AWESOME CREATIVES SDN. BHD.

Effective Date: 19 May 2026

1. Introduction

Awesome Creatives Sdn. Bhd. (Company No. 202501047977 / 1649385-P) (“Awesome Creatives”, “we”, “us”, “our”) is a Malaysian advertising, digital content, and influencer promotion company. We respect your privacy and are committed to protecting your personal data in accordance with the Personal Data Protection Act 2010 of Malaysia (“PDPA”), as amended by the Personal Data Protection (Amendment) Act 2024.

This Privacy Notice describes how we collect, use, disclose, and protect personal data when you interact with us through our website (awesomecreatives.org), our email (creators@awesomecreatives.org), our social channels, or in the course of a commercial or talent engagement.

By using our website or providing us with your personal data, you confirm that you have read and understood this Privacy Notice.

2. Who We Are

For the purposes of the PDPA, the data controller is:

Awesome Creatives Sdn. Bhd.

D0913, Residensi M Vertica, 555 Jalan Cheras

56000 Kuala Lumpur, Malaysia

Telephone: 03-87231831

Email: creators@awesomecreatives.org

3. Personal Data We Collect

We collect personal data in the following circumstances:

1. When you visit our website.

Our hosting provider and analytics services automatically log technical data such as your IP address, browser type and version, device identifiers, operating system, referring URL, pages visited, and timestamps. Cookies and similar tracking technologies are described in our separate Cookie Policy.

2. When you contact us.

If you submit an enquiry through our contact form, email us directly, or message us through our social media channels, we collect the information you choose to provide. This typically includes your name, company name, email address, phone number, and the contents of your message.

3. When you subscribe to communications.

If you sign up to receive updates, newsletters, or pitch materials, we collect your name, email address, and any preferences you indicate.

4. When you engage us as a client.

If your company engages Awesome Creatives for advertising, content production, or influencer campaign services, we collect personal data of authorised signatories, project contacts, marketing teams, and finance contacts. This includes names, job titles, business email addresses, business telephone numbers, business addresses, identification numbers required for tax invoicing, and payment details where applicable.

5. When you appear in or contribute to content.

If you participate in content produced by us (for example, as an interview subject, guest, model, or contributor), we collect your name, contact details, image, voice, likeness, and any rights releases or consent forms you sign.

6. When you apply to work with us.

If you submit a job application, freelance pitch, or talent profile, we collect your name, contact details, work history, portfolio links, and any other information you choose to share in your application.

4. Purposes of Collection

We use personal data for the following purposes:

• responding to enquiries and providing information about our services;
• preparing proposals, contracts, invoices, and other commercial documents;
• delivering advertising, content production, and influencer campaign services to clients;
• coordinating with talent, freelancers, vendors, and brand partners during campaign execution;
• issuing invoices, receiving payments, and complying with tax, accounting, and audit obligations;
• sending newsletters, pitch decks, case studies, and similar marketing communications, where you have opted in;
• improving our website, services, and content;
• protecting our legal rights, enforcing our agreements, and complying with applicable Malaysian laws including the Companies Act 2016, Income Tax Act 1967, Sales and Service Tax Act 2018, and Communications and Multimedia Act 1998;
• responding to lawful requests from regulators, courts, and government authorities.

5. Legal Basis for Processing

We process personal data on one or more of the following bases:

• Consent, which you provide when you submit a form, subscribe to a list, or otherwise voluntarily share your data;
• Performance of a contract to which you or your organisation is a party;
• Compliance with a legal obligation to which we are subject;
• Legitimate interests in operating our business, marketing our services, securing our systems, and responding to enquiries, provided that those interests are not overridden by your rights.

6. Disclosure to Third Parties

We do not sell personal data. We may disclose personal data to the following classes of third parties:

• Service providers who help us run our business, including our website host, email host, cloud storage, document signing, analytics, accounting, payroll, audit, and tax advisory providers;
• Banking partners, including Al Rajhi Banking & Investment Corporation (M) Berhad, for the purpose of receiving payments and issuing invoices;
• Brand clients and aggregator agencies with whom we are working on a specific campaign, where you are talent, a contributor, or a vendor on that campaign;
• Government authorities and regulators, including the Companies Commission of Malaysia (SSM), Lembaga Hasil Dalam Negeri (LHDN), the Royal Malaysian Customs Department, the Personal Data Protection Commissioner, and the Malaysian Communications and Multimedia Commission (MCMC), where required by law;
• Professional advisers, including our company secretary, auditor, and external legal counsel, where required for compliance, audit, or legal advice;
• Any successor entity in the event of a merger, acquisition, restructuring, or sale of the business or its assets.

7. Cross-Border Transfers

Some of our service providers (for example, our website host, email provider, and cloud storage provider) operate servers outside Malaysia. When personal data is transferred outside Malaysia, we take reasonable steps to ensure that the data is protected to a standard comparable to the PDPA, including through contractual safeguards, the service provider’s published privacy and security commitments, and applicable jurisdictional protections.

8. Retention

We retain personal data only for as long as is necessary for the purposes set out in this Notice, or for the period required by Malaysian law. Accounting, tax, and statutory records are retained for at least seven (7) years in accordance with the Income Tax Act 1967 and Companies Act 2016. When personal data is no longer required, we take reasonable steps to securely delete or anonymise it.

9. Your Rights

Under the PDPA, you have the right to:

• request access to your personal data;
• request correction of inaccurate, incomplete, misleading, or out-of-date personal data;
• withdraw your consent to the processing of your personal data, subject to any legal or contractual restrictions;
• request that we limit the processing of your personal data in certain circumstances;
• lodge a complaint with the Personal Data Protection Commissioner of Malaysia if you believe that your rights under the PDPA have been breached.

To exercise any of these rights, please contact us using the details in Section 13. We may need to verify your identity before responding to your request. We will respond to valid requests within twenty-one (21) days, or such other period as required by the PDPA.

10. Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These include access controls, encrypted storage where appropriate, password protection, and staff confidentiality obligations.

In the event of a personal data breach that poses a significant risk to data subjects, we will notify the Personal Data Protection Commissioner within seventy-two (72) hours of becoming aware of the breach, and we will notify affected data subjects without undue delay, in accordance with the PDPA.

11. Cookies and Tracking

Our website uses cookies and similar technologies. For details, please see our separate Cookie Policy, available at awesomecreatives.org/cookies.

12. Children

Our website and services are directed at businesses and adult professionals. We do not knowingly collect personal data from individuals under the age of eighteen (18). If you believe that we have collected personal data from a minor, please contact us so that we can delete it.

13. Changes to This Notice

We may update this Privacy Notice from time to time to reflect changes in our practices or in the law. The current version is always available at awesomecreatives.org/privacy. We will indicate the effective date at the top of the Notice. Where changes are material, we will take reasonable steps to bring them to your attention.

14. Contact

For any questions, requests, or complaints regarding this Privacy Notice or your personal data, please contact:

Data Protection Contact

Awesome Creatives Sdn. Bhd.

Email: creators@awesomecreatives.org

Telephone: 03-87231831

If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Commissioner of Malaysia (https://www.pdp.gov.my).