Last updated: January 2026
- Introduction
Phoenix International Investment Bank Ltd. (“PHOENIX”, “we”, “us”, or “our”), a licensed investment bank regulated by the Labuan Financial Services Authority, is committed to protecting the confidentiality, integrity, and security of personal and non-public information provided to us.
This Privacy Policy describes how we collect, use, disclose, retain, and protect personal data obtained through our website(s), online platform, products, and services. By accessing or using our website or online services, you acknowledge and agree to the terms of this Privacy Policy.
We reserve the right, at our sole discretion, to amend, update, or replace this Privacy Policy at any time. Any amendments shall become effective upon publication on our website.
- Regulatory and Security Framework
This Policy applies to personal information about individuals (clients/business partners, job applicants, employees) held by us. We will only process your Personal Data in accordance with the Personal Data Protection Act 2010, orders made under the Personal Data Protection Act 2010 and any statutory amendments or re-enactments made of the Personal Data Protection Act 2010 from time to time (collectively referred to as the “PDPA”), Labuan Financial Services Authority (LFSA) requirements, and applicable international data protection standards.
The PDPA requires us to inform you of your rights in respect of your Personal Data that is being processed or that is to be collected and further processed by us and the purposes for the data processing. The PDPA also requires us to obtain your consent to the processing of your Personal Data. In light of the PDPA, we are committed to protecting and safeguarding your Personal Data.
PHOENIX maintains and continuously enhances administrative, technical, and physical safeguards designed to protect personal data against unauthorized access, misuse, loss, alteration, or disclosure.
We have security systems, practices and procedures in place to safeguard your privacy. Our systems and infrastructure are routinely monitored, tested, and reviewed to ensure operational integrity and to detect unauthorized or unlawful activity.
Where required or permitted by law, and where unlawful activity is reasonably suspected, relevant information may be disclosed to competent governmental, regulatory, or law-enforcement authorities.
- Consent
By accessing our website, submitting information to us, or using our online platform, you declare that you have read and understood this Policy and expressly consent to the collection, use, processing, storage, and disclosure of your personal data in accordance with this Privacy Policy and applicable laws.
- Categories of Personal Data Collected
We may collect, use, and process the following categories of personal data, where applicable:
- Identification information (e.g. full name, passport or identification number, photographs, audio or visual recordings for identity verification);
- Contact details (e.g. residential and mailing address, email address, telephone number);
- Employment and financial information;
- Information provided through applications, forms, or correspondence;
- Information obtained from credit bureaus, credit reporting agencies, and financial institutions;
- Information obtained from governmental, regulatory, or statutory authorities;
- Technical and usage data, including IP addresses, browser data, cookies, and analytics data; and
- Information obtained from third parties or affiliates where you have provided consent or where permitted by law.
This information is collected from application forms you have completed, your use of our online facilities, through ongoing communications with you, or third parties.
We will not solicit any personal information about you except where you have knowingly provided that information to us or we believe you have authorised a third party to provide that information to us. Third parties that we may need to collect information from include your financial adviser, product issuer, employer, accountant, solicitor, government agencies or authorities.
You are not obligated to give us the information that we request. However, if you do not give us the information that we ask for, or the information you give is not complete or accurate, this may:
- prevent or delay the processing of your application; or
- prevent us from contacting you; or
- impact the taxation treatment of your account.
- Use of Cookies, Analytics, and Social Plugins
Our website may use cookies and similar technologies to enhance functionality, improve user experience, and analyze website usage. You may disable cookies through your browser settings, although doing so may affect certain website features.
We may use Google Analytics Advertising Features to collect aggregated demographic and usage data. You may opt out through Google’s advertising settings.
Our website may contain social media plugins. These plugins may automatically transmit data (including IP address and browsing activity) to the relevant social media platform. To prevent such data sharing, you should log out of your social media accounts before accessing our website.
Please refer to our Cookie Policy for detailed terms and conditions.
- Purposes for Processing Personal Data
We process personal data for legitimate business purposes, including but not limited to:
- Establishing and maintaining a relationship with you;
- Processing applications for products and services;
- Conducting credit, risk, due diligence, and compliance assessments;
- Meeting legal, regulatory, audit, reporting, and record-keeping obligations;
- Fraud prevention, security monitoring, and risk management;
- Providing customer support and account administration;
- Improving services, developing new products, and internal analytics;
- Conducting direct or indirect marketing, where permitted by law.
- Disclosure of Personal Data
We do not sell personal data. We may disclose personal data strictly on a need-to-know basis, including to:
- Other PHOENIX group companies or affiliated entities, either in Malaysia or overseas;
- Agents, service providers, auditors, and professional advisers subject to confidentiality obligations;
- Verification providers, credit bureaus, and counterparties;
- Regulatory authorities, law-enforcement agencies, and courts where required or permitted by law;
- Introducing brokers or business partners with whom we have contractual arrangements;
- Other financial institutions for reference purposes, excluding details of open positions.
- Any organization which you request us to or any person acting on your behalf, including your financial adviser, broker, solicitor or accountant.
- Any parties authorized by law (such as where we are obliged to disclose information in public interest or to protect our interests).
All disclosures are made in accordance with applicable data protection laws and confidentiality obligations.
- Data Storage and Retention
Personal data is stored in secure electronic systems or protected physical records, with access restricted to authorized personnel only. We may use cloud storage or third-party servers to store the personal information we hold about you.
We are required by law to retain certain records of information for varying lengths of time and, in certain circumstances, permanently. Where your information is not required to be retained under law, we will take reasonable steps to irrevocably destroy or de-identify your personal information when it is no longer required for the purpose for which it was collected.
- Data Accuracy and Client Obligations
You are responsible for ensuring that all personal data provided to us is accurate, complete, and up to date. You must promptly notify us of any changes to your personal information.
- Rights of Access and Correction
Subject to applicable laws, you may request:
- Access to personal data we hold about you;
- Correction or updating of inaccurate or incomplete personal data. If we do not agree with the corrections you have supplied and refuse to correct the personal information, we are required to give you a written notice to that effect and a statement if requested within the statutory timeframe.
Such requests must be submitted using the prescribed form (physical or electronic) and may be subject to verification procedures. We may charge a reasonable fee to cover our costs.
There may be circumstances where we are unable to give you access to the information that you have requested. If this is the case, we will inform you and explain the reasons why.
- Online Security and Password Protection
Access to online services is protected by secure authentication mechanisms. You are solely responsible for maintaining the confidentiality of your access credentials and for all activities conducted under your account.
You must notify us immediately of any suspected unauthorized access, security breach, or misuse. We shall not be liable for losses arising from your failure to comply with these obligations, to the extent permitted by law.
- Electronic Communications and Internet Risks
You should note that there are inherent security risks in transmitting information through the internet and communications sent via other channels may not be secure. You should assess these potential risks when deciding whether to use our online services. If you do not wish to transmit information through our website, there are other ways in which you can provide this information to us.
- Marketing Communications
We do not send unsolicited communications. Marketing or informational communications are sent only in accordance with contractual arrangements or legal permissions.
- Intellectual Property and Website Content
All content, trademarks, logos, and intellectual property displayed on our website are owned by or licensed to PHOENIX. No content may be reproduced, distributed, or published without our prior written consent.
- Relationship with Other Policies
This Privacy Policy forms part of the Terms and Conditions governing the use of our website and services. For further details, please refer to our Terms of Use.
- Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact Phoenix International Investment Bank Ltd through our official communication channels.