BYD Malaysia Sdn. Bhd. (referred to as "we," "our," or "us") respects your privacy and is committed to protecting your Personal Data. http://www.denza.com/my.

This Privacy Policy explains how we collect, use, disclose, store, process, and protect your personal data in connection with your access to and use of the Denza Malaysia website (“Website”), our products and services, and your interaction with us.

By providing your Personal Data to us and/or using our Website, products or services, you acknowledge that you have read and understood this Privacy Policy.

Where consent is required under applicable law for a particular processing activity, we will obtain such consent in accordance with applicable legal requirements.

This Privacy Policy should be read together with any other notices, terms or policies that we may provide to you in relation to specific products, services or processing activities.

    1. Scope of This Privacy Policy

    2. Personal Data We May Collect

    3. Purposes for Which We Process Your Personal Data

    4. Whether Providing Personal Data Is Obligatory

    5. Disclosure of Your Personal Data

         5.1 Affiliates and Related Companies

         5.2 Authorised Distributors, Dealers and Retailers

         5.3 Service Providers

         5.4 Governmental, Regulatory and Law Enforcement Authorities

    6. Your Rights in Relation to Personal Data

    7. Direct Marketing

    8. How to Exercise Your Rights

    9. Retention of Personal Data

    10. Cookies and Other Tracking Technologies

         10.1 Google Maps

         10.2 Consent Management Platform

    11. Security of Personal Data

         11.1 Personal Data Breaches

    12. Cross-Border Transfer of Personal Data

    13. Changes to This Privacy Policy

    14. Contact Us

This Privacy Policy applies to Personal Data processed by BYD Malaysia in connection with the Website and the products and services described in this Privacy Policy.

Our authorized retailers, dealers, and other third parties to whom you directly provide your information including but not limited to, subscription services, insurance companies, or other third parties may separately collect Personal Data directly from you in connection with their own products, services or business activities. Where such entities determine independently and why your Personal Data is processed, their respective privacy notices or policies will apply to such processing directly.

Where you submit an enquiry, request for a test drive or other request through our Website and we disclose your Personal Data to an authorised distributor, dealer or retailer for the purpose of responding to or fulfilling your request, such disclosure by us will be governed by this Privacy Policy.

For the purposes of this Privacy Policy, "Personal Data" has the meaning given to it under the PDPA and generally refers to any data or information from which an individual may be directly or indirectly identified or identifiable from that information or from that and other information in the possession of a data controller (“Personal Data”).

Depending on how you interact with us, we may collect and process the following categories of Personal Data:

    (a) Identification and contact information, including your name, telephone number, email address and other contact details

    that you provide to us;

    (b) Enquiry and service information, including information contained in enquiries, requests, feedback, complaints, test-drive

    requests and other communications submitted through our Website or otherwise communicated to us;

    (c) Technical and device information, including your Internet Protocol (IP) address, browser type, device information, operating

    system and other technical information associated with your access to the Website;

    (d) Website and usage information, including the date and time of access, pages visited, interactions with the Website, referring

    (pages and other internet activity or usage information;

    (e) Location information, including approximate geographical location derived from your IP address and, where applicable and with

    the appropriate permission or consent, location information used to provide location-based functionality such as

    locating nearby dealers;

    (f) Cookie and tracking information, including information collected through cookies, pixels, tags, web beacons and similar

    technologies as further described in Section 9 below; and

    (g) Other information that you voluntarily provide to us or that is reasonably required in connection with your request for our

    products or services.

We may collect, use, disclose or otherwise process your Personal Data for one or more of the following purposes:

    (a) to provide, operate, maintain and improve our Website, products and services;

    (b) to process and respond to your enquiries, requests, feedback and complaints;

    (c) to arrange and facilitate test drives, product demonstrations, appointments and other services requested by you;

    (d) to refer or transmit your enquiry or request to the relevant authorised distributor, dealer, retailer or service provider for

    follow-up and fulfilment;

    (e) to communicate with you regarding our products, services, enquiries, appointments and customer support matters;

    (f) to provide important product, service, safety, warranty or other operational communications;

    (g) subject to applicable legal requirements and your applicable choices, to provide information about our products, services,

    campaigns, promotions, events and other marketing activities;

    (h) to administer and improve the functionality, performance, security and user experience of our Website;

    (i) to conduct analytics, research and statistical analysis in relation to the Website, our products, services and customer interactions;

    (j) to prevent, detect, investigate and address fraud, misuse, security incidents, unlawful activities and other risks;

    (k) to establish, exercise or defend legal rights and claims;

    (l) to comply with applicable laws, regulations, regulatory requirements, court orders, lawful requests or directions from

    governmental, regulatory, enforcement or judicial authorities;

    (m) to carry out internal administrative, audit, compliance, risk management and corporate governance activities;

    (n) to facilitate corporate transactions, restructurings or other legitimate corporate activities where permitted by applicable law;

    and

    (o) for any other purpose that is directly related to the purposes stated above, or for which we provide you with notice and/or obtain

    your consent where required by applicable law.

We will not process Personal Data in a manner that is incompatible with the purposes notified to you unless such processing is permitted or required by applicable law.

