PRIVACY POLICY

Effective Date: 17 January 2025

Last Updated: 13 January 2025

At Lembaga Pembiayaan Perumahan Sektor Awam (Public Sector Housing Financing Board or “LPPSA”, “we”, “us” or “our”), we take the protection of your personal data seriously. In compliance with the Personal Data Protection Act 2010 (“PDPA”), we are committed to safeguarding your privacy and ensuring that your personal data is handled responsibly.

This Privacy Notice explains how we collect, use, and process your personal data during your interactions with us, in compliance with applicable laws.

Contents:

[A] Applicability of this Privacy Notice
[B] Collection of Your Personal Data
[C] How We Use Your Personal Data
[D] Consequences of Providing Incomplete Personal Data
[E] Disclosure of Your Personal Data
[F] Security Measures to Protect Your Personal Data
[G] Retention of Your Personal Data
[H] Your Rights
[I] Contact Us
[J] Amendments to this Privacy Notice
[K] Language
[L] Acceptance

[A] Applicability of this Privacy Notice

This Privacy Notice applies to you when you interact with us during a prospective or ongoing relationship, submit a financing application, or when you browse, use or access our websites, platforms and other applications that are developed by or under our control.

[B] Collection of Your Personal Data

Personal data in this Privacy Notice means any information in our possession that relates directly or indirectly to an individual to the extent that the individual can be identified from that and from other information in our possession.

The personal data that we collect may also include sensitive personal data which means any personal data consisting of information such as your physical or mental health or condition, your political opinions, religious beliefs or other beliefs of a similar nature, the commission or alleged commission of any offence by yourself, biometric data, or any other personal data as the Minister may determine.

The personal data that may be collected and processed by us in the course of your dealings with us includes:

(i) personal identification and contact information such as your full name, date of birth, contact number (e.g., home, office or mobile), gender, race, religion, place of residence (and/or proof of residence), mailing address, e-mail address, photograph, copies and details of government-issued identification document (e.g., National Registration Identity Card (“NRIC”) number), marital status;
(ii) employment information such as your employment status, occupation or job title, duration of employment, employment history, classification of employment service, information relating to your workplace, details of your head of department, and information about your salary payment center;
(iii) financial and credit information such as your payment slip, credit history / worthiness, your financial standing, bank account information, bank account statement, salary, pension, allowances, retirement benefits or any other current or previous mortgages or financing arrangements, information relating to your takaful / insurance policies;
(iv) information relating to your spouse and family members such as their name, copies and details of government-issued identification documents, contact number (e.g., home, office or mobile), mailing address, their relationship status with you, e-mail address;
(v) information relating to your property such as the property details (e.g., type, address, purchase price), ownership status, title of property, mortgage or loan details related to the property, property tax and other-related assessments (e.g., quit rent);
(vi) technical information or metadata such as cookies, geolocation information, browser name and version information, IP address information; and
(vii) any other personal data you provide to us or collected by us in the course of your dealings with us.

We may collect and receive your personal data in a variety of ways, for instance:

(i) directly from you, when you choose to provide it to us such as when you submit a financing application, share your personal data with us throughout the financing term, or when you communicate with us by email, chat, telephone or any other means; and
(ii) indirectly, when we obtain information from third parties such as your head of department, our solicitors, third parties that are connected to you (e.g., your spouse or family members), our third-party service providers, land owners, property developers, salary payment centers, Federal and State government and regulatory bodies (e.g., ministries, government / regulatory agencies, departments, sections or bodies) and from such other sources to which you have given your consent to disclose your personal data.

If you provide us with personal data of third parties (e.g., your head of department, spouse or family members), you confirm that they are aware of and understand how their personal data will be collected, used, and processed by us as described in this Privacy Notice, and you represent and warrant that you have obtained their consent to the processing (including disclosure and transfer) of their personal data in accordance with this Privacy Notice.

[C] How We Use Your Personal Data

We will process your personal data in accordance with the PDPA, its applicable regulations, guidelines and/or orders, taking into account the latest amendments to the foregoing, this Privacy Notice and any privacy terms contained in your agreement(s) or terms with us.

