This Privacy Notice is issued by AmMetLife Insurance Berhad (‘AmMetLife’, ‘we’, ‘us’, ‘our’).

At AmMetLife, we acknowledge our responsibilities regarding the collection, use, disclosure, processing, and storage of personal data in compliance with the Personal Data Protection Act 2010 (“PDPA”) and all other applicable regulations and guidelines.

We are committed to safeguarding the confidentiality and security of your personal data. This Privacy Notice, outlines your rights concerning your personal data and explains how we collect, use, and manage the data we receive about you.

In the course of our daily operations, we collect your Personal Data when you apply to subscribe to any of our products or services or when you communicate with us. We use this data to provide you with our products or services, maintain our records, and send you relevant updates.

Under the PDPA, we are required to inform you:

(i) the type of Personal Data we collect and how we collect it;
(ii) how we use your Personal Data;
(iii) the parties that we disclose the Personal Data to;
(iv) the choices you have with regard to the extent of Personal Data you provide;
(v) the difference between Data that is considered mandatory or optional; and
(vi) how you access and update your Personal Data.

Your privacy is therefore important to us and we are committed to protecting your Personal Data by collecting and using your Personal Data in accordance with the PDPA.

Throughout this Privacy Notice, the following are the definitions of the terms used:

• “AmBank Group” refers to AMMB Holdings Berhad and all its direct and indirect subsidiaries and associate companies, including, but not limited to: AmBank (M) Berhad, AmBank Islamic Berhad, AmInvestment Bank Berhad, AmFunds Management Berhad, AmFutures Sdn Bhd, AmIslamic Funds Management Sdn Bhd, AmCards Services Berhad, AmMetLife Insurance Berhad and AmMetLife Takaful Berhad. “MetLife” refers to MetLife Holdings Inc. and all its direct and indirect subsidiaries, associates, affiliates, and or related companies including but not limited to AmMetLife Insurance Berhad.
• “Personal Data” means any information which relates to you and which has been or will be provided by you to us, including but not limited to your name, bio-data or personal profile, National Registration Identity Card number, passport number, address, telephone number, email address, images, your personal preferences, particulars of any third party life assured or beneficiary, financial and banking account information, and any information which may identify you, any life assured, trustee or beneficiary, that has been or may be collected, stored, used and processed by us from time to time. The term “personal data” also includes sensitive personal data which means any personal data consisting of information as to physical or mental health or condition, political opinions, religious beliefs or other beliefs of a similar nature, the commission or alleged commission of any offence, biometric data, or any other personal data as may be amended by law from time to time.
• By providing personal data to us, you consent (and where required, explicitly consent) to such use of your personal data including sensitive personal data, in the manner set out in this Privacy Notice. Such consent and authorisation herein shall extend to any information obtained from any of the insurance policy(ies) presently provided to you, any new application to us for insurance, and claim processing, such historical financial or credit records, data or information whether provided personally.
• As a rule, if you are under the age of 18 years, we will obtain the consent from your parent, guardian or person who has parental responsibility for you. However, if you have attained the age of 16 years and wish to affect a policy on your own life or on another life in which you have an insurable interest, you are deemed to have the capacity to give your own consent in relation to that life policy.
• This Privacy Notice applies to living individuals. Rights and protections under this Privacy Notice and the PDPA shall not extend to deceased individuals, though we may handle such data in accordance with applicable legal or fiduciary obligations.
• Unless expressly defined herein and where the context requires, all capitalized expressions shall have the same meaning ascribed to it in the PDPA.

1. The Kind Of Personal Data We Collect and How We Collect It

In order to enable us to deal with your inquiries, open and operate an insurance policy for you, or provide you with our products and services, we may be required to collect, use, disclose, and store (i.e. “process”) your personal and/or financial information. Such personal and/or financial information is required amongst others to:

• establish your personal identification and background;
• establish your financial standing and creditworthiness where required;
• establish the condition of your health if you wish to procure insurance policies offered by us; and/or
• supply you with any of our products and/or services applied for.

We may collect Sensitive Personal Data related to your health when you apply for our life insurance products, or mortgage insurance for your home financing.

