Privacy Policy

Agtran Travel Sdn. Bhd. (registration number 201701032798 (1246969-V) (KPK/LN 9005)), referred to as Agtran, we, us, or our, is the data controller responsible for your personal data. This Privacy Policy is issued in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. For any privacy question or request, contact our data protection contact at hello@agtran.com, or write to us at our registered office.

We collect personal data that you provide and that is generated through your use of our services, including:

• Contact details: name, email address, and phone number, used for communication and to facilitate transactions.
• Identity and driver details: information from your driving licence or identification, used to verify your eligibility to rent and drive.
• Payment information: payment card and transaction details, used solely to process payments securely. Card details are handled by our payment processor.
• Booking and usage data: rental history, preferences, and content you submit, such as reviews or feedback.
• Technical data: device information, IP address, and location data, used to operate and improve our platform and to analyse usage.

We process your personal data on the basis of your consent, the performance of your rental contract, and compliance with legal obligations. We use it to:

• Provide, manage, and improve our products and services.
• Communicate with you about your account, bookings, and important updates.
• Personalise your experience where you have agreed to this.
• Process payments and prevent fraud.
• Meet legal, tax, and regulatory obligations.

Where we rely on your consent, you may withdraw it at any time as described in the Your Rights Under the PDPA section.

We send marketing communications only where permitted. You can opt out at any time using the unsubscribe link in our messages, or by contacting us at hello@agtran.com.

We disclose personal data only where necessary, to:

• Service providers who support our operations, such as hosting, payment processing, and analytics, under confidentiality and security obligations, and only to perform services for us.
• Authorities where required by law, regulation, or legal process, or to protect our rights, property, or safety, or that of our users or the public.

We do not sell your personal data.

Your personal data may be processed or stored on servers located outside Malaysia. Where this occurs, we take reasonable steps to ensure that the data receives a standard of protection consistent with the PDPA and this policy.

• We apply technical and organisational safeguards, including encryption in transit, access controls on a need-to-know basis, data minimisation, regular security reviews, and staff training.
• We retain personal data only for as long as necessary for the purposes described here, or as required by law, for example to meet financial reporting obligations. When no longer required, data is securely disposed of or anonymised.
• No system is completely secure. While we work to protect your data, we cannot guarantee absolute security.

Subject to the conditions in the PDPA, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Withdraw your consent to processing.
• Limit the processing of your data for direct marketing.
• Enquire about our disclosure practices.

To exercise any of these rights, contact hello@agtran.com. We may need to verify your identity, and a reasonable fee may apply for access requests where permitted by law. If you are not satisfied with our response, you may contact the Personal Data Protection Department (Jabatan Perlindungan Data Peribadi) of Malaysia.

We use cookies and similar technologies to operate the website, remember your preferences, analyse usage, and, where you agree, personalise content. You can manage or disable cookies through your browser settings. Disabling some cookies may affect certain features. See our Cookie Policy for details.

Our services are not directed at children. We do not knowingly collect personal data from children without appropriate consent. If you believe a child has provided us with personal data, contact us so we can address it.

We may update this Privacy Policy from time to time. We will notify you of significant changes through in-app notifications, email, or a notice on our website. Your continued use of our services after the changes take effect constitutes your acceptance of the revised policy.

Agtran Travel Sdn. Bhd. (201701032798 (1246969-V) (KPK/LN 9005)). Data protection contact: hello@agtran.com. Customer service: hello@agtran.com, +60 18-989 0800.