Commercial transactions include any commercial dealings, whether contractual or not, including the collection of data from prospective customers.
Data processing includes activities such as collecting, recording, storing, holding, or any operation carried out on Personal Data.
Under the PDPA, you have the right to:
- Access your Personal Data
- Correct data to ensure it is accurate, complete, and up-to-date
- Withdraw consent for the use of data for marketing purposes
However, ARBA may still process your Personal Data to:
- Provide the services you have subscribed to
- Fulfil contractual obligations
- Comply with legal or regulatory purposes
Types of Information We Collect
We collect the information you provide to us, such as:
- Name
- Email address
- Password
- User account details
When you make a booking, additional information may be required such as:
- Address
- Passport number
- Credit or debit card details
We may also collect information when you engage with our services through:
- Third-party applications
- Social networking sites
- Other websites
Use of Information
Your information is used for the following purposes:
- Verifying authorisation for service access
- Enabling you to use selected services
- Personalising your experience (e.g. location, language, previous interactions)
- System administration
- Analysing user behaviour and trends
- Responding to your enquiries or communications
- Notifying service changes or updates
- Sending booking confirmations, notifications, reminders, or newsletters
You may be asked to provide payment information either to ARBA or to the relevant booking partner when making a booking.
Disclosure of Your Information
ARBA will not sell your Personal Data to third parties.
However, we may share your data under the following circumstances:
- To comply with law or regulatory requirements
- To prevent or investigate illegal activities
- To protect ARBA's rights and interests
We may also share information with:
- Affiliate companies within the ARBA group
- Travel service providers for booking purposes
- Third parties who process data on our behalf
- Promotional partners (with your consent)
In some cases:
- Your data may be used to auto-fill information on third-party sites to facilitate bookings
- Anonymised aggregate data may be shared for analytical purposes
ARBA is not responsible for the use of data by third parties after disclosure has been made in accordance with this policy.
Data Storage
All Personal Data is stored on secure servers.
We ensure that adequate technical and organisational measures are implemented to protect your data. Access to data is limited to employees who need the information to perform their duties.
However, data transmission over the internet is not completely secure. Any transmission is at your own risk.
Cookies and Tracking Tools
We use cookies and tracking tools to collect aggregated usage and demographic information.
Cookies help to:
- Improve user experience
- Provide more relevant content
Third-Party Websites
ARBA is not responsible for the privacy practices of third-party websites.
When you leave our site, you are advised to review the privacy policy of each site that collects your Personal Data.
We may also enable information sharing to:
- Third-party applications
- Social networking sites
Information shared may be accessible to other parties on those platforms. You are therefore advised to review the privacy policy of the relevant platform.
Accessing Your Personal Data
You have the right to know what Personal Data we hold about you.
Requests may be made to us in writing.
You also have the right to:
- Object to the processing of data for marketing purposes
- Stop receiving marketing communications at any time
If you have an account with us, you can manage some of your personal information and preferences through our website.
Contact Us
If you have any enquiries regarding this privacy policy, please contact us:
Email: hi@arbatravel.com
Phone: 03-8600 9808