"Privacy Policy" means this Privacy Policy including any schedules and any amendments to this Privacy Policy from time to time;

"CSE" means CSE Telematics Sdn Bhd established under the laws of Malaysia and having its business address at CSE Building, Pat Square, Jalan Pelukis U1/46, Temasya Industrial Park, Glenmarie, 40150 Shah Alam, Selangor Darul Ehsan, Malaysia;

"CSE Group" means CSE Telematics and its subsidiaries, associates and affiliated companies;

"Service or Services" used interchangeably, shall refer to our web-sites, our mobile applications and their web-versions that the CSE Group operates and that relates to this Privacy Policy;

"Use of the Service" means the use of applications or their web versions, as well as visiting, navigating or interacting with websites or other uses (in relation to the Service this term shall refer to those types of actions that are applicable to the Service);

"Account" means an account that provides access to the Service for the User, if authorization to access the Service is required;

"Profile" means a profile of the User who has the account and may include any additional information about the User, with the exception of information included in the User’s Account;

"Personal Data" means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

"Data Protection Law" means all applicable laws, regulations, and other legal requirements relating to (a) privacy, data security, consumer protection, marketing, promotion, and text messaging, email, and other communications; and (b) the use, collection, retention, storage, security, disclosure, transfer, disposal, and other processing of any Personal Data in respect of Personal Data Protection Act 2010 of Malaysia. The terms "data controller", "data processor", "data subject", "personal data", "processing" shall have the meanings given to them under the said Act.

We may collect several types of information, including but not limited to Personal Data, from and about you (“Collected Information”), including information:

1. by which you may be personally identified, such as name, email address, postal address, telephone number or any other identifier by which you may be contacted online or off-line;
2. that is about you but individually does not identify you;
3. about your internet connection, the equipment you utilize to use the Service and your usage details.

We collect these information:

1. directly from you when you provide it to us;
2. automatically when you use the Service. Information collected automatically may include usage details, internet protocol (“IP”) addresses and information collected through cookies and other tracking technologies;
3. from third parties (only applicable to authorized use of the Service).

When you use the Service, we may ask you to provide certain Collected Information:

1. information that you provide by interacting with the Service (only applicable to authorized use of the Service). This includes information provided at the time of using the Service, purchasing certain enhanced features of the Service and requesting further services through the Service. Among others these information includes:-
   • Account Information. When the User signs up for an Account, certain information is required such as the name and email address.
   • Additional Profile Information. The User may choose to provide additional information as part of its Profile. Profile information helps the User to get more from the Service. It’s the User’s choice whether to include sensitive information on his/her Profile.
   • The data that you configure to send through your devices. To use some Service, you may need to configure your devices (for example, trackers) to transfer data (among other device identifier, location coordinates, speed of movement) to a server that belongs to us or our sub-processors (as defined below).
   • Content Data. Information that is not included in the ones mentioned above but in accordance with the Terms of Use of the Service is related to User Content (as defined in the Terms of Use of a particular Service).
   • Other Information. The User may otherwise choose to provide CSE information when the User fills in a form, conducts a search, updates or adds information to its Account, responds to surveys, posts to community forums, participates in promotions, or uses other features of the Service.
2. records and copies of your correspondence (including email addresses and phone numbers), if you contact us. We may also ask you for information when you report a problem with the Service.

When you use the Service, we may use automatic data collection technologies to collect certain Collected Information about your equipment and browsing actions, including:

1. Usage details. Details of your use of the Service, including traffic data, location data, logs and other communication data and resources you use through the Service.
2. Device information. Information about your device, among other may include:
   • IP address
   • Platform / OS and its version
   • Device Model
   • Device ID / Browser ID (only applicable to authorized use of the Service)

The information we collect automatically under this Privacy Policy may include your Personal Data and information we may maintain or associate with your Personal Data that we collect in other ways or receive from third parties. It helps us to improve the Service rendered to you. For example, to estimate our audience size we may aggregate information and calculate the percentage of users in a particular state or country.

If the information covered by this Section 4 is aggregated or de-identified so it is no longer reasonably associated with an identified or identifiable natural person, we may use it for any business purpose.

The technologies we use for automatic data collection may include:

Third-party analytics. We can use analytical tools developed by third parties but these tools are usually located on our servers and we do not transfer the collected information to third parties. These tools collect information sent by your device or the Service, including log file information, cookies, errors, add-ons and the web pages you visit and other information that assists us in improving the Service.

