Privacy Policy
Introduction
At Ice Dino Indoor Theme Park (referred to as “we,” “our,” or “us”), we value the privacy and security of our visitors’ personal information. This Privacy Policy outlines how we collect, use, and protect personal information in accordance with the Malaysian Personal Data Protection Act 2010 (“PDPA”). By visiting our theme park, signing up for membership, or completing entry consent forms, you agree to the terms of this Privacy Policy.
1. Information We Collect
We may collect the following types of personal information from you, either directly or through our website and forms:
Personal Identification Information: Name, age, gender, IC number, passport number (if applicable). We collect IC numbers strictly for membership verification and to prevent fraudulent registrations. Your IC number will be securely stored and used only for identity verification and fraud prevention. It will not be used for marketing, shared with third parties, or disclosed without your explicit consent, unless required by law.
Contact Information: Email address, phone number, and mailing address.
Membership Information: Details related to your membership registration, preferences, and history with us.
Health and Safety Information: Information required for entry consent forms, such as any medical conditions, emergency contacts, or consents for safety purposes.
Payment Information: Details of payments made to us for membership or event bookings (note: we do not store full credit card details on our systems).
Children’s Information: We may collect the first names and birth months of children for membership verification, age-based promotions, and special events. We only collect this information from parents or legal guardians.
2. How We Use Your Information
We may use your personal information for the following purposes:
Membership Management: To create and maintain your membership account, manage benefits, and notify you of updates or exclusive offers.
Safety and Security: To ensure the safety of all visitors, especially children, and to obtain necessary consents for entry or participation in activities.
Communication: To contact you regarding bookings, events, promotions, or updates about Ice Dino.
Marketing and Promotions: To send you information about our latest events, special offers, and activities, with your consent.
Legal Compliance: To comply with applicable laws and regulations, including safety regulations and data protection requirements.
We use IC numbers only for verifying identity during membership registration and access to Ice Dino facilities. This information is protected with strict security measures, will not be used for marketing, and is never shared with third parties unless legally required.
By submitting your personal information, including IC numbers and children’s details, you acknowledge that you have read and agreed to this Privacy Policy. For online registrations, you must check the consent box before submitting your data.
3. Disclosure of Personal Information
We do not share your personal information with third parties, except in the following cases:
Service Providers: We may share data with trusted service providers for specific tasks (e.g., payment processing, marketing services) who are bound to keep your information confidential.
Legal Requirements: We may disclose information if required by law or to protect our rights, safety, or property, or that of our visitors or employees.
With Your Consent: In any other cases, we will disclose your information only with your explicit consent.
4. Data Security
We implement appropriate security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Access to personal data is restricted to authorized personnel only, and we regularly review our security practices to enhance data protection.
5. Retention of Personal Information
We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Membership information is retained for the duration of the membership, plus any additional time required for legal, regulatory, or legitimate business needs.
IC numbers collected for membership verification will be securely stored for the duration of the membership. Upon membership termination, IC numbers will be securely deleted within 30 days, unless required by law.
Children’s information collected for membership purposes will be retained for the duration of the membership. Upon membership termination, children’s data will be securely deleted within 30 days, unless required for legal or regulatory purposes.
6. Your Rights
Under the PDPA, you have the following rights concerning your personal information:
Access and Correction: You may request access to your personal information and request corrections if there are any inaccuracies.
Withdraw Consent: You may withdraw your consent for us to process your personal information at any time, subject to legal or contractual restrictions.
Limit Processing: You may limit the processing of your personal information in certain cases, such as for marketing purposes.
If you are a parent or legal guardian, you may request access to, correction of, or deletion of your child’s personal information. To exercise these rights, please contact us at the details provided below.
