Privacy Policy & Personal Data Protection Notice
Last Updated: 10 September 2026
Citi Advisory Sdn Bhd (“Citi Advisory”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy and Personal Data Protection Notice explains how we collect, use, process, store and protect personal data when you visit our website, contact us, use our services, communicate with us through WhatsApp or other communication channels, or otherwise interact with us.
This notice is prepared with reference to the Personal Data Protection Act 2010 (Act 709) and applicable Malaysian personal data protection requirements.
1. About Citi Advisory Sdn Bhd
Citi Advisory Sdn Bhd is a Malaysian financial services company providing services across credit recovery solutions, banking agency services and property investment.
Our services may involve dealing with individuals, businesses, corporate clients, financial institutions, customers, borrowers, property buyers, property owners, debtors, business partners and other parties.
Because some of our services require us to handle personal, financial, employment, property and account-related information, we take the protection and responsible handling of personal data seriously.
2. What Personal Data Do We Collect?
Depending on the nature of your enquiry or our relationship with you, we may collect different types of personal data, including:
Personal Information: Name, identification details, date of birth, gender and other information required to identify you.
Contact Information: Telephone number, mobile number, email address, residential address, correspondence address and other contact details.
Employment and Financial Information: Employment details, occupation, employer information, income information, financial commitments, loan information, payment information and other information required to assess or provide our services.
Property Information: Property address, ownership information, property details, valuation information and other information relevant to property-related services.
Business Information: Company name, business registration information, business contact details, financial information and other information required for corporate services.
Communication Information: Information provided when you contact us by telephone, email, WhatsApp, website forms, social media or other communication channels.
Technical Information: Where applicable, we may collect technical information such as IP address, browser type, device information, website usage information and other technical information generated when you use our website.
3. How Do We Collect Your Personal Data?
We may collect personal data directly from you when you:
Submit an enquiry through our website, contact us by telephone, email or WhatsApp, request our services, apply for financial-related services, provide information for a property enquiry, communicate with our staff, participate in our marketing activities, or otherwise provide information to us.
We may also receive personal data from authorised clients, business partners, service providers, financial institutions or other parties where this is permitted by law and necessary for the services we provide.
4. Why Do We Collect and Use Your Personal Data?
We collect and process personal data for purposes that are reasonably necessary for our business and the services we provide, including:
To respond to enquiries and requests for information; to provide, manage and improve our services; to assess applications and service requirements; to communicate with customers and clients; to manage appointments and follow-ups; to process transactions and payments; to provide credit recovery and collection services; to provide banking agency and loan consultation services; to provide property investment and related services; to communicate with debtors and account holders where authorised; to maintain business and customer records; to provide customer support; to conduct internal administration and reporting; to prevent fraud, misuse and unlawful activities; to comply with applicable laws, regulations and legal requirements; and to protect our rights, property and business interests.
5. WhatsApp and Other Communication Channels
If you contact Citi Advisory through WhatsApp, telephone, email, website forms or other communication platforms, we may collect and process the information you provide through those channels for the purpose of responding to your enquiry, providing requested services and maintaining communication with you.
Where we use third-party communication platforms or technology providers, your information may also be processed by those providers in accordance with their own privacy policies and applicable terms.
You should avoid sending unnecessary confidential or sensitive information through public or unsecured communication channels.
6. Marketing and Promotional Communications
Where permitted by applicable law, we may use your contact information to send you information about our services, promotions, updates, financial solutions, property opportunities, events or other information that may be relevant to you.
You may request to stop receiving marketing communications from us at any time by contacting us or using the available unsubscribe or opt-out method provided in the communication.
We will respect your request and take reasonable steps to stop or limit further marketing communications, subject to any legal or operational requirements.
7. Disclosure of Personal Data
We do not sell your personal data.
Where reasonably necessary and permitted by law, we may disclose or provide access to relevant personal data to selected parties for legitimate business, service or legal purposes.
These parties may include our employees, authorised representatives, professional advisers, technology and system providers, communication service providers, payment service providers, financial institutions, business partners, contractors, legal advisers, auditors, insurers, regulators, government authorities and other parties where disclosure is necessary or permitted by law.
