ORIX Leasing Malaysia Berhad (15741-D) and its group of companies namely, ORIX Credit Malaysia Sdn Bhd (67108-U), ORIX Rentec (Malaysia) Sdn Bhd (409683-T), ORIX Factoring Malaysia Sdn Bhd (204002-V), ORIX Auto Leasing Malaysia Sdn Bhd (23992-T), ORIX Car Rentals Sdn Bhd (179154-P), ORIX Equipment Rental Sdn Bhd (196015-V), ORIX Insurance Agencies Sdn Bhd (301731-W), ORIX Risk Management Sdn Bhd (350234-W), ORIX Protect Sdn Bhd (574279-K), ORIX Asset Management Malaysia Sdn Bhd (803523-H) and ORIX Energy Malaysia Sdn Bhd (67887-A) (collectively, “ORIX”) respect the privacy of individuals with regard to their personal data. This Notice is issued pursuant to provisions under the Personal Data Protection Act 2010 (“Act”) and any reference to “personal data” herein shall have the same meaning as defined under the Act.

1. Processing of personal data

1.1 By signing herein this Notice, you hereby consent to ORIX processing your personal data as provided by you or as ORIX may obtain from or through public records or other sources in the course of providing financial services / facilities such as (but not limited to) hire-purchase, equipment & auto leasing, factoring, term loan, car & equipment rental and insurance to ORIX’s customer or to you.

1.2 The personal data collected by ORIX generally include your name, national registration identification number, address, telephone number and other personal data required for providing financial services / facilities to ORIX’s customer or to you.

1.3 ORIX will process your personal data, broadly, for the following purposes:

(a) to evaluate / consider ORIX’s customer or your application for ORIX’s financial services / facilities;

(b) to establish a relationship between you and ORIX;

(c) to update your records with ORIX;

(d) to communicate and / or respond to any of your requests for information;

(e) to monitor the conduct of ORIX customer’s / your account(s);

(f) to support ORIX and / or its related companies’ business, risk management, cross-marketing of financial services / facilities;

(g) to assess and monitor ORIX’s customer / your creditworthiness;

(h) to enable relevant parties to evaluate any actual or proposed assignment, participation, sub-participation and / or novation of ORIX’s rights and / or obligation under any financial services / facilities;

(i) for general operation and maintenance of financial services / facilities;

(j) for enforcement against ORIX’s customer and / or your obligation, including without limitation the collection of amounts outstanding from ORIX’s customer;

(k) for prevention and detection of crime;

(l) for compliance with the requirements for retention of personal data pursuant to any applicable law(s);

(m) for any purpose required by law or regulation; and
(n) for all other actions and processes incidental to or associated with the above,
(hereinafter referred to as “Purposes”).

1.4 While processing your personal data for the Purposes, ORIX may need to disclose or transfer your personal data to companies within ORIX and / or to its related companies, and to third parties including agents and service providers relating to the Purposes for which your personal data are collected, to credit reporting agencies, business partners or licensees, financial institutions or any person who is under a duty to keep the personal data confidential, who may be located within or outside Malaysia. In the event that ORIX discloses or transfers your personal data to those aforesaid parties, ORIX will require the parties to process your personal data with at least the same degree of care that ORIX uses to protect its own confidential and proprietary information.

1.5 ORIX may also disclose your personal data if required to do so by law, if such action is necessary to comply with any court or regulatory orders or accounting requirements or in good faith to protect and defend the rights and property of ORIX.

1.6 All your personal data held by ORIX will be kept confidential and secured in accordance with ORIX’s Information Security Policy and pursuant to any applicable law that from time to time be in force.

1.7 All reasonable efforts and practical steps will be taken to ensure that all your personal data held by ORIX are kept and are protected against any loss, misuse, modification, unauthorized or accidental access or disclosure, alteration or destruction. All reasonable efforts and practical steps will also be taken to ensure that your personal data kept by ORIX are destroyed or permanently deleted if your personal data are no longer required for the Purposes and have complied with all requirements for retention by law.

