Dear Valued Membership Advisors / Members,

METAFIN SDN BHD ("MetaFin") is committed to comply with the Personal Data Protection Act 2010 ("the Act") which came into effect on 15th November 2013.

This Personal Data Protection Policy is in both Bahasa Malaysia and English. It will assist you to understand some basic questions including, amongst others, why and how do we collect your personal information, your rights to access these information, how to contact us and third party disclosure policy.

You may at your convenience review the details of any of your personal data which we have retained at our corporate head office located at Level 801, Block A, Pusat Dagangan Phileo Damansara II, No 15, Jalan 16/11, Off Jalan Damansara, 46350 Petaling Jaya, Selangor Darul Ehsan. For more information with regards to this Policy, you can review the latest updates at www.metafin.com.my

For further clarification, please do not hesitate to contact our office at +603-7721 2888 or email us at enquiries@metafin.com.my

Thank you for your continued support.

PERSONAL DATA PROTECTION POLICY

This Personal Data Protection Policy is issued to all our existing, immediate and/or prospective membership advisors and members pursuant to the Personal Data Protection Act 2010 ("the Act") which came into force on 15 November 2013.

1. Rights of Access

In the course of your dealings with METAFIN SDN BHD ("MetaFin"), we will require you to voluntarily provide data and information about yourself ("Personal Data") to enable us to deliver notices, services and / or other information in connection with our existing and future membership programs, new membership program launches and incentive campaigns.

MetaFin will follow in accordance to the s. 30(4) of the Act, where any separate entries in respect of personal data held for different purposes, a separate data access request shall be made for each separate entry.

2. Personal Data

The Personal Data may include, but not limited to, information concerning your name, date of birth, identity number, passport number, address, gender, race, nationality, photographs and videos, contact information, e-mail address, education, occupation, telephone or fax number, your previous addresses and preferred mode of communication, religion, credit card details, bank account number and other information where permitted by applicable law.

For sensitive personal data, explicit consent has to be obtained from the individual for processing of the personal data. Sensitive personal data refer to any personal data that contains any of the following attributes:

1. Physical or mental health
2. Political Opinions
3. Religious Beliefs
4. Commission or alleged commission of any offense or any other personal data as determine by the minister

3. Purpose

The Personal Data may be collected, processed and used for one or more of the following purposes:

1. to process your application or request for our membership program;
2. to send you information by e-mail, telephone calls, SMS or social network applications or internet social media about the membership programs, services and incentive campaigns offered by Metafin and selected third parties that we think may interest you while we maintain control over your Personal Data;
3. for the delivery of notices, services or other information and the marketing of such services or membership programs whether present or future, to you;
4. to conduct marketing and client profiling activities regarding our latest membership programs, services and/or incentive campaigns;
5. for our internal record keeping and maintenance of member records;
6. for insurance and risk management purposes;
7. for billing, accounting and financial purposes, including recovery of any debt owing to us;
8. to meet any legal or regulatory requirements imposed on us;
9. to facilitate any subsequent commercial transactions in relation to any incentive campaigns, membership programs and/or services; and/or
10. for any other purpose that is required or permitted by any law, regulations, guidelines and/or relevant regulatory authorities.

We will seek your prior agreement, consent and authorization in the event we intend to use your Personal Data for a purpose other than those that are set out above and in the privacy terms, if any, in your agreement(s) with us.

4. Source

The Personal Data will be legitimately and transparently obtained via the following manner:

1. official registration forms (either electronic or printed) or any other promotional events;
2. official Request for Information forms that are provided to you by our employees or membership advisors;
3. any emails or any correspondences that we have received from you requesting for information or making any inquiries;
4. any forms that you have submitted onto our website or any websites contracted by us;
5. any referral from any person which have included his/her verifiable personal contact details;
6. Business cards that were dropped or given to our employees or associates; and/or
7. any documents (including, but not limited to, statutory forms and returns) that were submitted to us for processing.

At no time will any Personal Data be in any way commercially acquired, without your prior consent, from a source other than those that are set out above, such as through the purchase or trading of illegitimate and illegal Personal Data databases or lists.

5. Rights of Access

You have the right to request access to and if required, correction of your Personal Data in our records. You have the right to:

1. request access to your Personal Data in our records for verification purposes. You may access and review all of your Personal Data held by us, in person, at our corporate offices located at the address given in (g) below;
2. request the correction of your Personal Data in our records in the event the information is inaccurate, misleading, out-of-date or incomplete, upon validation and verification of the new information provided in person, at our corporate offices located at the address given in (g) below;
3. request that your Personal Data shall only be used for the fulfilment of the purpose of the collection of such information;
4. request for proof of policy and procedure in relation to the safeguard and guarantee of your Personal Data in our records;
5. request that we specify or explain our policies and procedures in relation to data and types of Personal Data handled by us; and
6. communicate to us your objection to the use of your Personal Data for marketing purposes whereupon we will not use your Personal Data for these purposes, in person, at our corporate offices located at the address given in (g) below.
7. If you wish to make a request to access, review, amend and correct your Personal Data, you may do so by submitting such request via post, email or facsimile transmission to the following address:
   
   Database Department
   
   MetaFin Sdn. Bhd.
   
   MetaFin, Level 801, Block A,
   
   Pusat Dagangan Phileo Damansara II,
   
   No 15, Jalan 16/11, Off Jalan Damansara,
   
   46350 Petaling Jaya, Selangor Darul Ehsan
   
   Telephone Number: 03-7721 2888
   
   Facsimile number: 03-7721 2889
   
   Email: enquiries@metafin.com.my

6. Disclosure

In the course of conducting, management and/or operation of our business, we may need to disclose your Personal Data to the following classes of persons:

1. any related companies and/or associates of MetaFin, including those incorporated in the future;
2. our business partners and affiliates that provide related services or products in connection with our business;
3. our auditors, consultants, lawyers, accountants or other financial or professional advisers appointed in connection with our business;
4. our third party service providers, third party management companies, sub-contractors or other parties as may be deemed necessary by us to facilitate your dealings with us; and/or
5. our appointed service providers in relation to our membership programs, for the purposes of delivery of admission gifts and services.

The Personal Data provided to us will otherwise be kept private and confidential at all times and they will not be sold, given to, or otherwise shared with any third parties other than those that are set out above for commercial or any other purposes without your prior consent, subject at all times to any present or future laws, regulations, directions, court orders, by laws, guidelines, codes applicable to us (whether in or outside Malaysia).

Third parties are legally tasked with processing your Personal Data in line with principles specified by MetaFin. Third parties are also held legally responsible for securing your Personal Data at an appropriate level of security in accordance to applicable data protection laws and widely accepted industry standards.

You may at any time withdraw or amend, in full or in part, your disclosure consent given previously, in each case subject to any applicable legal restrictions, contractual conditions and a reasonable time period, in person, at our corporate offices located at the address given in 5(g) above.

7. Limit Processing of Personal Data

The Personal Data provided to us undergoes processing as and when required or upon scheduled maintenance. The definition of processing defines it as "any operation or set of operations which is performed upon Personal Data, whether or not by automatic means, such as collection, recording, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, blocking, erasure or destruction".

You have the right to limit, in full or in part, any of the processes by which your data is subjected to in terms of the operations allowed to be performed upon it, the period of time allowed for the performance of these operations or alternatively the deadline of the consent given.

MetaFin shall be responsible for determining the purposes and means of the processing of Personal Data.

You may at any time withdraw or amend, in full or in part, your processing consent given previously, in each case subject to any applicable legal restrictions, contractual conditions and a reasonable time period, in person, at our corporate offices located at the address given in 5(g) above.

8. Failure/Refusal

The Personal Data provided to us are wholly voluntary in nature and you are not under any obligation or under any duress to do so. The failure to provide the Personal Data may result in any one or more of the following, which we shall not be held liable for any of the consequences arising therefrom:

1. our inability to provide you with the information, services and/or products requested;
2. our inability to update you with the latest membership programs, services, incentive campaigns, product and/or launches; and/or
3. our inability to comply with any applicable law, regulation, direction, court order, by laws, guidelines and/or codes.

9. Protection

Your Personal Data will be kept and processed in a secured manner. The appropriate administrative and security safeguards, policies and procedures will be implemented, as far as practicable, in accordance to the applicable laws and regulations. We will, as far as practicable, aim to prevent any unauthorized and/or unlawful processing of, and the accidental loss, destruction or damage to your Personal Data.

MetaFin is committed to taking appropriate technical, physical and organisational measures to protect your Personal Data against unauthorised access, unlawful processing, accidental loss or damage, and unauthorised destruction.