We rely on various legal grounds to collect, use, and otherwise process your Personal Data, including: your consent; that the Personal Data is necessary for providing our website to you; to comply with a legal obligation; to protect your, or someone else’s vital interests; or for a legitimate interest that is balanced against your rights and interests.

The provision of certain Personal Data may be necessary for us to provide a particular product or service, respond to an enquiry, arrange a test drive, fulfil a request or comply with applicable legal or contractual requirements. Where the provision of Personal Data is obligatory, failure to provide the requested Personal Data may result in us being unable to process or fulfil your request, provide the relevant product or service, communicate with you or comply with the relevant legal or contractual requirements.

Where the provision of Personal Data is not obligatory, you may choose whether to provide such Personal Data.

Subject to the PDPA and other applicable laws, we may disclose your Personal Data, where necessary for the purposes described in this Privacy Policy, to the following categories of recipients:

    5.1 Affiliates and Related Companies

Companies within or affiliated with the BYD group, where such disclosure is reasonably required for the provision, administration, support, improvement or operation of our products, services, systems and business activities.

    5.2 Authorised Distributors, Dealers and Retailers

We may disclose your Personal Data to our authorised distributors, dealers or retailers where necessary to process and fulfil your enquiry or request, including to arrange a test drive, appointment, sales enquiry or other requested service.

Such entities may include, where applicable:

        1. SIME DARBY BEYOND AUTO SDN. BHD.;

        2. MILLENNIUM AUTOBEYOND SDN. BHD.;

        3. SISMA AUTO (KL) SDN. BHD.;

        4. HARMONY NEW ENERGY AUTO SERVICE (MALAYSIA) SDN. BHD.;

        5. SKK MOTORS SDN. BHD.;

        6. KAH PROGRESSION AUTO SDN. BHD.; and

        7. WING HIN ELEGANT SDN. BHD.

The list of authorised distributors, dealers or retailers may be updated from time to time.

    5.3 Service Providers

We may disclose your Personal Data to our authorised distributors, dealers or retailers where necessary to process and fulfil your enquiry or request, including to arrange a test drive, appointment, sales enquiry or other requested service.

Where a service provider processes Personal Data on our behalf as a data processor, we will take appropriate steps to require the service provider to process the Personal Data in accordance with applicable legal and contractual requirements.

    5.4 Governmental, Regulatory and Law Enforcement Authorities

We may disclose Personal Data to courts, law enforcement agencies, regulatory authorities, governmental authorities or other competent authorities where such disclosure is required or permitted by applicable law or is reasonably necessary for the establishment, exercise or defence of legal rights.

We do not sell your personal data to any third party for any purpose. However, we may use or share your personal data that has been appropriately anonymised, or in a de-identified, or aggregated form, such that it no longer identified you, subject to applicable law.

When third parties are granted access to your personal data, we will implement the reasonable steps, including necessary contractual, technical, and organizational measures to ensure that your data is only processed to the extent required.

Subject to the PDPA, its applicable exceptions and any other applicable laws, you may have the right to:

    (a) request access to Personal Data held by us about you and obtain information regarding the processing of such Personal Data;

    (b) request the transmission of your Personal Data to another data controller of your choice, subject to technical feasibility,

    compatibility of data format and any other requirements prescribed under applicable law, where applicable and subject to

    the requirements of the PDPA;

    (c) request correction of Personal Data in order to make it accurate, complete or up to date;

    (d) delete your personal data from our records in certain circumstances;

    (e) restrict the processing of your personal data in certain circumstances;

    (f) object to us processing your personal data in certain circumstances (e.g. in case we process your data for direct marketing

    purposes).

You may also have other rights under the PDPA or other applicable laws from time to time. Your rights are subject to the conditions, limitations and exemptions provided under applicable law. For example, we may be required or permitted to retain or withhold certain Personal Data notwithstanding a request where retention or non-disclosure is required or permitted by law, necessary for legal proceedings, or required to protect the rights of another person.

If you no longer wish to receive marketing or promotional communications from us, you may:

    (a) use the unsubscribe mechanism contained in the relevant email;

    (b) follow the opt-out instructions contained in the relevant SMS or other electronic communication;

    (c) inform our representative during a marketing call that you do not wish to receive further marketing calls; or

    (d) contact us using the details set out in Section 13 below.

Your decision to opt out of marketing communications will not prevent us from sending you non-marketing communications where necessary, including communications relating to an existing enquiry, transaction, product, service, safety matter, legal requirement or other administrative matter.

If you wish to exercise any of your rights in relation to your Personal Data, please contact us using the contact details set out in Section 13 below.

We may request information reasonably necessary to verify your identity and to process your request.

We will respond to and process your request within the timeframe prescribed by the PDPA and other applicable laws.

Where we are permitted or required by law to refuse or limit a request, we will inform you accordingly and provide the reason for such refusal or limitation where required by applicable law.

If you have concerns regarding our processing of your Personal Data, we encourage you to contact us as described below in the section 13 “Contact Us” so that we may address your concerns.

