PRIVACY POLICY: CRSM SUNGAI PETANI

CRSM SUNGAI PETANI (“CRSM SP”, “we”, “us”, or “our”) respects the privacy of all our donors, volunteers, and beneficiaries. We treat personal information provided to us as confidential and are committed to ensuring compliance with the requirements of the Personal Data Protection Act 2010 (PDPA) of Malaysia.

This Privacy Policy explains how we collect, use, and process your personal information. By providing your personal data to CRSM SP or by using our donation platforms, you are deemed to have read and consented to the processing of your personal data in the manner prescribed below.

1. ACCEPTANCE OF THESE TERMS

1.1 If you do not agree to the terms of this Privacy Policy, please do not provide CRSM SP with any information. 1.2 By voluntarily providing personally identifiable information, you consent to the collection and use of such information as set forth in this Privacy Policy.

2. COLLECTION OF PERSONAL DATA

2.1 "Personal Data" refers to information that can identify you as an individual. This includes, but is not limited to:

• Name, National ID (IC) number, or Passport number.
• Contact details (phone number, email address, mailing address).
• Bank account or payment details for donation processing.
• Photographs or video footage taken during charity events or relief missions. 2.2 The provision of your Personal Data is voluntary. However, if you choose not to provide certain data, we may be unable to issue tax-exempt receipts, administer your volunteer registration, or provide updates on our welfare cases.

3. PERSONAL DATA OF MINORS

CRSM SP does not knowingly collect Personal Data from children or minors (under 18) without the consent of a parent or guardian. If you are a minor, please ensure you have obtained parental consent before providing any information to us.

4. PURPOSE OF COLLECTING AND PROCESSING DATA

CRSM SP may use your personal data for purposes including, but not limited to:

• Donation Management: Facilitating payments, issuing official receipts, and maintaining donation records.
• Communication: Responding to your inquiries, providing updates on disaster relief efforts, and sending newsletters.
• Event Coordination: Registering volunteers for missions and notifying you of upcoming charity events.
• Compliance: Meeting legal, regulatory, or tax requirements (e.g., LHDN requirements for tax-exempt receipts).
• Internal Administration: Record-keeping and auditing of funds.

5. DISCLOSURE TO THIRD PARTIES

CRSM SP does not sell or rent your personal information. We may only disclose data to:

• Government Bodies: Such as the Registrar of Societies (ROS) or Inland Revenue Board (LHDN) where required by law.
• Service Providers: Third-party payment gateways or professional auditors who are under a duty of confidentiality.
• Legal Necessity: When compelled by a court of law or to protect the rights and safety of CRSM SP and its members.

6. DATA SECURITY

6.1 We employ physical, electronic, and procedural safeguards to protect your information from unauthorized access or disclosure. 6.2 While we strive to protect your personal data, no method of transmission over the internet is 100% secure. CRSM SP will make reasonable efforts to ensure the security of data on our systems.

7. RIGHT TO ACCESS AND CORRECT DATA

7.1 You have the right to request access to, or correct any personal information held in our database. 7.2 To update your details or opt-out of communications, please contact us.

8. RETENTION OF DATA

Your personal information will be retained for as long as necessary to fulfill the purposes for which it was collected, or as required by Malaysian law (e.g., keeping financial records for 7 years).

9. CHANGES TO THIS POLICY

CRSM SP reserves the right to amend or modify this Privacy Policy at any time. Any changes will be updated on our official social media pages or website. You are advised to check this policy periodically for any updates.

Last Updated: 16 March 2026

隐私政策：马华志工团（CRSM）双溪大尼分会

马华志工团双溪大尼分会（以下简称 “CRSM SP”、“我们” 或 “本会”）尊重所有捐款者、志愿者及受益人的隐私。我们将对您提供的个人资料严格保密，并致力于遵守马来西亚 《2010年个人资料保护法》(PDPA) 的规定。

本隐私政策旨在阐明我们如何收集、使用和处理您的个人资料。通过向 CRSM SP 提供您的个人资料或使用我们的捐款平台，即表示您已阅读并同意按以下方式处理您的个人资料。

1. 条款之接受

1.1 若您不同意本隐私政策的条款，请勿向 CRSM SP 提供任何资料。 1.2 凡通过本会平台自愿提供个人身份识别资料，即视为您同意本隐私政策中关于资料收集与使用的各项条款。

2. 个人资料的收集

2.1 “个人资料” 指能够识别您个人身份的信息，包括但不限于：

• 姓名、身份证号码（IC）或护照号码。
• 联系详情（电话号码、电子邮箱、通讯地址）。
• 用于处理捐款的银行账户或支付详情。
• 在慈善活动或救灾行动中拍摄的照片或视频。 2.2 提供个人资料属于自愿性质。然而，若您选择不提供某些资料，我们可能无法为您开具免税收据、办理志愿者注册或向您提供个案进展更新。

3. 未成年人个人资料

未经父母或监护人同意，CRSM SP 不会故意收集未成年人（18 岁以下）的个人资料。若您是未成年人，请在向本会提供任何资料前，确保已获得父母或监护人的许可。

4. 收集与处理资料的目的

CRSM SP 可能出于以下目的（包括但不限于）使用您的个人资料：

• 捐款管理： 处理款项、开具正式收据及保存捐款记录。
• 沟通联系： 回复您的咨询、提供灾难救援进展更新及发送会讯。
• 活动协调： 登记救灾志愿者及通知您即将举办的慈善活动。
• 合规用途： 履行法律、监管或税务要求（例如马来西亚内陆税收局 LHDN 的免税收据要求）。
• 内部行政： 记录保存及资金审计。

5. 向第三方披露

CRSM SP 不会出售或出租您的个人资料。我们仅在以下情况下披露资料：

• 政府机构： 如社团注册局（ROS）或内陆税收局（LHDN）在法律要求下。
• 服务供应商： 负有保密责任的第三方支付网关或专业审计师。
• 法律必要： 在法庭强制要求下，或为了保护 CRSM SP 及其成员的权利与安全。

6. 资料安全

6.1 我们采用物理、电子和程序化保护措施，以防止您的资料遭到未经授权的访问或披露。 6.2 虽然我们竭力保护您的个人资料，但没有任何互联网传输方式是 100% 安全的。CRSM SP 将尽合理努力确保本会系统内资料的安全。

7. 访问及更正资料的权利

7.1 您有权要求访问或更正我们数据库中关于您的任何个人资料。 7.2 如需更新您的详情或取消订阅相关资讯，请联系我们。

8. 资料保留

您的个人资料将根据收集目的所需的时间进行保留，或根据马来西亚法律（例如财务记录需保存 7 年）的要求进行保留。

9. 政策之修订

CRSM SP 保留随时修改或更新本隐私政策的权利。任何变动将发布在我们的官方社交媒体专页或网站上。建议您定期查看本政策以获取最新资讯。

最后更新日期：2026年3月16日