1. About this notice
Whalestein Group ("we", "us" or "our") is responsible for the personal information collected through this corporate website and the enquiry and application channels linked from it. This notice explains what we collect, why we use it, who may receive it and the choices available to you.
Our organisation is described on the Group Structure page. Investor accounts and dedicated platforms have their own processes and privacy information; this notice does not replace the information provided when you use those services.
This policy concerns the handling of information that identifies you, or can reasonably be linked to you. It covers an initial message and the correspondence needed to consider and follow up that message. It does not turn a general corporate enquiry into an investor account, an employment relationship or an agreement to provide a service.
Notis privasi — Bahasa Malaysia
1. Skop notis
Whalestein Group ("kami") bertanggungjawab terhadap maklumat peribadi yang dikumpulkan melalui laman korporat ini serta saluran pertanyaan dan permohonan yang dipautkan daripadanya. Notis ini menerangkan maklumat yang diproses, tujuan, penerima dan pilihan anda. Maklumat tentang organisasi terdapat pada halaman Struktur Kumpulan. Akaun pelabur dan platform khusus mempunyai proses serta notis privasi masing-masing.
Maklumat peribadi ialah maklumat yang mengenal pasti anda atau boleh dikaitkan secara munasabah dengan anda. Notis meliputi mesej awal dan komunikasi susulan; pertanyaan korporat tidak dengan sendirinya membuka akaun pelabur, mewujudkan hubungan pekerjaan atau membentuk perjanjian perkhidmatan.
2. Maklumat yang dikumpulkan
Kami menerima maklumat terus daripada anda: nama, alamat e-mel, topik dan mesej pertanyaan, serta nama organisasi jika diberikan. Rekod pertanyaan turut menyimpan nombor rujukan, pengenal penyerahan, masa, bahasa dan status pengendalian. E-mel dan pertanyaan kerjaya boleh mengandungi surat-menyurat, CV, pengalaman, pendidikan atau tarikh ketersediaan yang anda berikan.
Penyedia pengehosan dan keselamatan mungkin memproses alamat IP, maklumat pelayar dan log permintaan untuk menyediakan serta melindungi laman. Perkhidmatan pertanyaan juga menggunakan alamat IP buat sementara untuk mengehadkan penyerahan berulang. Aplikasi laman tidak menggunakan penjejak pengiklanan, analitik pihak ketiga atau alat pemprofilan pelawat. Jangan hantar kata laluan, kod akses, butiran pembayaran, dokumen pengenalan atau maklumat sensitif yang tidak berkaitan melalui borang am.
Butiran dalam mesej atau bahan permohonan ditentukan oleh anda. Sertakan hanya maklumat yang berkaitan; pertanyaan kerjaya tidak memerlukan maklumat kesihatan, keluarga, kewangan atau identiti yang tidak berkaitan. Jika interaksi kemudian memerlukan dokumen terhad, persetujui saluran yang sesuai terlebih dahulu. Pemprosesan teknikal untuk keselamatan adalah berasingan daripada butiran yang disimpan dalam rekod pertanyaan.
3. Tujuan penggunaan
Maklumat digunakan untuk menerima, menilai, menyalurkan dan menjawab permintaan; mempertimbangkan pertanyaan kerjaya atau latihan industri; menyimpan rekod komunikasi dan susulan; mengelakkan pendua; melindungi laman; menyiasat penyalahgunaan; menyelesaikan pertikaian; serta memenuhi kewajipan undang-undang atau kawal selia. Pertanyaan tidak mendaftarkan anda secara automatik untuk surat berita atau pemasaran. Kami tidak menjual atau menyewakan maklumat pertanyaan.
Jenis permintaan menentukan kegunaan yang berkaitan. Contohnya, butiran hubungan boleh digunakan untuk menjelaskan cadangan perkongsian, manakala CV digunakan untuk mempertimbangkan pertanyaan kerjaya. Ini tidak membenarkan penggunaan promosi yang tidak berkaitan atau pemindahan automatik ke platform lain. Tujuan yang berbeza secara material akan ditangani melalui proses notis atau persetujuan yang diperlukan sebelum diteruskan.
