Progressive Democratic Party

PERSONAL DATA PROTECTION NOTICE / PRIVACY POLICY

PROGRESSIVE DEMOCRATIC PARTY OFFICIAL WEBSITE

This Personal Data Protection Notice / Privacy Policy explains how PROGRESSIVE DEMOCRATIC PARTY (“the Party”, “we”, “our” or “us”) collects, processes, stores, uses, discloses, protects and retains personal data obtained through our official website, online membership registration system, membership database, digital forms, communication channels and related online services.

This Notice should be read together with our Terms of Service, Party constitution, by-laws, rules, regulations, policies and any other applicable membership procedures.

By accessing this website, submitting a membership application, creating an online account, updating your membership details, communicating with us, or using any online service provided by the Party, you acknowledge that you have read and understood this Notice.

Where required by law, by submitting your personal data to us, you consent to the collection, processing, storage, use and disclosure of your personal data in accordance with this Notice.

1. Application of this Notice

This Notice applies to personal data collected from:

a. visitors to the Party’s official website;
b. membership applicants;
c. approved members;
d. branch, division, youth wing, women’s wing and other wing members;
e. office bearers, appointed officers and authorized representatives;
f. event participants;
g. volunteers, supporters and persons communicating with the Party;
h. users of the online membership database or registration system; and
i. any other person whose personal data is submitted to or processed by the Party.

This Notice applies whether personal data is collected online, physically, electronically, verbally, through forms, through authorized Party officers, or through any other official channel.

2. Personal Data We May Collect

The personal data we may collect, process and store include, where applicable:

a. full name as per NRIC;
b. NRIC number;
c. date of birth;
d. age;
e. gender;
f. nationality and Malaysian citizenship status;
g. residential address;
h. correspondence address;
i. telephone number;
j. email address;
k. occupation;
l. employer or organization, where relevant;
m. photograph or profile image;
n. branch, division, constituency, locality or area information;
o. membership application details;
p. membership status and membership number;
q. date of application, approval, rejection, suspension, termination or resignation;
r. internal Party position, appointment, role or office held;
s. wing, branch, division or committee involvement;
t. event registration and attendance records;
u. payment records, where membership fees, event fees, donations or other authorized payments are made;
v. records of communications with the Party;
w. documents submitted for verification;
x. system login records, user ID, IP address, device information, browser information and activity logs;
y. consent records and declaration records; and
z. any other information reasonably required for membership registration, verification, administration, communication, compliance or internal Party purposes.

We may also collect information that you voluntarily provide when you submit forms, upload documents, communicate with us, attend events, participate in Party activities or interact with authorized Party officers.

3. Sensitive Personal Data

As the Party is a political party, your membership application, membership status, participation, office, appointment, branch or division involvement may directly or indirectly reveal your political affiliation, political participation or political opinions.
Such information may constitute sensitive personal data.
By submitting a membership application, creating an account, updating your membership record, participating in Party activities or otherwise providing such information to us, you expressly consent to the collection, processing, storage, use and disclosure of your sensitive personal data for the purposes stated in this Notice.

Sensitive personal data may include:

a. political affiliation;
b. political opinion or participation;
c. Party membership status;
d. branch, division, wing or committee involvement;
e. internal Party role, candidacy, appointment or office;
f. disciplinary, complaint or compliance records, where applicable;
g. health-related information, where voluntarily provided for event, accessibility, emergency or welfare purposes; and
h. any other sensitive personal data submitted to or collected by the Party.

We will only process sensitive personal data where necessary for legitimate Party administration, membership matters, internal governance, legal compliance, security, welfare, event management or other purposes permitted by law.

4. Sources of Personal Data

We may collect personal data from:

a. you directly;
b. online membership registration forms;
c. physical membership forms;
d. website account registration;
e. branch, division, wing or committee officers;
f. authorised Party representatives;
g. event registration forms;
h. correspondence by email, phone, SMS, WhatsApp, letter or other channels;
i. payment records, where applicable;
j. attendance lists, meeting records or internal Party records;
k. public records or official sources, where verification is required and lawful;
l. service providers operating on behalf of the Party; and
m. any other lawful or authorised source.

Where you provide personal data relating to another person, you confirm that you have the authority or consent to provide such data to the Party.

5. Purposes of Processing Personal Data

The Party may collect, process, store, use and disclose personal data for the following purposes:

a. processing membership applications;
b. verifying identity and Malaysian citizenship;
c. verifying eligibility for membership under the Party constitution and by-laws;
d. maintaining and updating the Party’s membership database;
e. assigning applicants or members to branches, divisions, wings, constituencies or localities;
f. issuing membership numbers, records or confirmations;
g. communicating with applicants, members, officers, volunteers and authorized representatives;
h. sending official notices, announcements, updates and administrative communications;
i. organizing meetings, events, functions, briefings, campaigns, trainings and other Party activities;
j. verifying attendance, participation, delegate status, voting eligibility or internal process eligibility, where applicable;
k. managing branch, division, youth wing, women’s wing, Puteri wing or other wing administration;
l. maintaining internal governance records;
m. handling complaints, disciplinary matters, disputes, appeals or internal compliance matters;
n. conducting audits, reporting, statistics and internal analysis;
o. improving the website, membership system and digital services;
p. ensuring system security, preventing fraud, detecting misuse and maintaining audit logs;
q. managing authorized access to the membership database;
r. processing authorized payments, fees, donations or event registrations, where applicable;
s. complying with legal, regulatory, court, governmental or authority requirements;
t. responding to lawful requests from regulators, government departments, courts or enforcement bodies;
u. protecting the rights, interests, property, reputation and security of the Party; and
v. any other purpose reasonably connected with Party membership, administration, governance, communication or lawful operation.

6. Mandatory and Voluntary Personal Data

Certain personal data is mandatory for membership registration and verification. This may include your full name, NRIC number, citizenship status, contact details, address and other information required by the Party’s constitution, by-laws or membership procedures.

If you do not provide mandatory information, the Party may be unable to:

a. process your membership application;
b. verify your identity or citizenship;
c. approve or maintain your membership record;
d. assign you to the correct branch or division;
e. contact you regarding membership matters;
f. verify your eligibility for internal Party processes; or
g. provide access to website or membership services.

Other information may be voluntary. Where information is voluntary, you may choose whether to provide it, unless it becomes necessary for a specific purpose such as event participation, payment processing, welfare arrangements, complaint handling or legal compliance.

7. Disclosure of Personal Data

The Party may disclose or make personal data available to the following persons or entities, where necessary and appropriate:

a. authorized Party officers;
b. headquarters administrators;
c. branch, division, wing or committee administrators;
d. membership department personnel;
e. authorized database administrators;
f. event organizers and authorized volunteers;
g. internal disciplinary, complaints, audit or compliance committees;
h. IT service providers;
i. website developers and maintenance providers;
j. hosting, cloud, database and cybersecurity providers;
k. email, SMS, WhatsApp, communication or notification service providers;
l. payment gateways, banks or financial service providers, where applicable;
m. professional advisers, including lawyers, auditors, consultants or other advisers;
n. government departments, regulators, courts, enforcement bodies or statutory authorities where required or permitted by law;
o. successors, assignees or restructured entities of the Party, where relevant and lawful; and
p. any other person or organization authorized by you or permitted by law.

The Party does not sell personal data.

The Party will take reasonable steps to ensure that any service provider processing personal data on its behalf is subject to appropriate confidentiality, security and data protection obligations.

8. Membership Database Access

The Party’s membership database is an official administrative record of the Party.
Access to the membership database is restricted to authorized users only. Authorized users may include headquarters administrators, branch administrators, division administrators, wing administrators, database administrators and other authorized Party officers.
Access may be granted based on role, responsibility, branch, division, wing, locality or operational need.
Authorized users must only access, use, edit, export or process membership data for official Party purposes. Unauthorized copying, downloading, exporting, disclosure, publication, sale, transfer or misuse of membership data is strictly prohibited.
The Party may maintain audit logs to monitor access, edits, exports, login activities and other database activities for security and compliance purposes.

9. Cookies, Website Analytics and System Logs

The website may use cookies, session cookies, analytics tools, security logs or similar technologies to operate and improve the website.

These technologies may collect information such as:

a. IP address;
b. browser type;
c. device type;
d. operating system;
e. pages visited;
f. date and time of visit;
g. login session information;
h. referral source;
i. user activity within the website; and
j. security or error logs.

We may use this information to:

a. operate login sessions;
b. improve website functionality;
c. maintain security;
d. detect unauthorized access or misuse;
e. troubleshoot technical issues;
f. analyze website usage;
g. improve digital services.

You may adjust your browser settings to disable cookies. However, disabling cookies may affect the operation of certain website features, including login functions and membership system access.

Where the Party uses third-party analytics, advertising or tracking tools, further information may be provided in a separate Cookie Notice.

10. Security of Personal Data

The Party will take reasonable administrative, technical and organizational measures to protect personal data against unauthorized access, disclosure, misuse, loss, alteration, destruction or damage.

Such measures may include, where appropriate:

a. password protection;
b. role-based access control;
c. administrator access restrictions;
d. login monitoring;
e. audit logs;
f. secure hosting arrangements;
g. database access controls;
h. staff and administrator confidentiality obligations;
i. data backup procedures;
j. cybersecurity monitoring;
k. restrictions on data export;
l. data breach response procedures; and
m. other reasonable safeguards.

However, no website, electronic system, database, internet transmission or storage method can be guaranteed to be completely secure. You are responsible for keeping your login credentials confidential and for notifying the Party immediately if you suspect unauthorized access to your account.

11. Data Retention

The Party may retain personal data for as long as necessary to fulfil the purposes for which it was collected, including membership administration, internal governance, audit, historical record keeping, legal compliance, dispute resolution, disciplinary matters, security and legitimate Party administration.
Membership records may be retained even after rejection, resignation, suspension, termination, death or inactivity where retention is necessary for legal, historical, administrative, audit, constitutional, dispute resolution or compliance purposes.
Where personal data is no longer required, the Party may securely delete, destroy, anonymize or archive such data in accordance with its internal policies and applicable law.