We may also obtain your Personal Data from the following sources:

• Your relationship with us, for example, information provided by you in application forms when applying for our products or services, when transacting on your insurance policy, when using our online or electronic services, when taking part in customer surveys, competitions, and promotions.
• Your verbal, written, and/or electronic communications with us or our authorised agents;
• Third parties connected with you, such as your employer, joint policy owner, other partners in your partnership, or through our corporate customers or corporate security providers where you are a director, shareholder, officer, or authorised signatory;
• Analysis and research on the way you use and manage your insurance policy(ies) with us;
• Your access and use of our services, transactions you make, and payments effected through your insurance policy(ies);
• Images captured by closed circuit television (CCTV) cameras at our branches and office premises or third-party premises (where our self-service terminals are located), when you visit our branches or office premises or use our self-service terminals at third party premises;
• Credit reporting agencies and publicly available sources such as through searches at relevant government authorities or agencies; and/or
• Personal Data collected when you use biometric authentication features to access AmMetLife’s products or services (e.g., thumbprint verification at AmMetLife/AmBank branches or offices for insurance services);
• Other entities within AmBank Group or MetLife; and/or
• Any other sources which you have given your consent to disclose information relating to you and/or where not otherwise restricted.

We may also collect certain digital-related information when you access or use our websites, mobile applications, customer portals or other digital platforms. This may include device information (such as browser type, operating system and IP address), log information, usage data, interaction data, and other technical or analytical information collected through cookies and similar technologies, as further described in this Privacy Notice.

When you provide us with Personal Data related to third parties—such as when you name them as a life assured, trustee, or beneficiary, or when you refer them to us for the purpose of offering our products and/or services—you confirm that you have obtained consent from those third parties to share their personal information with us for the purposes outlined here. The term "your Personal Data" includes any Personal Data about third parties that you provide to us.

We may collect and verify your Personal Data from various third parties. This includes policyholders who have taken out a policy on your behalf, as well as agents, brokers, business partners, and strategic partners associated with us. Additionally, we may gather information from third parties who have referred you or from those providing insights related to your policy, including policy applications and claims. This may involve parties such as the AmBank group of companies, other insurance or takaful providers, insurance associations, takaful associations, hospitals, clinics, and relevant authorities.

The Personal Data we collect can be either mandatory or optional. Mandatory Personal Data consists of your data that we require so that we can provide you with the required products and services. If you do not provide us with the mandatory Personal Data, we will not be able to provide you with those products and services. Optional Personal Data consists of your information that is not obligatory to be provided to us. If you do not wish to provide your optional Personal Data, you may still apply for our products and services. Mandatory and optional Personal Data may differ for our various products and services, and these will be indicated in the application forms of our products and services.

2. How We Use Your Personal Data

Other than as stated above, we may use your Personal Data for one or more of the following purposes:

• assess your eligibility or suitability for our products which you had applied for and to verify your identity or financial standing.
• to notify you of more and up-to-date information such as improvements and new features to the existing products and services, development of new products and services, competitions, promotions and offers from AmMetLife or AmBank Group or third-party business partners which may be of interest to you;
• manage and maintain your insurance policy(ies) through regular updates, consolidation and improving the accuracy of our records. In this manner we can respond to your enquiries, complaints and to generally resolve disputes quickly so that we can improve our business and your relationship with us;
• conduct research for analytical purposes, data mining and analyses of your transactions /use of products and services to better understand your current financial/investment position and future needs. We will also produce data, reports and statistics from time to time. However, such information will be aggregated so that your identity will remain confidential;
• comply with the requirements of any law and regulations binding on us such as conducting anti- money laundering, terrorism prevention and sanctions screening checks, crime detection/prevention, prosecution, protection and security;
• enforcement of our rights to recover any debt owing to us, including transferring or assigning our rights, interests and obligations under any of your agreement with us;
• perform shared services within AmBank Group or MetLife such as audit, compliance, legal, human resource, finance and risk management;
• outsourcing of business and back-room operations within AmBank Group or MetLife; and
• any other purpose(s) that is required or permitted by any law, regulations, standards, guidelines, code of practice and/or by relevant regulatory authorities.

We will seek your consent before using your Personal Data for a purpose other than those that are set out in this Privacy Notice and/or in the terms of any of your agreement(s) with AmMetLife.

3. Use of Cookies and Similar Technologies

Our websites and platforms use cookies and other technologies. Cookies are small text files stored in your computing or other electronic devices when you visit our websites or platforms, serving record-keeping purposes. Cookies are stored in your browser's file directory, and the next time you visit the website or platform, your browser will read the cookie and relay the information back to the website, platform or element that originally set the cookie. Depending on the type of cookie it is, cookies may store user preferences and other information.

