Data Processing Terms and Conditions

1.         GENERAL PRINCIPLE

1.1. What type of Personal Data do we collect – MYNIC and/or Registrar may collect, use, store and transfer different kinds of personal data about the Registrant, details of which have been grouped as follows:

1.1.1. Identity Data includes first name, maiden name, last name, username or similar identifier, identification supporting documents (including national registration or passport number), marital status, title, job title, company name, date of birth, and gender.

1.1.2. Contact Data includes billing address, delivery address, email address, and telephone numbers.

1.1.3. Financial Data includes bank account and payment card details (if any).

1.1.4. Transaction Data includes details about payments to and from the Registrant and other details of products and services purchased by the Registrant from MYNIC.

1.1.5. Technical Data includes internet protocol (“IP”) address, cookies, java script, web beacons, clear gifs, HTTP headers, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system, and platform.

1.1.6. Profile Data includes usernames and passwords, purchases or orders made, Registrant’s interests, preferences, feedback, survey responses, and any unsolicited personal data not otherwise covered by this Policy that the Registrant choose to submit in an inquiry or webchat, on a blog forum or in-person to a MYNIC representative at an event.

1.1.7. Usage Data includes information about how the Registrant uses the website (for example time of day, duration of visit, pages visited, actions taken on pages, or other automatically collected meta-data), and/or our products and services.

1.1.8. Marketing and Communications Data includes the Registrant’s communication preferences in receiving marketing materials from MYNIC and third parties.

1.1.9. Sensitive Personal Data includes any personal data consisting of information as to the physical or mental health or condition of a Registrant, political opinions, religious beliefs, or other beliefs of a similar nature.

1.2. How do we collect your Personal Data – MYNIC and/or Registrar may collect personal data directly from Registrants authorised representatives, or publicly available sources in the following manners:

1.2.1. When the Registrant communicates with MYNIC (for example when a contact form is submitted on our website, or when the Registrant contact MYNIC for any inquiries by phone, LiveChat, or ticketing system);

1.2.2. When the Registrant subscribes to a specific product and/or service from MYNIC;

1.2.3. When the Registrant registers an account with MYNIC via online or offline;

1.2.4. When the Registrant participate in any of surveys, competitions, contests, or loyalty programs run or organized by MYNIC;

1.2.5. When the Registrar commence a business relationship with MYNIC (for example, as a service provider/business partner);

1.2.6. When the Registrant lodge a complaint or provide feedback to MYNIC;

1.2.7. When the Registrant visit or browse MYNIC’s websites;

1.2.8. When one interacts with MYNIC via social media or interactive applications including but not limited to Facebook, Twitter, and Instagram; or

1.2.9. Any other method of communication on any channel between MYNIC and/or Registrar.

1.3. How do we use your Personal Data – MYNIC and/or Registrar will process the Registrant’s personal data only for fair, lawful, and legitimate reasons, including but not limited to the following purposes:

1.3.1. Administering .MY domain name registration and maintenance of Registrant’s accounts;

1.3.2. Operation of .MY domain name registry;

1.3.3. To improve our Platforms' performance, content, and services;

1.3.4. To perform information analysis, compliance audits, data metrics, develop new services, and protect the Platforms and integrity of any of our services or programs;

1.3.5. To respond to any questions, comments, inquiries, feedback, including those concerning our services or programs provided by registry operators as well as Registrars;

1.3.6. To administer participation or registration in any of our services, marketing activities, programs, meetings, and platforms, including sending electronic communications related to such participation or registration;

1.3.7. To provide updates, news and other information regarding our programs, events, advertisements and service delivery;

1.3.8. To process any financial transactions;

1.3.9. To perform relevant contractual obligations with other third parties;

1.3.10. To comply with applicable laws, rules, regulations, court orders, and law enforcement requests; and

1.3.11. To market new services, provide information on services and promotions.

1.4. Who do we disclose your Personal Data to – By submitting the registration of .MY domain name, the Registrant consents MYNIC to disclose their personal data to the following stakeholders to serve its purpose:

1.4.1. Business partners – MYNIC may provide personal data to a MYNIC business partner, such as Registrar of domain names, to facilitate or perform services on our behalf. The business partners have a contractual binding agreement with MYNIC to ensure continued privacy and security of the Registrant’s personal data information at all material times.

1.4.2. Service providers – MYNIC partner’s with, and are supported by, service providers around the world. Personal data will be made available to these parties when necessary to fulfill the service request such as dispute resolution services, software system and platform support, direct marketing services; cloud hosting services, advertising services, data analytics as well as other services from time to time.

1.4.3. Legal authorities – MYNIC may provide personal data to such third parties, government authorities and agencies (upon request) for the following purposes:

1.4.3.1. to comply with applicable laws, regulations, legal processes, or enforceable governmental requests;

1.4.3.2. if permitted or required by law or in response to law enforcement or other legal request;

1.4.3.3. to protect MYNIC’s or a third party's legal rights;

1.4.3.4. to comply with any Court Order or legal proceeding;

1.4.3.5. to comply with MYNIC’s accountability and transparency principles and disclosure policies;

1.4.3.6. to detect, prevent or otherwise address fraud or other criminal activity or errors, security, or technical issues; or

1.4.3.7. to protect against imminent harm to MYNIC’s rights, property, or the safety of our users or the public as required or permitted by law.