1.8 While you are neither bound nor obligated to provide ORIX with any of your personal data, your choice not to do so may result in ORIX’s customer or you not being able to secure any of the financial services / facilities that may be offered / provided by ORIX.

2. Your rights as a data subject under the Act

2.1 You have the following rights in respect of your personal data:

(a) to request for access to and make correction of your personal data kept and held by ORIX;

(b) to request ORIX to cease processing your personal data that will cause damage or distress to you or another person who may be identified from your personal data;

(c) to request ORIX to limit the processing of your personal data or personal data of another person who may be identified from your personal data;

(d) to request ORIX to cease processing your personal data for purposes of direct marketing; and

(e) to withdraw your consent for ORIX to continue processing your personal data.

2.2 If you wish to exercise any of your above rights or to make any inquiries or complaints in respect of your personal data, you may contact ORIX’s Data Protection Officer at 03-2632-7367, and write to The Data Protection Officer, Suite 19-1, Level 19, Vertical Corporate Tower B, Avenue 10, The Vertical, Bangsar South City, No.8, Jalan Kerinchi, 59200 Kuala Lumpur. The foregoing inquiries or requests for your personal data are subject to prescribed fees and requirements under the Act.

---

NOTIS DAN PERSETUJUAN MENURUT AKTA PERLINDUNGAN DATA PERIBADI 2010 ("NOTIS")




ORIX Leasing Malaysia Berhad dan anak-anak syarikatnya iaitu, ORIX Credit Malaysia Sdn. Bhd. (67108-U), ORIX Rentec (Malaysia) Sdn Bhd (409683-T), ORIX Factoring Malaysia Sdn Bhd (204002-V), ORIX Auto Leasing Malaysia Sdn Bhd (23992-T), ORIX Car Rentals Sdn Bhd (179154-P), ORIX Equipment Rental Sdn Bhd (196015-V), ORIX Insurance Agencies Sdn Bhd (301731-W), ORIX Risk Management Sdn Bhd (350234-W), ORIX Protect Sdn Bhd (574279-K), ORIX Asset Management Malaysia Sdn Bhd (803523-H) dan ORIX Energy Malaysia Sdn Bhd (67887-A) (secara kolektif, “ORIX”) menghormati privasi individu-individu berkenaan dengan data peribadi mereka. Notis ini dikeluarkan menurut peruntukan di bawah Akta Perlindungan Data Peribadi 2010 ("Akta") dan sebarang rujukan kepada "data peribadi" hendaklah mempunyai pengertian yang sama sebagaimana yang ditakrifkan di bawah Akta.

1. Pemprosesan data peribadi

1.1 Dengan menandatangani Notis ini, anda dengan ini bersetuju untuk ORIX memproses data peribadi anda sepertimana yang diberikan oleh anda atau sebagaimana ORIX boleh perolehi daripada atau melalui sumber-sumber awam atau sumber-sumber lain dalam penyediaan perkhidmatan kewangan / kemudahan oleh ORIX seperti (tetapi tidak terhad kepada) sewa-beli, pajakan peralatan & kenderaan, pemfaktoran, pinjaman berjangka, sewa kereta & peralatan dan insurans kepada pelanggan ORIX atau kepada anda.

1.2 Data peribadi yang dikumpul oleh ORIX secara amnya termasuk nama anda, nombor pengenalan pendaftaran negara, alamat, nombor telefon dan data peribadi lain yang diperlukan dalam penyediaan perkhidmatan kewangan / perkhidmatan kepada pelanggan ORIX atau kepada anda.