Web beacons (also known as pixel tags and clear GIFs) involve graphics that are not apparent to the user. Tracking links and/or similar technologies consist of a few lines of programming code and can be embedded in our websites or platforms. Web beacons are usually used in conjunction with cookies and primarily used for statistical analysis purposes. This technology can also be used for tracking traffic patterns on websites and platforms, as well as finding out if an e-mail has been received and opened and to see if there has been any response.

When you access or use AmMetLife’s websites, mobile applications, customer portals or other digitalplatforms, cookies and other similar technologies may be used. These technologies help to:

• ensure the digital platforms function properly, securely and efficiently;
• remember your preferences such as language and display settings;
• understand how the platforms are used and identify areas for improvement;
• analyses usage trends and interactions such as pages viewed, session duration and navigation patterns; and
• customise your experience and provide content that may be more relevant to you.

Cookies may be set up by AmMetLife or by authorised service providers who support us with analytics, performance, security or platform-related functions. Any third-party processing will be subject to appropriate contractual safety measures.

You may manage or disable cookies through your browser or device settings. However, disabling certain cookies may affect the functionality of digital platforms or limit your ability to access certain features.

By continuing to use the relevant digital platforms after receiving notice of our use of cookies, you consent to the use of these technologies as described in this Privacy Notice.

4. Use of Artificial Intelligence, Machine Learning and Data Analysics

AmMetLife may use data analytics, artificial intelligence (AI) and machine learning (ML) technologies to support the purposes set out in this Privacy Notice. These technologies help us enhance our operations, strengthen risk management and improve our products, services and digital customer experience.

AmMetLife may use AI/ML for purposes including:

• improving and personalising your interactions with our digital platforms and services;
• supporting customer service channels, including virtual assistants or automated guidance tools;
• detecting, preventing and responding to fraud, financial crime, cybersecurity risks and suspicious activities;
• supporting underwriting, pricing, claims-related assessments and other risk-related processes;
• analysing trends and usage patterns to enhance our services, operations and customer experience; and
• carrying out statistical, analytical or system-related activities for service optimisation and business improvement.

Where AI/ML tools assist in decision-making relating to our products and services, we implement appropriate safeguards, including human oversight, validation and monitoring of automated tools. We do not make decisions that produce legal or similarly significant effects solely through automated means unless permitted by law, necessary for the performance of a contract with you or with your explicit consent.

5. Disclosure of Your Personal Data

As part of providing you with our products and services, we may be required to disclose certain information about you and/or your accounts, facility (ies), and/or insurance policy (ies) with us to the following third parties:

• our agents and service providers who assist us in processing, administering, fulfilling transactions or providing services to you on our behalf, or to fulfill value-added services that you have requested;
• our external professional advisors and consultants who provide services to us, for our business, operational, legal, and regulatory requirements;
• any person(s) authorised or appointed by you to give instructions to us on your behalf such as your agents, accountants, auditors, lawyers, financial advisers, brokers, and intermediaries;
• any person(s) connected to the enforcement or preservation of any of our rights or transferring the rights, interests, and obligations under your insurance policy(ies) with us;
• any third party(ies) arising from the assignment of your insurance policy with us, sale of debts, acquisition or sale of any company by AmBank Group or MetLife provided that the recipient uses your data for the same purpose(s) as it was originally supplied to us and/or used by us;
• other financial institution(s) fulfilling the transactions required by you;
• Insurance broker(s), re-insurers, and in the event of default of a facility granted to you, to debt collection agencies;
• from one AmBank Group company or MetLife in which you had earlier subscribed to a product or service, to other AmBank Group companies or MetLife, for marketing of their products and services that may be of interest to you; and/or
• any competent authority(ies) and/or regulator(s) for the performance of their functions

subject at all times to any laws (including regulations, standards, guidelines, and/or obligations) applicable to the AmBank Group or MetLife.

Your Personal Data may be transferred to a location outside Malaysia:

• to countries or territories where transfer has been specifically allowed under the PDPA;
• when you have consented to the transfer to such location outside Malaysia;
• in order to complete the transaction required by you.
• when the transfer is necessary to fulfill a contract between us and a third party located outside Malaysia, which is entered into pursuant to your request;
• when the vendor or service provider providing various type of services to us (including data storage services), is based in a location outside Malaysia, in which instance, we will take reasonable precautions to ensure that such vendor or service provider has the relevant technical and organisational security measures to protect Personal Data;
• for the purposes of legal proceedings outside Malaysia and for us to obtain legal advice or to defend our legal rights; or
• when you are a person who is subject to foreign laws, your Personal Data may be disclosed to any competent authority or regulator in the relevant foreign jurisdiction.

