Skip to content

Privacy Policy

Last updated: 22 October 2026

Overview

This Privacy Policy explains how YS Elite Legacy ("we", "us" or "our") collects, uses, discloses and protects personal data when you visit our website, contact us, or engage our takaful agency services. We handle personal data in line with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

By using this website or providing your personal data to us, you consent to the practices described in this policy.

Information we collect

We only collect personal data that is necessary to respond to your enquiry and to provide our services.

We do not intentionally collect personal data about children, and we ask that you do not submit another person's personal data without their consent.

  • Identity and contact details such as your name, phone number, email address and mailing address.
  • Enquiry details you share with us, including the type of protection you are looking for and any message you send.
  • Application and claims information you provide when you take up a takaful plan, such as your date of birth, occupation, health declaration and beneficiary details.
  • Technical data such as your IP address, browser type and pages visited, collected through cookies and analytics.
  • Correspondence records, including calls, WhatsApp messages and emails exchanged with our consultants.

How we use your information

We use personal data for the following purposes:

We do not sell, rent or trade your personal data.

  • To respond to your enquiries and prepare quotations or proposals.
  • To process applications, renewals and claims with the relevant takaful operator.
  • To comply with legal, regulatory and Shariah requirements, including anti-money laundering checks.
  • To send service updates, renewal reminders and, where you have agreed, information about products that may be relevant to you.
  • To improve our website, services and customer support.
  • To protect our legal rights and prevent fraud.

Who we share your information with

Your personal data may be shared with the takaful operator or insurer that underwrites your plan, their appointed third parties, and service providers who support our operations such as IT, hosting and communication platforms. These parties are required to protect your data and use it only for the purposes we specify.

We may also disclose personal data where required by law, court order, or a regulator such as Bank Negara Malaysia.

Retention and security

We keep personal data only for as long as it is needed for the purpose it was collected, or as required by law, regulation and our record-keeping obligations. After that, the data is securely deleted or anonymised.

We use reasonable technical and organisational safeguards, including restricted access and secure transmission, to protect personal data against loss, misuse and unauthorised access. However, no method of transmission over the internet is completely secure.

Your rights

Subject to the PDPA, you have the right to:

To make a request, contact us using the details below. We may ask you to verify your identity before acting on your request.

  • Request access to the personal data we hold about you.
  • Request correction of any inaccurate or incomplete data.
  • Withdraw consent for marketing communications at any time.
  • Limit the processing of your personal data, where the law allows.
  • Ask us to stop processing your data, subject to our legal and contractual obligations.

Cookies and analytics

This website may use cookies and similar technologies to remember your preferences and understand how visitors use the site. You can disable cookies in your browser settings, although some parts of the website may not work as intended if you do.

If we use analytics services, the data is used in aggregate to improve the website and is not used to identify you personally.

Links to other websites

Our website may link to third-party websites, including takaful operator portals. We are not responsible for their privacy practices, and we encourage you to read their privacy policies before providing personal data.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or the law. The latest version will always be published on this page, with the updated date shown at the top.

Contact us

For any question about this policy or your personal data, please contact us:

YS Elite Legacy

18A Lorong Bertam Jaya 1, Taman Bertam Jaya, 13200 Kepala Batas, Penang

Phone / WhatsApp: 013-3204 996

Email: ys.elitelegacy@gmail.com

Who we are

Suggested text: Our website address is: http://yselitelegacy.com.

Comments

Suggested text: When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

Suggested text: If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Cookies

Suggested text: If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select "Remember Me", your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Suggested text: Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Who we share your data with

Suggested text: If you request a password reset, your IP address will be included in the reset email.

How long we retain your data

Suggested text: If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

Suggested text: If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where your data is sent

Suggested text: Visitor comments may be checked through an automated spam detection service.