1.3 ORIX akan memproses data peribadi anda, secara meluas, bagi maksud-maksud yang berikut:

(a) untuk menilai / mempertimbangkan permohonan pelanggan ORIX / permohonan anda untuk perkhidmatan kewangan / kemudahan oleh ORIX;

(b) untuk membina hubungan antara anda dan ORIX;

(c) untuk mengemas kini rekod-rekod anda dengan ORIX;

(d) untuk berkomunikasi dan / atau bertindak balas terhadap sebarang permintaan anda untuk mendapatkan maklumat;

(e) untuk memantau keadaan akaun pelanggan ORIX atau akaun anda;

(f) untuk menyokong perniagaan ORIX dan / atau syarikat-syarikat yang berkaitan dengannya, pengurusan risiko, pemasaran silang perkhidmatan kewangan / kemudahan;

(g) untuk menilai dan memantau kelayakan kredit;

(h) untuk membolehkan pihak-pihak yang berkaitan menilai mana-mana penyerahan hak yang sebenar atau yang disarankan, penyertaan, sebahagian penyertaan dan / atau novasi hak-hak dan / atau obligasi ORIX di bawah mana-mana perkhidmatan kewangan / kemudahan;

(i) untuk operasi umum dan penyelenggaraan perkhidmatan kewangan / kemudahan;

(j) untuk penguatkuasaan terhadap pelanggan ORIX dan / atau obligasi anda, termasuk tanpa had kutipan jumlah tertunggak daripada pelangan ORIX;

(k) untuk pencegahan dan pengesanan jenayah;

(l) untuk mematuhi kehendak pengekalan data peribadi menurut mana-mana undang-undang yang terpakai;

(m) untuk apa-apa maksud yang dikehendaki oleh undang-undang atau peraturan; dan

(n) untuk segala tindakan dan proses-proses lain yang bersampingan dengan atau yang berkaitan dengan perkara di atas,
(selepas ini dirujuk sebagai "Maksud-Maksud").

1.4 Semasa memproses data peribadi anda untuk Maksud-Maksud, ORIX mungkin perlu mendedahkan atau memindahkan data peribadi anda kepada syarikat-syarikat dalam ORIX dan / atau kepada syarikat-syarikat berkaitan dengannya, dan kepada pihak-pihak ketiga termasuk ejen-ejen dan pembekal-pembekal perkhidmatan yang berkaitan dengan Maksud-Maksud di mana data peribadi dikumpul, kepada agensi-agensi pelaporan kredit, rakan-rakan niaga atau pemegang-pemegang lesen, institusi-institusi kewangan atau mana-mana perseorangan yang bertanggungjawab untuk menyimpan data peribadi sebagai sulit, yang mana mungkin berada di dalam atau di luar Malaysia. Sekiranya ORIX mendedahkan atau memindahkan data peribadi anda kepada pihak-pihak tersebut di atas, ORIX akan menghendaki pihak-pihak tersebut untuk memproses data peribadi anda dengan sekurang-kurangnya tahap penjagaan yang sama yang ORIX gunapakai untuk melindungi maklumat sulit dan proprietari milik ORIX sendiri.

1.5 ORIX juga boleh mendedahkan data peribadi anda jika dikehendaki berbuat demikian oleh undang-undang, jika tindakan tersebut adalah perlu untuk mematuhi mana-mana perintah mahkamah atau peraturan atau keperluan perakaunan atau dengan niat baik untuk melindungi dan mempertahankan hak-hak dan harta ORIX.

1.6 Semua data peribadi anda yang dipegang oleh ORIX akan dirahsiakan dan dijamin mengikut Dasar Keselamatan Maklumat ORIX dan menurut mana-mana undang-undang yang berkuatkuasa dari semasa ke semasa.

1.7 Segala usaha yang munasabah dan langkah-langkah yang praktikal akan diambil untuk memastikan bahawa semua data peribadi anda yang dipegang oleh ORIX disimpan dan dilindungi daripada sebarang kehilangan, salah guna, pengubahsuaian, akses atau pendedahan tidak dibenarkan atau tidak sengaja, pengubahan atau pemusnahan. Segala usaha yang munasabah dan langkah-langkah praktikal juga akan diambil oleh ORIX untuk memastikan bahawa data peribadi anda yang disimpan oleh ORIX dimusnahkan atau dipadamkan secara kekal jika data peribadi anda tidak lagi diperlukan bagi Maksud-Maksud dan telah mematuhi semua kehendak pengekalan oleh undang-undang.

