Zoo Negara Malaysia (“ZNM”) is committed to the protection of your personal data and your privacy. In this Personal Data Protection Notice, “we”, “us” and “our” refers to ZNM, and “you” and “your” include third parties whose personal data you have provided to ZNM.

This Personal Data Protection Notice explains how we collect and handle your personal data, including your sensitive personal data, in accordance with the Malaysian Personal Data Protection Act 2010. Please note that ZNM may amend this Personal Data Protection Notice at any time without prior notice and will publish the amended or revised Personal Data Protection Notice on our website or by email.

We may collect and process personal data of children under the age of 18 years old. If you are under 18 years old, please obtain your parent’s or guardian’s consent before you provide your personal data to ZNM. If we learn that we have collected such data from a child under 18 without verification of parental consent, we will delete the data. If you believe we might have any data from or about a child under 18 without parental consent, please contact us using the information provided below.

Note that your sensitive personal data (e.g. your physical or mental health or condition, or biometric data) and your medical information (e.g. patient medical history, diagnostics, allergies) will not be shared or disclosed to any entity unless where you have provided your express, written consent.

1. Personal data

1.1 Type of personal data

“Personal data” means any data which relates to you or any other third party related to you which was collected or provided to ZNM for the purposes stated in Section 2 below. We may process your personally identifiable data, which may include your name, NRIC number, contact details, financial and banking account details, information regarding your family, relatives or third party that you provide to us, your preferences in relation to products and services you purchase from us, CCTV/security recordings, location tracking/GPS information, other types of data as stated in this link, and all other data which is provided by you to ZNM via these channels:

  • ZNM’s website and 3rd party websites affiliated with ZNM;
  • physical forms from ZNM;
  • email; and/or
  • social media and other communication messaging platforms.

1.2 Source of personal data

Customer or potential customer: ZNM collects your personal data directly from you or indirectly from your legal representatives, agents (e.g. travel agents), and/or employer when you, your legal representatives, agents, and/or employers send us completed enquiry, application, and/or registration forms via various means, including online and physical hardcopies at public venues or in any of our premises. Your personal data may also be collected from cookies through the use of our website.

Vendor, supplier, tenant or service provider: ZNM collects your personal data directly from you or indirectly from your employer or credit reference agencies when tendering for projects, or when you send us completed enquiry and/or credit application forms via various means, including online and physical hardcopies. Your personal data may also be collected from cookies through the use of our website.

1.3 Obligatory personal data

All data requested for in the relevant forms is obligatory to be provided by you unless stated otherwise. Should you fail to provide the obligatory data, we would be unable to process your request and/or provide you with relevant services.

2. Purposes of collecting and further processing (including disclosing) your personal data

Customer or potential customer: Your personal data is collected and further processed by ZNM as required or permitted by law and to give effect to your requested commercial transaction, including the following:

  • to process your requested products or services;
  • to facilitate your participation in any contests or events;
  • to administer and communicate with you in relation to our services and/or events;
  • to process any payments related to your requested service;
  • for insurance purposes;
  • to operate our premises in a manner which is physically safe, secure, and befitting of health and safety requirements;
  • for internal investigations, audit, or security purposes;
  • to conduct and support internal marketing analysis and analysis of customer patterns, choices, and engagement with ZNM’s related companies, subsidiaries, holding companies, and affiliate companies;
  • to be collected and stored into a central repository that is accessible by ZNM’s related companies, subsidiaries, holding companies, and affiliate companies;
  • to create and deliver personalised products and services that are unique to you to enhance your customer experience;
  • to provide you with a more seamless customer experience;
  • to support research and innovation of our products and services;
  • to store and carry out data analytics processes;
  • to improve our products and services;
  • for the matching of loyalty points provided by a third party/business partner to advertise and market products and services to you;
  • for collaboration with a business partner to advertise and market products and services to you;
  • to comply with ZNM’s legal and regulatory obligations in the conduct of its business;
  • to contact you regarding products, services, upcoming events, promotions, advertising, marketing, and commercial materials which we may feel interest you;
  • to send you season’s greetings, special occasion messages, or other similar communications;
  • to allow third parties to contact you for advertising, promotional, or marketing campaigns conducted by any third-party entities;
  • to ensure that the content from our website is presented in the most effective manner for you and for your computer and/or device; or
  • for ZNM’s internal records management, customer relations events and activities, and customer loyalty reward programme.