Where we engage third-party service providers to process personal data on our behalf, we take reasonable steps to require appropriate confidentiality and security measures.
8. Cross-Border Data Processing
Some of our technology, communication, cloud, software or service providers may operate or store information outside Malaysia. Where personal data is transferred or processed outside Malaysia, we will take reasonable steps to ensure that the transfer and processing are carried out in accordance with applicable Malaysian data protection requirements.
9. Protection and Security of Your Personal Data
We take reasonable and appropriate measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration or destruction.
Our security measures may include access controls, system restrictions, secure storage, password protection, staff controls, monitoring and other technical or organisational safeguards appropriate to the nature of the information we handle.
However, no method of transmission or electronic storage can be guaranteed to be completely secure. We therefore encourage you to take reasonable care when providing personal information online.
10. Retention of Personal Data
We will retain personal data only for as long as reasonably necessary for the purposes for which it was collected, to provide our services, maintain appropriate business records, resolve disputes, comply with legal or regulatory requirements, or protect our legitimate business interests.
When personal data is no longer required, we will take reasonable steps to delete, destroy or anonymise it in accordance with applicable requirements and our internal procedures.
11. Accuracy of Personal Data
We rely on the information provided to us to be accurate and up to date. If your personal information changes, or if you believe that information held by us is inaccurate or incomplete, please contact us so that we can review and update the relevant information where appropriate.
12. Your Rights
Subject to applicable Malaysian laws and any applicable conditions or exemptions, you may have rights in relation to your personal data, including the right to request access to personal data held by us and the right to request correction of inaccurate or incomplete personal data.
You may also contact us if you wish to withdraw consent where processing is based on consent, or if you wish to object to or limit certain uses of your personal data, including direct marketing, where applicable.
Requests may be subject to applicable legal requirements, verification procedures and reasonable administrative requirements.
13. Cookies and Website Technologies
Our website may use cookies and similar technologies to improve website functionality, understand website usage, remember preferences and support marketing or analytics activities.
You may adjust your browser settings to manage or disable cookies. However, disabling certain cookies may affect some website functions.
14. Third-Party Websites
Our website may contain links to third-party websites, platforms or services. These third-party websites operate independently from Citi Advisory and may have their own privacy policies and terms.
We are not responsible for the privacy practices, security or content of third-party websites. We recommend reviewing the privacy policy of any third-party website before providing your personal information.
15. Personal Data Relating to Other Individuals
If you provide us with personal data belonging to another individual, you confirm that you are authorised to provide that information and that you have taken reasonable steps to inform the relevant individual about the collection and use of their personal data where required by applicable law.
16. Data Breaches and Security Incidents
If we become aware of a personal data security incident affecting personal data under our control, we will assess and respond to the incident in accordance with applicable laws, regulatory requirements and our internal data security procedures.
17. Changes to This Privacy Policy
Citi Advisory may update this Privacy Policy from time to time to reflect changes in our services, business operations, technology, legal requirements or regulatory requirements.
Any updated version will be published on this page with the latest revision date. We encourage you to review this page periodically to stay informed about how we handle personal data.
18. Contact Us About Your Personal Data
If you have any questions about this Privacy Policy, wish to make a request concerning your personal data, or would like to exercise any applicable privacy rights, please contact us.
Citi Advisory Sdn Bhd
60-2, Jalan Puteri 2/4,
Bandar Puteri Puchong,
47100 Puchong, Selangor, Malaysia.
Telephone: +603-8051 9073 (HQ, Puchong)
Email: Citiadvisoryteam@gmail.com
19. Malaysian Personal Data Protection Law
This Privacy Policy is intended to support Citi Advisory’s compliance with applicable Malaysian personal data protection requirements, including the Personal Data Protection Act 2010 (Act 709), as amended from time to time, together with applicable regulations, standards and guidelines issued by the Personal Data Protection Commissioner.
Nothing in this Privacy Policy limits any rights that you may have under applicable Malaysian law.
20. Acknowledgement
By using our website, contacting us, submitting information to us, or engaging our services, you acknowledge that you have read and understood this Privacy Policy and that your personal data may be processed in accordance with the purposes and terms described above, subject to applicable law.
If you do not agree with the processing described in this Privacy Policy, please contact us to discuss your concerns or available options.