Privacy Policy & Personal Data Protection Notice
Last Updated: 12 August 2026
ARK Malaysia, (“ARK Malaysia”, “ARK”, “we”, “us” or “our”), respects the privacy and confidentiality of individuals who interact with us.
ARK Malaysia is an independent organisation providing financial case resolution support, case assessment, research, public education and related services. In carrying out these activities, we may receive personal, financial, transactional and case-related information that may be highly sensitive.
This Privacy Policy and Personal Data Protection Notice explains how we collect, use, disclose, store and protect personal data in accordance with applicable Malaysian data protection laws, including the Personal Data Protection Act 2010 (Act 709) and applicable regulations, standards and guidelines.
By accessing our website, contacting us, submitting information to us or engaging our services, you acknowledge that you have read and understood this Notice.
1. Who We Are
Public-facing brand name: ARK Malaysia
Malay name: Advokasi Resolusi Kewangan Malaysia
English: Malaysia Financial Case Resolution Centre
中文：马来西亚金融纠纷援助与资源中心
For privacy-related enquiries, please contact:
Email: info@arkmalaysia.org
2. What Personal Data We May Collect
Depending on the nature of your interaction with ARK Malaysia, we may collect and process information including:
Identification information
* Full name
* Identification card or passport information
* Nationality
* Date of birth
* Photographs or other identifying information
* Signature or other identification information
Contact information
* Telephone number
* Email address
* Residential or correspondence address
* Emergency contact information where relevant
Financial and transactional information
Depending on the case, this may include:
* Bank account information
* Bank statements
* Transaction records
* Payment references
* Transaction dates and amounts
* Cryptocurrency or digital-asset transaction information
* Wallet addresses and transaction hashes
* P2P transaction records
* Exchange records
* Payment-platform records
* Information relating to counterparties
* Source-of-funds or source-of-payment information
Case information
We may collect information relating to the circumstances of a case, including:
* A description of events
* Communications with banks, financial institutions or platforms
* Communications with counterparties
* Communications with authorities
* Police or other official reports
* Complaints
* Correspondence
* Contracts
* Invoices
* Receipts
* Screenshots
* Photographs
* Audio or video recordings where lawfully obtained and provided
* Documents supplied by you or third parties
Professional and background information
Where relevant to a case, we may collect:
* Employment information
* Business information
* Company information
* Publicly available professional information
* Information relevant to understanding a person’s role in a transaction or dispute
Technical and website information
When you use our website, we may collect information such as:
* IP address
* Browser type
* Device information
* Operating system
* Website activity
* Referring website
* Pages viewed
* Approximate location derived from technical information
* Cookies and similar technologies
3. Information Relating to Other Individuals
In some cases, you may provide ARK Malaysia with information concerning another individual or organisation.
For example, a case may involve:
* A transaction counterparty
* A suspected scammer
* A family member
* A business partner
* An employee
* A bank employee
* A platform user
* A witness
* Another person connected to a transaction
You should only provide personal information concerning another individual where you have a lawful basis or are otherwise permitted to provide that information.
Where appropriate, ARK Malaysia may independently obtain information from lawful sources where this is necessary for a legitimate case-related purpose.
4. How We Collect Personal Data
We may collect information:
* Directly from you;
* Through our website;
* Through online forms;
* Through email;
* Through telephone or messaging applications;
* During consultations;
* Through documents submitted by you;
* From your authorised representatives;
* From professional advisers acting for you;
* From banks, financial institutions or payment platforms where lawfully available;
* From public records and publicly available sources;
* From relevant professional or specialist consultants;
* From third-party service providers;
* From other persons or organisations where there is a lawful basis to do so.
We may also create records ourselves based on information received during the assessment and handling of a case.
5. Why We Collect and Use Personal Data
We may collect and process personal data for purposes including:
Case assessment
To understand the circumstances of a case and determine whether ARK Malaysia may be able to assist.
Case management
To organise facts, documents, transaction histories, communications and other information relevant to a case.
Financial and transaction analysis
To review transaction flows, timelines, counterparties and related information where relevant to a case.
Investigation and due diligence
Where appropriate and lawful, we may conduct or commission background research, due diligence, open-source research, financial analysis or investigative work relevant to a case.
Such work may involve appropriately engaged private investigators, financial professionals, banking consultants, specialist researchers or other professional service providers.
Professional assistance
Where appropriate, we may involve:
* Panel law firms;
* Qualified lawyers;
* Financial professionals;
* Banking consultants;
* Banking or financial-sector professionals;
* Private investigators;
* Specialist researchers;
* Compliance professionals;
* Other appropriately qualified consultants.
Liaison and resolution support
To assist with communications, documentation or coordination involving relevant banks, financial institutions, platforms, authorities, professional advisers or other appropriate parties.
Legal and regulatory compliance
To comply with applicable laws, regulations, court orders, lawful requests, regulatory requirements and professional obligations.
Security and fraud prevention
To protect ARK Malaysia, our clients, our systems and third parties against fraud, impersonation, misuse, unauthorised access and other unlawful activity.
Administration
To manage appointments, invoices, payments, records, communications and other administrative matters.
Public education and research
We may use appropriately anonymised or aggregated information for educational, research, statistical, awareness or publication purposes.
We will not knowingly publish information that identifies a client in connection with a case without an appropriate basis or permission, except where disclosure is required or permitted by law.
6. Case Investigations and Background Research
Some cases require information beyond the documents initially supplied by a client.
Where reasonably necessary and lawful, ARK Malaysia may conduct or commission:
* Background checks;
* Public-record searches;
* Open-source intelligence research;
* Transactional analysis;
* Corporate searches;
* Identity verification;
* Financial research;
* Asset or entity research;
* Other case-related investigative work.
