Last Updated: 1 September 2025
KFin Technologies (Malaysia) Sdn. Bhd., its holding company, subsidiaries and its branches herein referred to as 'KFintech,' 'We' 'Our' or 'Us' is committed to respect your privacy and choices. This Privacy Statement highlights our privacy practices regarding the personal data that we collect and process in compliance with the applicable data privacy regulations. For the purpose of this Privacy Statement, all terms used shall have the same meaning as prescribed in the Malaysian Personal Data Protection Act 2010 ("PDPA 2010").
At KFintech, we understand that your personal data is more than just data, it's a matter of trust. This Privacy Statement is designed to provide you with a clear understanding of our privacy practices regarding personal data that we collect and process about you through various sources. The primary focus of this statement is on the personal data that we collect and we process through our websites, that link to this Privacy Statement, which include www.kfintech.com/my/, and their sub-domains such as mfs.kfintech.com/mfs/, ris.kfintech.com/, www.nps.kfintech.com/, www.kfintech.com/gfs/, www.globalbusinessservices.kfintech.com/, www.kfintech.com/private-wealth-management/, www.kfintech.com/alternate-investment-fund/, etc. (Collectively referred to as 'KFintech Websites'). Our adherence to the below-mentioned principles and commitment to protecting and responsibly managing the personal data you share with us remains across KFintech. Depending on the purposes of processing and your relationship with us as a data subject, we may provide additional customized Privacy Statements as applicable.
The scope of this Privacy Statement covers the personal data collected, how we use or process such personal data, who are the recipients of such personal data and your associated rights under the applicable privacy laws and regulations, including how to exercise them. The applicability of this Privacy Statement is global, however certain additional information may be relevant to you depending on the country where you reside. Such additional terms based on countries or regions are called out in region specific statements below.
KFintech collects your personal data to provide you services and comply with legal requirements. We gather personal data you provide through the below modes:
We may collect the following categories of personal data:
We may use your personal data for the following purposes:
Legal Basis for Processing: We process your personal data based on the below legal basis of processing:
We ensure that all processing activities adhere to the general principles of data minimization and purpose limitation under the PDPA 2010, using your personal data only for the purposes specified and with appropriate safeguards in place.
If you choose not to provide your personal data that is mandatory to process your request, we may not be able to fulfil the relevant purpose of processing, including provision of any services to you if applicable.
We may share your personal data within KFintech, its holding company, branches or its subsidiaries, authorized business partners, service providers, third-party agents, auditors and/or government authorities, wherever applicable.
Your personal data may be shared only when necessary to provide our services, comply with legal obligations, or support our operations. We manage your data responsibly as follows:
All personal data sharing is conducted in compliance with applicable laws, ensuring your personal data is protected and used only for authorized purposes.
We maintain reasonable security practices and procedures including encryption, secure on-premises servers, and strict access controls, to protect your data from unauthorized access, alteration, or disclosure. As an ISO 27001:2022 certified organization, our security framework is designed to ensure data integrity, confidentiality, and availability while adhering to industry best practices and regulatory requirements.
KFintech will not retain your personal data for a period longer than necessary to fulfil the purposes outlined in this Privacy Statement unless a longer retention period is required by law or for related legitimate business purposes, such as complying with legal and regulatory requirements mandated by the SC, IRB or other regulatory authorities.
Personal data that is no longer needed to be retained as per legal and business requirements will be disposed of in a secure manner. We continuously review our retention policy and practices to ensure they align with legal obligations and your rights as a data subject.
KFintech may transfer your personal data to countries outside your country of residence to KFintech group companies or third parties, including to countries which have data protection standards from those which apply in your country or region of residence. Our service providers are located globally; however, the primary locations are India, Bahrain, Malaysia etc. We shall take reasonable and appropriate steps in line with applicable laws while executing such transfer.
For Malaysian, Compliance with PDPA 2010: Any international data transfer will comply with PDPA 2010 requirements, including ensuring that the recipient country has in place a law which is substantially similar to PDPA 2010 or that serves the same purpose; or that place ensures an adequate level of protection in relation to the processing of personal data which is at least equivalent level of protection afforded by PDPA 2010.
