Privacy Policy

1. About this policy

BNXT Sdn Bhd (“BNXT”, “we”, “us” or “our”) respects your privacy. This policy explains how we process personal data in connection with our website, enquiries, and insurance, takaful, roadtax, automotive regulatory, cross-border vehicle insurance, travel protection, and related operational services in Malaysia.

We process personal data in accordance with the Personal Data Protection Act 2010 and other applicable Malaysian laws. By providing personal data to us, you acknowledge the practices described in this policy.

2. Personal data we may collect

Depending on the service requested, we may collect:

• identity and contact details, including name, identification or passport details, address, email, and telephone number;
• vehicle and insurance details, including registration, ownership, policy, claims, No-Claim Discount, and renewal information;
• travel, beneficiary, and other information required by the selected insurer or takaful operator;
• transaction records, payment confirmations, invoices, correspondence, instructions, and service history;
• dealership, introducer, agency, mobility-provider, or corporate-partner information; and
• technical information such as IP address, browser type, device data, and standard hosting or security logs when you visit our website.

Where information is mandatory for a quotation, policy, certificate, roadtax, endorsement, or regulatory submission, we may be unable to provide the requested service if it is not supplied.

3. How we collect personal data

We may obtain personal data:

• directly from you through email, telephone, messaging channels, documents, or other communications;
• from an authorised dealership, introducer, agent, employer, fleet operator, family member, or corporate partner;
• from insurers, takaful operators, service providers, and relevant regulatory or governmental systems where permitted; and
• automatically through essential website hosting, performance, and security technologies.

If you provide another person’s data, you confirm that you are authorised to do so and have informed that person about the intended processing.

4. How we use personal data

We may process personal data to:

• respond to enquiries and provide quotations or product comparisons;
• arrange, renew, amend, administer, or support insurance and takaful policies or certificates;
• process roadtax, NCD, policy endorsements, Thai vehicle insurance, travel protection, and related requests;
• coordinate with insurers, takaful operators, JPJ, PUSPAKOM, APAD, border-related providers, and other relevant parties;
• verify identity, eligibility, ownership, submitted information, payments, and instructions;
• manage customer service, records, complaints, audits, fraud prevention, security, and legal compliance;
• operate and improve our website and business processes; and
• send service updates or marketing communications where you have consented or where otherwise permitted by law.

5. Disclosure of personal data

We may disclose relevant personal data, only as reasonably required, to:

• panel insurers, takaful operators, assistance providers, adjusters, and claims-related service providers;
• JPJ, PUSPAKOM, APAD, law-enforcement bodies, regulators, courts, and other governmental authorities;
• dealerships, introducers, agencies, fleet operators, and corporate partners involved in your request;
• technology, communications, hosting, document, payment, professional-advisory, and operational service providers; and
• another party in connection with a proposed business restructuring, acquisition, or transfer, subject to appropriate safeguards.

We do not sell personal data to third parties.

6. Cross-border processing

Some services, including Thai vehicle insurance and international travel protection, may require personal data to be processed outside Malaysia. Our technology or service providers may also operate in other countries. Where cross-border processing is required, we take reasonable steps to ensure that it is permitted under Malaysian law and that appropriate protection is applied.

7. Security and retention

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. No transmission or storage system can be guaranteed to be completely secure.

We retain personal data only for as long as needed for the purposes described above, to maintain business and transaction records, or to meet legal, regulatory, tax, audit, dispute, and insurer requirements. We then securely delete, destroy, or anonymise it where reasonably practicable.

8. Website data and external links

Our website may generate essential server logs used for delivery, reliability, and security. We do not currently use advertising or behavioural-tracking cookies. If this changes, this policy and any required consent mechanism will be updated. Links to third-party websites are governed by those parties’ own privacy practices.

9. Your choices and rights

Subject to applicable law and permitted exceptions, you may:

• request access to or correction of your personal data;
• withdraw consent to processing, where processing depends on consent;
• ask us to stop processing likely to cause damage or distress;
• opt out of direct-marketing communications; and
• ask questions or raise a complaint about our handling of your personal data.

We may need to verify your identity and may charge a fee where permitted by law. Withdrawing consent may affect our ability to continue a requested service, but does not affect processing already carried out lawfully.

10. Children

Our services are not directed to persons under 18. Where data about a minor is required for an insurance or travel product, it must be supplied by, or with the authority of, a parent or legal guardian.

11. Updates and contact

We may update this policy to reflect changes to our services, practices, or legal obligations. The effective date above identifies the latest version. For access, correction, withdrawal, complaints, or privacy questions, contact: