Privacy Policy

Last Updated: 1 May 2026  ·  Effective Date: 1 May 2026

Bicara Wira ("we," "us," or "our") is committed to protecting the personal information of all individuals who contact us, enquire about our programmes, or enrol as participants. This Privacy Policy explains what personal data we collect, how we use it, and what rights you have in relation to that data. It applies to all personal data processed by Bicara Wira in connection with our financial education programmes and related activities.

Our registered address is 65 Jalan Sultan Ahmad Shah, 10050 George Town, Penang, Malaysia. We can be reached at [email protected] for any privacy-related enquiry.

1. Data We Collect

We collect personal information in the following ways:

1.1 Information You Provide to Us

• Your name and contact details (telephone number and email address) when you submit an enquiry form on our website
• Your name, contact details, and relevant financial background when you enrol in a Bicara Wira programme
• Any personal financial information you choose to share during private sessions or written exercises within a programme
• Correspondence you send to us by telephone, email, or in writing

1.2 Information Collected Automatically

• Basic website analytics data (pages visited, session duration, referring URLs) when you access our website
• Cookie data — please refer to our Cookie Policy for full details
• Technical information such as your browser type and device type, collected in aggregate for website improvement purposes

2. How We Use Your Data

We use the personal data we collect for the following purposes:

• To respond to programme enquiries and provide information about intake availability
• To process and confirm programme enrolments
• To administer the programmes you have enrolled in, including communication about session dates, materials, and session summaries
• To maintain records required for business administration and statutory purposes
• To improve our website and programme content based on aggregated, anonymised usage data
• To comply with applicable legal obligations

We do not use your personal data for automated decision-making, profiling, or marketing to third parties. We do not sell, rent, or share your personal data with any financial product provider, insurance company, or investment intermediary.

3. Legal Basis for Processing

We process your personal data on the following legal bases under the Personal Data Protection Act 2010 (Malaysia) and applicable data protection principles:

• Consent — when you submit an enquiry or complete an enrolment form, you consent to our processing of the data provided
• Contract performance — to administer programmes you have enrolled in
• Legitimate interests — to respond to enquiries, maintain records, and improve our services, where such interests are not overridden by your data protection rights
• Legal obligation — where processing is required to comply with applicable laws and regulations

4. Data Retention

We retain personal data only for as long as is necessary for the purposes set out in this Policy, or as required by applicable law:

• Enquiry data from non-enrollees: up to 12 months from last contact
• Participant records for completed programmes: up to 7 years from the programme completion date, for administrative and statutory purposes
• Financial background information shared in private sessions: retained only for the duration of the programme and deleted within 60 days of completion unless you request otherwise
• Website analytics data: up to 24 months in anonymised/aggregate form

5. Data Security

We implement appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, use, alteration, or disclosure. These measures include:

• Restricted access to personal data on a need-to-know basis
• Secure storage of physical records at our premises
• Encrypted transmission of data over our website (HTTPS)
• Regular review of our data handling practices

In the event of a data breach that is likely to adversely affect your rights and freedoms, we will notify you and the relevant authorities as required by law.

6. Cookies

Our website uses cookies to enable basic functionality and to collect anonymised analytics data. Cookies are small text files stored on your device when you visit our website. You can manage your cookie preferences at any time via our cookie consent tool or in your browser settings. Full details are available in our Cookie Policy.

7. Third-Party Services

We may use the following third-party services in connection with our website and operations:

• Website hosting services
• Email service providers for programme communications
• Website analytics services (anonymised data only)

Any third-party service providers are required to process your data only on our instructions and in accordance with applicable data protection law. We do not share personal data with third parties for their own marketing purposes.

Our website may contain links to external websites. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies.

8. Your Rights

Under applicable data protection law, you have the following rights in relation to your personal data:

• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to request correction of inaccurate or incomplete data
• Right to erasure — to request deletion of your data in certain circumstances
• Right to restrict processing — to request that we limit how we use your data
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal
• Right to object — to object to processing based on legitimate interests

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. We may need to verify your identity before processing your request.

If you have concerns about how we handle your data, you may also contact the Department of Personal Data Protection Malaysia (JPDP).

9. Children's Privacy

Bicara Wira programmes are designed for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. For material changes, we will endeavour to notify current programme participants by email. Continued use of our website or services after changes are published constitutes acceptance of the updated policy.

11. Contact

For any questions or requests relating to this Privacy Policy or the handling of your personal data, please contact:

Bicara Wira
65 Jalan Sultan Ahmad Shah, 10050 George Town, Penang
Email: [email protected]
Telephone: +60 4-227 5816