KFintech is committed to upholding your rights as a data subject under the applicable privacy regulations, for example, the PDPA 2010 for Malaysian residents. These rights empower you to control your personal data. Your rights as a data principal may differ based on your applicable jurisdictions.
Subject to the laws of your country, you may have certain rights as a data subject including but not limited to Right to Access, Right to Correction, Right to Deletion, Right to Withdraw Consent (this will not affect the lawfulness of prior processing before your withdrawal), Right to Nominate (You can nominate another individual to exercise your rights on your behalf in the event of your death or incapacity), Right to Complaint (You can raise concerns or complaints about our data practices, and we will address them promptly).
How to Exercise Your Rights: For exercising your rights, we may need to request certain information from you for verifying your identity and confirming that you are authorized to exercise the rights and access personal data. You can exercise your rights by contacting us at: Privacy.Malaysia@Kfintech.com
KFintech's websites, its associated products services and hosted contents are not intended for the use by children.
We do not knowingly collect personal data of children without verifiable parental consent. If KFintech learns that a child has submitted personal data online without verifiable parental consent, we will take all reasonable measures to delete the personal data from our database and not to use such personal data for any purpose (except where necessary to protect the safety of the child or others as required or allowed by law). If you become aware of any personal data collected from children, please email us at Privacy.Malaysia@Kfintech.com.
Our privacy practices regarding the processing of personal data we collect and store about you through our web portals and mobile applications will be as per the privacy policy of those portals.
When KFintech provides links to third party websites or services, we are not responsible for the privacy practices, notices, or contents of such third-party websites.
We maintain comprehensive incident response procedures to swiftly identify, evaluate, and address any potential personal data breaches. Our systematic approach ensures immediate containment, thorough investigation, and prompt remedial action to safeguard your personal data. We are committed to transparent communication with regulatory authorities and affected individuals within statutory timelines, keeping you informed about the resolution process while implementing measures to prevent recurrence. Our employees receive regular training on these procedures and clearly understand their responsibilities in incident reporting.
Know more about our cookie policy please click here.
If you have any queries, grievances, or complaints regarding our privacy practices or managing of your personal data, please contact us at:
KFintech is committed to protect the privacy of its website users. We may change the data privacy practices and update this Privacy Statement as on when the need arises. When we make changes, we will:
We encourage you to review this Privacy Statement regularly to stay informed about how we collect, use, share, store and protect your personal data. Your continued use of our website, mobile applications, or services after the updated notice is posted constitutes your acceptance of the revised terms. This Privacy Statement does not create any contractual or legal rights beyond those provided under applicable laws.
Detailed Privacy notice will be provided when one applies for a job, internship in KFintech through careers page available on KFintech Website.
Categories of Personal Data that we process: Candidate name, resume, educational qualifications, employment related details pertaining to background checks, national identification details (for selected countries) etc.
Use of Personal Data:
Legal basis of Processing:
We process your personal data when it is necessary for performance of contract to which you are a party or to take steps at your request prior to entering a contract or based on your consent as per applicable laws.
Data recipients / accessible to:
Your data may be accessible to authorized internal recipients within KFintech or our authorized service providers who provide services to KFintech, business partners, Government bodies (where applicable), auditors (internal/external) and clients (where applicable) based on contractual obligation.
For reference to our additional privacy practices regarding data security, retention, transfers (if any) and helping your exercise your rights as applicable, please refer to our global privacy statement.
Detailed Privacy notice will be provided at the time of onboarding. For our Alumni, detailed privacy notice is available here:
Categories of Personal Data that we process: Contact details, Dependant details, Personal identification details, Name, Educational qualifications, Employment related details, background check details, national identification details (for selected countries), official details, Salary and Compensation, Claims and financial details like tax, benefits like medical insurance details, performance and development records, digital access and IT related information including information we obtain from monitoring the use of our official systems, network (as permitted by law), travel records, leave and attendance details, emergency contact number etc. Personal or sensitive data collected may differ based on the business requirement of the entity and legal requirement of a country.
