PRIVACY STATEMENT AND NOTICE PURSUANT TO PERSONAL DATA PROTECTION ACT 2010

1. SCOPE OF NOTICE AND OUR PRIVACY COMMITMENT
   1. We, Toyota Capital Malaysia Sdn Bhd and/or our subsidiaries and affiliates (hereinafter referred to as "Toyota Capital", the "Company", "we", "us", and "our") respect and recognise the importance of privacy, confidential information, personal data (hereinafter referred to as "Personal Data") of you as our customers, employees, and business counterparts including your direct and indirect beneficial owners, directors, officers, employees, agents and authorised persons (hereinafter referred to as "Data Subject"). We are committed to protect your Personal Data through the compliance of this Privacy Statement.
   2. This Privacy Statement is developed pursuant to the Personal Data Protection Act 2010 ("PDPA").
   3. If we engage any other third-party companies to provide any services ("Service Provider"), we will require the Service Provider to protect the confidentiality of the Personal Data which they may so receive in the ordinary course of business.
2. CONSENT
   1. We only collect Personal Data which is necessary for us to perform our business function and activities.
   2. You have the choice, at any time, not to provide your personal data or to revoke your consent to us to use your Personal Data. However, if you refuse to provide us with the necessary Personal Data or consent to use your Personal Data or revoke your consent to us to process your Personal Data, we may NOT be able to process, approve, or continue with your application or to provide you with the products or services which you require or process your application for employment or establish any business relationship with you.
   3. By your express consent provided verbally or in writing or implied consent provided by your actions, we shall process your Personal Data within the scope of the purposes provided in paragraph 4 herein. When you apply or sign up or request for our products or services or when you enter into any business relationship with us, you may be required to provide us your Personal Data, of which by you doing so, you shall be deemed to have consented for us to use your Personal Data in accordance with this Privacy Statement, unless you inform us otherwise in writing.
3. TYPE OF PERSONAL DATA WE COLLECTED AND THE SOURCE
   1. The type of Personal Data collected may vary depending on the type of products and services you require. The Personal Data which we shall be collecting include the following:-
      1. The information which identifies you, including but not limited to, your full name, identification number, passport number, age, date of birth, gender, citizenship, marital status, details of dependents, contact details such as address, phone number, e-mail address, occupation, employment details, Income tax registration numbers, or others; and
      2. The information about your financial position, including but not limited to your sources of income, sources of wealth/fund, expenses, savings, assets, liabilities, investment portfolio, financial commitments, accounts number, audited financial reports, credit reports from credit reporting agencies, creditors details, debtors details, suppliers details and competitors details, opinion from financial institutions on your credit worthiness, or others. opinion from financial institutions on your credit worthiness; or others.
   2. If you at any time supply to us a third party's personal information, you should at all times ensure that you are authorised to do so, and you should inform such person that we may be using his/her information in accordance with this Privacy Statement.
   3. We will collect Personal Data from various sources including:-
      1. Information which directly/voluntarily provided by you, including but not limited to, when you fill up application forms or agreements, supply the information to our associates, made payment to us or apply for any products or services offered by us, participate in our contest, surveys, promotional activities, telemarketing / telesales, speak to us over the phone, send information/document to us/our associates through WhatsApp or other communication channels, visit our office, use of our products and services, communicate verbally or written with our associates and/or authorised agents, submit your resume or business proposal, or others,
      2. Information collected by us from other sources without your direct involvement but permitted by law, including but not limited to, from Central Credit Reference Information System (CCRIS), Credit Bureau Malaysia Sdn Bhd (CBM), CTOS Data Systems Sdn Bhd (CTOS), Experian Information Services (Malaysia) Sdn Bhd (EXPERIAN), FIS Data Reference Sdn Bhd (FIS), Dishonoured Cheque Information System (DCHEQS), insurance company or agency or credit bureau or credit reporting agency or agency approved by Bank Negara of Malaysia from time to time or Association of Finance Companies of Malaysia or Association of Hire Purchase Companies Malaysia, financial mediation bureaus, General Insurance Association of Malaysia, Life Insurance Association of Malaysia, Companies Commission of Malaysia, Malaysian Insolvency Office, your referee, employers, guarantors, security party, our parent company, subsidiary, affiliates, dealers, distributors, service providers, legal authority, law enforcement agency, court of laws, and from other sources which you have given your consent to disclose the data relating to you or where not otherwise restricted.
4. PURPOSES TO COLLECT YOUR PERSONAL DATA
   1. The primary purpose of collecting your Personal Data is for the use of our normal course of business between yourself and us, including but not limited to, processing your application for our products and services, identify and verify your identification, conduct background checks on you, conduct credit checks on you, establish your financial standing, open, manage and maintain your account(s) and facility(ies) with us, ensure your ongoing credit worthiness, update our records about you, enable us to act on/respond to your request, inquiry, instructions or complaint, evaluate your needs and preferences in order to further improve our services/products to you, determine the amount of indebtedness owed to or by you, enforce our rights and obligations, comply with regulatory requirement and to provide assistance to law enforcement agencies, assess, investigate and claim insurance, debt collection and recovery, audit and risk management, process your application for employment or business proposal, or other purposes as required to process and maintain your account with us, as permitted by the law.
   2. Other purposes incidental and connected with the primary purpose, including but not limited to, strategic alliances, cross selling, marketing, conduct promotions, develop, enhance and market our services and products available from time to time, understand and analyse our sales, market research, statistical analysis with the aim of improving our services/products from time to time, survey for business, financial and risk monitoring, planning and decision making, required by any law or by an order of a Court or Tribunal or directives from the relevant Ministry, prevention or detection of crime or for the purposes of investigation and any ancillary purposes relating to the provision of facilities including the provision of computer, telecommunications and technology services.
5. DISCLOSURE OF PERSONAL DATA
   1. For the purposes stated above, your Personal Data may be disclosed to a third party, including but not limited to, our parent company, our subsidiary, our affiliates, dealers, distributors, our professional advisors including lawyers, accountant, auditors, insurers, brokers, third party service providers, agents or contractors acting on our behalf or appointed by us to act on our behalf which may be located within and outside of Malaysia, (CCRIS), Credit Bureau Malaysia Sdn Bhd (CBM), CTOS Data Systems Sdn Bhd (CTOS), Experian Information Services (Malaysia) Sdn Bhd (EXPERIAN), FIS Data Reference Sdn Bhd (FIS), Dishonoured Cheque Information System (DCHEQS), insurance company or agency or credit bureau or credit reporting agency or agency approved by Bank Negara of Malaysia from time to time or Association of Finance Companies of Malaysia or Association of Hire Purchase Companies Malaysia, collection agencies or any other persons appointed by us to assists us in collecting or recovering any sums due under the agreement or repossessing, auctioneers, any other legal authority or regulatory enforcement body (government or otherwise) as we may deem necessary under any law, regulations, directives, or guidelines (whether having the force of law or otherwise), any person/party intending to settle any moneys outstanding under the account(s) and facility(ies) granted by us to you, any other person notified by you as authorised person to liaise with, any third party as a result of any restructuring of facility granted to you or the sale of debts, any party whom we are making enquiries with a bona fide view to entering into a prospective transaction with us, or to any party pursuant to any arrangement, composition, restructuring or any proposed arrangement, composition, restructuring, any insurance company/takaful operators, any recruitment agencies, Companies Commission of Malaysia, Malaysian Insolvency Office, or others as permitted by the law.
6. RETENTION OF YOUR PERSONAL DATA
   1. We will only retain your Personal Data for as long as necessary to fulfill the purposes and we will comply with all the legal regulations and internal requirements in retaining your Personal Data. If we no longer require your Personal Data, we will take reasonable steps to delete, destroy and destruct your Personal Data in a secure manner.
7. 7.RIGHT TO ACCESS, CORRECT, UPDATE AND REVOKE YOUR PERSONAL DATA
   1. You, being the Data Subject, have the right to exercise the following rights:-
      1. To access and check your Personal Data hold by us about you;
      2. To require us to correct your Personal Data if you find the Personal Data is inaccurate, incomplete, misleading or outdated;
      3. To ascertain our privacy policy in relation to your Personal Data; and
      4. To revoke the consent for us to use your Personal Data for the purposes set out above.
   2. Customers who wish to opt-out from the sharing of their personal data within our company for marketing and promotional purposes are required to contact us to register your instruction to opt-out of the said sharing.
   3. If you wish to exercise any of your rights stated above, you may send your request in writing to:-

