Privacy Policy
Last updated: 23 September 2026
Identity and Role of the Data Controller
variabzo operates as the data controller for all personal data processed through this website. We are a Malaysian company engaged in insurance finance services and are responsible for determining the purposes and means of processing personal data in accordance with the Personal Data Protection Act 2010 (PDPA).
Scope of This Notice
This privacy policy applies to all visitors, prospective customers, policyholders and other individuals who interact with our commercial website based in Malaysia. It covers data collected through the contact form, cookie banner, browsing activities and any submissions related to insurance finance products or services.
Categories of Personal Data and Sources
We collect identification details such as name and identification number, contact information including email address and phone number, financial and insurance-related data such as policy details and claims history, and technical data such as IP address and device information. Data is obtained directly from you via forms, indirectly through cookies and analytics tools, and from third-party sources where permitted by law.
Purpose-by-Purpose Explanation of Processing
Personal data is processed to provide insurance finance quotations and policies, to fulfil contractual obligations, to comply with regulatory requirements under Malaysian financial laws, to send service-related communications, to improve website functionality, and to prevent fraud. Each purpose has a corresponding legal basis under the PDPA including consent, contractual necessity and legitimate interests.
Whether Providing Data Is Required
Supplying certain personal data is necessary to receive insurance finance services or responses to enquiries. Failure to provide required information may result in our inability to process applications, issue policies or respond to your requests.
Cookies and Similar Technologies
We use cookies and similar tracking technologies to enhance user experience and analyse site performance. A separate Cookie Policy is available on this website and is referenced via the site-wide cookie banner for your review and consent management.
Processors, Recipients and Disclosures
Personal data may be shared with authorised service providers such as payment processors, insurance underwriters and IT support vendors under strict contractual safeguards. Disclosures may also occur when required by Malaysian law, regulatory bodies or court orders.
International Transfers
Where personal data is transferred outside Malaysia, appropriate safeguards including contractual clauses and adherence to PDPA requirements are implemented to protect the data.
Retention Periods
Data is retained only for as long as necessary to fulfil the purposes outlined, to meet legal and regulatory obligations, or for legitimate business needs such as dispute resolution, typically ranging from seven to ten years depending on the data category.
Security and Data-Minimisation Practices
Reasonable technical and organisational measures are employed to protect personal data against unauthorised access or loss. We apply data minimisation principles by collecting only what is required for the stated purposes.
Data Subject Rights
Under the PDPA you have the right to access, correct, and in certain circumstances delete your personal data. You may also request restrictions on processing. To exercise these rights please contact us using [email protected], 1-300-22-5542 or Level 29, Menara Allianz Sentral, 203 Jalan Tun Sambanthan, Kuala Lumpur Sentral, 50470 Kuala Lumpur.
Right to Withdraw Consent and Object to Marketing
Where processing relies on consent you may withdraw it at any time. You can also object to direct marketing or profiling activities by using the unsubscribe options in communications or by contacting us directly.
Right to Complain
If you believe your personal data has been mishandled you may lodge a complaint with the Personal Data Protection Commissioner of Malaysia, the competent supervisory authority.
Children and Age Restrictions
Our services are intended for adults. We do not knowingly collect personal data from individuals under the age of 18 without verifiable parental consent.
Automated Decision-Making and Profiling
We may use automated tools for risk assessment in insurance finance applications. Where such decisions produce legal or significant effects you have the right to request human intervention and to contest the outcome.
Policy Changes
We may update this privacy policy from time to time. The effective date will be reflected in the last-updated statement at the beginning of the page. Continued use of the website after changes constitutes acceptance of the revised policy.