Use of Personal Data:
Legal basis of Processing: We process your personal data based on the below legal basis of processing:
Data recipients / accessible to:
Your data may be accessible to authorized internal recipients within KFintech or our authorized service providers who provide services to KFintech, business partners, Government bodies (where applicable), Auditors (internal/external) and Clients (where applicable) based on contractual obligation.
For reference to our additional privacy practices regarding data security, retention, transfers (if any) and helping your exercise your rights as applicable, please refer to our Global privacy statement.
Detailed Privacy notice will be provided at the time onboarding.
Categories of Personal Data that we process: Personal identification details- Name, Email ID, contact details, Bank details, Nominee details, User ID, Password, DP ID, Folio details, PAN, Demat account, Residential status, Legal status, Date of birth, Estimated income etc.
Personal or sensitive data collected may differ based on the business requirement of the entity and legal requirement of a country.
Use of Personal Data:
Legal basis of Processing: We process your personal data to comply with legal obligations arising out of applicable regulations.
Data recipients/accessible to:
Your data may be accessible to authorized internal recipients within KFintech or our authorized service providers who provide services to KFintech, business partners, Government bodies (where applicable), Auditors (internal/external) and Clients (where applicable) based on contractual obligation.
For reference to our additional privacy practices regarding Data security, retention, transfers (if any) and helping your exercise your rights as applicable, please refer to our Global privacy statement.
Detailed Privacy notice will be provided at the time onboarding.
Categories of Personal Data that we process: Personal identification details- Name, Email ID, Contact details, Bank details, Nominee details, User ID, Password, Folio/ Fund details: DP ID, Folio details, Permanent Account Number (PAN), Demat account, Residential status, Date of birth etc.
Personal or sensitive personal data collected may differ based on the business requirement of the entity and legal requirement of a country.
Use of Personal Data:
Legal basis of Processing: We process your personal data based on the below legal basis of processing:
Data recipients / accessible to:
Your data may be accessible to authorized internal recipients within KFintech or our authorized service providers who provide services to KFintech, business partners, Government bodies (where applicable), Auditors (internal/external) and Clients (where applicable) based on contractual obligation.
For reference to our additional privacy practices regarding Data security, retention, transfers (if any) and helping your exercise your rights as applicable, please refer to our Global privacy statement.
Detailed Privacy notice will also be displayed at the visitor's entrance areas in KFintech's offices.
Categories of Personal Data that we process: Visitor name, contact details, organization, asset details (if any), national identification details (for selected countries), purpose and date of visit, photograph and CCTV images and videos, IT related information including information we obtain from monitoring the use of our official systems and network (as permitted by law).
Personal or sensitive personal data collected may differ based on the business requirement of the entity and legal requirement of a country.
Use of Personal Data:
Legal basis of Processing: We process your personal data based on the purposes of Legitimate interests pursued by us or based on your consent wherever required, as per applicable laws and regulations.
Data recipients / accessible to:
Your data may be accessible to authorized internal recipients within KFintech or our authorized service providers who provide services to KFintech, business partners, Government bodies (where applicable), Auditors (internal/external) and Clients (where applicable) based on contractual obligation.
For reference to our additional privacy practices regarding Data security, retention, transfers (if any) and helping your exercise your rights as applicable, please refer to our Global privacy statement.
Categories of Personal Data that we process: Vendor name, Contact details, email id, organization, PAN and tax related details, financial details.
Personal or sensitive data collected may differ based on the business requirement of the entity and legal requirement of a country.
Use of Personal Data:
Legal basis of Processing: We process your personal data for performance of contract where you are a part or based on your consent wherever required as per applicable laws and regulations.
Data recipients / accessible to:
Your data may be accessible to authorized internal recipients within KFintech or our authorized service providers who provide services to KFintech, business partners, Government bodies (where applicable), Auditors (internal/external) and Clients (where applicable) based on contractual obligation.
For reference to our additional privacy practices regarding Data security, retention, transfers (if any) and helping your exercise your rights as applicable, please refer to our Global privacy statement.
Region specific privacy statements: