1. Commitment to Personal Data Protection
Mega Corporate Services Sdn Bhd (“the Company”, “we”, “us”, or “our”) values your privacy and is committed to protecting your personal data in strict compliance with the Malaysian Personal Data Protection Act 2010 (“PDPA”). This Privacy Policy explains how we collect, process, share, and secure personal information obtained via megacorp.com.my (“the Website”) or in the course of providing our corporate services, including corporate secretarial, share registry, accounting, and payroll outsourcing services.
2. Categories of Personal Data We Process
Depending on your relationship with us (visitor, corporate client, shareholder, or employee), we may collect and process:
- Identification Data: Full name, NRIC number, passport number, nationality, residency status, gender, and signature.
- Contact Particulars: Corporate or personal email address, telephone numbers, and registered residential or business addresses.
- Financial & Professional Records: Income records, banking details, tax file numbers, employer data, corporate shareholdings, and statutory contribution records (EPF, SOCSO, EIS).
3. Purpose of Data Processing
We collect and process personal data only for the following lawful purposes:
- Fulfilling professional client engagements and administering statutory requests (e.g., incorporating companies, managing share registers, filing with SSM, Bursa Malaysia, and LHDN)
- Processing payroll cycles, computing statutory deductions, and distributing corporate updates, dividend warrants, or meeting notices
- Responding to inquiries submitted via website contact forms, optimising website performance, and verifying identity for portal access
4. Data Sharing and Third-Party Disclosures
We do not sell or rent personal information. Personal data is only shared with authorised third parties under strict regulatory or contractual safeguards:
- Government Agencies & Regulatory Authorities: Including the Companies Commission of Malaysia (SSM), Inland Revenue Board (LHDN), Royal Malaysian Customs Department, Bank Negara Malaysia (BNM), Bursa Malaysia Securities Berhad, and the Immigration Department of Malaysia, as required by law.
- Authorised Professional Intermediaries: External auditors, tax agents, legal counsel, or financial institution partners involved in fulfilling client mandates.
- Service Providers: Secure cloud infrastructure or software hosts (e.g., cloud accounting and payroll platforms) bound by confidential data-processing agreements.
5. Security Safeguards and Integrity
We maintain robust technical, operational, and administrative security measures to protect your personal data from unauthorised access, loss, alteration, or disclosure. Data access is restricted to qualified personnel on a need-to-know basis, and digital interactions with our portals are protected by standard encryption protocols.
6. Data Retention Timelines
Personal data is retained only for as long as necessary to fulfill the purposes of collection, or to meet applicable statutory retention periods under Malaysian law (such as the 7-year retention requirement for accounting and tax records). Data no longer required is securely anonymised or destroyed.
7. Your Rights to Access and Correction
Under the PDPA, you have the right to request access to, or correction of, your personal data held in our systems, and to limit or withdraw your consent to data processing. All formal data access and correction requests should be directed to our Data Protection Officer:
