Privacy Policy

Last updated: 7th November 2025

This Privacy Policy explains how The Malay College Old Boys Association (MCOBA)
(“MCOBA”, “we”, “our”, “us”) collects, uses, discloses, and protects personal data in accordance with the
Personal Data Protection Act 2010 (PDPA 2010) of Malaysia.
By using our website https://mcoba.org (“Website”), you consent to the
collection and use of your personal data as described here.

1. What Personal Data We Collect

We may collect and process the following categories of personal data:

• Identity Data: name, IC number, membership number, alumni details, date of birth, gender.
• Contact Data: address, email address, phone number, social media handles.
• Account Data: username, password, membership type, chapter affiliations.
• Transaction Data: donations, membership fees, event registrations, purchases made through the Website.
• Technical Data: IP address, device information, browser type, operating system, and other online identifiers collected through cookies and analytics tools.
• Communications Data: messages, enquiries, feedback, survey responses, or correspondence sent to us.
• Other Voluntary Data: any other information you choose to provide to us (e.g., images, testimonials, event participation information).

2. How We Collect Personal Data

• Directly from you – when you fill in online forms, register as a member, make a payment, submit feedback, sign up for newsletters, or contact us.
• Automatically – when you browse or interact with the Website, through cookies, analytics, and similar technologies.
• From third parties – such as payment processors, analytics providers, or official MCOBA affiliates and chapters.

3. Why We Collect Personal Data (Purpose of Processing)

We process personal data for the following purposes:

1. To manage and administer MCOBA membership records and alumni databases.
2. To operate the Website and deliver services (e.g., events, donations, newsletters, shop orders).
3. To verify identity and process payments or transactions.
4. To communicate with members, donors, and users, including updates and event invitations.
5. To maintain historical and alumni records for archival purposes.
6. To conduct data analysis, research, and website improvement.
7. To comply with legal and regulatory obligations.
8. For marketing and promotional activities (only with your consent).
9. For internal management and security of our IT systems and facilities.

4. Disclosure and Sharing of Personal Data

We will not sell or rent your personal data. However, we may share it under the following limited circumstances:

• Service providers – including IT service providers, web hosts, payment processors, event organisers, and communication platforms.
• Affiliated entities – such as recognised MCOBA chapters or related alumni bodies for legitimate association purposes.
• Legal obligations – to comply with applicable laws or requests from regulatory authorities.
• Professional advisors – auditors, lawyers, or consultants assisting MCOBA.
• With consent – where you have explicitly agreed to share your data for specific purposes.
• Aggregate data – anonymised or aggregated data that cannot identify you personally may be shared for statistical or analytical purposes.

5. Data Retention and Protection

We retain your personal data for as long as necessary to fulfil the purposes stated above or as required by law.
When data is no longer needed, it will be securely deleted or anonymised.

We protect your personal data using appropriate administrative, technical, and physical safeguards, including:

• Secure servers and data-encryption measures.
• Restricted access to authorised personnel only.
• Regular review of security practices and systems.

However, no online system can be fully secure, and MCOBA cannot guarantee absolute protection against all risks.

6. Use of Cookies and Analytics

Our Website uses cookies and similar tracking technologies to enhance functionality and analyse site usage.

• Essential cookies: required for basic website operation (e.g., login sessions).
• Analytics cookies: help us understand how visitors use our Website (e.g., via Google Analytics).
• Preference cookies: store your settings or preferences.
• Marketing cookies: used only if you consent to receive promotional materials.

You may disable cookies through your browser settings; however, this may affect certain Website features.

7. Your Rights Under the PDPA

Under Malaysia’s PDPA 2010, you have the right to:

• Request access to your personal data held by MCOBA.
• Request correction or updating of inaccurate or incomplete data.
• Withdraw consent to processing (where applicable).
• Restrict or object to certain processing activities.
• Request deletion of personal data (subject to legal or contractual obligations).

Requests may be subject to verification of identity and applicable legal limits.
To exercise your rights, please contact us as stated below.

8. Transfer of Personal Data Outside Malaysia

Your personal data may be transferred to and stored on servers located outside Malaysia,
where our hosting or service providers operate internationally.
We will ensure that such transfers comply with PDPA 2010 requirements and that appropriate safeguards are in place.

9. Marketing and Communications

MCOBA may use your contact details to send alumni news, updates, or invitations to events.
You may opt out at any time by using the unsubscribe link in our emails or by contacting us directly.

10. Contact Us

If you have any questions, requests, or complaints regarding this Privacy Policy or our data practices, please contact:

MCOBA Secretariat
The Malay College Old Boys Association (MCOBA)
Penthouse, MCOBA Building,
42, Jalan Syed Putra, 50460 Kuala Lumpur, Malaysia
📞 +603 2274 6306
📧 co*****@***ba.org
🌐 https://mcoba.org

11. Updates to This Policy

MCOBA reserves the right to amend this Privacy Policy from time to time.
The updated version will be posted on our Website with a revised “Last updated” date.
Your continued use of the Website after any amendment signifies acceptance of the updated terms.