Privacy Policy

01Who we are

The Creative Transformation Award 2026 (“CTA 2026”) is organised by JCI Batu Kawan (“we”, “us”). We are the data user responsible for the personal data collected through cta.jcibatukawan.org and through the CTA 2026 registration, nomination, portrait-upload and enquiry forms.

We handle personal data in accordance with the Personal Data Protection Act 2010 (Malaysia), as amended (“PDPA”).

02What we collect

Depending on how you take part, we collect:

• Identity and contact details — full name, IC number, email addresses, contact number and designation.
• Business details — company and brand name, SSM registration number, industry, website or social media, business introduction and transformation story.
• Images and media — your personal portrait, company logo, and company and product videos (uploaded or linked).
• Payment evidence — the bank transfer receipts you upload. These usually show your name, bank, account details and the amount paid. We do not collect card numbers and the site does not process payments.
• Attendance details — attendee names, dietary requirements, and a record of when your entry pass was scanned at each event.
• Enquiries — the name, contact details and message you send through the enquiry form.

The public website does not use advertising or analytics cookies, and does not track you across other sites. Our hosting and security providers may record standard technical logs (such as IP address and browser type) to keep the service running and to prevent abuse.

03How we use it

• To process and verify your registration or nomination, and to confirm your payment.
• To issue your entry pass and admit you at the Wealth Conference and the Award Ceremony.
• For the judging of nominations by the Organising Committee and appointed judges.
• To contact you about CTA 2026 — confirmations, status updates, schedules and changes.
• To produce the event programme, stage presentations, certificates, trophies and press materials for nominees.
• To answer your enquiries.
• To keep the programme’s financial and administrative records, as JCI Batu Kawan is required to.

04Portraits, photos and videos

If you are a nominee, the portrait, logo and videos you submit may be shown in the event programme, on the stage screen at the Award Ceremony, on this website, on JCI Batu Kawan and partner social media pages, and in press and media materials about CTA 2026. Photography and videography also take place at both events.

You may ask us to stop using your portrait or videos at any time. We will stop using them in anything produced after your request. We cannot recall material that has already been printed, broadcast or published by the media before your request.

05Who we share it with

We share personal data only where it is needed for CTA 2026:

• The CTA 2026 Organising Committee and JCI Batu Kawan officers handling the programme.
• The appointed judges, for nominee submissions.
• Co-hosts and event, media and photography partners engaged for the programme, only as far as their role requires.
• Service providers who run the systems behind the site on our behalf — website hosting and security (Cloudflare), email delivery (Resend), video storage (Google Drive), and the server and database that hold registrations. Some of these providers may store data outside Malaysia; we use them only for the purposes in this policy.
• Authorities, where the law requires us to.

We do not sell your personal data or share it for unrelated marketing.

06How we protect it

• The site is served over an encrypted (HTTPS) connection.
• Payment receipts, portraits and other uploads are not published on the public website. They are stored privately and can only be opened through the committee’s password-protected admin console.
• Access to registration data is limited to committee members who need it for their role.
• Forms are rate-limited to slow down automated abuse.

No system is completely secure. If something does go wrong, the next section explains what we will do.

07If there is a data breach

A data breach is any loss of, or unauthorised access to, personal data we hold — for example a hacked account, a lost device, or a file sent to the wrong person. If we become aware of one, we will:

1. Contain it — act immediately to stop further access, such as changing credentials, taking affected systems offline or retrieving misdirected data.
2. Assess it — establish what data was involved, whose, and the likely harm.
3. Notify the Personal Data Protection Commissioner where the PDPA requires it, within the time the law sets (currently within 72 hours of becoming aware of the breach).
4. Tell you without unnecessary delay if the breach is likely to cause you significant harm. We will tell you what happened, what data was affected, what we have done, and what you can do to protect yourself — for example, watching for scam calls or messages that quote your registration details.
5. Prevent it happening again — review what failed and fix it, and keep a record of the breach and our response.

If you think your data has been exposed, or you receive a suspicious message claiming to be from CTA 2026, contact us straight away at president@jcibatukawan.org. We will never ask you for a password or for payment to a new bank account by email or WhatsApp.

08How long we keep it

We keep registration and nomination records for the duration of CTA 2026 and for up to seven years afterwards, for audit, financial reporting and archival purposes. Enquiries are kept only as long as needed to deal with them and for the programme’s records. When data is no longer needed, we delete it or make it anonymous. You can ask us to delete your data earlier — see below.

09Your rights

Under the PDPA you may:

• Ask for a copy of the personal data we hold about you.
• Ask us to correct data that is inaccurate, incomplete or out of date.
• Withdraw your consent, or ask us to limit how we use your data — including the use of your portrait and videos.
• Ask us to delete your data, where we are not required to keep it.
• Ask for a copy of data you provided to be sent to you or another organisation, where the PDPA gives that right.

Write to president@jcibatukawan.org with your name and registration reference. We will reply within 21 days. Withdrawing consent before the events may mean we can no longer process your registration or nomination.

If you are not satisfied with our response, you may complain to the Department of Personal Data Protection (Jabatan Perlindungan Data Peribadi), Malaysia.

10Children

Registration is intended for adults. If you are under 18, please ask a parent or guardian to register on your behalf.

11Changes to this policy

We may update this policy, for example if we add a new service or the law changes. The date at the top shows when it last changed. If a change significantly affects how we use data you have already given us, we will tell you by email.

12Contact us

For any question about your personal data:
JCI Batu Kawan — CTA 2026 Organising Committee
Email: president@jcibatukawan.org
Phone: David Chew, +60 17-495 2260