BakoBoatTickets.com – Personal Data Protection Policy

This Personal Data Protection Policy (“PDPP”) is prepared in accordance with the Personal Data Protection Act 2010 (“PDPA”) of Malaysia, which regulates the processing of personal data for commercial transactions. This policy outlines how BakoBoatTickets.com (“we,” “our,” or “us”) collects, processes, and manages your Personal Data.

1. Definition of Personal Data

“Personal Data” refers to information that identifies you personally, including but not limited to your Full Name, National Identity Card Number (NRIC) / Passport Number, Contact Number, Email Address, Gender, Age, IP Address, and any other sensitive information required to facilitate your travel bookings.

2. Collection of Personal Data

We collect Personal Data in the following ways:

• Directly from you through our online booking forms, registration, and email or WhatsApp correspondences.
• Automatically via cookies and tracking technologies when you browse our website.

3. Purposes for Processing Personal Data

Your Personal Data is processed for the following essential business purposes:

• Booking Fulfillment: Processing your boat transfers, guide assignments, and national park entrance permits.
• Safety & Compliance: Creating passenger manifests as required by the Sarawak Rivers Board and for insurance purposes.
• Communication: Sending booking confirmations, rescheduling notices, and responding to inquiries via email or WhatsApp.
• Marketing: Providing updates on Bako National Park or tourism services in Kuching (only if you have opted in).
• Legal Compliance: Preventing fraudulent transactions and complying with statutory requirements in Malaysia.

Note: Providing Personal Data is voluntary; however, failure to do so will result in our inability to process your booking or secure your park permits.

3.1. Cookies and Third-Party Tracking Technologies

Our website utilizes cookies and tracking technologies to improve user experience and analyze website traffic. By using BakoBoatTickets.com, you consent to the processing of data by the following third-party providers:

• Google Analytics: We use this to understand how visitors engage with our site. This data is aggregated and anonymized to help us improve site navigation and content.
• Meta Pixel (Facebook/Instagram): We use the Meta Pixel to measure the effectiveness of our advertising, build advertising audiences, and provide relevant content to users who have visited our site.
• Microsoft Clarity: We use Microsoft Clarity to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve our booking interface.

4. Disclosure of Personal Data to Third Parties

To fulfill your booking, we may share your Personal Data with:

• Boat Operators: For the purpose of manifesting and boarding.
• Sarawak Forestry Corporation (SFC): For the issuance of national park entrance permits.
• Registered Tour Guides: If you have booked a guide service.
• Payment Processors: Specifically Stripe, to process your secure payment.
• Legal Authorities: If required by law or legal process.

5. Data Transfer Outside Malaysia

As we use international tools like Stripe and Google Workspace, your Personal Data may be transferred to, stored in, and processed in jurisdictions outside of Malaysia. We ensure that these third parties provide appropriate data protection measures in line with the PDPA.

6. Access and Correction of Personal Data

You have the right to access and request corrections to your Personal Data. If you wish to update your details or opt out of marketing communications, please submit a written request to:

• Designated Contact Person: Chris Cheng
• Email: bbt@bacoboattickets.com

7. Language Discrepancies

In the event of any inconsistencies between the English version and the Bahasa Malaysia version of this policy, the English version shall prevail.