Vendor, supplier, tenant or service provider: Your personal data is collected and further processed by ZNM as required or permitted by law and to give effect to your requested commercial transaction, including the following:

  • to process your requested services;
  • to process your credit account application;
  • to assess your credit worthiness;
  • to administer and give effect to your commercial transaction (tender award, contract for service, tenancy agreement);
  • to process any payments related to your commercial transaction;
  • for insurance purposes;
  • for internal investigations, audit, or security purposes;
  • to comply with ZNM’s legal and regulatory obligations in the conduct of its business;
  • to contact you regarding products, services, upcoming events, promotions, advertising, marketing, and commercial materials which we may feel interest you;
  • to ensure that the content from our website is presented in the most effective manner for your and for your computer and/or device;
  • for ZNM’s internal records management, customer relations events and activities, and customer loyalty reward programme.

Where you have indicated your consent to receiving marketing or promotional updates from ZNM, you may opt out from receiving such marketing or promotional material at any time. You may select the “unsubscribe” option provided in ZNM’s email blasts or you may contact ZNM at the details provided in Section 6 below.

Data Analytics Processing

ZNM wants to share and consolidate your data into a single platform, and we may use and share your data for analytics and measurement purposes to understand how our products and services are used, to help improve the products and services we offer, to provide you with more personalised products and services, and to provide a more seamless customer experience. For example, we analyse data about your choices and preferences in relation to the products and services you purchase from us to send you targeted advertisements and promotional materials. We also process data about the ads you interact with to help us and advertisers understand the performance of various ad campaigns.

3. Disclosure of personal data

3.1 Classes of third parties

Your personal data may be disclosed to relevant third parties (in or outside of Malaysia) as required under law, pursuant to relevant contractual or business relationships, or for the purposes stated in Section 2 (Purposes of collecting and further processing (including disclosing) your personal data) above (or directly related to those purposes). The aforesaid relevant third parties may include the following:

  • professional advisors and corporate service providers, including auditors, lawyers, company secretaries, and consultants;
  • advertising and marketing partners;
  • payment processors;
  • cloud and hosting services;
  • customer support and communication;
  • market research and survey;
  • logistics and shipping partners;
  • social media platforms;
  • business partners and affiliate networks, including third-party hotels, resorts, or shopping mall tenants;
  • analytics and tracking providers;
  • other service providers and entities, including printing companies, conference/training/event organisers, travel agencies, insurance companies, insurers, utility companies, contractors, property management companies, or credit agencies (debt recoveries);
  • law enforcement agencies, including the local police; or
  • relevant governmental authorities, statutory authorities, local councils, and industry regulators including Bank Negara Malaysia, Bursa Malaysia, Ministry of Health, Ministry of Education, Ministry of Works, LHDN/IRB, KWSP/EPF, Personal Data Protection Commissioner, MHTC (Malaysian Healthcare Tourism Council), SOCSO, Securities Commission Malaysia, Malaysian Medical Council, and Department of Statistics Malaysia.

In the event of a potential, proposed, or actual sale of business, disposal, acquisition, merger, or re-organisation (“Transaction”), your personal data may be required to be disclosed or transferred to a third party as a result of the Transaction. You hereby acknowledge that such disclosure and transfer may occur and permit ZNM to release your personal data to the other party and its advisers/representatives.

3.2 Transfer of your personal data outside Malaysia

It may be necessary for us to transfer your personal data outside of Malaysia if any of the third parties mentioned in Section 3 (Disclosure of personal data) above, including our service providers or business partners who are involved in providing any services to us, are located or have processing facilities in countries outside of Malaysia.

