Explicit Consent for Child Data (PDPA Principle 2(2))

​

For participants under 18, we will seek the explicit consent of the Parent or Guardian for the collection and processing of the child’s personal data for the specific purposes outlined above, especially for public promotion.

​

Direct Marketing

We may use your (or your Parent/Guardian’s) contact details to send updates about future competitions, masterclasses, and related services that may be of interest.
 

• Basis: We will rely on the Parent/Guardian’s consent for marketing communications.

• Opt-Out: You, or the Parent/Guardian, have the right to withdraw consent or object to receiving marketing communications at any time by contacting us at [Insert Competition Email Address] or by using the ‘unsubscribe’ link in any email.

​

Disclosure and Sharing of Personal Data

We will only disclose your personal data to third parties as necessary for the purposes of the Competition and under strict data security controls. We routinely share personal data with:

​

• Judges: Submitted performance materials (video/audio/image) and participant names for evaluation.

• Service Providers: Third parties who help us run our business, such as IT support, website hosts, secure payment service providers, and postal/delivery companies (for certificates/prizes).

• Professional Advisors: External auditors, lawyers, and other professional advisors, who are bound by confidentiality obligations.

• Regulatory/Law Enforcement Bodies: Where legally required to comply with a court order or legal obligation.

We will never sell your personal data or share it with third parties for their independent marketing purposes.

​

Security of Personal Data (PDPA Principle 4)

We implement appropriate security measures to prevent unauthorised access, use, modification, disclosure, or accidental loss of your personal data.

​

• Access to your personal data is limited to personnel, judges, and third-party service providers on a need-to-know basis, and they are subject to strict confidentiality duties.

• We have procedures in place to deal with any suspected data security breach and will notify you and the Commissioner of Personal Data Protection (where legally required) of a suspected breach.

​

Retention of Personal Data (PDPA Principle 5)

We will retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including for satisfying any legal, accounting, or reporting requirements.

​

• Competition Records: Personal data necessary for competition administration (e.g., results, contractual records) will be kept for a period consistent with legal and financial requirements.

• Promotional Materials: Where specific consent is given for public promotion (e.g., names and images of winners), these may be retained indefinitely for archival and promotional purposes.

• Marketing: Data used for marketing will be retained until you, or the Parent/Guardian, withdraw consent or object.

​

Transferring Personal Data Outside Malaysia (PDPA Section 129)

It may be necessary to transfer your personal data outside of Malaysia to our service providers (e.g., cloud hosting services, website analytics providers).

We will only transfer your personal data outside Malaysia to countries that provide a standard of protection for personal data that is comparable to or higher than the PDPA, or where we have taken reasonable steps to ensure that the recipient organisation is legally bound to offer a standard of protection comparable to the PDPA.

​

Use of Cookies

Our website uses cookies (small text files placed on your device) to help us recognise you and your device, and to store information about your preferences or past actions.

For detailed information on the types of cookies we use, why we use them, and how you can manage or disable them, please refer to our separate Cookie Policy.

​

Your Rights (PDPA Section 30-36)

Under the PDPA, you (or your Parent/Guardian on your behalf) have the following rights regarding your personal data: