Key definitions
This section defines terms used throughout the policy so retirees can easily understand what type of information we refer to and how it is processed in connection with our insurance services.
- Personal data refers to any information that identifies or can be used to identify an individual, such as name, contact details, identity numbers, health-related information necessary for insurance underwriting, and policy records.
- Processing means any operation performed on personal data, including collection, storage, use, sharing, and deletion, carried out to deliver insurance services, manage policies, and support customer service activities.
- User denotes any visitor to our site, a potential or current policyholder, or a third party acting on behalf of a retiree who provides personal information to PensionHubIns to obtain quotes, apply for cover, or receive support.
- Service covers the range of offerings provided by PensionHubIns, including plan comparison tools, quote generation, application assistance, claims guidance, and customer support aimed at retirees and their representatives.
- Cookies are small data files placed on a device to improve site functionality, remember user preferences, and provide analytics. We use cookies to make PensionHubIns easier to use and to measure how our content performs.
Data collection and categories
We collect information that is necessary to deliver our services, to process insurance applications, and to maintain communication with retirees. We limit data collection to what is relevant for those purposes.
Information you provide
When you request a quote, apply for a plan, or contact support, you provide information that helps us evaluate eligibility, calculate premiums, and manage your policy.
- Identification details such as full name, date of birth, and national identification number.
- Contact information including mailing address, email address, and phone number for service communication.
- Health and medical history information required by insurers for underwriting and claims assessment.
- Business details such as pension revenue and payment method to determine premium affordability and process payments.
- Policy preferences and plan selections made during the comparison or application process.
- Communications and documents you upload or share, such as identity documents and medical reports.
Data collected automatically
When you use PensionHubIns, some information is collected automatically to improve the site experience, measure use, and detect issues.
- Device and browser information including type, operating system, and version.
- IP address and approximate location to help secure accounts and prevent fraud.
- Pages visited and actions taken on the site for analytics and service improvement.
- Cookies and similar technologies used to remember preferences and session state.
- Error logs and performance data to diagnose and resolve technical issues.
- Referrer data that shows how you reached PensionHubIns for marketing insights.
Third-party data sources
We may receive information from third parties to verify identity, assess risk, or validate details provided during an application in a manner consistent with applicable law.
- Authorized insurers and underwriting partners who share policy and claims-related information.
- Verification and fraud prevention services that confirm identity and detect suspicious activity.
- Payment processors and banks that facilitate premium payments and refunds.
Purpose of processing
We process personal data for concrete business purposes necessary to provide insurance services and to maintain trust with our customers.
- To provide quotes, assist with plan selection, and support the application process for retirees.
- To perform underwriting assessments and share necessary information with insurance partners for eligibility checks.
- To process payments, manage billing, and maintain accurate policy records.
- To respond to inquiries, deliver customer support, and maintain service communications.
- To detect and prevent fraud, abuse, and other unlawful activity affecting our customers and services.
- To analyze site usage and improve product offerings based on aggregated behavior and feedback.
- To comply with legal obligations and respond to lawful requests from authorities when required.
- To send service updates and administrative notices related to your policy or account.
Legal basis for processing
We rely on several lawful bases to process personal data depending on the activity, ensuring that processing is reasonable, necessary, and proportionate.
- Performance of a contract: processing required to provide insurance services and manage your policy.
- Legal compliance: processing necessary to meet regulatory or legal obligations in Malaysia.
- Legitimate interests: processing for fraud prevention, service improvements, and securing our systems where interests are balanced with your privacy.
- Consent: for certain marketing communications or optional features where explicit consent is obtained.
Data protection standards
Although PensionHubIns operates in Malaysia, we aim to uphold international data protection principles similar to those set out in the GDPR where feasible, and we provide information about rights and safeguards that help users exercise control over their data.
- Right to access: you can request a copy of the personal data we hold about you.
- Right to rectification: you may request corrections to inaccurate or incomplete information.
- Right to erasure: under certain circumstances you can request deletion of your personal data.
- Right to restrict processing: you can request limitations on how your data is used in defined situations.
- Right to data portability: you may request a structured copy of data you provided in a commonly used format.
- Right to object: you can object to processing based on legitimate interests or direct marketing in certain circumstances.
Cookies and tracking
PensionHubIns uses cookies to make the site function smoothly and to offer personalized, relevant content. Cookies help us remember preferences and analyze site performance to enhance the experience for retirees.
We use session cookies for temporary data, persistent cookies to remember settings, and analytics cookies to gather aggregated usage information. Third-party cookies may be used for analytics and marketing when you consent.
Categories include strictly necessary cookies, performance and analytics cookies, and functional cookies that remember user choices. Marketing cookies are used sparingly and only with consent.