Such work may be carried out by appropriately engaged professional investigators, researchers, consultants or other service providers.
The scope of any investigation will depend on the circumstances of the case and applicable law.
ARK Malaysia does not authorise or condone unlawful surveillance, unauthorised access to computer systems, unlawful interception of communications, bribery, coercion, harassment or other unlawful investigative methods.
7. Professional and Specialist Consultants
Depending on the circumstances of a case, ARK Malaysia may engage or consult with external specialists, including:
* Panel law firms and lawyers;
* Financial professionals;
* Banking consultants;
* Former or appropriately engaged law-enforcement or public-sector specialists;
* Private investigators;
* Compliance specialists;
* Cybersecurity or digital-forensics specialists;
* Other professional advisers.
Where personal data must be disclosed to such persons, ARK Malaysia will seek to do so on a lawful and need-to-know basis and, where appropriate, subject to confidentiality obligations.
8. Disclosure of Personal Data
We may disclose personal data where reasonably necessary for the purposes described in this Notice.
Recipients may include:
* Panel law firms and lawyers;
* Financial professionals;
* Banking consultants;
* Private investigators;
* Specialist consultants;
* Professional advisers;
* Relevant banks and financial institutions;
* Payment service providers;
* Digital-asset platforms or exchanges;
* Government agencies;
* Law-enforcement authorities;
* Regulators;
* Courts or tribunals;
* Insurers;
* Technology and IT service providers;
* Cloud-storage and document-management providers;
* Payment processors;
* Auditors and accountants;
* Other parties directly involved in resolving or assessing a case.
We may also disclose information where required or permitted by law, pursuant to a lawful request, court order or regulatory requirement, or where necessary to protect the rights, property or safety of ARK Malaysia, our clients or another person.
9. Cross-Border Processing
Some cases may involve institutions, service providers, consultants, counterparties or authorities located outside Malaysia.
As a result, personal data may in appropriate circumstances be transferred to or accessed from another jurisdiction.
Where cross-border processing is necessary, ARK Malaysia will take reasonable steps to ensure that such processing is carried out in accordance with applicable data-protection requirements.
10. Sensitive Information
Some information provided to ARK Malaysia may be particularly sensitive, including information relating to:
* Financial circumstances;
* Criminal allegations or investigations;
* Alleged fraud or scams;
* Identity documents;
* Immigration circumstances;
* Employment circumstances;
* Family circumstances;
* Health or other sensitive matters where voluntarily provided and relevant.
We will seek to limit collection and use of such information to what is reasonably necessary for the relevant purpose.
Clients should avoid providing information that is not relevant to their case.
11. Information We Do Not Require
ARK Malaysia will generally never require you to provide:
* Online banking passwords;
* ATM PINs;
* OTPs;
* TACs;
* Cryptocurrency wallet seed phrases;
* Private keys;
* Exchange passwords;
* Authentication codes.
Do not provide these credentials to anyone claiming to represent ARK Malaysia.
If someone requests such information while claiming to act for ARK Malaysia, please contact us through our official channels immediately.
12. Data Security
ARK Malaysia takes reasonable steps to protect personal data against:
* Unauthorised access;
* Unauthorised disclosure;
* Loss;
* Misuse;
* Modification;
* Destruction;
* Unauthorised copying or processing.
Security measures may include access controls, restricted permissions, secure systems, authentication measures, confidentiality obligations and appropriate internal procedures.
However, no electronic transmission, storage system or communication method can be guaranteed to be completely secure.
13. Retention of Personal Data
We will retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including:
* Case management;
* Legal and regulatory compliance;
* Accounting and tax requirements;
* Dispute resolution;
* Audit requirements;
* Legitimate business purposes;
* Protection against legal claims.
When information is no longer reasonably required, we may securely delete, destroy, anonymise or otherwise dispose of it in accordance with applicable requirements.
14. Accuracy of Information
We rely on information provided by clients and third parties.
You are responsible for providing information that is accurate, complete and not misleading to the best of your knowledge.
If you discover that information provided to us is incorrect or incomplete, please notify us as soon as reasonably practicable.
15. Your Rights
Subject to applicable law and any lawful limitations, you may have rights relating to personal data held by ARK Malaysia, including rights concerning access, correction and other applicable data-protection rights.
Requests should be submitted to: info@arkmalaysia.org
We may need to verify your identity before processing a request.
Certain information may be subject to legal, regulatory, investigative, confidentiality or other restrictions.
16. Cookies
Our website may use cookies and similar technologies to:
* Operate the website;
* Remember preferences;
* Understand website usage;
* Improve website performance;
* Maintain security;
* Measure website traffic.
You may be able to control cookies through your browser settings.
Disabling certain cookies may affect website functionality.
17. Third-Party Websites
Our website may contain links to third-party websites, platforms or resources.
ARK Malaysia does not control the privacy practices of those third parties.
You should review the relevant privacy policies before providing personal information to them.
18. Children
Our services are not intentionally directed toward children.
If we become aware that personal information relating to a child has been submitted to us without an appropriate basis, we may take reasonable steps to delete or otherwise handle that information appropriately.
19. Changes to This Notice
We may update this Privacy Policy and Personal Data Protection Notice from time to time.
The updated version will be published on this website with a revised “Last Updated” date.
20. Contact Us
For questions, requests or concerns regarding personal data:
ARK Malaysia
Privacy enquiries: info@arkmalaysia.org
Important: This Privacy Policy is intended to explain ARK Malaysia’s general data-processing practices. Specific client engagements may be subject to additional confidentiality, data-processing or contractual terms.