Privacy Policy

Bakti Partners ("we", "us", "our") is an immigration advisory firm registered and operating in Malaysia. We are committed to protecting the personal data of individuals who interact with us — whether as enquirers, clients, or website visitors. This Privacy Policy explains what data we collect, why we collect it, how it is used, and your rights in relation to it.

This Policy is governed by Malaysia's Personal Data Protection Act 2010 (PDPA). By using our website or engaging our services, you acknowledge that you have read and understood this Policy.

1. Data We Collect

We collect personal data when you:

• Submit an enquiry through our website contact form
• Email or call us directly
• Engage us as a client for immigration advisory services

Data collected may include: full name, email address, phone number, passport details, employment information, financial standing documentation (for MM2H cases), and family member details (where a Dependent Pass application is involved). We collect only what is reasonably necessary for the purpose of providing the requested service.

We also collect non-personal technical data via cookies (see Section 5) to understand how our website is used.

2. Legal Basis for Processing

We process personal data on one or more of the following grounds:

• Consent: Where you have submitted an enquiry form or agreed to our terms
• Contract: Where processing is necessary to deliver the immigration advisory service you have engaged
• Legitimate interest: For internal analysis, service improvement, and maintaining records of completed advisory work
• Legal obligation: Where we are required to retain records under Malaysian law

3. How We Use Your Data

• To respond to your enquiry and assess your immigration situation
• To prepare and submit visa and pass applications to the relevant Malaysian authorities
• To coordinate with the Expatriate Services Division (ESD), Immigration Department, or MM2H One Stop Centre on your behalf
• To send you case updates, appointment reminders, or renewal notifications
• To maintain internal case records for reference and compliance
• To improve our website and services based on aggregate usage data

We do not use your personal data for marketing purposes without your explicit consent, and we do not sell, rent, or trade your personal data with third parties.

4. Data Sharing

We share personal data only as necessary and only with:

• Malaysian immigration authorities: ESD, Immigration Department of Malaysia, MM2H One Stop Centre — as required to process your application
• Authorised service providers: Translation agencies, notarization services, or medical coordinators engaged in support of your case
• Professional advisors: Where legal or compliance consultation is necessary in the course of your engagement

All third parties who handle your data on our behalf are bound by confidentiality obligations and may not use your data for any other purpose.

5. Cookies

Our website uses cookies to understand visitor behaviour and improve site functionality. These may include essential cookies (required for the site to function), analytics cookies (to understand how pages are used), and preference cookies (to remember settings). You may manage your cookie preferences via our Cookie Policy page.

6. Data Retention

We retain personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by law. For completed client engagements, case records are retained for a minimum of seven years in accordance with standard advisory practice in Malaysia. Enquiry data that does not proceed to engagement is deleted within twelve months.

7. Data Security

We maintain appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. Sensitive documents shared with us for case preparation are stored securely and accessed only by team members directly involved in your case. We do not transmit sensitive client data over unencrypted channels.

In the event of a data breach that affects your rights or interests, we will notify you and, where required, the relevant authority, without undue delay.

8. Your Rights Under the PDPA

As a data subject under Malaysia's Personal Data Protection Act 2010, you have the following rights:

• Right of access: To request a copy of the personal data we hold about you
• Right of correction: To request correction of inaccurate or incomplete data
• Right to withdraw consent: To withdraw consent for processing where consent is the legal basis
• Right to limit processing: To request that we restrict use of your data in certain circumstances

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days of receiving a valid request.

9. Third-Party Links

Our website may contain links to external websites operated by third parties. We are not responsible for the privacy practices of those sites and recommend reviewing their privacy policies independently before providing any personal data to them.

10. Children's Privacy

Our services are directed at adults aged 18 and above. We do not knowingly collect personal data from individuals under 18 without the involvement of a parent or guardian. Where a minor's data is included in a Dependent Pass application, this is handled under the engagement of the principal adult applicant.

11. International Data Transfers

In the course of preparing immigration applications, personal data may be transmitted to Malaysian government authorities. Where data is shared with service providers outside Malaysia — for example, for apostille coordination — we ensure appropriate safeguards are in place consistent with PDPA requirements.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be published on this page with the revised date. Continued use of our website or services after a change constitutes acceptance of the updated Policy.

13. Contact Us

For questions or requests relating to this Privacy Policy or the handling of your personal data, contact:

• Email: [email protected]
• Phone: +60 3-2072 4638
• Address: Bakti Partners, Level 10, Wisma Hamzah-Kwong Hing, No. 1 Leboh Ampang, 50100 Kuala Lumpur, Malaysia