You consent to us transferring your personal data outside Malaysia to such third parties and for the purposes set out in Section 2 (Purposes of collecting and further processing (including disclosing) your personal data).

We shall take necessary steps to ensure that any such third parties, whether within Malaysia or based outside of Malaysia, are contractually bound to protect your personal data to a relevant standard that is comparable to applicable laws and that they can only process your personal data under our instructions.

4. Websites

4.1 Links to other sites

Links to other sites is provided for your convenience and information. These sites may have their own privacy statement in place, which we recommend you review if you visit any linked websites. We are not responsible for the content on the linked sites or any use of the site.

4.2 Location-enabled products or applications

Location-enabled products or applications transmit your location data to us. We do not use the data sent or provided other than to provide the service you request. Location-enabled features are opt-in, and you have control over your participation and can turn these services off at any time or uninstall them.

Some mobile applications will utilise Google Analytics (or similar tool) to help us better serve you through improved products, services, and revisions to the mobile applications. This collected data will not identify you to us. It may, however, let us know anonymously which services and features you are using the most within the application, as well as device type and hardware features, country, and language of download.

4.3 Cookies

A cookie may be used in the processing of your data. A cookie is a text file placed into the memory of your computer and/or device by our computers. A copy of this text file is sent by your computer and/or device whenever it communicates with our server. We use cookies to identify you. We may also collect the following data during your visit to our website and/or the fully qualified domain name from which you accessed our site, or alternatively, your IP address:

  • the date and time you accessed each page on our website;
  • the URL of any webpage from which you accessed our site (the referrer); and
  • the web browser that you are using and the pages you accessed.

Some web pages may require you to provide a limited amount of personal data in order to enjoy certain services on our websites (system login credentials, email address, and contact details, etc.). This personal data will only be used for its intended purposes, i.e. to respond to your message or deliver the requested services.

5. Limiting the processing of personal data, withdrawing consent, further enquiries, transmission of personal data and complaints

If:

  • you would like to obtain further information on how to limit the processing of your personal data or withdraw your consent on personal data processing;
  • you would like to request to limit your personal data or withdraw your consent on personal data processing (note that we may retain your data where there is a legal basis to do so);
  • you request the transmission of your consented personal data to another organisation, in a compatible suitable machine-readable form;
  • you have any further queries; or
  • you would like to make a complaint in respect of your personal data,

you may contact:

For Zoo Negara matters:
Customer Service Department
Zoo Negara, Hulu Kelang
68000, Ampang, Selangor Darul Ehsan
Tel: +603 4108 3422 / +603 4108 3424
Email: customerservice@zoonegaramalaysia.my

6. Retention of personal data

We will process your personal data for as long as we have a legal basis to do so. Your personal data will be stored only for the period necessary to fulfil the purposes stated above after which we will ensure that your personal data is deleted if it is no longer necessary to store it.

We also implement the following measures for the management and deletion of personal data stored by us:

  • maintaining a system for proper records of personal data disposal periodically and making such records available for submission when directed by the Personal Data Protection Commissioner;
  • conducting reviews and disposing of all unwanted personal data in the database from time to time;
  • preparing and maintaining a personal data disposal schedule for inactive data with a twenty-four (24) months period;
  • disposing of personal data collection forms used in commercial transactions within a period of fourteen (14) days, except if/unless the forms carry legal values in relation to the commercial transaction; and
  • prohibiting the storage of personal data through removable media devices and cloud computing services unless written consent is obtained from an officer authorised by the top management of ZNM.

7. Updates to the Policy

ZNM reserves the right to modify and update this Policy from time to time without prior notice except by publication on our Website, to ensure that this Policy is consistent with any changes to the laws and regulations applicable to ZNM. All communications, transactions, and dealings with us shall be subject to the latest version of this Policy in force at the time.

This Policy was last updated on 10 September 2026. We encourage you to visit this Policy to stay informed of our personal data protection practices.

8. Governing Law

This Policy shall be governed in all respects by the laws of Malaysia.