Privacy Policy

OTOSUBS processes personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

We collect your name, email, phone number, billing details and, for group bookings, participant details provided by the organiser, solely to deliver eSIM services, invoices and support.

Payment card details are handled by our payment providers; OTOSUBS never stores full card numbers.

You may request access to, correction of, or deletion of your personal data from your account Profile page or by contacting support.

Data controller: OTOSUBS GROUP SDN BHD (202201026893), B2-6 Liberty Arc @ Ampang Ukay, Persiaran Ampang Ukay, 68000 Ampang, Selangor. We process personal data in accordance with the Personal Data Protection Act 2010 (Malaysia) and its amendments.

Retention: account and profile data is kept while your account is active and deleted or anonymised within 24 months after closure or last activity. Orders, invoices, receipts, payment and commission records are kept for at least 7 years to meet Malaysian tax and accounting obligations. Support chats and tickets are kept for up to 24 months. Marketing consent records are kept until you withdraw consent plus 12 months. Security and audit logs are kept for up to 24 months.

Your rights: you may request access to or correction of your personal data, withdraw consent, or limit processing by contacting our Data Protection Officer. We respond within 21 days as required by law. Some requests may be refused where we must keep records by law.

Data Protection Officer: OTOSUBS GROUP SDN BHD, B2-6 Liberty Arc @ Ampang Ukay, Persiaran Ampang Ukay, 68000 Ampang, Selangor. Email: sales@otosubsim.com (subject: "PDPA Request"). If you are not satisfied with our response, you may contact the Personal Data Protection Commissioner of Malaysia.