1.4.4. WHOIS Display - The public WHOIS service is a standard feature of domain name systems with the purpose of allowing users to obtain information about the existence and status of the .MY domain name.

1.4.4.1. MYNIC shall disclose and make the following information available in the WHOIS searchable database in line with the laws and regulations:

Domain Name;

Registrar Name & URL

Registered date, expiry date and last update;

Technical details (DNSSEC status, Name Server, IP address glue record)

1.4.4.2. MYNIC do not guarantee the domain status accuracy or availability of the WHOIS records and will not be liable for any damages or loss of any kind arising out of or in connection with the records, omissions, or errors in the WHOIS;

1.4.4.3. MYNIC reserves its rights to change the WHOIS records, or withdraw the service, at any time.

1.5.    Why the need to share your Personal Data

1.5.1. It is obligatory for the Registrant to provide their personal data information to enable MYNIC and/or Registrar to collect and process the application, to provide customer and technical support, to perform a contractual agreement, and to communicate about the Registrants account on the .MY domain names.

1.5.2. In the event consent is withdrawn by the Registrant to collect or process their personal data, MYNIC and/or Registrar will not be able to access the application and to administer the products/services that have been signed up for.

1.6.    Security and Retention of your Personal Data

1.6.1. MYNIC and/or Registrar will only retain the Registrants personal data electronically and non-electronically as long as needed for the purposes for which it is gathered and processed.

1.6.2. The Registrant’s personal data will be collected and retained for a period of seven (7) years upon the non-renewal of the .MY domain name in line with the statutory requirements under the Companies Act 2016 and Income Tax 1967, after which the personal data will be destroyed or permanently deleted in accordance with the retention principle under the General Code of Practice of Personal Data

1.7.    Your Obligation and Rights on Personal Data

1.7.1. The Registrant is responsible for providing accurate, complete, and not misleading information to MYNIC and ensure their personal data is kept up to date by having regard to the purpose for which the data is collected and processed.

1.7.2. The Registrant may request MYNIC and/or Registrar in writing to access their personal data that is being processed. The request shall be complied with no later than twenty- one (21) days from the date of receipt of the data access request. In the event of unable to comply, MYNIC and/or Registrar shall inform the Registrant in writing the reason for unable to comply.

1.7.3. The Registrant may also make a data correction request to MYNIC and/or Registrar in writing to correct their personal data if it is inaccurate, incomplete, misleading, or not up to date. This request shall be processed by MYNIC and/or Registrar within twenty- one (21) days upon receipt of the request. However, MYNIC and/or Registrar may refuse to comply with the Registrant request in the event insufficient information is provided or not up to the satisfaction of MYNIC and/or Registrar.

1.7.4. The Registrant may request MYNIC and/or Registrar in writing to cease or not to process their personal data (opt-out) for purposes of direct marketing by sending an email to customercare@mynic.my.

1.8.    Protection of Minors

1.8.1. Children (users under the age of 18 years) are not eligible to use MYNIC's services. Children are not encouraged to submit any personal data to MYNIC. Should the Registrant believe their child, or anyone has provided us with the personal data information, kindly notify MYNIC via email at customercare@mynic.my.

1.8.2. MYNIC and/or Registrar shall take reasonable steps to delete the information as soon as possible, except where MYNIC is required to keep the personal data information based on applicable laws and regulations or by legal authorities.

1.9.      Transfer of your Personal Data - The Registrant’s personal data may be transferred and processed in countries where MYNIC’s Registrar or third-party service providers are located provided always:

1.9.1. The Registrant’s consent has been obtained;

1.9.2. The transfer is necessary for the performance of a contract between the Registrant and MYNIC and/or Registrar;

1.9.3. MYNIC and/or Registrar has taken all reasonable steps and exercised all due diligence to ensure the personal data will not be processed in a manner that would contravene PDPA;

1.9.4. The transfer is necessary for the purpose of legal proceedings or to obtain legal advice; and

1.9.5. The transfer is necessary to protect the individual’s vital interest and for public interest.

1.10 .      Dispute Resolution

1.10.1. In the event of a dispute or claim brought by the Registrant concerning the processing of personal data against MYNIC and/or Registrars, the Parties will inform each other about such disputes or claims and will cooperate with a view to settling them amicably in a timely fashion.

1.10.2. MYNIC and/or Registrars agree to consider participating in any other arbitration, mediation, or other dispute resolution proceedings to resolve the dispute amicably and shall abide by the decision of the Panels.

1.11.        Limitation of Liability

The Registrant agrees that any regulatory penalties incurred by MYNIC and/or Registrar due to Registrant’s failure to comply with the laws and regulations on personal data will exclude MYNIC and/or Registrar from any form of liability.

1.12.        Severability

If any term or provision of this Agreement is held to be illegal or unenforceable, the validity or enforceability of the remainder of this Agreement shall not be affected.

1.13.         Governing Law

This Terms and Conditions will be governed by and interpreted in accordance with the laws of Malaysia. The Parties hereby submit to the exclusive jurisdiction of the Malaysian Courts.

2.           REVIEW

Modification may be necessary, among other reasons, to maintain compliance with laws and regulations or accommodate organizational changes within MYNIC. As such, MYNIC will review the Terms and Conditions in its entirety annually or when required to ensure continued relevance and appropriateness of its contents.