      CUSTOMER SERVICE DEPARTMENT
      TOYOTA CAPITAL MALAYSIA SDN BHD
      LOT 20.01, LEVEL 20, FIRST AVENUE,
      PLAZA IBM, BANDAR UTAMA,
      47800 PETALING JAYA,
      SELANGOR DARUL EHSAN
      EMAIL:CS@TOYOTACAPITAL.COM.MY

8. USE OF WHATSAPP CHANNEL
   1. We also use WhatsApp application which has end-to-end encryption as a channel for providing any services, engage into a business relationship or commercial transaction with you.
   2. Your use of WhatsApp application as a channel to communicate with us or our employee is done at your own discretion and risk. We thus assume no responsibility for any errors or omissions in the WhatsApp application including but not limited to any issue arising from WhatsApp application’s end-to-end encryption system. In any event, we shall not be liable to you or any third party(ies) for any special, punitive, incidental, indirect or consequential damages of any kind, or any damages whatsoever, including but not limited to, those resulting from loss of use, lost of data profits, or any liability, arising out of or in connection with your use of WhatsApp application.
9. AMENDMENTS OF THIS PRIVACY STATEMENT
   1. We reserve the right to review, update, and revise this Privacy Statement from time to time. Amendments of this Privacy Statement, if any, will be published on our official website at http://www.toyotacapital.com.my of which we will revise the "Last updated on" date on the front page of this notice. We encourage you to review this Privacy Statement periodically.
   2. In accordance with the requirement of PDPA, this Privacy Statement is issued in both English and Bahasa Malaysia. In the event of any discrepancies or inconsistencies between the English version and the Bahasa Malaysia version, the English version shall prevail.