OUR PROMISE

Personal Data Protection Policy (Enterprise Version)

1. Introduction

MIT Solutions Services Sdn Bhd (“MITSS”, “we”, “our”, or “us”) is committed to protecting the personal data of individuals in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

This Personal Data Protection Policy outlines how MITSS collects, uses, discloses, processes, stores, and safeguards personal data obtained in the course of our business operations. The policy applies to employees, clients, partners, vendors, and any other individuals whose personal data may be processed by MITSS.

2. Definition of Personal Data

Personal Data refers to any information that relates directly or indirectly to an individual who can be identified from that information. This may include but is not limited to name, identification numbers, contact information, employment details, and other information relating to the individual.

3. Collection of Personal Data

MITSS may collect and process personal data including but not limited to:

• Name
• NRIC or Passport Number
• Contact details such as email address, phone number, and mailing address
• Employment and professional information
• Company and business-related details

Personal data may be collected directly from individuals, through authorized representatives, through business engagements, or from lawful third-party sources where permitted under applicable laws.

4. Purpose of Processing Personal Data

MITSS may process personal data for purposes including:

• Provision of IT consulting, analytics, and technology services
• Participation in tenders, contract execution, purchase order issuance, and billing
• Project implementation and service delivery
• Compliance with legal, regulatory, and statutory requirements
• Internal administrative and human resource management
• Client communication, relationship management, and business development

MITSS will only process personal data for legitimate business purposes consistent with applicable laws.

5. Disclosure of Personal Data

MITSS may disclose personal data where necessary to:

• Clients and business partners for service delivery purposes
• Subcontractors or service providers engaged by MITSS
• Government authorities or regulatory bodies where required by law
• Professional advisors including legal, tax, and audit consultants

MITSS does not sell, rent, or trade personal data to third parties for commercial gain.

6. Data Security

MITSS implements appropriate administrative, technical, and physical security measures to safeguard personal data against unauthorized access, misuse, loss, alteration, or disclosure.

Access to personal data is restricted to authorized personnel who require such access in order to perform their job responsibilities. Employees are required to comply with internal data protection and confidentiality policies.

7. Data Retention

Personal data will be retained only for as long as necessary to fulfill the purposes for which it was collected, or to comply with legal, regulatory, or contractual obligations.

When personal data is no longer required, MITSS will ensure it is securely deleted, destroyed, or anonymized in accordance with established data retention procedures.

8. Transfer of Personal Data

In the course of providing services, MITSS may transfer personal data to parties located outside Malaysia where necessary. Such transfers will only be conducted in compliance with the requirements of the Personal Data Protection Act 2010 and appropriate safeguards will be implemented to protect the data.

9. Rights of Data Subjects

Individuals whose personal data is processed by MITSS have the following rights:

• The right to request access to their personal data
• The right to request correction of inaccurate or incomplete personal data
• The right to withdraw consent for the processing of personal data, subject to legal or contractual restrictions

Requests may be submitted in writing using the contact information provided below.

10. Responsibilities

MITSS management and employees share responsibility in ensuring compliance with this policy. Employees handling personal data must ensure that the data is processed securely and only for authorized purposes.

11. Contact Information

For any inquiries, requests, or complaints relating to personal data protection, please contact:

MIT Solutions Services Sdn Bhd Kuala Lumpur, Malaysia

Email: dpda_admin@mitss.com.my

12. Policy Updates

MITSS reserves the right to update or amend this Personal Data Protection Policy from time to time to reflect changes in legal, regulatory, or operational requirements. Updated versions will be made available through appropriate channels.