4. Pilihan dan persetujuan
Anda memilih sama ada hendak menghubungi kami. Nama, e-mel, topik dan mesej diperlukan dalam borang untuk memahami serta menjawab pertanyaan; organisasi adalah pilihan. Anda juga perlu mengesahkan bahawa anda telah membaca notis ini dan bersetuju maklumat digunakan untuk menjawab pertanyaan. Tanpa maklumat atau pengesahan yang diperlukan, borang tidak dapat menerima pertanyaan. Anda boleh menghubungi kami melalui e-mel; maklumat dalam e-mel juga tertakluk pada notis ini.
Persetujuan bagi pemprosesan berasaskan persetujuan boleh ditarik balik dengan menulis kepada kami. Ini mungkin mengehadkan keupayaan kami meneruskan pengendalian permintaan, tetapi tidak mewajibkan pemadaman rekod yang boleh atau mesti disimpan secara sah. Jika memberikan maklumat orang lain, pastikan anda mempunyai kuasa dan orang itu memahami penggunaannya.
Maklumkan jika butiran hubungan tidak tepat atau berubah semasa pertanyaan berjalan. Jika mahu menghentikan susulan, nyatakan pertanyaan berkaitan supaya arahan itu dapat dibezakan daripada surat-menyurat atau hubungan yang lain.
5. Penzahiran maklumat
Maklumat boleh diakses oleh wakil Whalestein Group yang diberi kuasa untuk mengendalikan pertanyaan atau permohonan; penyedia pengehosan, penyimpanan data, e-mel, keselamatan dan sokongan teknikal; serta penasihat profesional atau pihak berkuasa apabila diperlukan untuk nasihat undang-undang, kewajipan undang-undang, permintaan yang sah atau perlindungan hak. Akses terhad kepada keperluan tujuan tersebut.
Kami tidak menghantar pertanyaan secara automatik kepada rakan niaga atau penyedia luar. Jika pengenalan memerlukan perkongsian butiran anda, kami akan menerangkan penzahiran yang dicadangkan dan mendapatkan persetujuan apabila diperlukan.
Penyedia infrastruktur tidak mendapat kebenaran untuk menggunakan pertanyaan bagi tujuan yang tidak berkaitan bagi pihak kami. Pengendalian oleh penyedia mesti berkaitan dengan perkhidmatan yang diberikan serta keperluan kerahsiaan, keselamatan dan perlindungan data yang terpakai. Penyedia pengehosan atau log masuk juga mungkin memproses maklumat akaun atau keselamatannya sendiri di bawah notis berasingan.
6. Penyimpanan dan pemindahan
Infrastruktur awan serta penyedia perkhidmatan mungkin menyimpan atau memproses maklumat di luar Malaysia atau negara kediaman anda, yang mungkin mempunyai peraturan perlindungan data berbeza. Kami mengambil langkah yang diperlukan oleh undang-undang, termasuk aturan yang sesuai dengan penyedia berkaitan, untuk melindungi pemindahan tersebut.
Maklumat disimpan selama yang munasabah diperlukan bagi tujuan notis ini, termasuk susulan, penilaian permohonan, rekod berkaitan serta keperluan undang-undang atau pertikaian. Tempoh bergantung pada jenis maklumat dan keadaan; tiada satu tempoh dinyatakan untuk semua rekod. Maklumat yang tidak lagi diperlukan hendaklah dipadamkan atau dinyahnamakan, tertakluk pada keperluan penyimpanan yang sah.
Pertimbangan penyimpanan termasuk sama ada pertanyaan masih aktif, sama ada komunikasi lanjut dijangka secara munasabah, tujuan bahan permohonan serta keperluan untuk mewujudkan, melaksanakan atau mempertahankan tuntutan undang-undang. Menutup urusan susulan tidak sama dengan memadam rekod. Anda boleh meminta pertimbangan terhadap maklumat yang tidak lagi diperlukan; kami akan mempertimbangkan tujuan dan kewajipan penyimpanan serta menerangkan sekatan yang terpakai. Memadam Cookie atau meninggalkan laman tidak memadam pertanyaan yang telah diterima.
