Privacy Notice

Version 2026-10-20

Draft for MAB review. This notice will be confirmed by MAB before bookings open.

This notice explains how the Malaysian Association for the Blind (MAB) handles your personal data for the MAB 75th Anniversary Charity Dinner, under the Personal Data Protection Act 2010 (PDPA). It is available in Bahasa Malaysia and English.

Who we are

MAB is the data user responsible for your personal data. You can reach us at secretariat@mab.org.my or +60 3-2272 2677.

What we collect

Your name, email, mobile number and organisation; booking details; guest names, and their email if you give it (used only to send each guest their own ticket); access and dietary needs you choose to tell us; receipt details including NRIC or company registration number; and payment records. We do not see or store card numbers.

Why we use it

To manage your booking, sponsorship and payments; issue official receipts (tax-exempt where MAB's approval applies); prepare seating, sighted guides, braille and dietary arrangements; send event information; and meet our legal and accounting duties.

Access and health-related needs

Information about visual impairment or other access needs is used only to assist you on the night and is shared only with the event team and venue staff who need it.

Who we share it with

Our payment gateway (to process payments), our email provider (to send codes, receipts and updates), our hosting and database providers (servers in Singapore), The Majestic Hotel Kuala Lumpur (for seating and catering), and authorities where the law requires. We never sell your data or use it for third-party marketing.

Storage outside Malaysia

Our servers are in Singapore. We use providers that protect personal data to standards comparable with the PDPA.

How long we keep it

Booking and access-needs data is deleted or anonymised within 12 months after the dinner. Receipt and payment records are kept for 7 years as required for tax and accounting.

Your choices and rights

You may ask to access or correct your data, or withdraw consent, by emailing secretariat@mab.org.my. Withdrawing consent may mean we cannot complete a booking. Giving your data is voluntary, but we need your name and email to take a booking.

Security

Data is encrypted in transit, identity numbers are encrypted at rest, and staff access is limited by role and logged.