To safeguard against unauthorised access to your Personal Data by any third parties, all electronic Personal Data held by MetaFin is kept, maintained and/or processed on systems that are protected by secured networks. MetaFin and its related entities limit the access to any internal systems that hold Personal Data to a select group of authorised users through the use of unique identifiers and passwords. Access to Personal Data is strictly limited, provided only on a need basis, to relevant users for the purposes of performing their official duties.

Compliance with these provisions will be required of all third-party administrators who may access your Personal Data, as described under the \'Disclosure of Personal Data\' in Section 6 above.

10. Language

In accordance to Section 7(3) Personal Data Protection Act 2010, this Policy is issued in both Bahasa Malaysia and English languages. In the event of any inconsistency, the English language version of this Policy shall prevail.

11. How to Contact Us:

If you require any clarification on this Policy, you may:

1. email us at: enquiries@metafin.com.my;
2. post or fax your queries to the address given in 5(g) above.

12. Changes to this Policy

MetaFin may need to modify, update and/or revise this Personal Data Protection Policy from time to time, for example, to comply with changes in business operations or laws and regulations. In any case, the latest version of this Policy will be made available on https://www.medisavers.my/privacy-policy.html at all times and accordingly, you may periodically review this website to obtain the latest information on MetaFin\'s privacy practices.

1. I declare that I have attained eighteen (18) years of age, and I understand that the Program is automatically renewable on the anniversary of each Membership period.


2. I agree to be bound by the terms and conditions of the program, particularly those stipulated in the Program leaflet and the Program Welcome Pack. Where applicable, I agree to be bound by the terms and conditions of the participating partners of the Program as stipulated in the respective vouchers and/or Membership Guide in the Program.


3. Payment for the Membership Fee of the Program shall be according to the accompanying payment option form, and I agree to be bound by the terms thereof.


4. In the event of a third party\'s credit card/debit card(s) being used for purpose of payment for the Membership Fee, I shall obtain authorization condoning such usage by causing the third party credit card/debit card authorization section in the application form to be duly signed by the credit card/debit card(s) holder, together with all relevant legal documents in support of such usage. I understand that the provider will discharge their liability from any legal action arising from this request and that I shall be fully responsible for any claims arising in any forms.


5. I acknowledge that this application is subject to a cooling off period of ten (10) working days from the date of receipt by the provider of this application ("the Cooling Off Period"). I acknowledge that I shall be entitled to a refund of the Membership Fee provided I return the Program Welcome Pack to the provider and that I have not utilized any of the benefits of the Program.


6. In the event that I have utilized any part of the Program and/or the Program Welcome Pack is incomplete or is not in a reusable condition, the provider shall be entitled to deduct therefrom a sum equivalent to the cost of usage of such part of the Program and/or the cost of the Program Welcome Pack, as the case may be.


7. I acknowledge that cancellation of my membership in the Program is strictly not allowed after the Cooling Off Period and that the provider shall not be liable to refund any portion of the Membership Fee.


8. I acknowledge that once my Membership application has been approved, I cannot change my Introducer unless my Membership has expired under the prevailing Membership period and a period of six (6) months has lapsed.


9. I acknowledge that the terms and conditions herein, the Program leaflet, the Membership Guide and the Program Welcome Pack shall constitute the entire understanding of the parties.


10. In the event that any cheque or credit card/debit card(s) toward payment of the Membership Fee is declined for whatsoever reasons, the Program benefits and insurance policy will automatically be cancelled. MetaFin and the provider shall not be liable for any claims incurred thereafter. The provider has the right to terminate the Membership with immediate effect. Any cost incurred will automatically be charged to the applicant\'s assigned credit card/debit card as indicated in the payment instruction form.


11. I acknowledge that the terms and conditions herein shall be governed by the laws of Malaysia.


12. MetaFin reserves the right at its own discretion to vary, delete or add to any of these terms and conditions and/or terms and conditions of the Program from time to time.


13. Any information that has been declared on any of the forms is to my best knowledge. I have fully disclosed and did not withhold any material information that is relevant to the application. In the event if there\'s any information that has been acquired or missed out, it is my duty to inform MetaFin or the respective Advisor on such information. Such omission will be borne by me.


14. I acknowledge that I am NOT selling and promoting insurance products. I am promoting Membership Products offered by MediSavers platform to my customers.


