Privacy

Privacy Policy

Last updated: October 5, 2026

AAC Distribution Sdn Bhd (Registration No. 200401003622 [642125-X]) ("AAC", "we", "us" or "our") respects your privacy. This Privacy Policy is our notice under the Personal Data Protection Act 2010 of Malaysia, as amended by the Personal Data Protection (Amendment) Act 2024 (together, the "PDPA"). It explains what personal data we collect, why we collect it, who we share it with, and the rights you have. It applies to personal data we collect through aacgroup.com.my, store.aacgroup.com.my, our dealer portal, and when you contact us by phone, email or WhatsApp.

1. Who we are

AAC Distribution Sdn Bhd is the data controller responsible for your personal data. We are a security and network infrastructure distributor in Malaysia.
Headquarters: 25, Jalan Emas Putih, Taman Sri Putri, 81300 Skudai, Johor, Malaysia.
Central Sales Office: 38, Jalan Layang-Layang 4, Bandar Puchong Jaya, 47100 Puchong, Selangor, Malaysia.

2. Personal data we collect

We only collect personal data that is relevant to our business with you:

• Enquiries: your name, email address, phone number, state and the message you send us through our enquiry form, email, phone or WhatsApp.
• Dealer accounts: your name, company name, username, password (stored in encrypted, hashed form), phone number, business address, state and your assigned AAC sales contact.
• Orders and business dealings: details needed to quote, sell, deliver, invoice and support products, such as delivery address, billing details and purchase history.
• Technical data: your IP address, browser and device type, and the cookies described in section 9, collected automatically when you use our websites.

We collect this data directly from you, from your company when it registers you as a contact, or from our brand partners when they refer an enquiry to us. We do not intend to collect sensitive personal data (such as health, religious, political or biometric data), and we ask that you do not send it to us.

3. Why we use your personal data

• To respond to your enquiries and provide product, pricing and technical information.
• To set up and manage dealer accounts and give you access to dealer pricing and resources.
• To process quotations, orders, deliveries, invoices, warranty claims and technical support.
• To send you product updates, promotions and event invitations, where you have agreed to receive them (see section 6).
• To keep our websites secure, prevent spam and fraud, and improve our websites and services.
• To comply with our legal, tax, accounting and regulatory obligations, and to protect our legal rights.

4. Is providing your data mandatory?

Fields marked as required on our forms are mandatory. If you do not provide them, we may not be able to respond to your enquiry, create a dealer account or complete an order. All other information is voluntary.

5. Who we share your data with

We do not sell your personal data. We only share it, where necessary for the purposes above, with:

• Our related companies, branches and staff who need it to serve you.
• The brands we distribute (for example, for warranty, product registration or project support).
• Service providers who act on our behalf, such as web hosting, email, Cloudflare (spam and bot protection), Meta (WhatsApp messaging), courier and logistics companies, payment providers, and our IT, accounting and professional advisers.
• Government agencies, regulators, courts or law enforcement, where required or permitted by law.
• A buyer or successor, if all or part of our business is sold or reorganized, under equivalent privacy protections.

Our service providers may only use your data to provide services to us and must keep it secure, as required by the PDPA.

6. Direct marketing

We will only send you marketing messages by email, SMS or WhatsApp if you have agreed to receive them or you are an existing business contact. You can ask us to stop at any time by replying "STOP", using the unsubscribe link in our emails, or contacting us (see section 13). We will stop within a reasonable time, and this will not affect messages about your existing orders or account.

7. Transfers outside Malaysia

Some of our service providers (such as Cloudflare, Google and Meta) may store or process data on servers outside Malaysia. We only transfer personal data outside Malaysia where the PDPA allows it, for example where the destination has laws substantially similar to the PDPA or ensures an adequate level of protection, or where the transfer is necessary to provide our services to you.

8. Third-party content on our websites

Our websites include embedded content and links from third parties, including Google Maps, Google Fonts, YouTube, a Google Reviews widget by SociableKit, WhatsApp, and our Facebook, Instagram and TikTok pages. These third parties may collect data such as your IP address under their own privacy policies, which we do not control. We encourage you to read them.

9. Cookies

We use a small number of cookies that are needed for our websites to work:

• Session cookie (PHPSESSID): keeps you signed in and remembers your choices while you browse. It is deleted when you close your browser.
• Sign-in cookies (usessionid, upsession): keep dealers signed in for up to 180 days. They are removed when you sign out.
• Security cookies set by Cloudflare Turnstile to check that a form is submitted by a person, not a bot.

We do not currently use advertising or analytics cookies on aacgroup.com.my. You can block or delete cookies in your browser settings, but parts of the website, such as dealer sign-in, may stop working.

10. How we protect your data

We take practical technical and organizational steps to protect your personal data from loss, misuse, unauthorized access, change or disclosure. These include encrypted connections (HTTPS), hashed passwords, restricted access for authorized staff only, and bot protection on our forms. We also require our service providers to protect the data they process for us. No system is completely secure, so please keep your dealer password confidential.

If a personal data breach occurs that is likely to cause significant harm, we will notify the Personal Data Protection Commissioner and, where required, the affected individuals, as required by the PDPA.

11. How long we keep your data

We keep personal data only for as long as needed for the purposes in this policy, or longer where required by law (for example, Malaysian tax and company records are generally kept for at least 7 years). When it is no longer needed, we securely delete, destroy or anonymize it.

12. Your rights

Under the PDPA, you have the right to:

• Access the personal data we hold about you. We may charge a fee permitted by the PDPA regulations, and we will respond within 21 days of receiving a complete request.
• Correct personal data that is inaccurate, incomplete, misleading or out of date. Dealers can also update details in the Account Information page.
• Withdraw your consent to our processing of your personal data, subject to legal or contractual restrictions.
• Stop direct marketing at any time (see section 6).
• Ask us to stop processing that is causing, or is likely to cause, you substantial damage or distress.
• Data portability: ask us to transmit your personal data to another data controller, where technically feasible.

To make a request, contact us using the details in section 13. We may need to verify your identity first. If we have to refuse a request, we will tell you why, as permitted by the PDPA.

13. Contact us

For any questions, requests or complaints about your personal data, please contact our Data Protection Officer:
Email: sales@aacgroup.com.my
Phone: +603 8062 3919 (Monday to Friday, 9:00am to 6:00pm)
Post: Data Protection Officer, AAC Distribution Sdn Bhd, 38, Jalan Layang-Layang 4, Bandar Puchong Jaya, 47100 Puchong, Selangor, Malaysia.

If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Commissioner of Malaysia (Jabatan Perlindungan Data Peribadi) at www.pdp.gov.my.

14. Children

Our websites and services are intended for businesses and adults. We do not knowingly collect personal data from anyone under 18 without the consent of a parent or guardian.

15. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be posted on this page with the "Last updated" date. If we make significant changes, we will let you know through our website or by email where appropriate.

16. Language

This Privacy Policy is available in English and Bahasa Malaysia. If there is any inconsistency between the two versions, the English version will prevail to the extent permitted by law.