7. Keselamatan
Kami menggunakan sekatan akses serta kawalan keselamatan perkhidmatan pengehosan dan storan. Peti masuk pertanyaan dihadkan kepada akaun pemilik yang dibenarkan dan rekod tidak diterbitkan di laman. Tiada sistem dijamin selamat sepenuhnya; berhati-hati semasa menghantar maklumat. Kewajipan pemberitahuan yang berkaitan akan dipatuhi jika insiden data peribadi memerlukan pemberitahuan di bawah undang-undang.
Jika maklumat dihantar secara tersilap atau anda mengesyaki akses tanpa kebenaran berkaitan pertanyaan, hubungi kami dan kenal pasti mesej tersebut tanpa mengulangi maklumat sensitif. Jika butiran akses akaun terdedah, gunakan juga proses pemulihan atau keselamatan penyedia akaun; laman korporat ini tidak boleh menetapkan semula akaun platform lain.
8. Hak dan permintaan anda
Tertakluk pada undang-undang, anda boleh meminta maklumat tentang pemprosesan dan akses kepada data; pembetulan; penarikan balik persetujuan; menghentikan pemasaran langsung; atau membantah pemprosesan yang mungkin menyebabkan kerosakan atau distres. Anda juga boleh meminta pemadaman atau sekatan penggunaan apabila berkenaan, atau menerangkan maklumat yang tidak lagi diperlukan. Jika tersedia di bawah undang-undang, anda boleh meminta pemindahan data kepada organisasi lain, tertakluk pada syarat undang-undang dan kebolehlaksanaan teknikal.
Hantar permintaan kepada admin@whalestein.com dengan butiran yang mencukupi. Pengesahan identiti yang berkadar mungkin diperlukan sebelum maklumat didedahkan atau diubah. Kami akan menerangkan sebarang batasan undang-undang. Anda juga boleh mengemukakan aduan kepada Pesuruhjaya Perlindungan Data Peribadi Malaysia.
Gunakan tajuk e-mel “Pertanyaan privasi”. Nyatakan nama dan e-mel yang digunakan semasa menghubungi kami, nombor rujukan jika ada, maklumat atau tindakan yang diminta serta kuasa jika bertindak bagi orang lain. Jangan lampirkan dokumen pengenalan sebelum aturan pengesahan yang sesuai dipersetujui. Kami mungkin perlu menjelaskan permintaan, mencari rekod dan mengesahkan identiti atau kuasa secara berkadar sebelum mendedahkan atau mengubah maklumat.
Permintaan dipertimbangkan mengikut prosedur dan tempoh jawapan yang diperlukan oleh undang-undang. Hak kebolehalihan data tertakluk juga pada keserasian format data. Hak tidak mewajibkan pemadaman rekod yang mesti disimpan secara sah. Jika terdapat batasan, kami akan menerangkan sebab yang berkaitan. Bagi aduan, jelaskan apa yang berlaku, komunikasi yang terlibat dan hasil yang diminta supaya perkara itu dapat dipertimbangkan.
9. Cookie, kanak-kanak dan platform lain
Dasar Cookie menerangkan teknologi pelayar serta Cookie akses yang dikendalikan platform. Platform pelabur, Sonar Intelligence dan laman lain mempunyai notis masing-masing. Laman korporat ini tidak direka untuk mengumpulkan maklumat kanak-kanak. Jika berumur bawah 18 tahun, dapatkan bantuan ibu bapa atau penjaga sebelum menghantar maklumat peribadi. Hubungi kami jika maklumat kanak-kanak yang tidak wajar disimpan telah diberikan.
Notis perkhidmatan berasingan tetap terpakai walaupun perkhidmatan dicapai melalui navigasi laman ini atau pertanyaan berkaitan dengannya. Permintaan tentang akaun pelabur atau penyelidikan khusus mungkin perlu dikemukakan kepada organisasi yang bertanggungjawab terhadap perkhidmatan itu.
10. Kemas kini dan hubungan
Notis ini mungkin dikemas kini apabila laman, amalan pengendalian atau keperluan berubah. Penggunaan maklumat yang berbeza secara material akan tertakluk pada proses notis atau persetujuan yang diperlukan. Tarikh versi laman terkini ialah 20 Oktober 2026.
Untuk pertanyaan, permintaan atau aduan privasi, hubungi Whalestein Group melalui admin@whalestein.com dengan tajuk “Pertanyaan privasi”. Jangan sertakan kata laluan, butiran pembayaran atau dokumen pengenalan yang tidak diperlukan.
