Personal Data Protection Notice

This notice is issued by Protasco Berhad under the Personal Data Protection Act 2010 ("the Act"). It sets out how your personal data is collected, used, disclosed and retained when you use this website.

1. Scope of this notice

This notice applies to personal data collected through protasco.com.my. It applies to this website only. Other websites we link to, including those of our operating companies, our social media pages and Bursa Malaysia, are operated by other organisations, publish their own notices, and are not governed by this notice.

2. Who we are

Protasco Berhad is a public company listed on Bursa Malaysia. For the purposes of the Act, Protasco Berhad is the data controller in respect of the personal data described in this notice.

3. Your consent

By submitting an enquiry through this website, you consent to the processing of your personal data in the manner set out in this notice.

You may withdraw your consent at any time by writing to us at the contact details in section 12. Where you withdraw your consent we will stop processing your personal data, except where we are required or permitted by law to continue to hold it, and we may then be unable to deal further with your enquiry.

4. Personal data we collect from you

This website has one enquiry form, on the contact page. Where you submit an enquiry we collect the topic you select, your name, your organisation, your email address, your telephone number where you provide one, and the contents of your message.

We collect this personal data directly from you, through that form. We do not obtain it from any other source.

Your name, your email address, the topic and your message are obligatory. If any of them is not supplied we will be unable to identify or respond to your enquiry, and the form will not send. Your organisation and your telephone number are voluntary and may be left blank.

Your enquiry is received by our Corporate Communications Department, which refers it to the part of the group best able to respond. Our response is sent to the email address you provide.

Where your message contains the personal data of another individual, you should ensure that they consent to you providing it to us and that they have been made aware of this notice. You should also ensure that the personal data you supply is accurate and complete.

5. Personal data collected automatically

As with any website, technical data is recorded each time a page is requested. This includes your internet protocol address, the type of browser and device you use, the pages you open, and the date and time of access. This data is retained by our hosting provider in order to operate the website, to investigate faults, and to protect the website against misuse.

The enquiry form is protected by a verification check that distinguishes individuals from automated software. That check examines technical signals from your browser and connection. It does not read the contents of your enquiry.

The website also stores one or two small items in your browser during your visit, such as a record that you have closed a notice, so that it is not displayed to you again. You may block or delete these through your browser settings, and the website will continue to function.

6. Purposes for which we process your personal data

We do not sell your personal data, and we do not use this website to build advertising audiences.

7. Disclosure of your personal data

We disclose your personal data to the service providers who operate parts of this website on our behalf, and only to the extent necessary for them to perform that function. These are the provider that hosts the website and receives form submissions, and the provider of the verification check that protects the form against automated software.

Within the group, your enquiry is referred to the department best able to respond to it. We may also disclose your personal data where required by law, or where necessary to bring or defend a legal claim.

8. Security of your personal data

We maintain access controls over the systems in which enquiries are held, and limit access to those personnel who require it in order to respond to you. We require every service provider that operates part of this website to keep your personal data secure and to use it only to provide the service to us. The website is served over an encrypted connection.

No transmission over the internet can be made entirely secure. You should not send confidential information through the enquiry form.

9. Transfer of personal data outside Malaysia

Protasco Berhad is a Malaysian company, this website is operated from Malaysia, and the technology partners who build and maintain it on our behalf are Malaysian.

The platform on which the website is hosted stores and delivers content from servers located outside Malaysia. Your enquiry and the technical data recorded during your visit are therefore processed outside Malaysia. We transfer personal data out of Malaysia only where section 129 of the Act permits it, and we require each service provider to keep your personal data secure and to use it only to provide the service to us.

10. Retention of your personal data

We retain your enquiry, and our response to it, for as long as is necessary to deal with the matter and to maintain a reasonable record of the correspondence, after which it is deleted. Where an enquiry forms part of a record we are required by law to retain for a longer period, we retain that record for the period prescribed and no longer. Technical data held by our service providers is retained for a limited period and is then deleted in the ordinary course.

11. Your rights

Under the Act you may request that we:

We respond within 21 days, being the period prescribed by the Act. We may require you to verify your identity before we act on a request.

12. How to contact us

To make any request set out in this notice, or to raise an enquiry or complaint concerning your personal data, please contact our Corporate Communications Department.

Where you are not satisfied with our response to a request, you may write to us at the same address and ask for the matter to be reviewed.

13. Amendments to this notice

We amend this notice where our handling of personal data changes. The date shown below is the date of the current version.

Last updated 14 September 2026.