Personal Data Protection Notice
Last updated September 20, 2026
PMCK Berhad and its subsidiaries are subject to the personal data protection principles under the Personal Data Protection Act 2010 (“PDPA”), with effect from 15 November 2013, which regulates the processing of personal data in commercial transactions. The terms “personal data”, “processing” and “commercial transactions” have the meanings given to them in the PDPA.
It is obligatory for you to provide us with your personal data. Failure to do so may result in us being unable to process and/or disclose your personal data for the purposes set out in section C below. This notice applies to any individual whose personal data is processed by Putra Medical Centre, and explains how your personal data is processed by and on behalf of PMCK Berhad.
A. Source of the personal data
Your personal data is collected from a variety of sources, including information you provide to us, information obtained from third parties, and information available in the public domain.
B. Description of the personal data
Where relevant, the personal data we process may include: name, date of birth, identity card or passport number, name of employer or company, home and office address, telephone and mobile number, facsimile number, email address, occupation, age, gender, marital status, weight, height, photographs, race, nationality, religion, family and next-of-kin information, medical check-up results, medical records, Medical Record Number (MRN), medical reports, diagnoses, personal health information, investigation results, insurance details, and any other personal data required for the purposes set out in section C below.
C. Purposes of the personal data
Where relevant, your personal data may be processed for the following purposes:
- To provide medical and healthcare services.
- To facilitate patients’ personal needs, such as an extension of stay for health tourists.
- To establish and manage medical records and medical reports.
- To facilitate payment processes relating to patients.
- To institute debt recovery proceedings against defaulters.
- To report personal data to the relevant authorities and third parties under the laws governing the healthcare industry.
- To market and advertise products and services.
- To administer and respond to requests, queries, complaints and legal matters.
- To facilitate human resource management activities relating to employees.
- To submit and register forms and licences with the relevant authorities and parties under the laws governing the healthcare industry.
- To share personal data for the purposes of banking facilities and the signing of legal and accounting documents.
- For any other purpose incidental to, or in furtherance of, the purposes above.
D. Disclosure of the personal data
Where relevant, your personal data may be disclosed to the following parties:
- Healthcare professionals, as defined in the PDPA
- Government agencies, local authorities and non-governmental agencies
- Employers, paying agents and insurance agents
- Debt collection authorities and agencies
- Financial institutions
- Legal firms
- Auditors
- Vendors and contractors
- Other private and public hospitals
- Other healthcare providers
- Training providers
- Family members and next of kin
- Other parties as may be required by law, a court, a regulator or legal process
- Other parties as may be permitted under the laws of Malaysia
- Any other person Putra Medical Centre may deem necessary
E. Access and correction
We do our best to ensure that the personal data we hold about you is accurate, complete and up to date. If any of your personal data changes, or if you believe it is inaccurate, incomplete or out of date, please contact us so that we can update it.
You have the right to access your personal data. We recommend that any request for access is made in writing, and we may take steps to verify your identity before processing it.
In accordance with the PDPA:
- Depending on the information requested, we may charge a fee in accordance with the First Schedule (Regulation 2) of the Personal Data Protection (Fees) Regulations 2013 for processing your request for access.
- We may refuse to comply with a request for access or correction in accordance with the PDPA.
F. How to contact us
If you have any queries or complaints regarding your personal data, please contact us using any of the following:
Address
PMCK Berhad
Putra Medical Centre, 888, Jalan Sekerat, Off Jalan Putra,
05100 Alor Setar, Kedah Darul Aman, Malaysia.
General line
Telephone: +604-734 2888 | +6011-1052 3600 | +6011-1052 3688
Fax: +604-734 8882
Email: pmc@putramedicentre.com.my
![]()