The Prestige Hotel respects and are committed to safeguard your privacy and protect your personal data in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA), and where possible, internationally recognised standards of personal data privacy protection.

We use your personal data to fulfill our commitment in providing you with distinctive standards of hospitality service.

Our collection of Personal Data

Personal data in this Policy refers to any personal information in our possession which relates directly or indirectly to you, to the extend that the personal information is capable of identifying you as an individual.
The collection may be obligatory for purposes of compliance with the Registration of Guest Act 1965, as well as compliance with other local laws and regulations.
The collection and processing of personal data may also be obligatory for purposes of providing you with our services. Personal data may be collected as part of:

• fulfilling reservations or requests for information or services,
• accommodating your personal preferences,
• purchasing our products or services,
• registering for our programmes and memberships,
• visiting our hotel premises, and
• facilitating communications.

We may also request your personal data to verify your identity, to protect your interests and implement security measures in compliance with the law.

Types of Personal Data we collect

The types of personal data that we process include:

• your personal details such as name, national identification number, date of birth, sex, nationality, occupation, contact information, passport and visa information and other required information pursuant to local laws and regulations;
• guest stay information, including the hotels where you have stayed, date of arrival and departure, goods and services purchased, special requests made, observations about your service preferences, telephone numbers dialed, faxes and telephone messages received from third parties on behalf of guests/customers;
• sensitive personal data which comprises your mental and physical health including your medical condition and medical history and/or your religious belief;
• your credit card details, membership information, account details, profile or password details and any frequent flyer or travel partner programme affiliation;
• any information necessary to fulfill special requests (for example, leisure, travel and guest preferences);
  your reviews and opinions about our services;
• information such as videos and photographs collected through the use of closed circuit television systems and other security systems;
• information collected by technology when you subscribe to our services, such as your web browser type, Internet Protocol (IP) address, domain name, user profiles, cookies, Android ID, third party analytics services (e.g. Google Analytics), etc; and
• information relating to the credit of customers.

How we use Personal Data

We may use and disclose relevant portions of your personal data and information in order to:

• process and/or confirm hotel arrangements and restaurant reservations;
• process and/or confirm bookings, reservations and making arrangements for sports or recreational activities;
• provide and charge for the hotel accommodations and other goods and services you purchase;
• provide privileges, benefits and services to you;
• provide you with a better, more personalized level of service;
• process applications and administer membership programmes;
• fulfill contractual obligations to you, or anyone involved in the process of making your travel arrangements (e.g. travel agents, group travel organisers and your employer) and vendors (e.g. credit card companies, airline operators and other loyalty programmes);
• conduct market analysis, market research, customer satisfaction and quality assurance surveys;
• respond to requests for information and services;
• provide for the safety and security of guests;
• administer general record keeping;
• facilitate direct marketing, promotional and customer management purposes, including sending you sales promotional communications or special offers if you have consented to receive the same. Please refer section “Direct Marketing” below;
• facilitate matching for whatever purpose with other personal data;
• disclose the winner of contests and lucky draw competitions conducted by us or on our behalf;
• meet legal and regulatory requirements.

Disclosures of your Personal Data

We will not disclose any of your personal data to any third party without your consent, whether within or outside Malaysia, except to:

• the Hotel’s group of companies (including the Hotel’s holding company, subsidiaries, related and/or associated companies);
• any hotel consortium which the hotel is a part of, as well as member hotels of any such hotel consortium;
• our professional advisers, vendors, suppliers, agents, contractors, service providers, business partners, insurance companies, banks, financial institutions, in connection with any of the Purposes above, including third party service providers who personalize the types of information that we receive from you and to customize, improve and develop content and functionality to help us provide you with better products and/or services;
• successor in title to us;
• any governmental agencies, regulatory authorities and/or statutory bodies;
• parties (including but not limited to its advisers/representatives) in connection with any corporate exercise, e.g. any proposed or actual mergers and/or acquisitions, joint venture, funding exercise, asset sale or for any other matter of such nature which relates to the hotel;

and where necessary, to any party who undertakes to keep your personal data confidential in carrying out the purposes mentioned above or to persons whom we are compelled or required under the law to make such disclosure to.

