BBN DIGITAL SDN BHD and its Group Companies (collectively, "us", "we", or "our") operates https://epasport and other subdomain of epasport (the "Sites", "Service" or "Services"). This page informs you ("user", "you", or "your") our policies regarding the collection, use and disclosure of Personal Data ("Personal Data") we receive from users of the Sites. In this Privacy Policy, the term "Personal Data" means data relating to a living individual who is or can be identified either from the data or from the data in conjunction with other information that is in, or is likely to come into, our possession, and includes personal data as described in Data Protection Legislation (as defined below).Please read the following carefully. You will be required to expressly accept this Privacy Policy before registering Your Account (or before continuing to use the Service).

If you do not agree to these terms you must leave our website immediately.

If you choose to accept this Privacy Policy, we will keep a record of your acceptance in this regard. We will handle your Personal Data in accordance with relevant Data Protection Legislation. “Data Protection Legislation” means the PERSONAL DATA PROTECTION ACT 2010 (Malaysia), the Data Protection Acts 1988 and 2003 and Directive 95/46/EC, General Data Protection Regulation (EU) 2016/679 (“GDPR”) and any other applicable law or regulation relating to the processing of personal data and to privacy (including the E-Privacy Directive), as such legislation shall be amended, revised or replaced from time to time, including California Consumer Privacy Act of 2018 (CCPA).

li>

The security of your Personal Information is very important to us, but remember that no method of transmission over the Internet, or method of electronic storage, is 100% secure. While we strive to use commercially acceptable means to protect your Personal Information, we cannot fully eliminate security risks and guarantee its absolute security.

We retain your data as long as you have legitimate business needs with us. We only retain your data to allow us to provide you with our service and will never have any other purposes other than that.

When you request data deletion by deleting your account, we will remove all information about you. We will also request deletion of your data from our vendors and service providers platforms and systems to ensure you have been completely removed from our services.

However, we may keep anonymized transaction details for our financial audit. These transaction details will have no information about you nor your associates.

We may also keep your email address as SHA512 hash when you request your account deletion. This is to prevent future registration with the same email address and thus prevent abuse of our service. Using SHA512 will prevent reversing as it is only a one way function. So, we remain unaware of which emails we have banned.

In accordance with Data Protection Legislation, you may ask for an electronic copy of your Personal Data that you have provided to us and which we hold electronically, or for us to provide this directly to another party. This right only applies to Personal Data that you have provided to us – it does not extend to data generated by us. In addition, the right to data portability also only applies where:

• The processing is based on your consent or for the performance of a contract; and
• The processing is carried out by automated means.

• Access, Correct, Update and Delete. You can exercise your rights by contacting us by opening a ticket using the internal support ticket system or contacting us by email.
  • You can exercise your rights by contacting us by opening a ticket using the internal support ticket system or contacting us by email.
• Object to process your data.
  • If you wish to object to us processing your data you may stop using our service. We only access and process your data when you are using it.
• Opt-out from marketing.
  • If you wish to opt-out from our marketing email, you can click unsubscribe when you receive our marketing email.
• Consent withdrawal.
  • For all data that you have provided us with your consent, you may withdraw it by changing it to fake data. This data includes your name, email, and company information.
• Complain.
  • You have a statutory right to complain to a data protection authority about how we collect and use your personal information.

The California Consumer Privacy Act of 2018 (CCPA) provides consumers (California residents) with specific rights regarding their personal information. This section describes your CCPA rights in detail.

9.1 Right of Access

You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you:

• The categories of personal information we collected about you.
• The categories of sources for the personal information we collected about you.
• Our business or commercial purpose for collecting or selling that personal information.
• The categories of third parties with whom we share that personal information.
• The specific pieces of personal information we collected about you

• Access, Correct, Update and Delete. You can exercise your rights by contacting us by opening a ticket using the internal support ticket system or contacting us by email.
  • You can exercise your rights by contacting us by opening a ticket using the internal support ticket system or contacting us by email.
• Object to process your data.
  • If you wish to object to us processing your data you may stop using our service. We only access and process your data when you are using it.
• Opt-out from marketing.
  • If you wish to opt-out from our marketing email, you can click unsubscribe when you receive our marketing email.
• Consent withdrawal.
  • For all data that you have provided us with your consent, you may withdraw it by changing it to fake data. This data includes your name, email, and company information.
• Complain.
  • You have a statutory right to complain to a data protection authority about how we collect and use your personal information.

The California Consumer Privacy Act of 2018 (CCPA) provides consumers (California residents) with specific rights regarding their personal information. This section describes your CCPA rights in detail.

9.1 Right of Access

You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you:

• The categories of personal information we collected about you.
• The categories of sources for the personal information we collected about you.
• Our business or commercial purpose for collecting or selling that personal information.
• The categories of third parties with whom we share that personal information.
• The specific pieces of personal information we collected about you

9.2 Deletion Request Rights

You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.

We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:

• Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
• Debug products to identify and repair errors that impair existing intended functionality.
• Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
• Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.).
• Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent.
• Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
• Comply with a legal obligation.
• Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

9.3 Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:

• Deny you goods or services.
• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
• Provide you a different level or quality of goods or services.
• Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or service.

ePasport does not knowingly collect information from children under the age of 13, and children under 13 are prohibited from using our Sites and Services. If you learn that a child has provided us with personal information in violation of this Privacy Policy, you can alert us at privacy@epasport

Information about our users, including Personal Information, may be disclosed and otherwise transferred to an acquirer, successor, or assignee as part of any merger, acquisition, debt financing, sale of assets, or similar transaction, or in the event of an insolvency, bankruptcy, or receivership in which information is transferred to one or more third parties as one of our business assets. You acknowledge that such transfers may occur, and that any acquirer of us or our assets may continue to use your Personal Information as set forth in this Privacy Policy.

Information about our users, including Personal Information, may be disclosed and otherwise transferred to an acquirer, successor, or assignee as part of any merger, acquisition, debt financing, sale of assets, or similar transaction, or in the event of an insolvency, bankruptcy, or receivership in which information is transferred to one or more third parties as one of our business assets. You acknowledge that such transfers may occur, and that any acquirer of us or our assets may continue to use your Personal Information as set forth in this Privacy Policy.

We also reserve the right to access, read, preserve, and disclose any information as we reasonably believe is necessary to (i) satisfy any applicable law, regulation, legal process or governmental request, (ii) enforce this Privacy Policy and our Terms of Service, including investigation of potential violations hereof, (iii) detect, prevent, or otherwise address fraud, security or technical issues, (iv) respond to user support requests, or (v) protect our rights, property or safety, our users and the public. This includes exchanging information with other companies and organizations for fraud protection and spam/malware prevention.

This Privacy Policy is effective as of date of last revision and will remain in effect except with respect to any changes in its provisions in the future, which will be in effect immediately after being posted on this page.

We reserve the right to update or change our Privacy Policy at any time and we encourage you to check this Privacy Policy whenever you use our Service to stay informed. If the changes are significant, we will provide a more prominent notice by adding a notice on our Sites, notification, or by sending you an email notification.

Your continued use of the Service after we post any modifications to the Privacy Policy on this page will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified Privacy Policy.

If you have any questions about this Privacy Policy or you wish to exercise your rights, please do not hesitate to contact us by email at privacy@epasport or by raising a ticket in the support system.