Otherwise, we will not disclose your data to others, except where:

• you have provided express consent for us to disclose your Personal Data (excluding your financial information) to our third-party strategic alliance or business partners for marketing their products and services to you;
• you have notified us that you do not wish to receive marketing material(s) from us;
  c. we are required or permitted to do so by law;
• we are required or authorised by any order of court, tribunal or authority, whether governmental or quasi-governmental with jurisdiction over AmBank Group or MetLife
• we may transfer rights, interests and obligations under our agreement(s) with you; and/or
• we are required to meet our obligations to any relevant regulatory authorities.

Rest assured, that at all times, and we will respect and protect the privacy and confidentiality of your Personal Data.

6. Security of Your Personal Data

We place great importance in ensuring the security and confidentiality of your Personal Data and regularly review and implement up-to-date technical and organizational security measures when processing your Personal Data. Further information on security controls is available at our Website Security Statement at www.ammetlife.com.

7. Retention of Personal Data

Your Personal Data will be retained in compliance with this Privacy Notice and /or the terms and conditions of your agreement(s) with any AmBank Group company or MetLife for the duration of your relationship or for such period as may be necessary to protect the interest of both AmBank Group or MetLife and you. Such retention is also necessary as required by law or in accordance with our internal policies.

We safely and securely destroy data which we no longer need to keep in accordance with our data retention policies.

8. Your Rights to Access and Correct Personal Data

If you wish to access and/or make changes to your Personal Data, you can make a request using our Personal Data Access and Correction Request Form. These forms are available at all our branches as well as our website, www.ammetlife.com and we will endeavour to comply with your request to access and/or correct your Personal Data within 21 days of receiving your completed form and the relevant processing fees.

Please note that we may withhold access to your Personal Data in certain situations, for example, when we are unable to confirm your identity, where the information requested is of a confidential commercial nature or when there are repeated requests for the same information. Nevertheless, we will notify you of the reason(s) for not being able to accede to your request. We may also request more documentary evidence to avoid incidence of fraud and/or inaccurate information.

In order to enable us to serve you better, we seek your assistance to continuously keep your Personal Data up to date.

9. Exercising Your Choice in Respect of the Disclosure and Use of Your Personal Data for Purposes of Marketing

You may exercise your choice in respect of the disclosure and use of your Personal Data with us. In the event you choose not to receive any marketing material(s) from us or any of our third party business partners, you may either (i) contact us at the contact details provided below; or (ii) choose to opt-out from receiving marketing material, a choice provided for in the relevant application/proposal forms of our products or services.

Please note that:

• irrespective of the choice you make in relation to the above, you may still contact us subsequently through the channels provided below in order to change your choice. Your latest choice communicated to us will apply. We shall update your most recent marketing preference in our database within a reasonable period after we receive the communication of your choice;
• we may not be able to remove your Personal Data from the databases of third-party business partners with whom we have already shared your Personal Data when you had provided your express consent earlier;
• certain communications such as our statements of account, correspondence and websites may contain standard information regarding our other products and services that cannot be removed without affecting the delivery/provision of our services and/or products, the operation of your account(s) and/or facility(ies) with us, and/or additional costs to you.

10. Revisions to the Privacy Notice

We may periodically review and update this Notice to reflect changes in laws, business practices, and procedures. Any updates will be posted on our website and communicated through other appropriate channels. By continuing to access or use AmMetLife’s products and services, as well as by voluntarily providing your Personal Data (including Sensitive Personal Data), you are accepting and consenting to the revised Privacy Notice. All revisions will comply with the Personal Data Protection Act (PDPA). In the case of any discrepancies between the English and Bahasa Malaysia versions of this Notice, the English version will take precedence.

11. Enquiries/Complaints

For more information on how we processes your Personal Data, please log on to our website and read the Customer Service Charter and Privacy Notice, as set out below:

Website : www.ammetlife.com
Customer Portal : https://myportal.ammetlife.com/
Customer Care : 1300 88 8800
Email : customercare@ammetlife.com
Data Protection Officers (DPOs) : askprivacy@ammetlife.com

Last updated: April 2026