12. Cross-Border Transfer of Personal Data

The Party may use service providers, hosting providers, cloud platforms, communication tools, email systems, payment gateways or technical service providers located in Malaysia or outside Malaysia.
Where personal data is transferred, stored or processed outside Malaysia, the Party will take reasonable steps to ensure that such transfer is carried out in accordance with applicable legal requirements and with appropriate safeguards.
By using the website, submitting personal data or using the Party’s digital services, you acknowledge that your personal data may be processed, stored or accessed outside Malaysia where necessary for the purposes stated in this Notice.

13. Your Rights

Subject to applicable law, you may have the right to:

a. request access to your personal data held by the Party;
b. request correction of inaccurate, incomplete, misleading or outdated personal data;
c. withdraw consent to the processing of personal data, subject to legal, contractual, constitutional or administrative consequences;
d. object to or request limitation of certain processing, where applicable;
e. request information on how your personal data has been processed;
f. request that the Party cease processing your personal data for direct marketing purposes, where applicable; and
g. lodge a complaint with the Party or the relevant personal data protection authority.

Requests for access or correction must be submitted in writing to the Party’s data protection contact stated in this Notice.

The Party may require verification of identity before processing any request. The Party may also refuse, defer or limit a request where permitted by law, where the request is unreasonable, where the data relates to internal disciplinary or legal matters, or where disclosure may affect the rights of another person.

14. Withdrawal of Consent

You may withdraw your consent to the processing of your personal data by giving written notice to the Party.

However, withdrawal of consent may affect the Party’s ability to:

a. process or maintain your membership application;
b. verify your membership status;
c. communicate with you;
d. assign you to a branch, division or wing;
e. allow you to participate in Party activities or internal processes;
f. maintain accurate membership records; or
g. comply with constitutional, legal or regulatory requirements.

Withdrawal of consent does not affect processing carried out before the withdrawal, or processing that is permitted or required by law.

Where personal data is necessary for membership administration or legal compliance, the Party may continue to retain or process such data to the extent permitted by law.

15. Direct Marketing and Communications

The Party may send you official communications, including membership updates, event notices, announcements, administrative messages, newsletters, campaign-related messages, policy updates, surveys or other Party-related communications.
Such communications may be sent by email, SMS, WhatsApp, telephone call, post, website notice, system notification or other communication channels.
You may request to stop receiving non-essential promotional or marketing communications. However, the Party may continue to send essential administrative, membership, legal, security or governance-related communications where necessary.

16. Accuracy of Personal Data

You are responsible for ensuring that the personal data you provide to the Party is accurate, complete and up to date.
You should notify the Party as soon as possible if there are changes to your personal data, including changes to your address, telephone number, email address, branch, division, membership status or other relevant details.
The Party shall not be responsible for any loss, delay, miscommunication, rejection, administrative issue or inability to contact you arising from inaccurate, incomplete or outdated personal data provided by you.

17. Personal Data of Third Parties

If you provide personal data of another person to the Party, you confirm that:

a. you have obtained that person’s consent;
b. you are authorized to provide the data;
c. the data is accurate and complete; and
d. you have informed that person of the purposes for which the data is provided.

You shall indemnify the Party against any claim, complaint, loss or liability arising from your unauthorized provision of another person’s personal data.

18. Data Breach and Security Incidents

If the Party becomes aware of a personal data breach or security incident affecting personal data under its control, the Party will take reasonable steps to assess, contain, investigate and respond to the incident.
Where required by law or where the Party considers it appropriate, the Party may notify affected individuals, regulators, authorities or other relevant parties.
Users, members, administrators and authorized personnel must immediately report any suspected data breach, unauthorized access, data leakage, misuse, accidental disclosure, loss of device, compromised password or suspicious system activity to the Party’s data protection contact.

19. Children and Young Members

Where the Party’s constitution, by-laws or applicable laws allow membership or participation by persons below a certain age, the Party may process the personal data of such persons for membership, youth wing, Puteri wing, event, welfare, administrative or related purposes.
Where required, the Party may request parental, guardian or other appropriate consent before collecting or processing personal data of minors.
The Party will take reasonable steps to ensure that the personal data of young members is processed carefully and only for appropriate Party purposes.

20. Links to Third-Party Websites

The website may contain links to third-party websites, platforms, social media pages, payment gateways or external services.
The Party is not responsible for the privacy practices, security, content, policies or conduct of third-party websites or services.
You should review the privacy policies and terms of those third-party websites before submitting personal data to them.

21. Updates to this Notice

The Party may amend, revise or update this Notice from time to time.
The latest version will be published on the Party’s website. Where appropriate, the Party may notify users of material changes through email, website notice, system notification or other communication channels.
Your continued use of the website, membership system or Party services after the updated Notice is published shall constitute acknowledgement of the revised Notice.

22. Contact and Data Protection Requests

For questions, requests, complaints or concerns relating to personal data, please forward inquiries to [email protected].
When submitting a request, please include your full name, NRIC number, contact details and a clear description of your request so that we may verify your identity and respond appropriately.

Updated on 11/07/2026.