Third party analytics tools that are not located on our servers are listed in the sub-processors list in Section 9.

Cookies (or mobile cookies) and similar technologies. When you use the Service, we may use cookies and similar technologies to collect information about how you use the Service and provide features to you. You may refuse to accept cookies by activating the appropriate browser setting on your device. However, if you select these browser settings you may be unable to access certain parts of the Service. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you direct your browser to the Service.

Log file information. Log file information is automatically reported by the Service each time you make a request to use the Service. When you use the Service, we may automatically record certain log file information, including your web request, IP address, browser, referring/exit pages and URLs, number of clicks and how you interact with links on and through the Service, domain names, landing pages, pages viewed, and other such information. The information allows us to receive more accurate reporting and improve the Service.

Device identifiers (only applicable to authorized use of the Service). A device identifier may be data stored in connection with the device hardware, operating system or other software, or data sent to the device by us. A device identifier may deliver information to us about how you browse and use of the Service. In order to be able to provide you with push notifications, we process your browser ID, and your device ID for mobile devices. As part of this service and based on your consent, we store and process additional information, whether you open push notifications, your type of end device, operating system, browser and, if applicable, other device settings that you use. The data is processed for the purpose of optimising the push notification service according to your consent

When you use our Service that require authorization, we may collect some data from third parties. These third parties from which we may receive data include:

• CSE Group and/or associate, affiliate companies, which can provide processed information if they act as sub-processors, or information that you use other applications or services;
• Google and Apple companies that provide information about subscriptions or payments if you make a subscription or payment regarding the paid functionality of the Service.

In addition to some of the specific uses of information we describe in this Privacy Policy, we may use the Collected Information for the following purposes:

1. to present to you the Service and its contents and others that you request from us;
2. to automatically update the Service on your device (only applicable to authorized use of the Service);
3. to carry out our obligations and enforce our rights arising from any contracts entered into between you and us;
4. to provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses in relation to our Service.
5. to notify you about changes to the Service, including by sending you technical notices, notices about your subscription, including expiration and renewal notices, updates, security alerts and support and administrative messages;
6. to diagnose or fix technology problems in relation to our Service;
7. to monitor metrics in relation to our Service such as total number of Users or traffic;
8. to provide, improve, test, and monitor the effectiveness of the Service;
9. to develop and test new products and features;
10. in any other way, we may describe when you provide or when we collect your information or when is indicated in this Privacy Policy;
11. to fulfil any other purpose for which you provide it;
12. for any other purpose with your consent.

Please bear in mind that provisions of this Section do not apply to your pseudonymized Personal Data.

1. Access, modification, correction and deletion. You can send us an email indicated in Section 14 to request access to, modification, correction, update or deletion of any Personal Data that you have provided to us and that we have about you. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.

We may disclose aggregated information about our Users and information that does not identify any individual without any restriction. We may remove parts of data that can identify you and share anonymized data with any persons.

We will not rent or sell your Personal Data to third parties outside the CSE Group without your consent, except for the parties with whom we may share your information in accordance with this Privacy Policy.

Parties with whom we may share your Personal Data. We may share your Personal Data (including but not limited to, information from cookies, log files, device identifiers and usage data) with businesses that are legally part of the same group of companies that we are a part of, including our subsidiaries, or that become part of that group (the “CSE Group”). The CSE Group may use this information to provide, understand, and improve the Service (including analytics) and the CSE Group’s own services (including by providing you with better and more relevant experiences). CSE Group is bound by the rules of this Privacy Policy.

CSE may transfer data for processing to sub-processors as described in Section 9.

What happens in the event of a change of control. If we sell or otherwise transfer part or the whole of CSE or our assets to another organization (e.g., in the course of a transaction like a merger, divestiture, restructuring, reorganization, acquisition, bankruptcy, dissolution, liquidation), your Personal Data and any other Collected Information may be among the items sold or transferred. The buyer or transferee will have to fulfil the same commitments we have made in this Privacy Policy.

Responding to legal requests and preventing harm. We may access, preserve and share your information in response to a legal request like a search warrant, court order or subpoena, government or regulatory request if we have a good faith belief that the law requires us to do so. This may include responding to legal, government or regulatory requests from jurisdictions outside Malaysia where we have a good faith belief that the response is required by law in that jurisdiction, affects the Users in that jurisdiction, and is consistent with internationally recognized standards.

