Personal Data Protection Notice
Last Updated: September 2026
- Introduction
- Cover360 ("we", "us", or "our") is committed to protecting your personal data in accordance with the Personal Data Protection Act 2010 ("PDPA") of Malaysia. This notice explains how we collect, use, disclose, and protect your personal information.
- Personal Data We Collect
- We may collect the following types of personal data:
- Identity Information:Â Name, NRIC/Passport number, date of birth
- Contact Information:Â Phone number, email address, residential address
- Vehicle Information:Â Vehicle registration number, make, model, year, engine capacity
- Insurance Information:Â Current insurance provider, policy details, no-claims discount (NCD) information
- Road Tax Information:Â Expiry dates, renewal history
- Payment Information:Â Banking details for payment processing
- Communications:Â Records of your interactions with us via phone, email, or chat
- How We Use Your Personal Data
- We collect and process your personal data for the following purposes:
- Processing insurance and road tax renewal services
- Verifying your identity and vehicle ownership
- Communicating with you regarding your requests and services
- Sending renewal reminders and important notifications
- Processing payments and maintaining transaction records
- Improving our services and customer experience
- Complying with legal and regulatory requirements
- Preventing fraud and unauthorized activities
- Disclosure of Personal Data
- We may disclose your personal data to:
- Insurance Companies:Â To obtain quotations and process insurance policies
- Road Transport Department (JPJ):Â For road tax renewal purposes
- Legal Authorities:Â When required by law or to protect our rights
- Third-Party Service Providers:
- We engage the following service providers who may process your personal data on our behalf:
- Cloud Database (Singapore):Â Database hosting, file storage, and authentication services
- Lovable AI:Â Document analysis and data extraction for policy information
- PDF.co:Â PDF generation and document processing
International Data Transfers:Â Some of our service providers process data in Singapore. We ensure adequate safeguards through standard contractual clauses and data protection agreements.
We ensure that all third parties handle your data in compliance with PDPA and maintain appropriate security measures. All service providers are bound by confidentiality obligations and data processing agreements.
- Your Rights Under PDPA
- Under the Personal Data Protection Act 2010, you have the right to:
- Access:Â Request access to your personal data we hold
- Correction:Â Request correction of inaccurate or incomplete data
- Withdrawal:Â Withdraw consent for processing (subject to legal obligations)
- Limitation:Â Limit the processing of your personal data in certain circumstances
To exercise these rights, please contact us using the details provided below.