Direct Marketing

We may use your personal information (including your name, address, telephone numbers, email and other contact details) to send you marketing communications such as direct-mail, email, telephone calls and SMS containing news, offers, promotions, events to be offered by us or by our business partners in relation but not limited to the following classes of products and services: travel, transportation, retail, food and beverage, credit cards, financial and investment services, real estate, entertainment, publications, fashion and jewellery, leisure and sports, health and wellness, non-profit and charitable activities, telecommunications, social networking, media and public relations.

We will not use your personal information for direct marketing without your consent. We will always ask for your consent before we use your personal information for direct marketing. You may opt-out from receiving marketing communications at any time, by following the “opt-out” instructions contained in the communications or contacting The Prestige Hotel in accordance with the section “Access or Correct Personal Data” below.

Our commitment to Data Security

To maintain the accuracy of your personal data, as well as preventing unauthorised access to and ensuring the correct use of your personal data, we have implemented appropriate physical, electronic and managerial measures to safeguard and secure the personal data we collect. These measures are subject to ongoing review and monitoring. Whilst we make every effort to protect your personal data, no security measures can guarantee that your personal data and information will not be subject to interference, misuse or hacking and we shall not be responsible for any loss, misuse or alteration arising as a result of such incidents.

Retention of Personal Data

Your personal data is retained for as long as necessary to fulfil the purposes it was collected for, or as required to comply with legal, operational, or regulatory obligations. Upon the lapse of the retention period, data will be securely destroyed or anonymised to prevent unauthorised use.

Children and Minors

Except where required by local laws, we do not knowingly collect personal information from individuals under the age of 18. If you are a child or minor, please ensure that a parent or guardian supervises your engagement with our website and services.

Cookies

To enhance your experience on our website, some of our web pages may use “cookies”. Cookies are text files that we place in your computer’s browser to store your preferences. Cookies, by themselves, do not tell us your email address or other personally-identifiable information unless you choose to provide this information to us by, for example, registering for one of our services. However, once you choose to furnish the site with your personally-identifiable information, this information may be linked to the data stored in the cookie.

We use cookies to understand site usage and to improve the content and offerings on our sites. For example, we may use cookies to personalise your experience at our web pages (e.g., to recognise you by name when you return to our site), save your username and/or password in password-protected areas, and to offer you products, programmes, or services.

Choice

You may always choose what personal data and information (if any) you wish to provide to us. However, if you choose not to provide certain details, some of your experiences with us may be affected (for example, we cannot take a reservation without a name).

We will abide by any request from you not to send you direct marketing materials. When such a request is received, your contact details will be “suppressed” rather than deleted. This will ensure that your request is recorded and retained unless you provide a later consent that overrides it.

Access or Correct Personal Data

If you would like to:

• Access and review your personal data held by us
• Update and correct any inaccurate or outdated information
• Limit or withdraw previously given consent for personal data processing (please note that we may retain your personal data where there is a legal basis to do so).

Please contact us at the details below:
Data Protection Officer
The Prestige Hotel
8 Gat Lebuh Gereja
10300 Penang
Tel : 04-217 5888
Email : dpo@theprestige.my

Changes to the Policy

We may amend this Policy from time to time. Any changes to this Policy will be posted to our website so that you are always informed of the way we collect and use your personal data. Updated versions of our Policy will include the date of the revision at the end of this Policy so that you are able to check when the Policy was last amended.
Any changes to our Policy will become effective upon posting of the revised Policy on the website. Use of the website following such changes constitutes your acceptance of the revised Policy then in effect.

Conflict

In the event of any conflict between this English language Privacy Policy and its corresponding Bahasa Malaysia Privacy Policy, the terms in this English language Policy shall prevail.

Dated: December 2025