15. I acknowledge that protection portion of the membership product(s) is managed by:
    
    1. Corporate Agency: MediSavers Health Management Sdn Bhd MediSavers MultiProtect - Underwritten by Great Eastern Life Assurance Co. Ltd
       


16. Upon my submission of this application to the provider, I hereby agree to be bound by the terms stipulated above.

THIS CONTRACTS IS SUBJECT TO A COOLING-OFF PERIOD OF TEN WORKING DAYS

CONSENT TO RELEASE CONFIDENTIAL INFORMATION

I hereby authorize MetaFin Sdn. Bhd. "(MetaFin)" and if required Pathlab Health Management (M) Sdn. Bhd. "(PHM)", and MediSavers Health Management Sdn. Bhd. "(MHM)" to have access to my medical records, laboratory test results and any other medical information (collectively "the Information"). I understand MetaFin, PHM, and MHM will treat the Information as confidential and will not disclose it to any third party except (i) to medical personnel for the purpose of medical treatment where I am unable to make disclosure promptly; and (ii) to any insurance company (a) if required by the terms of any policy effected under the Program, or (b) in connection to any claim pursuant to such policy, but only if, in the sole and absolute discretion of MetaFin, such disclosure is warranted.

1. Upon provision of credit card, debit card, or bank account particulars, the Customer hereby grants express authorisation to MetaFin Sdn. Bhd. ("MetaFin") and/or its duly appointed collection agents (which shall include, inter alia, iPay88, Razer Merchant Services, Curlec, and any other such entities as may be appointed from time to time) to deduct all sums due in respect of Membership Fees, charges, premiums, or any other financial obligations pertaining to products and services by the respective service providers facilitated via the MetaFin platform. Such products and services shall include, without limitation to MediSavers Healthcare Programs, SME Solutions Programs, or any other products or services introduced under the MetaFin platform.
2. The Customer acknowledges that financial obligations, which may include Insurance Premiums, my vary due to factors such as changes in age bands, insurer underwriting criteria, regulatory adjustments, or service enhancements. MetaFin shall provide no less than thirty (30) days' written notice prior to implementing any such adjustments. The Customer authorises MetaFin to debit any revised sums from the designated payment method(s).
3. In the event of any failed or declined payment attempt, whether via credit card, debit card, or bank account, due to reasons including insufficient funds, expired credentials, or transaction rejection, the relevant service provider reserves the right to suspend or terminate the associated membership, policy, or service with immediate effect.
   1. Neither MetaFin, Pathlab Health Management (M) Sdn. Bhd. ("PHM") and/or its dully appointed collection agents, nor the relevant Insurance Underwriter(s) shall be liable for claims, losses, or detriment suffered post-termination, except where prohibited by applicable law.
   2. The Customer agrees to indemnify and hold harmless MetaFin, PHM, and the Insurance Underwriter(s) from liabilities or disputes arising subsequent to such termination. This indemnity shall be limited to losses directly arising from the Customer’s breach of payment obligations.
4. Should the Customer wish to discontinue any membership or recurring service administered via the MetaFin platform, written notice must be provided at least sixty (60) days prior to the expiration of the current term. Upon receipt of such notice:
   1. Any security deposit maintained with MetaFin shall be applied against any outstanding sum due;
   2. Services will continue until the expiry date, unless terminated earlier due to non-payment or breach of these terms.
5. In circumstances where two (2) successive billing attempts result in non-payment, MetaFin or the relevant service provider reserves the absolute right to cancel the membership, policy, or service with immediate effect.
6. MetaFin retains discretion to impose administrative surcharges where particular payment methods occasion additional processing burdens. This surcharge will be notified in advance and reflected in the billing cycle.
7. Monthly Standing Instruction (MSI) Customers are encouraged to use credit cards or FPX-linked savings accounts to ensure service continuity. Recurring debit card transaction failures, including insufficient funds or delayed processing, have been identified as compromising the continuity of services and placing administrative strain upon the platform. To that end, Customers are urged to utilise credit cards or FPX-linked savings accounts for payment.
   1. Memberships and recurring services shall, unless otherwise discontinued in accordance with Clause 4, be renewed automatically upon the anniversary of the initial membership term.
   2. Fees upon renewal shall be subject to variation for reasons including, without limitation, changes in age bands, insurer underwriting revisions, or service enhancements. Notice of such variations shall be issued not less than thirty (30) days prior to the effective date thereof.
   3. The Member may elect to terminate membership by issuing written notice no less than sixty (60) days prior to expiry of the current membership term. Any security deposit held shall be applied against final instalments or outstanding balances.
   4. Should payment under the MSI fail for two (2) consecutive months, MetaFin or the applicable service provider reserves the right to cancel the service with immediate effect.