Versi baharu tidak dengan sendirinya membenarkan kegunaan berlainan bagi maklumat yang telah diberikan. Anda boleh menyimpan versi yang berkaitan dengan interaksi anda untuk rujukan sendiri.
2. Information we collect
When you use our corporate enquiry form, we collect your name, email address, selected enquiry topic and message. You may also provide an organisation name. The contents of your message determine what further information you disclose; we ask that you include only what is relevant to the enquiry.
Each accepted enquiry has a receipt reference and submission identifier, together with the submission time, language and handling status. These records help us locate a message, distinguish it from another enquiry, prevent duplicate records when a submission is retried and maintain continuity during follow-up.
If you contact our published email address, we receive the information contained in your email and subsequent correspondence. Career and internship enquiries may include a CV, employment or education history, areas of interest and availability that you choose to provide. Sending application materials is voluntary and does not require you to disclose unrelated health, family, financial or identity information.
Hosting and security services may process technical information such as IP addresses, browser information and request logs to deliver and protect the website. The enquiry service also uses an IP address temporarily to limit repeated submissions. This technical processing is distinct from the personal details stored in an enquiry record.
We collect enquiry and application information directly from you. The website application does not use advertising trackers, third-party analytics or visitor-profiling tools. Please do not send passwords, access codes, payment credentials, identity documents or unrelated sensitive information through the general enquiry form. If a later interaction genuinely requires restricted documents, agree an appropriate channel before providing them.
3. How we use information
We use information for purposes connected with your interaction with Whalestein Group:
- Receive, assess, route and respond to enquiries or requests.
- Consider career and internship enquiries and communicate about the information you provide.
- Maintain correspondence and follow-up records, prevent duplicate submissions and manage our business communications.
- Protect the website, investigate misuse, resolve disputes and meet applicable legal or regulatory obligations.
Submitting an enquiry does not subscribe you to a newsletter or marketing list. We do not sell or rent enquiry information.
The nature of your request determines the relevant use. For example, contact details in a partnership enquiry enable us to clarify a proposal, while a CV supports consideration of a career enquiry. Providing either does not authorise an unrelated promotional use or automatically make the information available to another business.
If a substantially different purpose is proposed, we will address the information and consent requirements that apply before proceeding. An enquiry about a particular platform does not itself open an account with that platform or authorise the transfer of your enquiry record to it.
4. Your choices and consent
You decide whether to contact us. If you use the website form, your name, email, topic and message are required so that we can understand and respond to the enquiry. The organisation field is optional. The form also asks you to confirm that you have read this notice and agree to the use of your details to respond.
If required information or that confirmation is missing, the form cannot accept the enquiry. You may instead contact us by email, where the information in your message will be handled under this notice.
You may withdraw consent to processing that relies on consent by writing to us. This may limit our ability to continue handling your request. It does not require us to remove records that we are lawfully required or permitted to retain. If you provide another person’s information, ensure that you have authority to do so and that the person understands the relevant use.
You can keep an enquiry limited to the information needed for us to understand the matter. Please tell us if a contact detail is incorrect or changes while a request is ongoing. If you ask us to stop following up, identify the relevant enquiry so that we can distinguish that instruction from other correspondence or a separate relationship.
5. Who may receive information
Access is limited to people and providers who need information for the purposes described above. Depending on the interaction, these may include:
- The authorised Whalestein Group representative handling the enquiry or application.
- Website hosting, data-storage, email, security and technical-support providers that support our operations.
- Professional advisers or a relevant authority where disclosure is needed for legal advice, a legal obligation, a lawful request or the protection of rights.
We do not automatically forward an enquiry to an outside business partner or service provider. If an introduction requires sharing your details, we will explain the proposed disclosure and obtain consent where required.
Providing infrastructure does not give a service provider permission to use an enquiry for an unrelated purpose on our behalf. Where a provider processes information to deliver a service to us, the relevant handling must remain connected to that service and the applicable confidentiality, security and data-protection requirements. A hosting or sign-in provider may also process its own account or security information under its separate privacy notice.