In the event you still have unresolved concerns, you also have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia in accordance with the PDPA and applicable procedures.

Our Website may use cookies, web beacons, pixels, tags and similar technologies (“Cookies”) to collect certain information when you access or use the Website.

Such information may include:

    (a) your IP address;

    (b) browser and device information;

    (c) Internet Service Provider;

    (d) date and time of access;

    (e) pages viewed and interactions with the Website;

    (f) referring website or page; and

    (g) preferences and other usage information.

We may use Cookies for purposes including:

    (a) enabling essential Website functionality;

    (b) remembering your preferences and settings;

    (c) improving Website functionality and performance;

    (d) measuring and analysing Website usage;

    (e) measuring the effectiveness of campaigns; and

    (f) providing personalised content or advertising, where applicable and subject to your choices and applicable legal requirements.

Where required, we will provide you with appropriate choices in relation to non-essential Cookies through our cookie consent management tool.

Google Maps

When you use the dealer-location search feature, our Website may use Google Maps or related Google services to provide mapping functionality. In connection with such functionality, Google may process information including your IP address and approximate geographical location.

The processing of Personal Data by Google in its own capacity is subject to Google's applicable privacy terms and policies.

Consent Management Platform

We use the consent management service provided by consentmanager AB, Håltgelvågen 1b, 72348 Västerås, Sweden, to manage your preferences regarding Cookies and certain Website functionalities.

Through the consent management platform, you may accept or reject relevant categories of Cookies or functionalities and subsequently modify your preferences.

In providing this functionality, consentmanager may process technical information such as your IP address and information regarding your consent choices and device.

Your consent preferences may be retained for the period reasonably necessary to maintain evidence of and give effect to your choices, subject to applicable legal requirements.

Further information about the Cookies used on our Website and how you may manage your preferences is available in our Cookie Policy.

We take reasonable and appropriate practical steps to protect Personal Data in our possession or under our control against loss, misuse, modification, unauthorised or accidental access or disclosure, alteration or destruction.

Our security measures may include appropriate administrative, physical, organisational and technical safeguards, taking into account the nature of the Personal Data, the potential harm resulting from a security incident, the location and manner in which Personal Data is stored and processed, and other relevant circumstances.

Where Personal Data is processed by a third-party data processor on our behalf, we will take reasonable steps to ensure that appropriate security measures and contractual safeguards are implemented in accordance with applicable law.

However, no method of transmission over the internet or method of electronic storage is completely secure. Accordingly, while we take reasonable measures to protect your Personal Data, absolute security cannot be guaranteed.

Personal Data Breaches

If we become aware of a Personal Data breach, we will take reasonable and appropriate steps to contain, investigate and remediate the breach.

Where required under the PDPA, we will notify the Personal Data Protection Commissioner of Malaysia and/or affected data subjects within the applicable statutory timeframe and in accordance with applicable legal and regulatory requirements.

Due to the international nature of our business and the services provided to us by our affiliates and service providers, your Personal Data may be transferred to, accessed from, stored or otherwise processed in jurisdictions outside Malaysia, including, where applicable, China and Singapore.

Such jurisdictions may have personal data protection laws that differ from those applicable in Malaysia.

Where we transfer Personal Data outside Malaysia, we will take reasonable steps to ensure that the transfer is carried out in accordance with the requirements of the PDPA, including section 129 thereof, and other applicable laws.

Depending on the circumstances and the requirements of applicable law, this may include taking reasonable precautions and exercising due diligence to ensure that the Personal Data will not be processed in a manner that would contravene the PDPA, implementing appropriate contractual or organisational safeguards, obtaining consent where required, or relying on another condition permitted under applicable law.

We will also take reasonable steps to ensure that recipients of Personal Data outside Malaysia provide an appropriate level of protection having regard to the requirements of applicable law.

We may amend or update this Privacy Policy from time to time to reflect changes in our business operations, products or services, processing activities, technology, legal requirements or data protection practices.

Where we make changes, we will publish the updated Privacy Policy on our Website and update the “Date last updated” date at the end of this policy.

Where required by applicable law, or where a change materially affects the manner in which we process your Personal Data, we will provide additional notice and/or obtain consent, as appropriate. We encourage you to review this Privacy Policy periodically to remain informed about how we process and protect your Personal Data.

If you any questions, concerns or complaints regarding this Privacy Policy or our processing of Personal Data we hold about you, or exercise any other rights under applicable data protection laws or regulations aimed at protecting personal data ("Applicable Data Protection Law"), Please do not hesitate to contact our online customer service by clicking the customer service icon on the website, or contact us at:

Telephone number: +603-74971009

Email address: denzaservice.my@byd.com

Mailing address: SQ2-31-01 & SQ2-31-02, Level 31, Sunway Square Corporate Tower 2, Sunway Square, Jalan Lagoon Selatan, 47500 Subang Jaya, Selangor Darul Ehsan

We strive to respond to your request for access, correction, or deletion within the timeframe required by Applicable Data Protection Law. If we require additional time to process your request, we will inform you of the reason for the delay and the extended period in writing.

Date last updated: 24 September 2026