Privacy Statement

PETRONAS Refinery and Petrochemical Corporation Sdn Bhd and its group of companies, including its subsidiaries and controlled companies ("PRPC" or "We") are committed to protecting and respecting your privacy.

Reference to "PRPC" herein refers to PETRONAS Refinery and Petrochemical Corporation Sdn Bhd and its subsidiaries and controlled companies. The expression "PRPC" is used for convenience where references are made to PRPC group of companies in general. The companies in which PRPC has direct or indirect shareholding are distinct legal entities.

This Privacy Statement ("Privacy Statement") explains what personal data we collect about you, when and why we collect it, how we use it, the conditions under which we may disclose it to others, and how we keep it secure. Please read it carefully to understand our views and practices regarding your personal data and how we will treat it.

PRPC is a wholly owned subsidiary of PETRONAS, Malaysia's fully integrated oil and gas multinational, registered in Malaysia with company number 1047009-X. Our registered address is Tower 1, PETRONAS Twin Towers, Kuala Lumpur City Centre, 50088 Kuala Lumpur, Malaysia.

We may collect your personal data which you voluntarily provide to us such as your name, your contact information such as your address, email address, telephone number, and such other information depending on the nature of business relationship you have with PRPC.

We may use personal data that we obtain for any of the following purposes (including but not limited to):

Where we collect personal data from you, we will only do so strictly needed for fulfilment of one of the purposes set out above. Failure to provide your personal data may mean that we are not able to allow you to enter our complex and effectively provide you with our services or to carry out any of the abovementioned purposes, if at all.

We do not perform any automated-decision activities, including profiling activities, where your personal data is processed by automated means.

Where we rely on your consent for processing your personal data, you may withdraw your consent to this processing at any time, by contacting us by using the contact details below. Please note, however, that withdrawing your consent will not affect the lawfulness of processing based on your previous consent prior to withdrawal.

There may be instances where we process your personal data for out legitimate interests or on the basis of other lawful grounds (i.e., because we have established a relationship with you and need to process your personal data in order to provide you with the information and/or services you have requested), without having obtained your consent - this applies where our processing activities are governed by the applicable laws of certain jurisdictions in which we operate that do not require consent to have been obtained where there are legitimate and/por other lawful grounds to process the relevant personal data.

We do not seek your consent in such cases largely so that we can provide you with services in an efficient way (or where in some cases it might not be possible for us to seek your consent because we must process personal data, for example, for the detection of fraud). Before processing your personal data, we will consider your rights and freedoms and will only commence such processing where we do not think your rights will be infringed.

We may share the personal data that you provide to us to other entities in the PRPC Group for the purposes described above. Such affiliates may be located in a jurisdiction that may not provide a level of protection equivalent to that provided by the laws of your home country. Where such transfers occur, PRPC will reasonably protect Personal Data and will reasonably address data privacy and other privacy requirements in accordance with applicable laws.

Information may also be shared with our service providers, in each case to the extent necessary for the purposes described above. This may include the provision of your personal data to IT service providers, marketing service providers (where consent is obtained), our security service providers and office/site management teams. We may also provide your personal data to any successor to our business.

We will not otherwise use, share, disseminate, publish or disclose your personal data (except as may be required in response to litigation, investigations or other legally required disclosures).

All information you provide to us is stored on our secure servers. We maintain appropriate administrative, technical and physical safeguards to protect against loss, misuse or unauthorized access, disclosure, alteration or destruction of the personal data you provide to us in accordance with applicable laws.

We may transfer your personal data to, or store it in, a destination outside of the jurisdiction of the entity to which you provided it. This is because PETRONAS, the parent company of PRPC, is a global business, with operations located in various jurisdictions, which uses service providers based in a number of locations worldwide.

In some cases, your personal data will be stored in or transferred to jurisdictions outside of the European Economic Area ("EEA") (a third country), where data protection laws are not as stringent as the applicable laws under the EEA regime.

Where we have to transfer your personal data to third countries, we will use appropriate approved safeguards in accordance with applicable laws.

We will store your personal data for no longer than is necessary for the purposes for which it was collected or provided to us (unless a legal obligation requires us to keep it for longer).

We limit access to personal data that we collect about you to our employees and third-party agents, who we reasonably believe need to have access to your information to provide you with the information or services you request from us. We have security measures in place to help protect against the loss, misuse and alteration of the information under our control. While we cannot guarantee that loss, misuse or alteration to data will not occur, we ensure that our systems adhere to market security standard so as to help safeguard against such occurrences.

Any changes we make to our Privacy Statement in the future will be posted on this page and, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes to our Privacy Statement.

In accordance with the requirement of Malaysian data protection and privacy law, this Privacy Statement is issued in both English and Bahasa Malaysia. In the event of any inconsistencies or discrepancies between the English version and the Bahasa Malaysia version, the English version shall prevail.

Any questions, comments and requests regarding this Privacy Statement are welcomed and should be addressed to:

Address: Level 59, Vista Tower, The Intermark, 348, Jalan Tun Razak 50400 Kuala Lumpur.

Email Address: hartini@petronas.com.my