6. Storage, transfers and retention
The website and its communications use cloud and service-provider infrastructure. Your information may therefore be stored or processed outside Malaysia or outside your country of residence. The applicable data-protection rules may differ between countries. Where information is transferred, we take steps required by applicable law to protect it, including appropriate arrangements with relevant service providers.
We retain information for as long as reasonably needed for the purposes described in this notice, including enquiry follow-up, application review, related records and legal or dispute requirements. Retention depends on the type of information and the circumstances; we do not apply a single stated period to every record. Information that is no longer needed should be deleted or anonymised, subject to any lawful retention requirement.
Relevant retention considerations include whether an enquiry is still active, whether further correspondence is reasonably expected, the purpose for which application materials were provided, and whether records are needed to establish, exercise or defend a legal claim. Closing a message for follow-up purposes is not the same as deleting its underlying record.
You may ask about information you believe is no longer needed. We will consider the request against its purpose and any applicable retention obligation, and explain a restriction where one applies. Deleting cookies or leaving the website does not remove a submitted enquiry from our records.
7. Protecting information
We use access restrictions and the security controls of our hosting and storage services to protect information. The enquiry inbox is restricted to the authorised owner account; enquiry records are not published on the website.
No website, email service or storage system can be guaranteed completely secure. Please use appropriate care when sending information. If a personal-data incident requires notification under applicable law, the relevant notification obligations apply.
If you think you have sent information to us in error, or that information connected with an enquiry has been accessed without authority, contact us using the details below and identify the relevant message. Avoid repeating sensitive information in the report. If credentials were disclosed, also use the relevant account provider’s recovery or security process; this corporate website cannot reset a separate platform’s account.
8. Your privacy rights
Subject to applicable law and the circumstances of the processing, you may ask whether we hold your personal information and request access to it, or request correction of information that is inaccurate or incomplete. You may also withdraw consent to processing that relies on consent, object to processing that may cause damage or distress, and ask us to stop any direct marketing.
Where applicable, you may request deletion or a restriction on use, or explain why you believe information is no longer needed. Where a right to data portability is available, you may request transmission of your information to another organisation, subject to the relevant legal conditions, technical feasibility and compatibility of the data format. These rights are subject to their applicable requirements and do not require the removal of records that must lawfully be retained.
Send a request to admin@whalestein.com with the subject “Privacy enquiry”. Begin with the name and email address used to contact us, a receipt reference if available, and a clear description of the information or action concerned. If acting for another person, explain your authority. Please do not attach identity documents or disclose additional sensitive information unless an appropriate verification arrangement has been agreed.
We may need to clarify a request, locate the relevant records and proportionately verify identity or authority before releasing or changing information. Requests will be considered in accordance with the procedures and response periods required by applicable law. If a legal limitation prevents all or part of the requested action, we will explain the relevant reason.
You may also contact us to raise a concern about our handling of information. Describe what happened, the relevant communication and the outcome you are seeking so that the matter can be considered. You may raise a concern with Malaysia’s Personal Data Protection Commissioner.
9. Cookies and other platforms
Our Cookie Policy explains the website’s current use of browser technologies and platform-managed access cookies. Following a link to the Investor Portal, Sonar Intelligence or another website takes you to a separate service. Read the privacy information provided there before submitting personal information.
This distinction also applies when a related service is reached from our navigation or an enquiry concerns that service. Review the destination’s own collection and access arrangements. A privacy request about an investor account or a dedicated research account may need to be addressed to the organisation responsible for that service rather than through the corporate enquiry process.
10. Children’s information
This corporate website is not designed to collect information from children. If you are under 18, seek a parent’s or guardian’s assistance before sending personal information. Contact us if you believe a child has provided information that should not be retained.
11. Updates and privacy enquiries
We may update this notice as the website, our handling practices or applicable requirements change. The date at the top identifies the latest website edition. A materially different use of personal information will be addressed through the notice or consent process required by applicable law.
For a privacy question, request or complaint, contact Whalestein Group at admin@whalestein.com. Please use the subject “Privacy enquiry” and describe the matter without including passwords, payment credentials or unnecessary identity documents.
A new edition does not by itself authorise a different use of previously provided information. Keep a copy of the version relevant to your interaction if you need it for your records.