1.8 Walaupun anda tidak terikat atau tidak berkewajipan untuk memberikan kepada ORIX mana-mana data peribadi anda, pilihan anda untuk tidak berbuat demikian boleh mengakibatkan pelanggan ORIX atau anda tidak boleh mendapatkan apa-apa perkhidmatan kewangan / kemudahan yang boleh ditawarkan / disediakan oleh ORIX.

2. Hak-hak subjek data di bawah Akta

2.1 Anda mempunyai hak-hak yang berikut berkenaan dengan data peribadi anda:

(a) untuk meminta akses dan membuat pembetulan terhadap data peribadi anda yang disimpan dan dipegang oleh ORIX;

(b) untuk meminta ORIX berhenti memproses data peribadi anda yang boleh menyebabkan kerosakan atau kesusahan kepada anda atau orang lain yang
boleh dikenalpasti daripada data peribadi anda;

(c) untuk meminta ORIX menghadkan pemprosesan data peribadi anda atau data peribadi orang lain yang boleh dikenalpasti daripada data peribadi anda;

(d) untuk meminta ORIX berhenti memproses data peribadi anda untuk tujuan pemasaran secara langsung; dan

(e) untuk menarik balik persetujuan anda kepada ORIX untuk memproses data peribadi anda.

2.2 Jika anda ingin melaksanakan mana-mana hak anda di atas atau membuat sebarang pertanyaan atau aduan berkenaan dengan data peribadi anda, anda boleh menghubungi Pegawai Perlindungan Data ORIX di 03-2632-7367, dan menulis kepada Pegawai Perlindungan Data, Suite 19-1, Level 19, Vertical Corporate Tower B, Avenue 10, The Vertical, Bangsar South City, No.8, Jalan Kerinchi, 59200 Kuala Lumpur. Pertanyaan yang tersebut di atas atau permintaan untuk data peribadi anda adalah tertakluk kepada yuran yang telah ditetapkan dan kehendak-kehendak di bawah Akta.

ORIX Rentec (Singapore) Pte Ltd respects the privacy of individuals with regard to their Personal Data. This
Notification describes how we manage our obligations in relation to the collection, use and disclosure of Personal
Data and to the provisions of the “Do Not Call” Registry in compliance with the Singapore Personal Data Protection
Act 2012 (No. 26 of 2012) (“PDPA”). This Notification is issued pursuant to provisions under the PDPA and any
reference to “Personal Data” herein shall have the same meaning as defined under the PDPA.

1. Collection of Personal Data

1.1 Personal Data may be collected from you or we may obtain from or through public records or other sources
in providing financial services / facilities such as (but not limited to) rental of test & measurement,
analytical, ICT and office equipment to you as our customer / as guarantor / as security provider.

1.2 Personal Data collected by us generally include your name, national registration identity number, address,
telephone number and other Personal Data required for providing financial services / facilities to you as our
customer / as guarantor / security provider.

1.3 Unless permitted by applicable law(s), we will not collect your Personal Data without your consent.

2. Purposes for which we collect, use, disclose or transfer your Personal Data

2.1 Your Personal Data may be collected, used and/or disclosed broadly, for the following purposes:

(a) to evaluate / consider your application / guarantee / security for our financial services / facilities;

(b) to establish a relationship between you and us;

(c) to update your records with us;

(d) to communicate and / or respond to any of your requests for information;

(e) to monitor the conduct of our customer’s account(s);

(f) to support us and / or our related companies’ businesses, risk management, cross-marketing of
financial services / facilities;

(g) to assess and monitor our customer / your creditworthiness;

(h) to enable relevant parties to evaluate any actual or proposed assignment, participation, subparticipation
and / or novation of our rights and / or obligation under any of the financial services /
facilities;

(i) for general operation and maintenance of the financial services / facilities;

(j) for enforcement against our customer and / or your obligation, including without limitation the
collection of amounts outstanding from our customer;

(k) for prevention and detection of crime;

(l) for compliance with the requirements for retention of Personal Data pursuant to any applicable
law(s);

(m) for any purpose required by law or regulation;

(n) for other purposes for which we have obtained your consent; and

(n) for all other actions and processes incidental to or associated with the above,

(hereinafter collectively referred to as “Purposes”).

