NATURAL AVENUE SDN BHD (231509-A)
Special Cash Sweep | www.cashsweep.my
PERSONAL DATA PROTECTION NOTICE
(Pursuant to the Personal Data Protection Act 2010 & Personal Data Protection (Amendment) Act 2024)

---

1. Who We Are

Natural Avenue Sdn Bhd (Registration No: 199201000005 (231509-A)) ('NASB', 'we', 'us', 'our'), a subsidiary of Berjaya Assets Berhad, is the Data Controller responsible for the personal data you provide to us in connection with the Special Cash Sweep lottery operations and the website www.cashsweep.my.

2. Personal Data We Collect

We may collect the following personal data about you:
Full name, NRIC number or passport number;

• Contact information: address, telephone number, email address;
• Financial information: bank account details (for prize payment purposes);
• Technical data: IP address, browser type, cookies, and website usage data;
• Images: photographs or video recordings at our premises, events, or through CCTV surveillance; and
• Other information you voluntarily provide to us, including through surveys, contests, or job applications.

3. Why We Collect Your Personal Data

Your personal data is collected and processed for the following purposes:

• To verify your identity and process prize claims;
• To communicate with you about our products, services, and promotions;
• To administer contests, surveys, and marketing activities;
• To process and evaluate employment applications;
• To comply with our obligations under applicable laws including the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA) and gaming regulations;
• To operate and improve our website and services through analytical data; and
• To ensure the security of our premises and operations.

4. Who We Share Your Personal Data With

Your personal data may be disclosed to:

• Employees and authorised personnel of NASB and Berjaya Assets Berhad group companies;
• Third-party service providers (Data Processors) acting on our behalf — including IT providers, payment processors, auditors, and marketing agencies — all bound by written agreements and PDPA obligations;
• Relevant government authorities, regulators, law enforcement, or courts where required by law; and
• Third parties in connection with any business transfer or restructuring, subject to equivalent data protection standards.

We do not sell, rent, or trade your personal data for third-party commercial purposes.

5. Transfer of Personal Data Outside Malaysia

Where we transfer your personal data outside Malaysia (e.g., via Google Analytics servers), we do so only to jurisdictions that provide an adequate level of data protection as required under the PDPA 2024. Appropriate contractual safeguards are implemented where required.

6. Data Retention

We retain your personal data only for as long as necessary for the purposes stated above, or as required by law. Prize claim records are retained for a minimum of 7 years. When data is no longer required, it is securely deleted or anonymised.

7. Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, disclosure, alteration, or destruction, including encryption, access controls, and regular security reviews.

8. Data Breach Notification

In the event of a data breach likely to cause harm, we will notify the PDP Commissioner and affected data subjects in accordance with our obligations under the PDPA 2024 and applicable guidelines, within the prescribed timelines.

9. Your Rights

Under the PDPA 2010 and PDPA 2024, you have the right to:

• Access your personal data held by us;
• Correct inaccurate or incomplete personal data;
• Withdraw your consent to the processing of your personal data;
• Request restriction of processing of your personal data;
• Data portability — request transfer of your data to another data controller (where technically feasible); and
• Object to processing of your personal data for direct marketing purposes.

To exercise any of these rights, please contact us using the details below. Please note that withdrawal of consent may affect our ability to provide certain services to you.

10. Cookies

Our website uses cookies to improve your browsing experience. These include strictly necessary cookies, analytical cookies (Google Analytics), and functional cookies. You may manage cookies through your browser settings. To opt out of Google Analytics, visit: https://tools.google.com/dlpage/gaoptout.

11. Contact Our Data Protection Officer (DPO)

For any queries, requests, or concerns regarding your personal data or this Notice, please contact our Data Protection Officer:

Email	nadpo@timessquarekl.com
Telephone	6082-333666
Post	Data Protection Officer, Natural Avenue Sdn Bhd (231509-A), [Registered Address, Kuching, Sarawak]
Website	www.cashsweep.my/privacy

12. Updates to This Notice

This Notice may be updated periodically to reflect changes in law or our operations. Any updates will be published on www.cashsweep.my. The current version of this Notice is effective from 18 June 2026.

 

---

Natural Avenue Sdn Bhd (Registration No: 199201000005 (231509-A))
Effective Date: 18 June 2026  |  Aligned with PDPA 2010 & Personal Data Protection (Amendment) Act 2024