   5. MetaFin may, at its sole discretion, vary, delete, or introduce new provisions within these MSI terms. Any such amendments shall be communicated to the Customer with a minimum of thirty (30) days’ prior notice.
8. Payment Method Policy
   1. The Customer is encouraged to utilise credit cards or FPX-linked savings accounts for the settlement of all fees and charges due under these Terms. The purpose is to safeguard uninterrupted service provision, enhance transactional security and operational efficiency; and mitigate administrative disruptions from failed or delayed debit card transactions.
   2. The respective service provider responsible for delivering the service retains the discretion to modify accepted payment methods or apply surcharges in accordance with these Terms. Any changes shall be communicated to the Customer with a minimum of thirty (30) days’ prior notice.
9. Payment information provided by Customers shall be managed in strict accordance with the Personal Data Protection Act 2010 (PDPA) and prevailing industry security standards. MetaFin does not retain payment credentials directly but relies upon duly authorised payment processors.
10. Refunds, where applicable, shall be administered pursuant to the terms of the respective product or service agreement. MetaFin reserves the right to offset any outstanding liabilities prior to the disbursement of refunds. Refund terms shall remain subject to applicable law and the relevant product or service agreement.
11. If any payment made via credit/debit card is disputed, reversed, or charged back, MetaFin reserves the right to suspend or terminate the associated membership, policy, or service until the issue is resolved to MetaFin’s satisfaction. The Customer remains liable for any outstanding amounts and any reasonable administrative costs incurred in managing such reversals, including but not limited to bank fees and administrative charges.
12. In the event of a dispute, both parties agree to attempt to resolve the matter amicably via mediation before resorting to litigation.
13. All notices and communications under these Terms may be sent electronically and shall be deemed received on the day of transmission.
14. All payments shall be made in Malaysian Ringgit (MYR) unless otherwise agreed in writing. Any fees, including but not limited to foreign exchange charges, bank transfer fees, or other transaction-related costs incurred in the remittance of payments, shall be borne solely by the Customer.
15. MetaFin, or the applicable service provider shall have the right to set-off any sums due from the Customer against any monies payable to the Customer under any agreement or arrangement.
16. MetaFin shall not be liable for failure or delay in performing obligations under these Terms where such failure arises from circumstances beyond its reasonable control, including but not limited to acts of God, natural disasters, war, strikes, government restrictions, pandemics, or failures of payment systems or communication networks. Payment obligations are suspended, not extinguished, during such events.
17. MetaFin may assign or transfer its rights and obligations under these Terms to an affiliate or third-party service provider with prior notice to the Customer.
18. No failure or delay by MetaFin in exercising any right, power, or remedy provided under these Terms shall operate as a waiver thereof, nor shall any single or partial exercise of such right preclude any further exercise of it or the exercise of any other right.
19. If any provision of these Terms is found to be invalid, illegal, or unenforceable by a court of competent jurisdiction, the remaining provisions shall continue in full force and effect.
20. These Terms shall be governed by the laws of Malaysia. Disputes arising hereunder shall fall within the non-exclusive jurisdiction of the Malaysian courts, without prejudice to MetaFin’s right to enforce rights in other jurisdictions. Any conflict of laws principles that would result in the application of laws other than those of Malaysia shall be excluded.
21. MetaFin retains the prerogative to amend, vary, or supplement these Payment Terms and Conditions from time to time. Customers shall be notified of such amendments no less than thirty (30) days prior to their effective date.

I/We understand that it is my/our duty to take reasonable care not to make a misrepresentation in answering the questions in this Application and I/we hereby declare that I/we have fully and accurately answered the questions above.

I/We agree that any personal information collected by the Company may be held, used and disclosed by the Company to individuals/organizations, affiliates related to and associated with the Company or third parties (within or outside of Malaysia), including reinsurance and claims investigation companies and industry associations/federations) for processing this application and providing subsequent service for this application and to communicate with me/us for other products and services. I/We understand that I/We have a right to access and request the correction of my/our personal information held by the Company. Such request can be made to the Company’s Customer Service Center.

I/We agree that my/our personal information collected or held by the Company may be disclosed by the Company to any selected third party for the purposes of cross marketing, direct marketing and data matching by the said third-party. I/We understand that I/We have a right to access and request the correction of my personal information held by the Company. Such request can be made to the Company’s Customer Service Centre.