2.2 You warrant and represent to us that (a) Personal Data which you disclose to us is accurate and complete;
and (b) where you volunteer Personal Data of another person to us, that you are authorized by such other
person to disclose such Personal Data to us, and that such Personal Data is accurate and complete.

2.3 Your Personal Data may be disclosed or transferred for Purposes indicated above to our holding company
and / or to its subsidiaries or related companies, and to third parties including agents and service providers
relating to the Purposes for which your Personal Data are collected, to credit reporting agencies, business
partners or licensees, financial institutions or any person who is under a duty to keep the Personal Data
confidential, who may be located within or outside of Singapore.

2.4 Save for relevant government regulators and authorities or law enforcement agencies, we will ensure that
such parties receiving your Personal Data (i) are under duty of confidentiality to us with respect to the use,
holding, processing, retention and/or transfer of your Personal Data; and (ii) have the need to know or
handle such Personal Data.

3. Access to or Make Correction of Personal Data

3.1 You may seek access to and make correction of your Personal Data (to a reasonable extent and as
permitted by the PDPA) at any time by writing to our Data Protection Officer mentioned herein.

3.2 We will, at your written request, endeavor to:

(a) provide you with an account of your Personal Data in our possession or control within a reasonable
time. Such account shall be in respect of how your Personal Data has been or may have been
generally used or disclosed within the year before the date of your request.

(b) correct your Personal Data that are in our possession or under our control as soon as reasonably
practicable.

4. Accuracy, Protection and Retention of Personal Data

4.1 All reasonable effort and practical steps will be taken to ensure that all your Personal Data collected, used
or disclosed by us is sufficiently accurate and complete in making any decision that impacts you. To help
us maintain the accuracy of your Personal Data, we encourage you to inform us when there are any
changes to your Personal Data which you have provided us by writing to the office of our Data Protection
Officer.

4.2 All your Personal Data held by us will be kept confidential and secured in accordance with our Information
Security Policy and pursuant to any applicable law that may from time to time be in force. All reasonable
efforts and practical steps will be taken to ensure that all your Personal Data held by us are kept and are
protected against any unauthorized access, collection, use, disclosure, copying, modification, disposal or
similar risks.

4.3 All reasonable efforts and practical steps will also be taken to ensure that your Personal Data kept by us
are destroyed or permanently deleted if your Personal Data are no longer required for the Purposes and
have complied with all requirements for retention by law.

5. Transfer of Personal Data

5.1 Your Personal Data may be transferred, stored and/or processed in a country or territory outside of
Singapore and you consent to any such transfer, storage and/or processing of your Personal Data. We will
however ensure that any party to whom we transfer your Personal Data to shall provide protection at least
comparable to the protection under the PDPA.

6. Do Not Call Registry

6.1 If you have provided us with your Singapore telephone number(s) and have indicated that you consent to
receiving marketing or promotional information via your Singapore telephone number(s), then from time to
time, we may contact you using such Singapore telephone number(s) (including via voice calls, text, fax or
other means) with information about our and/or our related companies’ financial services / facilities.

7. Withdrawal of Consent

7.1 You may withdraw your consent to our continued collection, use, disclosure or transfer of your Personal
Data or to our continued use or sending of marketing or promotional information via your Singapore
telephone number(s) with information about our and/or our related companies’ financial services / facilities,
at any time by writing to our Data Protection Officer mentioned herein.

7.2 In withdrawing your consent, you acknowledge that we may not be able to provide or continue providing
our financial services / facilities to our customer or to you or providing you information about our financial
services / facilities, and that we may cease such provision accordingly without any liability.

8. Contact Us

8.1 If you wish to make any request, inquiry, complaint or feedback in respect of your Personal Data, you may
contact our Data Protection Officer at telephone number 6745-4515, and write to The Data Protection
Officer, 10 Kaki Bukit Avenue 1,#02-05, Singapore 417942. The foregoing inquiry or request for your
Personal Data is subject to requirements under the PDPA and we reserve the right to charge a reasonable
administrative fee for carrying out your above request.