Legal

Privacy Policy

Last updated: 6 June 2026

1. Introduction

This Privacy Policy explains how Golden Pavilion Group, together with its subsidiaries and related companies ("we", "us", "our"), collects, uses, discloses and protects your personal data. We are committed to handling your personal data in accordance with Malaysia's Personal Data Protection Act 2010 and the Personal Data Protection (Amendment) Act 2024, together with their regulations and guidelines.

We may update this policy from time to time. Any change will be posted on this page or notified through other appropriate channels, and your continued use of our website or services means you accept the updated policy.

2. The personal data we collect

"Personal data" means information that identifies you, directly or indirectly. "Processing" means collecting, recording, holding, using or disclosing that data. Depending on how you deal with us, we may collect:

  • Your name, address, telephone number, email address;
  • Your NRIC or passport number, and similar identifying details (for example, when booking or purchasing a property);
  • Any other information you choose to give us in an enquiry, registration, booking or survey.

We collect personal data directly from you — through enquiries, transactions, events, launches and surveys — and, where applicable, through website cookies.

3. Why we process your personal data

We process personal data for purposes including:

  • responding to your enquiries, requests and complaints;
  • processing bookings and sales, and providing related and post-handover services;
  • marketing and updates about our developments, products and promotions — by SMS, phone, email, mail or social media;
  • event invitations and launches;
  • internal record-keeping, administration, research, analysis and improving our services;
  • working with our auditors, lawyers and financial advisors for audit, legal, financial, insurance and documentation matters;
  • security, risk management, and detecting or preventing fraud and unlawful activity;
  • fulfilling our obligations to you — including registration with the authorities, delivery of vacant possession, rectifying defects, and transfer of title;
  • complying with legal and regulatory requirements, court orders, and enforcing or defending our legal rights;
  • operating and maintaining our business.

4. If you choose not to provide your data

If you do not provide the personal data we need, or withdraw your consent, we may be unable to respond to you, process a booking or sale, provide the products or services you ask for, or meet our obligations.

5. Who we may disclose your data to

We do not sell your personal data. We disclose it only where needed, and may share it with parties such as:

  • companies within our group and their staff;
  • your nominated family members or emergency contacts;
  • successors in title to our group companies, and parties involved in any corporate exercise (such as a merger, restructuring or asset sale);
  • business partners for joint promotions, and service providers bound by confidentiality;
  • our auditors, lawyers, consultants and financial advisors, on a need-to-know basis;
  • data centres and servers located inside or outside Malaysia, for storage;
  • financial institutions and payment channels, to assess and process payments;
  • government agencies, law enforcement, courts, regulators and statutory bodies where required;
  • utility providers (for example, Tenaga Nasional, Air Selangor, Telekom Malaysia and Indah Water);
  • our contractors, sub-contractors, suppliers and agents, to carry out our obligations;
  • any party we are permitted or required to disclose to under the law.

6. Security

We take reasonable technical and organisational steps to protect your personal data against unauthorised access, disclosure or unlawful processing, and review these measures from time to time. Any third party we authorise is restricted to the stated purposes. Please note that no transmission over the internet is completely secure, and we cannot accept responsibility for matters beyond our reasonable control.

7. Data breach

If a data breach occurs that is likely to cause significant risk to your rights, we will notify you and the relevant authorities in line with the PDPA.

8. How long we keep your data

We keep personal data only as long as needed for the purposes above, after which it is destroyed or permanently anonymised — unless we are required to keep it longer for legal, regulatory, tax, accounting or operational reasons.

9. Your rights

Subject to the exceptions in the PDPA, you may:

  • request access to the personal data we hold about you (a small administrative fee may apply, within PDPA limits);
  • request correction of data that is inaccurate, incomplete or out of date;
  • limit how we process your data — for example, ask us to stop sending marketing;
  • withdraw your consent, subject to any legal or contractual conditions and a reasonable processing period.

To exercise any of these, contact us using the details below.

10. Keeping your data accurate

We aim to keep your data accurate and current. You warrant that the information you give us is accurate, complete and not misleading, and you agree to let us know whenever it changes. We may treat the data you provide as accurate without independently verifying it.

11. Data about minors and other individuals

If you give us personal data about other people — such as family members or dependents — you confirm that you have their consent for us to process it under this policy. For anyone under 18 or unable to give consent, you confirm that you are authorised to consent on their behalf.

12. Transfers outside Malaysia

Our IT facilities or servers may be located outside Malaysia, so your personal data may be transferred to, stored or processed in another country whose data-protection standards may differ. By providing your data, you consent to this transfer. Where we do so, we require the overseas party to use your data only for the stated purposes and to protect it.

13. This website and external links

Our website may link to other websites, which operate under their own privacy policies — we are not responsible for them. If you deal directly with one of our partners, their privacy policy applies to that data. This website currently uses no tracking or advertising cookies.

14. Contact us

For any question, complaint or request about your personal data:

Golden Pavilion Group
28 & 30, Jalan Empayar, Kawasan 17, 41150 Klang, Selangor
03-3362 3199 · enquiry@goldenpaviliongroup.com