We may ‘process’ your personal data by collecting, recording, holding, storing, using and/or disclosing it for the following purposes:

(i) assessing and processing financing applications, including verifying your identity and eligibility for financing
(ii) verifying your financial standing, such as evaluating your creditworthiness and conducting risk assessments and due diligence;
(iii) facilitating and managing your financing arrangements with us, including preparing and executing financing agreements and security documents;
(iv) managing disbursements of funds for your financing arrangement;
(v) managing and administering repayments, including setting up and managing direct deductions for repayment purposes as well as ceasing such deductions where applicable;
(vi) managing and administering your benefits, takaful or insurance payments, or any other entitlements;
(vii) initiating recovery or enforcement actions in cases of default, either directly or indirectly through our solicitors or debt collection agencies;
(viii) responding to your requests, enquiries or complaints;
(ix) managing and administering your financing credit balance;
(x) managing and administering your security documents, including for discharge of charge purposes.
(xi) communicating important updates or notices about your financing via email, letter, e-ticket portal, SMS, WhatsApp, call center, live-chat, chat bot and e-KAUNTER;
(xii) providing customer support throughout the financing term;
(xiii) conducting audits, risk management, and internal compliance processes;
(xiv) ensuring accuracy of records and improving the quality of services offered to you
(xv) conducting market research or surveys and data analysis
(xvi) providing and exchanging information of transactions with external parties for LPPSA funding purposes;
(xvii) sending you newsletters and seasonal greetings;
(xviii) fulfilling any legal obligations or requirements imposed by law such as the Public Sector Home Financing Board Act 2015 or by any government and regulatory authorities, on us;
(xix) for investigation, fraud prevention and security purposes;
(xx) for internal administrative purposes; and
(xxi) any other purposes that are necessary or related to your relationship with us.

(collectively referred to as “Purposes”).

Please note that we may also anonymise or aggregate your personal data by excluding information (such as your name) that make the data personally identifiable to you ("Anonymous Information"). As Anonymous Information is no longer considered personal data for the purpose of the PDPA, our processing of Anonymous Information is not subject to the requirements as stated in this Privacy Notice.

[D] Consequences of Providing Incomplete Personal Data

It is necessary for us to collect and process your personal data. If you do not provide us with your personal data, we will not be able to effectively process your financing application or process your personal data for any of the Purposes, if at all.

[E] Disclosure of Your Personal Data

We will not disclose any of your personal data to any third party without your consent, except to the following categories of persons (whether within or outside Malaysia):

(i) Federal or State government, or other government and regulatory bodies (including ministries, government / regulatory agencies, departments, sections, offices or bodies);
(ii) salary payment centers;
(iii) our professional advisers, vendors, suppliers, agents, contractors, third party service providers, business partners, insurance companies, financial institutions, debt collection agencies, property developers, and other relevant parties, including those involved in insolvency, recovery and restructuring matters, in connection with any of the Purposes above;
(iv) financial institutions, investors and other types of financiers;
(v) credit reporting agencies;
(vi) our assignees, transferees and successor(s) in title to us; and
(vii) where necessary, to any party who undertakes to keep your personal data confidential in carrying out the Purposes mentioned above or to persons whom we are compelled or required under the law to make such disclosure to.

[F] Security Measures to Protect Your Personal Data

The security of your personal data is very important to us. As such, we take appropriate technical and organisational measures to protect your personal data from loss, misuse, and unauthorised access or disclosure. These steps take into account the sensitivity of the Information we collect, process and store, and the current state of technology.

However, given the nature of communications and information processing technology, we cannot guarantee that Information during transmission through the Internet or while stored on our systems or otherwise in our care will be absolutely safe from any data breach or cyber incident. When you click a link to a third-party site, you will be leaving our site and we do not control or endorse what is on third-party sites.

[G] Retention of Your Personal Data

We will retain your personal data, in compliance with this Privacy Notice for the duration of your relationship with us, and afterwards for such period as may be necessary for our purposes, as required by law and as per the PDPA permits.

[H] Your Rights

You have the following rights under the PDPA in respect of your personal data that is held by us:

(i) the right to request for access to and for a copy of your personal data;
(ii) the right to request to update or correct your personal data;
(iii) the right to request for your personal data to be transferred / ported out to another party of your choice;
(iv) the right to withdraw your consent or the right to request us to limit our processing of your personal data;
(v) the right to request us to cease or not begin processing your personal data if it is likely to cause damage or distress; and
(vi) the right to request us to cease or not being processing your personal data for direct marketing purposes (for example, requesting us to stop sending you any marketing and promotional materials or contacting you for marketing purposes).

However, please note that your abovementioned rights under the PDPA are subject to our right to rely on any statutory exemptions and/or exceptions to collect, use and disclose your personal data.

If you wish to exercise any of the above rights, please submit your request in writing to the contact details below.

[I] Contact Us

If you have any query or complaints in relation to this Privacy Notice or how we handle your personal data, please contact us through e-TIKET, or as per the contact details below:

Legal & Secretarial Department
Address LEMBAGA PEMBIAYAAN PERUMAHAN SEKTOR AWAM (LPPSA)
Kompleks Kementerian Kewangan, No.9,
Persiaran Perdana, Presint 2 Pusat Pentadbiran Kerajaan Persekutuan,
62592 Putrajaya, Malaysia.
Contact No. 03 – 88802577/2502
Email Address lesec@lppsa.gov.my

[J] Amendments to this Privacy Notice

We reserve the right to update and amend this Privacy Notice from time to time. We will notify you of any amendments to this Privacy Notice via announcements on our website or other appropriate means. If we amend this Privacy Notice, the amendment will only apply to personal data collected after we have posted the revised Privacy Notice.

[K] Language

This Privacy Notice is issued in both English and Bahasa Malaysia pursuant to the requirements prescribed by Section 7(3) of the PDPA. In the event of any inconsistencies or discrepancies between the English version and the Bahasa Malaysia version, the English version shall prevail.

[L] Acceptance

By accessing our applications, services or by providing your personal data to us, you agree that you have read and understood this Privacy Notice and you consent to us processing your personal data in accordance with this Privacy Notice. You confirm that all personal data provided by you is accurate and complete, and that none of it is misleading or out of date. You will promptly update us in the event of any change to your personal data.

Effective Date / Last Updated: 28 April 2025

Last Updated: 18 April 2025

2025At Lembaga Pembiayaan Perumahan Sektor Awam (Public Sector Housing Financing Board or ("LPPSA", "we", "us", or "our"), kwe take the protection of your personal data seriously. In compliance with the Personal Data Protection Act 2010 ("APDP"), we are committed to safeguarding your privacy and ensuring that your personal data is handled responsibly.

Additionally, we understand that confidentiality is crucial during the job application process, and we are dedicated to protecting the information you provide.

This Privacy Notice for Job Applicants explains how we collect, use, and process your personal data when you apply for a position with us.

Contents:

[A] Applicability of this Privacy Notice
[B] Collection of Your Personal Data
[C] How We Use Your Personal Data
[D] Consequences of Providing Incomplete Personal Data
[E] Disclosure of Your Personal Data
[F] Security Measures to Protect Your Personal Data
[G] Retention of Your Personal Data
[H] Your Rights
[I] Contact Us
[J] Amendments to this Privacy Notice
[K] Language
[L] Acceptance

[A] Applicability of this Privacy Notice

This Privacy Notice applies to all individuals who apply for a job with us. It governs the collection, use, and processing of your personal data throughout the job application and screening process. Once your employment is confirmed, a separate Privacy Notice for Employees will govern the collection and processing of your personal data.

[B] Collection of Your Personal Data

Personal data in this Privacy Notice means any information in our possession that relates directly or indirectly to an individual to the extent that the individual can be identified from that and from other information in our possession.

The personal data that we collect may also include sensitive personal data which means any personal data consisting of information as your physical or mental health or condition, your political opinions, religious beliefs or other beliefs of a similar nature, the commission or alleged commission of any offence by yourself, biometric data, or any other personal data as the Minister may determine.

The personal data that may be collected and processed by us through your job application and screening process includes the following:

(i) personal identification and contact information including details of your academicqualifications, the names of schools and universities attended, grades, degrees, certificates,transcripts, education start and end dates, work history, technical skills, professionalcertifications and registrations, language proficiency, honours and awards, and licencesobtained;
(ii) educational qualifications or background screening information such as details regarding the qualifications that you have, the name of schools and universities that you have attended, grades, degrees, certificates, transcripts, education start and end date, work history, technical skills, professional certifications and registrations, language capabilities, honours and awards, licences and criminal background screenings
(iii) employment history information such as your employment status, occupation or job title, nature and duration of employment, employment history, classification of employment service, details of your workplace, head of department details, salary information (including last drawn salary), reasons for leaving previous employers, disciplinary records;
(iv) financial and credit information including details of your financial standing, bankruptcy status, previous salaries, scholarships or bond obligations, share or equity holdings, current compensation and benefits (such as salary, allowances, reimbursements, loans, subsidies, pension, and retirement benefits), existing mortgages or financing arrangements, and takaful/insurance policies;
(v) information relating to your spouse and family members such as including their names, copies and details of government-issued identification documents, contact numbers (e.g., home, office, or mobile), mailing addresses, relationship to you, and email addresses
(vi) medical and health information such as health screening results, medical insurance or allowances, general medical history, existing illnesses, physical impairments, mental health conditions, and pregnancy-related information;
(vii) information relating to your spouse and family members including their name, contact details, occupation, relationship to you, and any other information they provide about you as part of your job application; and
(viii) other information associated with employment applications including testimonials, referrals, identification details, or any other non-publicly available information contained in a curriculum vitae, résumé, or other documents;
(ix) any other personal data as may be requested by us for the purposes of processing your job application or that you choose to share with us, such as personal preferences, social interests, hobbies, and desired salary etc.

We may collect and receive your personal data in a variety of ways, for instance::

(i) directly from you, when you choose to provide it to us in the job application form that you submitted to us or separately over the course of the screening process; and
(ii) indirectly, when we obtain information from third parties such as from third parties connected with you (e.g., your previous employers, your referees, etc), from background or health screening providers and from such other permissible or authorized sources).

Additionally, we may collect personal data of third parties related to you (e.g., your spouse, family members, or references) for the purpose of processing your job application. If you provide us with their personal data, you confirm that they have been informed of and understand how their data will be collected, used, and processed by us as described in this Privacy Notice. You further represent and warrant that you have obtained their consent for the processing, including the disclosure and transfer, of their personal data in accordance with this Privacy Notice.

[C] How We Use Your Personal Data

We will process your personal data in accordance with the PDPA, its applicable regulations, guidelines and/or orders, taking into account the latest amendments to the foregoing, this Privacy Notice and any privacy terms contained in your agreement(s) or terms with us.

We may process your personal data by collecting, recording, holding, storing, using and/or disclosing it for the following purposes:

(i) recruitment, selection and evaluation of your job application, including assessing your suitability for employment with us;
(ii) communicating with you about the recruitment process and/or your job application(s), including, in appropriate cases, informing you of other potential career opportunities at LPPSA;
(iii) verifying the information provided and carrying out reference checks and/or conducting background checks (where applicable) to confirm the accuracy of information provided;
(iv) making improvements to LPPSA job application and/or recruitment process including analyzing trends, conducting internal reporting and enhancing candidate experience;
(v) recommending potential career opportunities based on your skills, qualifications, and interest;
(vi) facilitating pre-employment processes and employment arrangements including preparing offer letters, employment contracts, and setting up payroll and benefits administration;
(vii) where applicable, assisting you with obtaining an immigration visa or work permit where required;
(viii) complying with applicable laws, regulations, legal processes or governmental requests; and
(ix) any additional purposes that are relevant for evaluating and processing your application with us.

(Collectively referred to as "Purposes").

If your application is successful and you accept employment with us, the personal data collected during the job application and recruitment process may become part of your employment record and may be further processed in accordance with our Privacy Notice for Employees.

Please note that we may also anonymise or aggregate your personal data by excluding information (such as your name) that make the data personally identifiable to you ("Anonymous Information"). As Anonymous Information is no longer considered personal data for the purpose of the PDPA, our processing of Anonymous Information is not subject to the requirements as stated in this Privacy Notice.

