We at Tokio Marine Life Insurance Malaysia Bhd (“TMLM”) and Tokio Marine Insurans (Malaysia) Berhad ("TMIM") take our responsibility under the Personal Data Protection Act 2010 (“the PDPA”) seriously.  We also recognise the importance of the personal data you have entrusted to us and believe that it is our responsibility to properly manage, protect and process your personal data. 

This Data Protection Policy is designed to assist you in understanding how we collect, use, disclose and/or process the personal data you have provided to us, as well as to assist you in making an informed decision before providing us with any of your personal data. 

If you, at any time, have any queries on the Policy or any other queries or complaints in relation to how we may manage, protect and/or process your personal data, please do not hesitate to contact our Customer Service Representatives.  You can contact us at:

TMLM’s Customer Service Representatives: 

Phone            : 03 2059 6188 
Email              : customercare@tokiomarinelife.com.my 

TMIM’s Customer Service Representatives: 

Phone            : 1800 88 0812
Email              : letusknow@tokiomarine.com.my 

In the event of any unsatisfactory response from our Customer’s Representatives to your queries or complaints, you may refer your concerns to the supervisory authority within the respective jurisdictions in accordance to the personal data laws.  

“Personal Data” is defined under the PDPA to mean data relating to an individual who can be identified from that data and other information in the possession of an individual and includes any sensitive personal data and expression of an individual.  Common examples of Personal Data include name, identification numbers, contact information, medical records, photographs and video images, financial information, religious beliefs and expression of opinion.  

We will collect, use and process your Personal Data in accordance with the PDPA.  We will notify you of the purposes for which your Personal Data may be collected, used, disclosed and/or processed, as well as obtain your consent for the collection, use, disclosure and/or processing of your Personal Data for the intended purposes. If we wish to use, disclose and/or process your Personal Data collected for purposes other than those initially intended or stated in this Policy, we will notify and obtain your consent accordingly, unless an exception under the law permits us to collect and process your Personal Data without your consent.  

Your Personal Data is collected and stored when you make an application for an insurance policy, renewal or modification of an insurance policy, when you enter our website and when you provide Personal Data to us through any other channel.   

We may also obtain your Personal Data from other sources such as bureaus or agencies established by regulatory authorities, operators of registers or databases available to the insurance industry, our affiliated entities, business partners and independent third parties, regulatory authorities and any party who has, does or will provide products or services to you and to whom you have granted consent.  

Your Personal Data will be collected, used and otherwise processed by us or our authorised parties for the following purposes: 

• to better understand your insurance needs, provide our marketing information, enter into and execute your insurance contract, and to set up and administer your policy and provide you better customer service.

• to facilitate and allow a search of unclaimed proceeds in relation to your policy including the establishment and/or publication of a register of such unclaimed proceeds and any other matters related thereto.

• for underwriting, risk assessment, reinsurance, handling and settling of claims and audit purposes.

• to conduct credit and financial checks.

• for disclosure to our authorised third parties.

• for data transfer to, and sharing with, our affiliates including our Regional Office and/or third parties acting on our behalf including those located outside Malaysia.

• for other purposes as notified to you at the time of collection.

• for other purposes directly relating to any of the above.

By providing your Personal Data to us, you acknowledge and accept that we may retain your information for as long as necessary for us to fulfill the purposes for which your information was collected and for us to comply with the PDPA and any relevant law. 

You may choose whether or not to provide your Personal Data to us.  However, your failure to supply to us your Personal Data may result in us being unable to provide you with services and/or products.  It is mandatory for you to provide us with your Personal Data when you choose to make an application for an insurance policy.  As such, if you do not provide to us your Personal Data when you make an application to purchase an insurance policy, we will not be able to accept or process your application. 

We respect the confidentiality of the Personal Data you have provided to us. 

In that regard, we will not disclose your Personal Data to third parties without first obtaining your consent permitting us to do so.  Your Personal Data may be disclosed to the following parties: 

• our agents and sales representatives and affiliates (where, for example, you are insured under a group insurance policy through your employer).

• other insurance companies, reinsurance companies, broking companies, credit organisations and group policy holders.

• those to whom we outsource certain business operations.

• commercial partners or companies related to or affiliated with us. 

• our auditors, solicitors, loss adjusters, accountants, surveyors.

• our external claim data collectors, investigators and medical professionals.

• service providers, contractors and sub-contractors who are involved in the provision of facilities, products and/or services to us.

• Government or regulatory bodies, bureaus, agencies or any person to whom we are required by law to disclose information.

• operators of registers or databases available to the insurance industry.

• any person to whom we may determine to be necessary or appropriate. 

Where permitted, your Personal Data may be provided to any of the parties above who may be located in or outside of Malaysia.  Your Personal Data may be transferred to, stored and processed in a jurisdiction where a service provider or contractor is located.  By providing us with Your Personal Data, you consent to us disclosing your Personal Data to those third parties and/or the transfer of your information outside your jurisdiction or to those third parties described above. 

You may request to access and/or correct your Personal Data currently in our possession or control. Please visit this link to access the Request Form and return the completed form to letusknow@tokiomarine.com.my for us to proceed.

We reserve our rights to charge for any costs related to and necessary for the processing of any request relating to your Personal Data. 

You may withdraw your consent for the collection, use and/or disclosure of your Personal Data in our possession or under our control. Please visit this link to access the Withdrawal of Consent Form and return the completed form to letusknow@tokiomarine.com.my for us to proceed.

You should note, however, that your withdrawal of consent could result in certain legal consequences arising from such withdrawal.  In respect of TMLM, depending on the extent of your withdrawal of consent for us to process your Personal Data, it may mean that we will not be able to continue with your existing relationship with us and/or the policy or policies you have with us will have to be terminated. 

We will take reasonable efforts to ensure that your Personal Data is accurate and complete. However, this means that you must also update us of any changes in your Personal Data that you had initially provided us with.  We will not be responsible for relying on inaccurate or incomplete Personal Data arising from you not updating us of any changes in your Personal Data that you had initially provided us with. 

We will also put in place reasonable security arrangements to ensure that your Personal Data is adequately protected and secured.  Appropriate security arrangements will be taken to prevent any unauthorised access, collection, use, disclosure, copying, modification, leakage, loss, damage and/or alteration of your Personal Data. However, we cannot assume responsibility for any unauthorised use of your Personal Data by third parties which are wholly attributable to factors beyond our control. 

This website may contain links to third party websites which we have no control over.  You should review the privacy policies on those websites to understand their policies on how they deal with your Personal Data. 

We will also put in place reasonable measures such that your Personal Data in our possession or under our control is destroyed and/or anonymised as soon as it is reasonable to assume that (i) the purpose for which that Personal Data was collected is no longer being served by the retention of such Personal Data; and (ii) retention is no longer necessary for any other legal or business purposes. 

Where your Personal Data is to be transferred out of Malaysia, we will comply with the PDPA in doing so.  In this regard, this includes us obtaining your consent unless an exception under the PDPA or law applies, and taking appropriate and reasonable steps to ascertain that the foreign recipient organisation of the Personal Data is bound by legally enforceable obligations to provide to the transferred Personal Data a standard of protection that is at least comparable to the protection under the PDPA. This may include us entering into an appropriate contract with the foreign recipient organisation dealing with the Personal Data transfer or permitting the Personal Data transfer without such a contract if the PDPA or law permits us to.