Privacy Policy

1. Who We Are

MMT Care is a brand name operated by MMT Advisory (003556025-D), a corporate agent of Syarikat Takaful Malaysia Am Berhad, providing a digital platform for medical practitioners to apply for Medical Malpractice Takaful in Malaysia. As part of facilitating your application, MMT Advisory acts as a data controller in respect of the personal information you provide to us.

For any privacy-related enquiries, contact us at hello@mmt.care.

2. Information We Collect

We collect personal information through your interactions with this website, including:

• Identity & professional details: Full name, medical registration number, practitioner category, and practice address
• Contact information: Email address and phone number
• Application data: Information submitted through our online application, quotation and enquiry forms, which are collected and processed on our behalf by a third-party form provider
• Payment information: Transaction records (payment card details are processed securely by our payment provider and are not stored by MMT Care)
• Website usage data: Pages visited, device type, browser, IP address, and behavioural interaction data collected via cookies and analytics tools

3. How We Use Your Information

We use your personal information for the following purposes:

• Processing and submitting your takaful application to Syarikat Takaful Malaysia Am Berhad
• Generating and delivering quotations, invoices, and takaful certificates
• Maintaining our customer database and communication records
• Responding to your enquiries and providing customer support
• Complying with legal and regulatory obligations
• Sending marketing communications about our products and services — only with your prior consent
• Improving our website through analytics and usage data

4. Disclosure of Your Information

We may share your personal information with the following parties, strictly for the purposes described in this policy:

• The relevant takaful operator (including Syarikat Takaful Malaysia Am Berhad and other licensed takaful operators as applicable): for underwriting, certificate issuance, and claims processing
• Regulatory authorities: including Bank Negara Malaysia, when required by law or regulation
• Form and data-collection provider: our online application, quotation and enquiry forms are hosted and processed by a specialist third-party form provider acting as our data processor. This provider processes the personal data you submit solely on our instructions, under a Data Processing Agreement, and applies its own technical and organisational security measures. Depending on the form, submitted data may be stored on secure servers, which may be located within or outside Malaysia.
• Other service providers: third-party vendors who assist in operating this website (e.g. payment processors, email delivery, analytics), bound by confidentiality obligations
• Legal proceedings: where disclosure is necessary to establish, exercise, or defend legal rights

We do not sell, rent, or trade your personal information to any third party for commercial purposes.

5. Cookies & Analytics

This website uses cookies and similar tracking technologies to improve your browsing experience and analyse how the site is used.

6. Data Retention

We retain your personal information for as long as is necessary to fulfil the purposes described in this policy, or as required by applicable law and regulation. In general:

• Application and certificate records are retained for a minimum of 7 years in accordance with regulatory requirements
• Marketing consent records are retained until consent is withdrawn
• Website usage data is retained in accordance with the terms of the relevant analytics provider

Once personal data is no longer required, it will be securely deleted or anonymised.

7. Data Security

MMT Care implements appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, misuse, or alteration, including:

• Encryption of data in transit (SSL/TLS) and at rest
• Secure data storage practices with access controls
• Regular security reviews and updates

Personal data submitted through our online forms is transmitted over encrypted connections and stored securely by our third-party form provider, which maintains its own security measures. A Data Processing Agreement governs how this data is handled.

While we take reasonable steps to protect your data, no method of transmission over the internet is completely secure. We encourage you to use strong passwords and to contact us immediately if you suspect any unauthorised use of your information.

8. External Links

This website may contain links to third-party websites. MMT Care is not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policy of any external site you visit.

9. Your Rights Under PDPA 2010

Under the Personal Data Protection Act 2010, you have the following rights in respect of your personal data held by MMT Care:

• Right of access: Request a copy of the personal data we hold about you
• Right of correction: Request correction of any inaccurate or incomplete personal data
• Right to withdraw consent: Withdraw consent for the use of your personal data at any time, subject to legal or contractual restrictions
• Right to limit processing: Request that we limit how we use your personal data in certain circumstances
• Right to raise concerns: Lodge a complaint with us or with the relevant regulatory authority if you believe your data rights have been violated

To exercise any of these rights, contact us at hello@mmt.care. We will respond to your request within 21 days.

10. Website Accounts & Embedded Content

Our website is built on a widely used content management platform. Depending on how you interact with the site, the following additional processing may apply:

• Media: If you upload images to the website, please avoid uploading images with embedded location data (EXIF GPS), as visitors can download and extract location data from images on the site.
• Login cookies: When you log in, we set cookies to save your login information and screen display choices, and a temporary cookie to check that your browser accepts cookies. Login cookies last two days, screen option cookies last a year, and if you select “Remember Me” your login persists for two weeks. Logging out removes the login cookies.
• Embedded content: Pages on this site may include embedded content (for example videos, images or articles). Embedded content from other websites behaves exactly as if the visitor had visited that other website, and those sites may collect data about you, use cookies, embed third-party tracking and monitor your interaction with the embedded content, including if you are logged in to that website.
• Password resets and data requests: If you request a password reset, your IP address will be included in the reset email. If you have an account, you can request an exported file of the personal data we hold about you, or request that we erase it, except data we are obliged to keep for administrative, legal or security purposes.

11. Social Login

Where our website offers the option to register, log in or link your account using a third-party social provider, this is handled by a third-party social login service:

• Data collected: When you register, log in or link an account through an enabled social provider, we collect your email address, name, social provider identifier and access token, and may collect your profile picture and additional profile fields.
• How it is shared: This personal data is stored on our own site and is not shared with anyone, except the access token, which is used for authenticated communication with the social provider to verify your account and securely access your personal data.
• Retention: The collected personal data is removed when your user account is deleted from our website.
• Cookies: A cookie is created for visitors who use the social login authorisation flow. This cookie is required to secure the communication with each provider and to redirect you back to your previous location.

13. Policy Updates

This Privacy Policy may be updated from time to time to reflect changes in our practices or applicable law. We will update the "Last Updated" date below when changes are made. We encourage you to review this page periodically.

Continued use of this website after any update constitutes your acceptance of the revised policy.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact us:

• Email: hello@mmt.care