Notice under ‘Personal Data Protection Act 2010’
The Personal Data Protection Act 2010 ("the Act"), which regulates the processing of personal data in commercial transactions, applies to Hello1010 Sdn. Bhd. ("Hello1010 Sdn. Bhd.", "our", "us" or "we"). For the purpose of this Notice, the terms "Personal Data" and "Processing" shall have the same meaning as prescribed in the Act.
1. Notification
This written notice serves to inform you that your Personal Data is being processed by or on behalf of Hello1010 Sdn. Bhd.
2. Description of Data
The Personal Data processed by us may include (but are not limited to):
3. Purpose
The processing of the personal data as provided under the Personal Data Protection Act 2010 means collecting, recording, holding or storing the personal data or carrying out any operations or set of operations on the personal data, we process your Personal Data, including any additional information you may subsequently provide, for the following purposes ("Purposes"):
4. Mode of Collecting Personal Data
Your Personal Data is and will be collected from you and/or from the information you have provided in our [sales purchase order form/comment card/indemnity form] and any other Hello1010 Sdn. Bhd. forms that you have been asked to complete, together with any other information that we may obtain about you from any oral or written communications.
5. Access, Corrections and Complaints
If you would like to make any enquiries or complaints, or request for access to or update and/or amend any of your Personal Data, or limit the processing of your Personal Data at any time hereafter, please do so by submitting such request to us via:
Hello1010 Sdn. Bhd.‘s Person In Charge
Telephone: +6013 688 1010
Email: support@hello1010.my
In accordance with the PDPA, we may refuse to comply with your request for access to update and/or amend your Personal Data, and if we refuse to comply with such request, we will inform you of our refusal and the reason for our refusal.
6. Disclosure of Information
Your personal data provided to us may be disclosed to the following classes of third parties (in or outside of Malaysia) as required under the law or pursuant to relevant contractual relationship (for example, where we appoint third party service providers) or for the purposes or directly related to the purposes stated. For the Purposes stated in Item 3 above, we may disclose your Personal Data to the following parties;
We may disclose the Personal data if required to do so by law or in good faith, if such action is necessary to:
You are neither bound nor obligated to provide us the Personal Data. However, if you fail to supply to us the above Personal Data, we may not be able to process your Personal Data for any of the above Purposes.
8. Accuracy and Completeness of Personal Data
You are responsible for ensuring that the Personal Data you provide us is accurate, complete and not misleading and that such Personal Data is kept up to date.
The Personal Data Protection Act 2010 ("the Act"), which regulates the processing of personal data in commercial transactions, applies to Hello1010 Sdn. Bhd. ("Hello1010 Sdn. Bhd.", "our", "us" or "we"). For the purpose of this Notice, the terms "Personal Data" and "Processing" shall have the same meaning as prescribed in the Act.
1. Notification
This written notice serves to inform you that your Personal Data is being processed by or on behalf of Hello1010 Sdn. Bhd.
2. Description of Data
The Personal Data processed by us may include (but are not limited to):
- Name;
- National Registration Identification Card number / passport number;
- Race;
- Contact number;
- Address (mailing and e-mail);
- Occupation;
- Income;
- Employer’s details;
- Security recordings;
- Images (photographs and video recordings)
- Other information that we have requested for in our forms that you have completed including your sensitive Personal Data such as your religion, health condition and criminal record (if any) provided by you in the documents as prescribed in paragraph 4 of this notice.
3. Purpose
The processing of the personal data as provided under the Personal Data Protection Act 2010 means collecting, recording, holding or storing the personal data or carrying out any operations or set of operations on the personal data, we process your Personal Data, including any additional information you may subsequently provide, for the following purposes ("Purposes"):
- performance of a contract to which the Data Subject is a party;
- taking of steps at the Data Subject’s request with a view to entering into a contract;
- conducting of our internal activities;
- performance of your responsibilities and duties as counterpart of the agreement;
- performance of such other functions as Dealer or Contractor, within the ambit authorized by us;
- communication purposes;
- detection and prevention of fraud and/or illegal activities;
- market analysis, research and customer profiling to study market trends;
- customer support and after-sales services;
- participation in any contest, event and / or membership program;
- invitations to exclusive events, information on promotions and offers, sending magazines and /or newsletter;
- Responding to enquiries, comments and suggestions and such other purposes as may be related to the foregoing
4. Mode of Collecting Personal Data
Your Personal Data is and will be collected from you and/or from the information you have provided in our [sales purchase order form/comment card/indemnity form] and any other Hello1010 Sdn. Bhd. forms that you have been asked to complete, together with any other information that we may obtain about you from any oral or written communications.
5. Access, Corrections and Complaints
If you would like to make any enquiries or complaints, or request for access to or update and/or amend any of your Personal Data, or limit the processing of your Personal Data at any time hereafter, please do so by submitting such request to us via:
Hello1010 Sdn. Bhd.‘s Person In Charge
Telephone: +6013 688 1010
Email: support@hello1010.my
In accordance with the PDPA, we may refuse to comply with your request for access to update and/or amend your Personal Data, and if we refuse to comply with such request, we will inform you of our refusal and the reason for our refusal.
6. Disclosure of Information
Your personal data provided to us may be disclosed to the following classes of third parties (in or outside of Malaysia) as required under the law or pursuant to relevant contractual relationship (for example, where we appoint third party service providers) or for the purposes or directly related to the purposes stated. For the Purposes stated in Item 3 above, we may disclose your Personal Data to the following parties;
- Hello1010 Sdn. Bhd.’s Bankers/Solicitors/Insurers;
- Our related companies;
- Associates
- Affiliates
- All governmental and/or quasi-governmental departments and/or agencies
- Regulatory and/or statutory bodies
- Business partners and/or service providers
- Any other third party that you have requested or authorized us to disclose your Personal Data for the above purposes or for any other purposes for which your Personal Data would be disclosed at the time of its collection or any other purposes directly related to any of the above Purposes.
We may disclose the Personal data if required to do so by law or in good faith, if such action is necessary to:
- Comply with the requirements of any law enforcement agency,
- Court order or legal process; or
- Protect and defend rights or property of Hello1010 Sdn. Bhd., its personnel and its related and/or group of companies.
You are neither bound nor obligated to provide us the Personal Data. However, if you fail to supply to us the above Personal Data, we may not be able to process your Personal Data for any of the above Purposes.
8. Accuracy and Completeness of Personal Data
You are responsible for ensuring that the Personal Data you provide us is accurate, complete and not misleading and that such Personal Data is kept up to date.
9. Deletion of Your Personal Data
You may ask us to delete the Personal Data we hold about you at any time. There is no charge for making this request.
How to request deletion
Email us at support@hello1010.my with the subject line “Data Deletion Request”. Please send it from the email address you used when you purchased from us, and include:
We may retain certain Personal Data where we are required or permitted to do so by law, for example records we must keep for tax, accounting, fraud prevention, or the handling of an ongoing order, dispute or legal claim. Anything we are not required to keep will be deleted or anonymised.
Please note
Deletion is permanent. Once your Personal Data has been deleted we will no longer be able to look up your order history or any SIM or eSIM records linked to you, which means we may not be able to provide after-sales support, replacements or refunds for past orders. If you only wish to stop receiving marketing messages, you do not need to delete your data, simply tell us in the same email and we will unsubscribe you instead.
You may ask us to delete the Personal Data we hold about you at any time. There is no charge for making this request.
How to request deletion
Email us at support@hello1010.my with the subject line “Data Deletion Request”. Please send it from the email address you used when you purchased from us, and include:
- Your full name;
- The email address and/or contact number linked to your order or account;
- Your order number(s), if you have them;
- A short statement that you are requesting the deletion of your Personal Data.
- We will acknowledge your request within 7 business days;
- We may ask you for further information to verify your identity before we proceed, so that we do not delete another person’s data by mistake;
- We will complete verified requests within 30 days and confirm by email once the deletion is done.
We may retain certain Personal Data where we are required or permitted to do so by law, for example records we must keep for tax, accounting, fraud prevention, or the handling of an ongoing order, dispute or legal claim. Anything we are not required to keep will be deleted or anonymised.
Please note
Deletion is permanent. Once your Personal Data has been deleted we will no longer be able to look up your order history or any SIM or eSIM records linked to you, which means we may not be able to provide after-sales support, replacements or refunds for past orders. If you only wish to stop receiving marketing messages, you do not need to delete your data, simply tell us in the same email and we will unsubscribe you instead.
10. Passport Images Collected for Malaysian Prepaid eSIMs
This section applies only if you buy a Malaysian prepaid eSIM that we sell to non-Malaysian passport holders, such as our Tune Talk Malaysia plan.
What we collect and why
Prepaid mobile lines in Malaysia have to be accounted for to the person they were sold to. After you pay, we ask you to upload a photograph of your passport data page, and we keep it as the record of that sale. We do not register the line on your behalf, and we do not use your passport for any other purpose.
What we read from it
Our system reads the two lines of machine-readable code along the bottom of the page in order to check which country issued the passport and that the passport has not expired. It also converts your passport number into a one-way code so that we can apply our limit of two eSIMs per passport. Your passport number is not stored in a readable form.
How it is stored
We keep the image as the record of that sale. You may ask us to delete it at any time, free of charge, using the process in section 9 or by emailing support@hello1010.my.
If you would rather not provide it
You are not obliged to. As explained in section 7, without it we are not able to issue that eSIM.
This section applies only if you buy a Malaysian prepaid eSIM that we sell to non-Malaysian passport holders, such as our Tune Talk Malaysia plan.
What we collect and why
Prepaid mobile lines in Malaysia have to be accounted for to the person they were sold to. After you pay, we ask you to upload a photograph of your passport data page, and we keep it as the record of that sale. We do not register the line on your behalf, and we do not use your passport for any other purpose.
What we read from it
Our system reads the two lines of machine-readable code along the bottom of the page in order to check which country issued the passport and that the passport has not expired. It also converts your passport number into a one-way code so that we can apply our limit of two eSIMs per passport. Your passport number is not stored in a readable form.
How it is stored
- The image is held on our own server and is not part of the public website. It cannot be reached from a web address;
- Only authorised Hello1010 staff can open it, and they must sign in to do so;
- Every time an image is opened we record who opened it and when;
- We do not sell, share or publish passport images. We may disclose one only where we are required to by law or by a lawful request from the authorities, as described in section 6.
We keep the image as the record of that sale. You may ask us to delete it at any time, free of charge, using the process in section 9 or by emailing support@hello1010.my.
If you would rather not provide it
You are not obliged to. As explained in section 7, without it we are not able to issue that eSIM.