[D] Consequences of Providing Incomplete Personal Data

It is necessary for us to collect and process your personal data. If you do not provide us with your personal data, we will not be able to assess and process your application, offer you employment with us, manage and maintain your employment relationship with us.

[E] Disclosure of Your Personal Data

We will not disclose any of your personal data or the personal data of third-parties related to you (e.g., your family members) to any third party without your consent, except to the following categories of persons (whether within or outside Malaysia):

(i) Federal or State government, or other government and regulatory bodies (including ministries, government / regulatory agencies, departments, sections, offices or bodies);
(ii) our affiliated screening providers including those offering medical and health screening services and background / criminal records screening services;
(iii) our professional advisers, vendors, suppliers, agents, contractors, third party service providers, business partners, insurance companies, financial institutions, in connection with any of the Purposes above;
(iv) our assignees, transferees and successor(s) in title to us;
(v) your references; and
(vi) and where necessary, to any party who undertakes to keep your personal data confidential in carrying out the Purposes mentioned above or to persons whom we are compelled or required under the law to make such disclosure to.

[F] Security Measures to Protect Your Personal Data

The security of your personal data is very important to us. As such, we take appropriate technical and organizational measures to protect your personal data from loss, misuse, and unauthorized access or disclosure. These steps take into account the sensitivity of the Information we collect, process and store, and the current state of technology.

However, given the nature of communications and information processing technology, we cannot guarantee that Information during transmission through the Internet or while stored on our systems or otherwise in our care will be absolutely safe from any data breach or cyber incident.

[G] Retention of Your Personal Data

If your application is successful, the personal data that we collect through your job application process may become part of your employment record. In such case, your personal data will be retained in accordance with our Privacy Notice for Employees.

If your application is unsuccessful, we will keep your personal data for a period of up to [one (1) year] in accordance with our internal policies and procedures and for administration and statistical analysis purposes.

[H] Your Rights

You have the following rights under the PDPA in respect of your personal data that is held by us:

(i) the right to request for access to and for a copy of your personal data;
(ii) the right to request to update or correct your personal data;
(iii) the right to request for your personal data to be transferred / ported out to another party of your choice;
(iv) the right to withdraw your consent or the right to request us to limit our processing of your personal data; and
(v) the right to request us to cease or not begin processing your personal data if it is likely to cause damage or distress.

However, please note that your abovementioned rights under the PDPA are subject to our right to rely on any statutory exemptions and/or exceptions to collect, use and disclose your personal data.

If you wish to exercise any of the above rights, please submit your request in writing to the contact details below.

[I] Contact Us

If you have any query or complaints in relation to this Privacy Notice or how we handle your personal data, please contact us through the contact details below:

Legal & Secretarial Department
Address LEMBAGA PEMBIAYAAN PERUMAHAN SEKTOR AWAM (LPPSA)
Kompleks Kementerian Kewangan, No.9,
Persiaran Perdana, Presint 2 Pusat Pentadbiran Kerajaan Persekutuan,
62592 Putrajaya, Malaysia.
Contact No. 03 – 88802577/2502
Email Address lesec@lppsa.gov.my

[J] Amendments to this Privacy Notice

We reserve the right to update and amend this Privacy Notice from time to time to reflect changes in legal or regulatory requirements, recruitment practices, or our data processing activities. Any amendments will be communicated through announcements on our website or other appropriate means.

We encourage you to review this Privacy Notice periodically to stay informed about how we handle your personal data during the recruitment process.

[K] Language

This Privacy Notice is issued in both English and Bahasa Malaysia pursuant to the requirements prescribed by Section 7(3) of the PDPA. In the event of any inconsistencies or discrepancies between the English version and the Bahasa Malaysia version, the English version shall prevail.

[L] Acceptance

By accessing our applications, services or by providing your personal data to us, you agree that you have read and understood this Privacy Notice and you consent to us processing your personal data in accordance with this Privacy Notice. You confirm that all personal data provided by you is accurate and complete, and that none of it is misleading or out of date. You will promptly update us in the event of any change to your personal data.