You can manage cookie preferences through your browser settings or via the cookie settings provided on the site. Disabling certain cookies may limit functionality of some features.
Read the full cookie policy
Sharing and disclosure
We share personal data only with trusted partners who help deliver insurance products and services, and we require contractual safeguards to protect the data and limit its use to stated purposes.
- Insurance carriers and underwriting partners for policy issuance and claims handling.
- Authorized service providers such as payment processors and customer support platforms.
- Regulators and law enforcement when required by law or to protect legal rights.
- Professional advisors and auditors engaged to support compliance and business operations.
- Aggregated or anonymized data shared for research or service improvement without identifying individuals.
- Third parties involved in fraud prevention and identity verification processes.
International transfers
Personal data may be transferred to service providers located outside Malaysia when necessary to provide services. We apply contractual safeguards and review data protection practices to ensure an adequate level of protection.
When transfers occur, we rely on contractual obligations, standard contractual clauses where appropriate, and assessments of recipient practices to maintain data protection standards.
Data retention
We retain personal data only as long as needed to fulfill the purposes described, to meet regulatory requirements, and to resolve disputes or enforce agreements.
Account and policy records are typically retained for the duration of the policy and for a period thereafter required by law, or as reasonably necessary to handle claims and audits.
Messages, emails, and support records are retained to maintain service quality and to provide historical context for customer service, subject to applicable retention schedules.
System logs and analytics data are kept for a limited period to diagnose issues and analyze trends, then archived or deleted according to our internal policies.
When data is no longer required, we take steps to securely delete or anonymize it. Requests for deletion are handled in line with legal and contractual obligations.
Security measures
PensionHubIns applies administrative, technical, and physical safeguards designed to protect personal data from unauthorized access, loss, and misuse. We regularly review and update security practices as technology and threats evolve.
- Access controls, data encryption in transit and at rest, and secure backups to protect stored information.
- Access controls and role-based permissions restrict data access to staff who require it to perform their duties, with regular audits of access logs to detect unusual activity.
- Regular software updates, vulnerability scanning and secure backup routines protect stored information; encryption is applied to data in transit and at rest where appropriate.
Your rights
You have clear rights regarding your personal data held by PensionHubIns. These include the right to access the personal information we hold about you, to request corrections, to ask for deletion where applicable, to restrict or object to certain processing activities, and to request a copy of data you have provided in a portable format. We provide straightforward channels to exercise these rights and will explain any limits that apply under applicable Malaysian law.
- Right to access: request a copy of your personal data we process.
- Right to rectification: request correction of inaccurate or incomplete data.
- Right to erasure: request deletion of data where legal grounds allow.
- Right to restriction: request limitation of how we process your data in certain circumstances.
- Right to data portability: receive a machine-readable copy of data you provided.
- Right to object: object to processing for direct marketing or profiling in some situations.
- Right to withdraw consent: where we rely on consent, you may withdraw consent at any time without affecting processing before withdrawal.
- Right to complain: lodge a complaint with the relevant supervisory authority if you believe your rights are not respected.
How to make a privacy rights request
To exercise any of the rights above, contact our privacy team via email at [email protected] or submit a request through the privacy request form on PensionHubIns.club. Please include your full name, a description of the request, and any relevant account or reference numbers to help us locate your records. We may ask for reasonable identification to confirm your identity before fulfilling a request.
We aim to respond to valid privacy requests within 30 days of receipt. If a request is complex or requires additional verification, we will inform you and may extend the response time up to 60 calendar days, explaining the reason for the extension.
Marketing communications
PensionHubIns may send product updates, tailored information about retirement insurance options, and educational content by email, SMS or post where you have consented or where we have a legitimate interest. Communications are designed to help you make informed choices about pension and insurance options relevant to retirees in Malaysia.
You can opt out of marketing at any time using the unsubscribe link in our emails, by replying STOP to SMS messages, or by contacting [email protected]. Opting out will not affect transactional messages related to services you have requested.
Children's privacy
Our services are directed to adults and are not intended for anyone under 18. We do not knowingly collect personal information from children under 18. If you believe we have inadvertently collected personal data of a minor, contact [email protected] and we will take steps to remove the information as appropriate.
Links to third-party sites
PensionHubIns.club may contain links to third-party websites, tools, or partner providers. Those sites operate independently and have their own privacy practices. We are not responsible for third-party content or their data handling. Review the privacy policy of each third-party site before providing personal information.
Policy changes
We review our privacy policy periodically and may update it to reflect changes in our services or legal requirements. The current policy is effective as of 12-05-2026. Significant changes will be posted on PensionHubIns.club and, where required, notified to registered users by email.