We may also access, preserve and share information when we have a good faith belief it is necessary to:

1. detect, prevent and address fraud and other illegal activity;
2. protect ourselves, you and others, including as part of investigations;
3. prevent death or imminent bodily harm. Information we receive about you may be accessed, processed and retained for an extended period of time when it is the subject of a legal request or obligation, governmental investigation, or investigations concerning possible violations of our terms or policies, or otherwise to prevent harm.

CSE may engage its Associates or Affiliates or third parties to process Personal Data in order to assist CSE to deliver the Service on behalf of the User (“Sub-processors”).

The current Sub-processors for the Service are as follows:-

• Flespi Privacy Policy
• Zylon Internet Service Privacy Policy
• Yandex – Yandex Metrica Privacy Policy
• Microsoft – Bing Maps Privacy Statement
• Gurtam – Pingtag or any other modules Privacy Statement

Please read their respective Privacy Policies carefully to understand their policies and practices regarding your information and how they will treat it. If you do not agree to their Privacy Policies, do not Use the Service.

General. CSE is based in Malaysia and the information we collect is governed by the Malaysian laws.

Data security. We use reasonable and appropriate information security safeguards to help keep the Collected Information secure and to secure it from accidental loss and from unauthorized access, use, alteration and disclosure. Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your Collected Information, we cannot guarantee the security of the Collected Information transmitted to or through the Service or an absolute guarantee that such information may not be accessed, disclosed, altered, or destroyed. Any transmission of your Collected Information is at your own risk. You are strongly advised to take additional security measures at your end.

If you use our Service, which is available only after authorization, then you should also understand the following:

1. The safety and security of your information also depends on you.
2. You are responsible for controlling access to emails between you and us at all times.
3. We are not responsible for the functionality, privacy, or security measures of any other organization.
4. If you provide any personal contact information, including but not limited to such information as an email or phone number, in your account in the Application, as information that confirms that the account belongs to you, then you agree that we can contact you about your account and the Collected Information, including Personal Data, through this contact information. Only you are responsible for the safety and relevance of this contact information.
5. If you provide temporary access to certain data by means of sharing opportunities in the Service to third parties, then in this case you are fully responsible for the safety and security of the data which you shared with third parties.
6. If you shared access to your account with third parties, then only you are responsible for the safety of your data by third parties and for what actions will be performed by these third parties on your behalf through your account.

We store your data as long as it is necessary for the provision of our Service to you or we have a legitimate interest in the further storage, in particular for reasons of troubleshooting.

We will delete your data, connected with Account, after you request your Account deletion without the possibility of recovery.

The data, connected with Account may also be deleted in cases described in the Terms of Use of a particular service. For example, as a result of deleting an Account in case of inactivity or violation by the User of the Terms of Use.

The log files with personal data are saved by us for the investigation of malfunctions and for security reasons. Log files whose further retention is required for evidentiary purposes are exempt from deletion until the final clarification of the respective incident.

In certain circumstances, your data must also be retained for longer periods, such as when an order for a legal hold or a litigation hold has been issued in connection with official or legal proceedings (i.e. deletion of data is prohibited for the duration of the proceedings).

General age limitation. The Service is not intended for or directed at children under 18, and we do not knowingly collect or solicit any information from anyone under the age of 18 or knowingly allow such persons to use the Service.

If you are under 18, do not use or provide any information in the Service or through any of its features, or provide any information about yourself to us, including your name, address, telephone number or email address.

In the event that we learn that we have collected or received any Personal Data from a child under 18 without verification of parental consent, we will delete that information as quickly as possible.

If you believe we might have any information from or about a child under 18, please contact us.

We are not responsible for the practices employed by any websites or services linked to or from the Service, including the information or content contained within them, excluding websites or services controlled by CSE. Where we have a link to a website or service, linked to or from the Service, we encourage you to read the privacy policy stated on that website or service before providing information on or through it.

If you have any questions about this Privacy Policy or the Service, please contact us via email at pdpofficer@cse.com.my or send to our mailing address:-

PDP Officer
c/o CSE Telematics Sdn Bhd
CSE Building, Pat Square,
Jalan Pelukis U1/46,
Temasya Industrial Park,
Glenmarie, 40150 Shah Alam,
Selangor, Malaysia.

CSE may modify or update this Privacy Policy from time to time, so please review it periodically. Your continued use of the Service after we make changes to this Privacy Policy is deemed to be acceptance by you of those changes, so please check the policy periodically for updates. In some cases and for some Service, we may require you to expressly accept our new privacy policy in order to continue using the Service (for example, if we expand types of Personal Data collected from you or introduce new purposes of collection and processing).