Privacy / PDPA / Agent Guide

PERWIRA Privacy / PDPA Handling Guide

Audience: Support & Outbound AgentsCategory: Compliance
Version: 1.0 Last updated: 7 May 2026

Quick answer

  • Personal data is used for account activation, support, onboarding assistance and important PERWIRA service updates.
  • Calls may be recorded for quality assurance and service improvement.
  • Agents must never ask users to disclose OTP, password or authentication credentials verbally.
  • For PDPA questions, send official Privacy Notice and tag PDPA_QUERY.

What PERWIRA uses data for

  • Activating and managing PERWIRA Super App accounts.
  • Providing user support and onboarding assistance.
  • Communicating important updates regarding PERWIRA services.
  • Verifying account ownership during activation.
  • Improving user experience and system performance.
  • Informing users about PERWIRA programmes, services or campaigns.

Data that may be processed

  • Full name.
  • Contact number.
  • Military identification number for login purposes.
  • Email address, if provided.
  • Interaction records with customer support.
  • MyKad number for account verification and activation purposes.

PDPA concern — what to say

Agent script:

PERWIRA processes personal data in accordance with Malaysia’s Personal Data Protection Act 2010. Your information is used for account activation, onboarding support and service-related communication. For security, I will not ask you to read out your OTP, password or authentication details. I can also send you the official Privacy Notice by email for your reference.

Call recording concern — what to say

Agent script:

This call may be recorded for quality assurance, service improvement and operational monitoring. The recording is securely stored and accessed only by authorised personnel. If you prefer not to continue by call, I can send you the activation guide by email instead.

Escalate if

  • User requests formal access/correction/withdrawal of consent under PDPA.
  • User claims data misuse or unauthorised contact.
  • User requests no further calls.
  • User is angry or threatens regulatory complaint.

Back to KMS Home